Attestor · Operational Identifiers
Identifiers
The Attestor Identifier architecture establishes stable, canonical identity for Attestor-owned objects while preserving the identifiers and authority of every source object Attestor references.
Identifiers make Attestations and Trust Statements uniquely addressable and traceable across lifecycle, versioning, relationships, validation, publication, and production without turning identity into a claim of truth or authority.
Canonical identifier families:
Attestation → ATT-YYYY-NNNN
Trust Statement → TRST-YYYY-NNNN
Identifier Purpose
Attestor identifiers provide stable, durable identity for Attestor-owned canonical objects. An identifier identifies the object; it does not by itself establish validity, authority, lifecycle state, publication state, or trustworthiness.
Institutional Namespace
Attestor identifiers must remain institutionally distinguishable from identifiers owned by Atlas, Navigator, Certifier, Registry, Chronicle, Anchor, Beacon, and external authorities. Attestor does not reissue or replace identifiers belonging to referenced source objects.
Trust Statement Identifier
The canonical Trust Statement identifier family is established as TRST-YYYY-NNNN. The prefix identifies the object as an Attestor Trust Statement, the year records the canonical creation year, and the sequence provides a stable unique number within that year.
Attestation Identifier
The canonical Attestation identifier family is established as ATT-YYYY-NNNN. Attestations are distinct governed Attestor objects and therefore require identities separate from the Trust Statements that may result from their evaluation.
Assignment Point
An identifier is assigned only when the corresponding Attestor object reaches canonical Creation. Drafting, candidate preparation, source review, or pre-creation evaluation does not consume or imply a canonical identifier.
Persistence
Once assigned, an identifier is permanent to the object it identifies. Later lifecycle changes, publication decisions, corrections, version changes, supersession, or withdrawal do not cause the identifier to be reassigned to a different object.
Uniqueness
Each canonical Attestor identifier must identify one and only one Attestor object within its identifier family. Duplicate assignment, reuse, or reassignment is not permitted.
Source Identifiers
Identifiers from source institutions remain source-owned identifiers. Attestor preserves them as governed references exactly enough to resolve and distinguish the referenced object without converting them into Attestor identifiers.
Canonical Identifier Pattern
Attestor uses institutionally bounded identifier families. The prefix identifies the Attestor object class, the four-digit year identifies the year of canonical Creation, and the four-digit sequence provides ordered uniqueness within that object family and year.
ATT-YYYY-NNNN
ATT → Attestation
YYYY → Canonical creation year
NNNN → Four-digit sequence
TRST-YYYY-NNNN
TRST → Trust Statement
YYYY → Canonical creation year
NNNN → Four-digit sequence
Separate Identity for Assertion and Conclusion
The identifier architecture preserves the Entry Model's distinction between assertion and conclusion. An Attestation and a Trust Statement are not two states of one identifier. They are distinct governed objects with distinct canonical identities and an explicit relationship between them.
ATT-YYYY-NNNN → identifies → Attestation
TRST-YYYY-NNNN → identifies → Trust Statement
Attestation → may support evaluation leading to → Trust Statement
Shared relationship → does not mean shared identity
Creation and Assignment
Canonical identifier assignment occurs at Creation, when an Attestor object becomes institutionally recognized as a governed object. Work performed before Creation may prepare or evaluate a candidate, but it does not create a canonical Attestor identity.
Candidate / Preparation → No canonical identifier
Canonical Creation → Identifier assigned
Post-Creation lifecycle → Identifier preserved
Identifier Persistence Through Change
An identifier remains attached to its canonical object as that object moves through governed lifecycle and publication states. Versioning may produce distinguishable versions of the same canonical object without assigning the object's identifier to a different object. Whether a material change requires a new object rather than a new version is governed by Versioning and Lifecycle architecture.
Lifecycle change → Preserve canonical identifier
Publication change → Preserve canonical identifier
Correction → Preserve or supersede according to governed change rules
Version change → Preserve object identity unless architecture requires a new canonical object
New canonical object → New identifier
Referenced Identifiers
Attestor may reference identifiers owned by other Suite institutions or external authorities. Those identifiers remain governed by their source systems and must not be rewritten into the ATT or TRST namespace merely because Attestor evaluates or cites them.
SC-CERT-* → Certifier identifier
SREG-* → Registry identifier
CHR-* → Chronicle identifier
ANCH-* → Anchor identifier
BEAC-* → Beacon identifier
ATT-* → Attestor Attestation identifier
TRST-* → Attestor Trust Statement identifier
Governing principle: Reference does not transfer authority.
What Identifiers Do Not Establish
A syntactically valid Attestor identifier proves only that an identifier conforms to the applicable identity pattern when properly assigned. It does not by itself prove that the object is valid, active, published, supported by sufficient evidence, conformant, favorable, current, or trustworthy.
Identifier ≠ Validation
Identifier ≠ Conformance
Identifier ≠ Lifecycle State
Identifier ≠ Publication
Identifier ≠ Evidence Sufficiency
Identifier ≠ Trust Conclusion
Implementation Boundary
The canonical identifier families and governing semantics are established and production-exercised. Production has demonstrated assignment, persistence, source-identifier preservation, machine validation of canonical representations, and class-specific public addressability. Future allocation, collision-prevention, version-addressing, and other implementation mechanics remain subordinate to Schemas, Validation, Versioning, Publication, and Production.
Canonical families → Established and exercised
Assignment principle → Demonstrated
Persistence principle → Demonstrated
Machine pattern enforcement → Exercised through Validation / Schemas
Public URI representation → Demonstrated through Publication
Future allocation mechanics → Governed implementation detail
First Production Identifier Demonstration
The first controlled production operation exercised both canonical identifier families. ATT-2026-0001 became the first canonical production Attestation and TRST-2026-0001 became the first canonical production Trust Statement.
Pre-Creation Preparation → No canonical production identifier
Canonical Creation → ATT-2026-0001 / TRST-2026-0001 assigned
Representative fixtures → 9001 range / NON-PRODUCTION
Correction → Identifier preserved
Validation / Review / Conformance → Identifier preserved
Lifecycle activation → Identifier preserved
Publication → Identifier preserved
Final published-state validation → Identifier preserved
Identifier Architecture → DEMONSTRATED IN PRODUCTION
The operation did not preallocate production identifiers for representative testing, reuse an identifier, or transfer a source identifier into the Attestor namespace.
Production Namespace and Addressability
Referenced Suite identifiers remained source-owned while the two Attestor objects received their own canonical identities. Publication then made those objects addressable through object-class-specific paths rather than a generic canonical records namespace.
SC-CERT-2026-0001 / SREG-2026-0001 / CHR-2026-0001 / ANCH-2026-0001 / BEAC-2026-0001 → Source-owned identifiers
/attestor/attestations/ATT-2026-0001/ → Canonical Attestation path
/attestor/trust-statements/TRST-2026-0001/ → Canonical Trust Statement path
Source Identifier ≠ Attestor Identifier
Public Address ≠ Authority Transfer
Current Identifier Position
The Identifier architecture is established and production-proven for both Attestor canonical object classes. The first production operation demonstrated assignment at canonical Creation, separation from representative fixtures, persistence through governed change and state transitions, preservation of source-owned identifiers, and class-specific public addressability.
Identifiers → Established and Production-Proven
Attestation identifier → ATT-YYYY-NNNN → Production-exercised
Trust Statement identifier → TRST-YYYY-NNNN → Production-exercised
First production identities → ATT-2026-0001 / TRST-2026-0001
Assignment at canonical Creation → Demonstrated
Representative / production separation → Demonstrated
Reuse → Prohibited and avoided
Persistence through correction → Demonstrated
Persistence through lifecycle / publication → Demonstrated
Source identifiers → Preserved as source-owned references
Class-specific public addressability → Demonstrated
Production proof → ESTABLISHED
Production proof does not imply that every future sequence-allocation, collision-handling, or version-addressing implementation has been exercised. Identity remains distinct from validation, conformance, lifecycle state, publication, evaluation outcome, and trustworthiness.
Back to Attestor →
Identity should make a governed object traceable without making claims that belong to evidence, evaluation, or authority.