Attestor · Operational Conformance

Conformance

Conformance defines what it means for an Attestor object, implementation, or governed process to conform to the Attestor architecture, specification, or profile applicable to it.

A conformance claim is always bounded: it identifies the target being assessed, the requirements set being claimed, and the evidence supporting that determination.

Conformance principle: Target + Declared Requirements Set + Required Validation / Evidence → Conformance Determination

Conformance Purpose

Conformance defines what it means for an Attestor object or implementation to satisfy the declared Attestor specification or profile applicable to it. Conformance is a governed claim against an identified requirements set, not a general statement of quality or trustworthiness.

Conformance Target

Every conformance determination must identify what is being assessed. A target may be an Attestor object, an implementation that produces or processes Attestor objects, or a governed process where a specification explicitly defines process requirements.

Conformance Basis

A conformance claim must identify the applicable Attestor architecture, normative schema or profile, validation requirements, and any other declared requirements against which the target is assessed.

Object Conformance

An Attestation or Trust Statement conforms only when it satisfies the complete applicable normative requirements for its declared object class/profile. Passing a subset of structural checks is not sufficient for a broader conformance claim.

Implementation Conformance

An implementation conforms only within the capabilities and profiles actually tested. Producing one valid example does not establish that an implementation correctly handles every Attestor object, lifecycle state, relationship, version, or evaluation context.

Process Conformance

Where Attestor defines a normative process profile, conformance may assess whether required governed steps, authority boundaries, provenance preservation, reviewability, and outputs are followed. Process conformance must not be inferred merely from a valid final file.

Profile Conformance

Specialized profiles may impose requirements beyond a shared base specification. A target conforming to a base profile must not be represented as conforming to a stricter specialized profile unless those additional requirements are satisfied.

Conformance Evidence

A conformance determination must be supported by traceable validation results and other required evidence. The evidence must identify the target, applicable requirements, tested representation/version, and result context sufficiently for review.

Conformance Dimensions

Attestor conformance may operate at several levels. These dimensions must remain explicit because conformance at one level does not automatically establish conformance at another.

Object Conformance → Does this Attestor object satisfy its applicable specification/profile?

Implementation Conformance → Does this implementation correctly produce, consume, preserve, or process the declared Attestor capabilities?

Process Conformance → Does this governed process follow an applicable normative Attestor process profile?

Object Conformance ≠ Implementation Conformance ≠ Process Conformance

Declared Conformance Scope

No target is simply “Attestor conformant” without qualification when multiple object classes, profiles, versions, or capabilities exist. A conformance claim must be scoped to the requirements actually assessed.

Conformance Target
Applicable Specification / Profile
Specification / Profile Version
Object Class or Capability
Representation / Serialization, where applicable
Validation / Test Basis
Result
Relevant Limitations

Conformance Claim → No broader than assessed scope

Validation Supports Conformance

Validation supplies evidence that a particular object or representation satisfies applicable normative checks. Conformance uses those results, together with any additional profile or implementation requirements, to determine whether the declared target meets its claimed specification.

Normative Requirements → Validation Rules → Validation Results → Conformance Evidence → Conformance Determination

Validation supports Conformance
Validation ≠ Conformance

Complete Applicable Requirements

A conformance claim requires satisfaction of all requirements designated as mandatory for the declared target and profile. Implementations must not select only passing requirements while omitting applicable failures or untested mandatory requirements.

Mandatory Applicable Requirement → Must be satisfied
Optional Requirement → Governed according to profile
Not Applicable → Must be legitimately outside declared scope
Untested Mandatory Requirement → Cannot support complete conformance claim

Partial testing ≠ Full conformance

Conformance Profiles

Attestor may define a shared base specification and specialized profiles for particular Attestation types, Trust Statement contexts, representations, or implementation capabilities. Specialized profiles may add constraints but must not silently weaken foundational Attestor requirements unless the governing architecture explicitly permits variation.

Base Attestor Requirements → Common foundation
Specialized Profile → Additional / bounded requirements
Declared Profile → Determines applicable conformance set

Base Conformance ≠ Specialized Profile Conformance

Version-Bound Conformance

Conformance is assessed against an identifiable version of the applicable specification, profile, schema, or implementation capability. A later architectural or schema revision does not retroactively change what an earlier conformance determination meant.

Target at Time T + Requirements Version at Time T → Conformance Determination at Time T

Later Specification Change → May require reassessment
Historical Conformance → Remains interpretable against original requirements basis

Conformance Failure

A target is non-conformant to the declared scope when one or more applicable mandatory requirements are not satisfied. Where testing is incomplete, the result should not be overstated as either full conformance or definitive non-conformance unless the tested failure itself is sufficient to establish non-conformance.

Mandatory Failure → Declared conformance not satisfied
Incomplete Mandatory Testing → Complete conformance not established
Known Passing Subset → May be reported as tested scope only

Unknown ≠ Pass
Partial Pass ≠ Full Conformance

Conformance and Interoperability

Conformance can support interoperability by giving producers and consumers a common requirements basis. It does not guarantee that every conformant implementation will interoperate in every operational environment unless the relevant interoperability profile and exchange requirements are also satisfied.

Conformance → Common governed requirements basis
Interoperability → Compatible exchange while preserving meaning and authority

Conformance supports Interoperability
Conformance ≠ Universal Interoperability Guarantee

Conformance and Authority

Conformance does not transfer or elevate institutional authority. A conformant representation of a Registry Record remains a reference to a Registry-owned object; a conformant reference to a Beacon Discovery Signal remains within Beacon authority; and a conformant Trust Statement remains an Attestor-owned conclusion.

Conformant Reference → Correctly governed representation / use
Source Object → Retains source authority
Attestor Object → Retains Attestor authority

Reference does not transfer authority.

Conformance and Publication

A conformant object or implementation is not automatically authorized for publication, and publication does not itself prove conformance. Publication remains a separate governed dimension that determines public representation.

Conformant ≠ Published
Published ≠ Conformant
Conformance → Requirements satisfaction
Publication → Public representation authorization

Executable Conformance

The Conformance architecture is implemented for governed object-level determinations. Production Conformance uses a declared target and requirements set together with Validation evidence, governed Review evidence, and applicable conformance mechanics to produce a bounded determination.

Conformance Architecture → Established
Target Classes → Object · Implementation · Process
Requirement Dispositions → satisfied · not-satisfied · not-applicable · not-demonstrated
Outcomes → conformant · nonconformant · undetermined · error
Production Object Conformance → Exercised

Conformance claims remain no broader than the target and requirements actually assessed.

Production Conformance Baseline

The first controlled production operation exercised object-level Conformance for both canonical production objects. Each determination used the applicable declared requirements together with production Validation and governed Review evidence.

ATT-2026-0001 → CONFORMANT
Applicable requirements satisfied → 14
Not Satisfied → 0
Not Demonstrated → 0

TRST-2026-0001 → CONFORMANT
Applicable requirements satisfied → 17
Not Satisfied → 0
Not Demonstrated → 0

Production Conformance Proof → ESTABLISHED for the assessed object-level scope

Production Evidence Boundary

The first-production determinations establish conformance only for the assessed canonical objects and their declared requirements sets. They do not establish universal Attestor implementation conformance, process conformance, or automatic conformance for future objects.

ATT Object Conformance → Established for ATT-2026-0001
TRST Object Conformance → Established for TRST-2026-0001
Implementation Conformance → Not inferred
Process Conformance → Not inferred
Future Object Conformance → Must be independently determined

What Conformance Does Not Establish

Conformance is a bounded requirements determination. It does not independently establish truth, evaluation outcome, authority, publication, universal interoperability, security, quality, or trustworthiness.

Conformant ≠ True
Conformant ≠ Supported
Conformant ≠ More Authoritative
Conformant ≠ Published
Conformant ≠ Universally Interoperable
Conformant ≠ Secure by definition
Conformant ≠ Trustworthy by definition

Current Conformance Position

Conformance is no longer only conceptual or downstream of Validation implementation. The architecture has been exercised through real object-level production determinations for the first canonical Attestation and Trust Statement.

Conformance Architecture → Established
Conformance target → Required
Declared requirements scope → Required
Object / implementation / process dimensions → Distinguished
Requirement dispositions → Established
Conformance outcome vocabulary → Established
Validation as conformance evidence → Exercised
Governed Review as separate evidence → Exercised
ATT-2026-0001 → CONFORMANT
TRST-2026-0001 → CONFORMANT
Executable Object Conformance → Operational and exercised in production

The first-production determinations establish a bounded object-conformance baseline. They do not pre-authorize a conformance claim for any future object, implementation, or process.

Back to Attestor →

Conformance means meeting a declared set of requirements—not borrowing certainty from a label broader than what was actually tested.