docs(interop): portable signed records crosswalk#876
Merged
Conversation
Map existing PEAC examples and recipes to external evaluation, audit, transparency, authorization, and security contexts. Each row points at an artifact that already exists in this repository, with a sources-and-boundaries table citing each context from its own official or primary source. Docs-only: no schema, registry, type, wire, signing, public API, examples, facts.json, build_targets, or release-state change. Descriptive mapping only; inclusion does not imply endorsement, support, adoption, partnership, or conformance.
Use the OSI Open Source AI Definition 1.0 as the generic, vendor-neutral source for the open-model row; scope the FIDO row to its public materials and to execution-evidence-after-authorization; note SCITT is in the RFC Editor / Datatracker process; soften the opening wording and use 'release processes'. Normalized to UTF-8/LF with no hidden, bidirectional, zero-width, or control characters (verified). Docs-only; no schema, API, wire, package, or release change.
Member
Author
|
Amended on the same branch to:
Docs-only; all link-truth, public-artifact, planning-leak, lint, typecheck, and final-hygiene gates pass. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds an informative crosswalk that maps existing PEAC examples and recipes to the external evaluation, audit,
transparency, authorization, and security contexts where portable signed records are useful. It is a single
docs-only addition:
docs/interop/PORTABLE-SIGNED-RECORDS-CROSSWALK.md.Scope
Docs-only. No schema, registry, type URI, wire format, signing, public API, examples, generated artifacts,
facts.json,build_targets, or release-state change. Every row points at a PEAC artifact that already existsin this repository; every relative link resolves on disk.
PR-4 (the evidence-primitive standards note) is intentionally not included in this PR.
What it contains
AI agent standards and evaluation, EU AI Act record-keeping, evaluation tool outputs, open-model deployments,
agent authorization and commerce intent, MCP and agentic infrastructure, LLM and application security
evidence, and transparency receipts.
"Last checked" date and a neutral boundary statement per row.
Boundaries
The doc is descriptive. It states plainly that PEAC composes with adjacent standards and systems and does not
replace them; that it records observations while upstream systems remain responsible for their own behavior; and
that inclusion does not imply endorsement, support, adoption, partnership, or conformance. The transparency-
receipts row notes that SCITT is an in-process Internet-Draft effort and asks the reader to verify current
status at the source.
Validation
entry-links-doc-truthand the public-artifact and planning-leak checks pass.pnpm lint(0 errors) andpnpm typecheck:corepass;git diff --checkclean.