964 B
964 B
Provenance Backfill Plan (Sprint 401)
Artifacts available
- Attestation inventory:
docs/provenance/attestation-inventory-2025-11-18.ndjson - Subject→Rekor map:
docs/provenance/subject-rekor-map-2025-11-18.json
Procedure (deterministic)
- Load inventory NDJSON; validate UUID/ULID and digest formats.
- For each record, resolve Rekor entry via the subject→Rekor map; if missing, record gap and skip write.
- Emit backfilled events to the provenance store using
scripts/publish_attestation_with_provenance.sh --mode backfill(add--subjectand--rekorarguments) with sorted input to guarantee stable ordering. - Log every backfilled subject + Rekor digest pair to
logs/provenance-backfill-2025-11-18.ndjson(UTC timestamps, ISO-8601). - Rerun until gaps are zero; then mark PROV-BACKFILL-401-029 DONE.
Determinism
- Sort by subject, then rekorEntry before processing.
- Use canonical JSON writer for outputs; timestamps in UTC
Oformat.