Tag
provenance
- Apr 26, 2026 Content-Addressed Provenance Graphs for Derived Outputs Recording each step as a node keyed by the hash of its inputs, code, parameters, and environment, so that any output can be traced back to the exact bytes and commands that produced it. scientific computing
- Jan 26, 2026 Provenance Attestations and the Trust Boundary of a Package Install What an in-toto attestation binds together, how transparency logs change the meaning of a verified install, and which attacks remain outside the model. language runtimes
- Dec 22, 2025 Reproducing Training Runs from Recorded Metadata What a training run must record so that a second execution yields the same weights, and where nondeterminism survives even a perfect record. machine learning
- Nov 5, 2025 SPDX License Expressions and Machine-Readable Provenance How a single identifier grammar replaced prose license statements, what the operators and version suffixes encode, and why the declared license of a package and the licenses of its files routinely disagree. computing history
- Sep 5, 2025 What a Notebook File Stores and What It Omits The version 4 notebook schema keeps source, rendered output, and a little kernel metadata in one JSON document, and drops the environment, the inputs, and the process that produced it. scientific computing
- Feb 22, 2025 Artifact Provenance from Commit to Deployed Digest Signed attestations bind an artifact digest to the materials and builder that produced it. What the statement must contain, how it is verified, and which attacks it does not stop. devops
- Jan 27, 2025 Executing Provenance Records to Certify That a Result Still Reconstructs Turning a recorded dependency graph into a re-runnable pipeline that hashes outputs and compares them to stored digests, so a result carries continuous evidence that it is still reproducible. scientific computing
- Mar 25, 2024 Column-Level Lineage and the Cost of Tracking It Deriving which upstream column feeds which downstream column requires parsing every query; the alternative is coarse and the fine-grained version has an unbounded cost. data engineering
- Dec 28, 2022 Immutable Artifact Coordinates and Why Digests Matter How a version-plus-repository name identifies a byte string, what breaks when the mapping can change, and how attestations bind a build input set to the digest that was published. devops
- Sep 9, 2022 Provenance Attestations and the Digest They Must Bind An attestation is a signed claim about a build. Its value depends on a subject digest that names the exact artifact, a predicate that names the process, and a verifier policy. security