Attestation Policy
- CURIE:
gmeow:AttestationPolicy - IRI: https://blackcatinformatics.ca/gmeow/AttestationPolicy
- Category: class
- Defined by:
gmeow:slices/attestation - Box roles: CBox role, TBox role (What is this?)
The policy or framework under which an attestation was issued — a value vocabulary (individuals, never subclasses). Open-ended; specific policies are minted as needed.
Structure
Subclass of: gufo:QualityValue
Practical Pattern
Use gmeow:AttestationPolicy as a specialized kind of gufo:QualityValue. Add statement metadata or a standpoint when the assertion needs provenance, confidence, or vantage.
Usage Advice
Use when
- Use as the value vocabulary behind
gmeow:attestationPolicy— the open set of individuals naming the rules or framework an attester followed (a SLSA build level, a credential-issuance policy, an editorial standard).
Avoid when
- Avoid minting per-policy subclasses (policies are individuals) and avoid using it for the attestation kind (
gmeow:AttestationType); the policy is the governing framework, not the category, and policy satisfaction is a solver-layer verdict.
How to use
- Mint each policy as an individual and reference it via
gmeow:attestationPolicy; the determination of whether a policy was met is agmeow:VerificationResult(status policy-failed when unmet), computed in the solver layer.
Examples
- ex:slsaL3 a
gmeow:AttestationPolicy; rdfs:label "SLSA build level 3"@en.