Attestor · Operational Validation

Validation

Validation defines whether an Attestor object satisfies Attestor's applicable normative structural and rule requirements.

Validation determines whether an object is correctly formed and governed according to Attestor architecture. It does not determine whether an Attestation is true, whether a Trust Statement is favorable, or whether the underlying evidence is sufficient.

Validation principle: Object + Applicable Normative Requirements → Validation → Governed Validation Result

Validation Purpose

Validation determines whether an Attestor object satisfies the normative structural and rule requirements applicable to that object. It answers whether the object is correctly formed and governed according to Attestor architecture—not whether its assertion or conclusion is true.

Validation Scope

Validation applies to Attestor-owned objects and their governed representations. Different object classes may have different required structures, controlled values, relationships, provenance requirements, lifecycle constraints, and rule checks.

Structural Validation

Structural validation tests whether required information is present, correctly represented, internally coherent, and compatible with the applicable object schema or profile.

Semantic Validation

Semantic validation tests whether controlled values, identifiers, object roles, relationship meanings, authority context, provenance modes, lifecycle states, and other governed semantics are used consistently with Attestor architecture.

Rule Validation

Rule validation tests applicable normative Attestor requirements derived from established principles, rules, and architecture. A structurally complete object can still fail validation when it violates a governing rule.

Relationship Validation

Relationships must use permitted meanings and, once formalized in Schemas, permitted source/target combinations and cardinalities. A syntactically present relationship is not valid merely because it can be serialized.

Lifecycle & Version Validation

Validation checks whether lifecycle and version information is internally consistent with the object's identity and governed history. It must not allow versioning or lifecycle metadata to conceal a new canonical object or erase a prior governed state.

Validation Result

Validation produces a governed validation determination for the object or representation tested. Per-rule results are pass, fail, not-applicable, and not-tested; aggregate results are valid, invalid, incomplete, and error. NOT-TESTED never equals PASS.

Validation Layers

Attestor validation is layered because correctness is more than file syntax. An object may be machine-readable yet still violate semantic, relationship, lifecycle, provenance, or institutional rules.

Representation / Syntax → Can the object be parsed?
Structure → Are required elements present and correctly formed?
Controlled Semantics → Are governed values used correctly?
Relationships → Are governed connections permissible and coherent?
Provenance / Authority → Is required context preserved?
Lifecycle / Versioning → Is state and identity behavior coherent?
Normative Rules → Does the object satisfy applicable Attestor requirements?

Machine-readable ≠ Valid

Normative Requirement Chain

Validation must trace back to adopted Attestor architecture rather than inventing requirements inside a validator. Principles guide the institution; Rules constrain behavior; normative requirements formalize those constraints; validation tests them.

Principle → Rule → Normative Requirement → Validation Rule → Validation Result

Validator → Implements architecture
Validator → Does not create architecture

Object-Class Validation

Attestations and Trust Statements are distinct canonical objects and therefore require distinct validation profiles. Shared foundational requirements may be reused, but each object class must be validated according to its own role and structure.

Attestation validation → identity · type · authority · subject · assertion · scope · provenance · governed references · lifecycle context · applicable relationships

Trust Statement validation → identity · subject · bounded conclusion · Attestor attribution · supporting Attestation(s) · evaluation basis · provenance · limitations · relevant state · lifecycle context · applicable relationships

Shared rules → Reusable where architecture permits
Object-specific rules → Remain distinct

Evaluation-Related Validation

Validation may test whether the required evaluation context is represented and internally coherent—for example, whether a Trust Statement is traceable to an evaluation basis and applicable Attestation. Validation does not rerun the substantive evaluation merely to decide whether the resulting conclusion should have been supported, contradicted, or indeterminate.

Validation → Was required evaluation context represented correctly?
Evaluation → What bounded conclusion does the eligible governed basis support?

Validation ≠ Evaluation
Validation Result ≠ Evaluation Outcome

Eligibility-Related Validation

Validation may confirm that an object records required eligibility context and uses governed eligibility rules correctly. It does not convert every referenced input into an eligible input. Eligibility remains an evaluation-specific governed admission determination.

Referenced Input → Not automatically eligible
Eligibility Determination → Governed evaluation context
Validation → Tests required representation / rule compliance

Validation ≠ Eligibility

Validation Failures

A validation failure identifies a failure to satisfy an applicable normative requirement. Failures must be attributable to identifiable requirements and sufficiently specific to support correction. Validation must not use vague failure states to conceal which rule was violated.

Requirement Identified → Test Applied → Failure Located → Reason Reported → Corrective Action Possible

Failure → Normative non-satisfaction
Failure ≠ Assertion proven false
Failure ≠ Trust Statement conclusion reversed

Validation and Correction

An invalid Attestor object may require correction, but the correction path depends on materiality. A structural or bounded metadata defect may be corrected within the same canonical identity when Versioning permits. A correction that changes essential institutional meaning may require a new canonical object and supersession.

Validation Failure → Correction Review
Bounded Defect → Same-object revision may be permitted
Identity-changing Defect / Correction → New canonical object may be required

Validation does not override Versioning.

Validation vs. Conformance

Validation and Conformance are related but distinct. Validation asks whether a particular Attestor object satisfies its applicable normative requirements. Conformance asks whether an object, implementation, producer, or process meets the declared Attestor specification or profile requirements applicable to it.

Validation → Does this object satisfy its applicable normative checks?
Conformance → Does this object / implementation / process meet the declared Attestor specification or profile?

Validation supports Conformance
Validation ≠ Conformance

Validation vs. Publication

A valid object is not automatically published. Publication is a separate governed decision about public representation. Likewise, publication must not be treated as proof that an object has passed every applicable validation requirement unless the publication rules explicitly require that condition.

Valid ≠ Published
Published ≠ Automatically Valid
Validation State → Normative compliance context
Publication State → Public representation context

Executable Validation

The Validation architecture is implemented through normative Validation Requirements, the numbered VAL-* Rule Catalog, machine contracts, executable schemas, and versioned validator software. Validator v0.5 is the operative production validation endpoint.

Architecture → Established
Normative Validation Requirements → Established
Numbered VAL-* Rule Catalog → Established
Per-rule Results → pass · fail · not-applicable · not-tested
Aggregate Results → valid · invalid · incomplete · error
Validator → v0.5 operative production path
Execution Context → Contextual and object-local validation supported
Review-bound rules → May remain not-tested when genuinely nonmandatory
Mandatory not-tested → Prevents a complete valid determination

NOT-TESTED NEVER EQUALS PASS.

Production Validation Baseline

Validator v0.5 was exercised against the first canonical production Attestation and Trust Statement and again against their final Active · Published representations. Both final production objects returned VALID with zero mandatory requirements left not-tested.

ATT-2026-0001 → VALID
Pass → 68 · Fail → 0 · Not Applicable → 24
Review-bound Not Tested → 11 · Mandatory Not Tested → 0

TRST-2026-0001 → VALID
Pass → 78 · Fail → 0 · Not Applicable → 16
Review-bound Not Tested → 14 · Mandatory Not Tested → 0

Final State → Active · Published · V1.0
Final-State Revalidation → VALID for both objects

Governed Review Boundary

Validator v0.5 preserves the distinction between deterministic validation and genuinely review-dependent requirements. A Review-bound rule may remain not-tested in machine execution when nonmandatory for the aggregate result; that status is not silently converted into a pass. The first production operation separately completed governed Review with 25 / 25 requirements SATISFIED.

Machine Validation ≠ Governed Review
Not Tested ≠ Pass
Review Evidence → Preserved separately
Production Governed Review → 25 / 25 SATISFIED

What Validation Does Not Establish

Validation is a normative compliance determination. It does not independently establish truth, authority, eligibility, evidence sufficiency, evaluation outcome, publication, or institutional conformance.

Valid ≠ True
Valid ≠ Authoritative
Valid ≠ Eligible
Valid ≠ Supported
Valid ≠ Published
Valid ≠ Conformant by itself

Validation → Satisfaction of applicable normative structural and rule requirements

Current Validation Position

Validation is no longer only conceptual or pre-production. The architecture has been translated into executable rules and report semantics, exercised through Validator v0.5, and proven against the first canonical production Attestation and Trust Statement.

Validation Architecture → Established
Validation Requirements → Established
Numbered VAL-* Rule Catalog → Established
Machine result vocabulary → Established
Executable validator → v0.5
Production ATT validation → VALID
Production TRST validation → VALID
Final Active · Published ATT revalidation → VALID
Final Active · Published TRST revalidation → VALID
Mandatory not-tested → 0 for both final objects
Governed Review boundary → Preserved
Executable Validation → Operational and exercised in production

Production validation of ATT-2026-0001 and TRST-2026-0001 establishes a first-production baseline. It does not make future objects automatically valid; each future object must independently satisfy its applicable normative requirements.

Back to Attestor →

Validation should prove that an object obeys its architecture—not quietly invent the architecture it is supposed to test.