Attestor · Operational Lifecycle
Lifecycle
Lifecycle defines how Attestor-owned objects move through governed existence: preparation, canonical Creation, review, active use, correction, supersession, withdrawal, and retirement.
Lifecycle preserves continuity without confusing current state with historical state. An Attestation or Trust Statement may cease to be current while remaining permanently identifiable, attributable, and traceable.
Lifecycle principle: State may change. Canonical identity and governed history remain traceable.
Lifecycle Purpose
Lifecycle governs the institutional existence of Attestor-owned objects from preparation through canonical use and eventual historical disposition. It keeps current state distinguishable from prior state without destroying identity, provenance, or lineage.
Draft
draft is the pre-active governed state used while an Attestation or Trust Statement is being prepared, reviewed, or completed. A draft is not yet an active Attestor representation and must not be presented as though it were.
Active
active means the Attestor-owned object is the current governed representation within its scope. Active does not mean published, favorable, permanently correct, or immune from later review.
Superseded
superseded means a newer governed object or version has replaced the prior object as the current representation for the applicable scope. The superseded object remains historically identifiable and traceable.
Withdrawn
withdrawn means Attestor has affirmatively removed the object from current institutional reliance because it should no longer function as an active representation. Withdrawal preserves the historical object and the reason/context for the change where material.
Retired
retired means the object has reached a terminal non-current state through normal institutional disposition rather than necessarily because it was erroneous. Retirement preserves history while signaling that the object is no longer maintained as current.
Correction
Correction is a governed change process, not a lifecycle state. A correction may amend a version, create a successor, or trigger supersession depending on materiality and Versioning rules. The prior state must remain traceable.
Review
Review is a governed lifecycle activity, not a permanent state in the initial controlled vocabulary. Review may confirm continued active status or lead to correction, supersession, withdrawal, retirement, or a new evaluation.
Canonical Lifecycle States
The Controlled Values architecture established five lifecycle states. This page now defines their institutional meaning. Review and correction are governed activities that may cause state transitions; they are not additional lifecycle states in the initial vocabulary.
draft → governed preparation / pre-active state
active → current governed representation within scope
superseded → replaced by a newer governed representation
withdrawn → affirmatively removed from current institutional reliance
retired → terminal non-current disposition
Review → lifecycle activity
Correction → governed change activity
Creation
Canonical Creation is the point at which an Attestor object becomes institutionally recognized and receives its canonical identity. Creation does not require immediate activation or publication. An object may be created in draft state and proceed through governed review before becoming active.
Preparation → No canonical object
Canonical Creation → Identifier assigned
Created Object → draft
Governed Review / Completion → active when requirements are satisfied
Creation ≠ Activation ≠ Publication
Review
Review determines whether an Attestor-owned object remains suitable for its current lifecycle position. Review may be initial, periodic, event-driven, or triggered by material changes to source state, provenance, authority, scope, evidence, evaluation basis, or related objects.
Review → Confirm current state
or → Correct
or → Supersede
or → Withdraw
or → Retire
or → Initiate new evaluation
Review itself does not silently change the object.
Active and Inactive
active is the only initial lifecycle state representing current institutional use. “Inactive” is retained as a descriptive umbrella, not a canonical state value. Superseded, withdrawn, and retired objects are all non-active for different governed reasons and must remain distinguishable.
Active → canonical lifecycle state
Inactive → descriptive category only
Non-active objects:
superseded · withdrawn · retired
Different reasons → Different canonical states
Correction and Materiality
A correction addresses an error, omission, ambiguity, serialization defect, or other governed defect in an Attestor-owned object. Bounded non-material correction may preserve canonical object identity and version when the applicable Versioning determination permits it. A material change to the Attestation assertion or Trust Statement conclusion requires treatment under the applicable new-object and supersession rules. Materiality and version consequences must be explicitly governed rather than inferred from the existence of a correction alone.
Correction Need → Assess Materiality
Bounded non-material correction → Canonical identity may be preserved
Serialization-only correction → May preserve version when governed determination permits
Material Attestation assertion change → New ATT required
Material Trust Statement conclusion change → New TRST required
Successor Object → supersedes → Prior Object, where applicable
Correction ≠ Deletion
Correction ≠ Silent Overwrite
Withdrawal vs. Retirement
Withdrawal and retirement are both non-current states but communicate different institutional meanings. Withdrawal is an affirmative decision that the object should no longer be relied upon as current. Retirement is normal terminal disposition when an object no longer needs to remain current or maintained.
withdrawn → removed from current reliance because continued active use is no longer appropriate
retired → ended through normal lifecycle disposition
Neither state erases the historical object.
Supersession
Supersession preserves continuity when a newer governed object replaces an earlier one as the current representation. The successor must explicitly relate to the prior object, and the prior object remains resolvable as historical state.
New Object → supersedes → Prior Object
New Object → may become active
Prior Object → superseded
Prior Identity / Provenance / History → Preserved
Supersession ≠ Mutation of history
Lifecycle Triggers
Lifecycle review may be triggered when information material to an Attestation or Trust Statement changes. The trigger does not predetermine the resulting state; it requires governed review under applicable rules.
Material Source-State Change
Material New Eligible Input
Authority Change
Provenance Defect or Clarification
Scope Change
Correction Request
Conflicting / Contradictory Information
Evaluation Basis Change
Methodology / Rule Change, when applicable
Trigger → Review, not automatic outcome
Lifecycle and Publication
Lifecycle state and publication state remain independent dimensions. An active object may be unpublished, and a previously published object may later become superseded, withdrawn, or retired while its historical public representation remains governed according to Publication architecture.
Lifecycle State → draft · active · superseded · withdrawn · retired
Publication State → unpublished · published
Active ≠ Published
Published ≠ Active forever
Lifecycle transition ≠ Automatic deletion of publication history
Historical Preservation
Lifecycle changes must preserve enough history to reconstruct the governed sequence of material states. Attestor should be able to distinguish what was current, what changed, why the change occurred where material, and which object or version became current afterward.
Prior State → Governed Change → Current State
Canonical Identifier → Preserved according to object/version rules
Relationships → Preserved
Provenance → Preserved
Material Reason / Trigger → Reviewable
Historical State → Distinguishable from Current State
First Production Lifecycle Demonstration
The first controlled production operation exercised canonical Creation and lifecycle activation as separate governed acts for both ATT-2026-0001 and TRST-2026-0001. Each object was canonically created as Draft · Unpublished · V1.0, completed governed Validation, Review, and Conformance, and was then separately authorized to transition from draft to active.
ATT-2026-0001 → Canonical Creation → Draft · Unpublished · V1.0
TRST-2026-0001 → Canonical Creation → Draft · Unpublished · V1.0
Governed Validation / Review / Conformance → Completed
ATT-2026-0001 → draft → active
TRST-2026-0001 → draft → active
Publication at activation → Remained unpublished
Canonical identity → Unchanged
Version → Unchanged
Assertion / conclusion → Unchanged
Lifecycle Activation → DEMONSTRATED IN PRODUCTION
Publication was authorized only after lifecycle activation through separate publication decisions. The production sequence therefore demonstrated the standing distinction: Canonical Creation ≠ Lifecycle Activation ≠ Publication.
Production Correction and Historical Preservation
The first production operation also exercised governed correction before final publication. Relationship serialization was corrected while preserving the canonical ATT and TRST identities, substantive assertion and conclusion, and historical representations. The correction was determined to be non-material to canonical meaning and therefore remained V1.0 for this bounded operation.
Relationship serialization defect → Corrected
Historical representation → Preserved
Canonical identifier → Preserved
Material assertion change → None
Material conclusion change → None
Version → V1.0 retained by governed determination
Correction ≠ Deletion
Correction ≠ Historical Erasure
Correction ≠ Silent Mutation
This production decision does not establish that every correction preserves version or identity. Future corrections remain subject to materiality, Versioning, correction, and supersession rules.
What Lifecycle Does Not Establish
Lifecycle state describes institutional status over time. It does not independently establish truth, evidence sufficiency, evaluation outcome, publication, validation, conformance, or authority.
Active ≠ True
Active ≠ Supported
Active ≠ Published
Active ≠ Validated
Superseded ≠ False
Withdrawn ≠ Historical Erasure
Retired ≠ Invalid
Current Lifecycle Position
The Lifecycle architecture is established and has been exercised in production. The first controlled operation demonstrated canonical Creation in draft, governed lifecycle activation to active, independence from Publication, preservation of canonical identity and version through activation, and governed correction with historical preservation.
Lifecycle → Established and Production-Proven
States → draft · active · superseded · withdrawn · retired
Canonical Creation → Exercised
Draft initial lifecycle state → Exercised
Lifecycle Activation → Exercised
Review → Governed activity, not lifecycle state
Correction → Governed change activity, not lifecycle state
Creation / Activation separation → Demonstrated
Lifecycle / Publication separation → Demonstrated
Canonical identity preservation → Demonstrated
Historical preservation → Demonstrated
Bounded non-material correction → Exercised
Supersession / withdrawal / retirement → Established but not yet required by first production operation
Version consequences → Governed through Versioning
Production proof → ESTABLISHED
Production proof demonstrates lifecycle capability; it does not imply that every future object will become active, that every correction is non-material, or that supersession, withdrawal, and retirement have already been exercised. Each future transition remains a separate governed institutional act.
Back to Attestor →