has signature

• CURIE: gmeow:hasSignature
• IRI: https://blackcatinformatics.ca/gmeow/hasSignature
• Category: property
• Defined by: gmeow:slices/attestation
• Box roles: CBox role, RBox role (What is this?)

Relates an entity, attestation, or artifact to a cryptographic signature over it. Domain-free (universal spine): anything may carry a signature. The message-specific convenience property with domain gmeow:Message lives in the messaging-trust module as a historical subproperty.

Structure

Property shape: object property; ? -> gmeow:CryptographicSignature

Practical Pattern

Use gmeow:hasSignature from ? to gmeow:CryptographicSignature when the relationship itself belongs in the native GMEOW graph.

Example Snippets

These snippets are generated from canonical slice examples and trimmed to the Turtle blocks where this term appears.

Software Release

• Source: slices/core/attestation/examples/software-release.ttl
• Examples catalog: open in catalog#example-slices-core-attestation-examples-software-release

# --- The attestation: the CI system vouches for the release as SLSA provenance.
ex:slsaAttestation a gmeow:Attestation ;
    gmeow:attester           ex:ciSystem ;
    gmeow:attestedSubject    ex:release ;
    gmeow:attestationType    gmeow:attestationTypeSLSAProvenance ;
    gmeow:issuedAt           "2026-06-14T12:00:00Z"^^xsd:dateTime ;
    gmeow:attestationArtifact ex:artifact ;
    gmeow:hasSignature       ex:sig ;
    gmeow:verificationResult ex:verifyResult .

Common Companion Terms

gmeow:CryptographicSignature

Usage Advice

Use when

• Use to attach a gmeow:CryptographicSignature to anything that is signed — an attestation, its carrier artifact, a release, a message — the universal domain-free signature spine.

Avoid when

• Avoid treating the presence of a signature as proof the signed claim is true — a valid signature proves integrity and signer key control only, not correctness (module boundaries); the truth question stays on the claim's standpoint.

How to use

• Reference a gmeow:CryptographicSignature individual carrying gmeow:signedBy / gmeow:signingKey / gmeow:signatureAlgorithm; the actual signature check is a gmeow:VerificationActivity in the solver layer, recorded as a gmeow:VerificationResult, never asserted as truth.

Examples

• ex:inTotoJson gmeow:hasSignature ex:sig1.