AI-Assisted Secure Coding (Appendix C) · AI Artifact Origin Validation for Deployment
Sign provenance for AI-generated artifacts
Verify that AI-generated artifacts carry signed origin and generation metadata (in-toto or SLSA provenance attestations, AI BOM entries) identifying the AI system that produced them, the generation context, the humans involved, and the associated audit records.
OWASP AISVS v1.01, requirement AC.9.1
In plain English
Attach signed provenance to AI-generated artifacts. It should say which AI system produced them, in what context, which people were involved and where the audit records are. Provenance is a verifiable statement of how something was built, and it lets a deployment system decide whether to trust it.
What good looks like
- AI-generated artifacts carry signed origin and generation metadata.
- The metadata identifies the AI system and version, the generation context, the humans involved and the related audit records.
- It uses a standard format: in-toto attestations, SLSA provenance or AI BOM entries.
- Signing happens in the build pipeline with a protected identity.
How teams usually do it
- SLSA provenance generated by the build platform (for example artifact attestations in GitHub Actions or the SLSA generators), signed with Sigstore.
- An additional in-toto attestation or AI BOM entry (CycloneDX or SPDX) for the AI details: tool, model, session IDs, requester and reviewers.
- Storing attestations beside the artifact in the registry.
Suggested evidence
- Sample provenance for a build, with the AI fields.
- The pipeline step that produces and signs it.
Common mistakes
- Provenance that names the build system and says nothing about AI involvement.
- Unsigned metadata in a text file.
- Attestations generated by a job the agent can edit.
Not sure which requirements apply to your system? Take the assessment, or browse every guide in this chapter.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.