PLATFORM MODULEPILOT READY

Evidence & Provenance

Bind business events and claims to source evidence, provenance, trusted time, immutable audit and retention policy.

Review module scopeRelated architecture
P05Architecture
PILOT READYMaturity
Domain-qualifiedAuthority
SCOPE

What the module does—and what it deliberately does not do.

A clear negative boundary is part of the product definition.

DOES
  • Evidence manifests, source lineage, integrity proof, audit events, retention and long-term preservation hooks.
  • Publishes explicit domain objects and version-aware interfaces/events.
  • Links business outcomes to evidence and architecture references.
DOES NOT
  • Does not replace external legal/identifier authorities.
  • Does not imply universal certification or conformity.
  • Does not make optional assurance mechanisms mandatory for all products.
OPERATING MODEL

Actors, inputs, outputs and authority remain explicit.

The module is not treated as a black box; its authority and evidence responsibilities are visible.

Actors

Business actor · Evidence source · Verifier · Auditor

Inputs

Identity/context, versioned business data, policy inputs and external-source references as applicable.

Outputs

Versioned decision/data/evidence artifacts with correlation and provenance.

Authority boundary

Qualified by data domain; external authority is not absorbed through integration.

BUSINESS OBJECTS

Semantic objects connect UI, API, repository and evidence.

The semantic registry prevents architecture vocabulary from drifting between portals and integration contracts.

Evidence & Provenance object mapping
IDObjectAuthorityRepository roleAPIArchitecture
OBJ-011ClaimClaim issuer/source domainClaim StoreClaims APIP03
OBJ-014OwnershipClaim/source/legal contextClaim StoreClaims APIP03
OBJ-018EvidenceEvidence sourceEvidence StoreEvidence APIP05
OBJ-019ProvenanceSource/domain qualifiedEvidence/metadata storesEvidence APIP05
OBJ-023AttestationAttesterEvidence StoreAttestation APIP05
POLICY & EVIDENCE

Material actions are policy-versioned and evidence-linked.

Where the module changes a material state, the transition grammar applies.

Event
+
Authorized actor
+
Precondition
+
Evidence
+
Trusted time
+
Policy / profile version
=
Resulting state
INTERFACES & EVENTS

Reference contracts are versioned and publication-gated.

The public API package is a reference contract; actual deployment availability must be confirmed by release/environment.

POST /v1/evidence
GET /v1/evidence/{id}
GET /v1/provenance/{subject}
RELEASE GATE
SELECTINTEGRATETESTAPPROVEOPERATE

Publish support only for the exact version/profile/environment that has supporting evidence.

STANDARDS & LIMITATIONS

Mapping is not certification.

Standards are shown with status and implementation wording so reference mapping is not mistaken for assessed conformity.

Relevant standards
ReferenceStatusOJEUImpactImplementation
EU 2024/1781IN FORCEN/ADPP regulatory profile; lifecycle; authority boundariesTRACKED
EU 2026/1736IN FORCEOJEU PUBLISHEDStandards status and public wordingTRACKED
EN 18216:2026HARMONISEDOJEU CITEDIntegration protocol mappingMAPPED
EN 18219:2026HARMONISEDOJEU CITEDIdentifier governance / resolverMAPPED
EN 18220:2026HARMONISEDOJEU CITEDQR/NFC/data-carrier experienceMAPPED
RELATED MODULES

Compose capabilities without collapsing responsibilities.

Related modules are linked explicitly rather than hidden behind one monolithic platform claim.

Thing Identity & Resolver

REFERENCE IMPLEMENTATION

Resolve official identifiers, correlate aliases and extend assurance without redefining the authoritative product identifier.

Explore

Identifier Governance

REFERENCE ARCHITECTURE

Govern namespace uniqueness, persistence, collision detection, supersession and the rule that identifiers are never silently reused.

Explore

DPP Regulatory Engine

PILOT READY

Apply versioned product-group profiles, authoring controls and registry orchestration while keeping external legal authorities authoritative.

Explore
PRODUCT COMPLETENESS

From module to business outcome.

Bind claims, lifecycle changes and external interactions to source provenance, trusted time, integrity evidence and immutable audit.

INPUTIdentifier / policy / evidence / source status
OUTPUTSource-aware, policy-qualified result with evidence context
AUTHORITYQualified by data domain; external authority remains external
API / EVENTEvidence API · events
EVIDENCEEvidence manifest · digest · trusted time · audit event
MATURITYPilot ready
Open Product EcosystemView Readiness
ARCHITECTURE WORKSHOP

Turn the architecture into a scoped pilot.

Align product-group applicability, authority boundaries, portal journeys, integration contracts and evidence before committing to production claims.

Request a workshopExplore architecture