Attestor · Operational Validation
Validation
Validation defines whether an Attestor object satisfies Attestor's applicable normative structural and rule requirements.
Validation determines whether an object is correctly formed and governed according to Attestor architecture. It does not determine whether an Attestation is true, whether a Trust Statement is favorable, or whether the underlying evidence is sufficient.
Validation principle: Object + Applicable Normative Requirements → Validation → Governed Validation Result
Validation Purpose
Validation determines whether an Attestor object satisfies the normative structural and rule requirements applicable to that object. It answers whether the object is correctly formed and governed according to Attestor architecture—not whether its assertion or conclusion is true.
Validation Scope
Validation applies to Attestor-owned objects and their governed representations. Different object classes may have different required structures, controlled values, relationships, provenance requirements, lifecycle constraints, and rule checks.
Structural Validation
Structural validation tests whether required information is present, correctly represented, internally coherent, and compatible with the applicable object schema or profile.
Semantic Validation
Semantic validation tests whether controlled values, identifiers, object roles, relationship meanings, authority context, provenance modes, lifecycle states, and other governed semantics are used consistently with Attestor architecture.
Rule Validation
Rule validation tests applicable normative Attestor requirements derived from established principles, rules, and architecture. A structurally complete object can still fail validation when it violates a governing rule.
Relationship Validation
Relationships must use permitted meanings and, once formalized in Schemas, permitted source/target combinations and cardinalities. A syntactically present relationship is not valid merely because it can be serialized.
Lifecycle & Version Validation
Validation checks whether lifecycle and version information is internally consistent with the object's identity and governed history. It must not allow versioning or lifecycle metadata to conceal a new canonical object or erase a prior governed state.
Validation Result
Validation produces a governed validation determination for the object or representation tested. Per-rule results are pass, fail, not-applicable, and not-tested; aggregate results are valid, invalid, incomplete, and error. NOT-TESTED never equals PASS.
Validation Layers
Attestor validation is layered because correctness is more than file syntax. An object may be machine-readable yet still violate semantic, relationship, lifecycle, provenance, or institutional rules.
Representation / Syntax → Can the object be parsed?
Structure → Are required elements present and correctly formed?
Controlled Semantics → Are governed values used correctly?
Relationships → Are governed connections permissible and coherent?
Provenance / Authority → Is required context preserved?
Lifecycle / Versioning → Is state and identity behavior coherent?
Normative Rules → Does the object satisfy applicable Attestor requirements?
Machine-readable ≠ Valid
Normative Requirement Chain
Validation must trace back to adopted Attestor architecture rather than inventing requirements inside a validator. Principles guide the institution; Rules constrain behavior; normative requirements formalize those constraints; validation tests them.
Principle → Rule → Normative Requirement → Validation Rule → Validation Result
Validator → Implements architecture
Validator → Does not create architecture
Object-Class Validation
Attestations and Trust Statements are distinct canonical objects and therefore require distinct validation profiles. Shared foundational requirements may be reused, but each object class must be validated according to its own role and structure.
Attestation validation → identity · type · authority · subject · assertion · scope · provenance · governed references · lifecycle context · applicable relationships
Trust Statement validation → identity · subject · bounded conclusion · Attestor attribution · supporting Attestation(s) · evaluation basis · provenance · limitations · relevant state · lifecycle context · applicable relationships
Shared rules → Reusable where architecture permits
Object-specific rules → Remain distinct
Evaluation-Related Validation
Validation may test whether the required evaluation context is represented and internally coherent—for example, whether a Trust Statement is traceable to an evaluation basis and applicable Attestation. Validation does not rerun the substantive evaluation merely to decide whether the resulting conclusion should have been supported, contradicted, or indeterminate.
Validation → Was required evaluation context represented correctly?
Evaluation → What bounded conclusion does the eligible governed basis support?
Validation ≠ Evaluation
Validation Result ≠ Evaluation Outcome
Eligibility-Related Validation
Validation may confirm that an object records required eligibility context and uses governed eligibility rules correctly. It does not convert every referenced input into an eligible input. Eligibility remains an evaluation-specific governed admission determination.
Referenced Input → Not automatically eligible
Eligibility Determination → Governed evaluation context
Validation → Tests required representation / rule compliance
Validation ≠ Eligibility
Validation Failures
A validation failure identifies a failure to satisfy an applicable normative requirement. Failures must be attributable to identifiable requirements and sufficiently specific to support correction. Validation must not use vague failure states to conceal which rule was violated.
Requirement Identified → Test Applied → Failure Located → Reason Reported → Corrective Action Possible
Failure → Normative non-satisfaction
Failure ≠ Assertion proven false
Failure ≠ Trust Statement conclusion reversed
Validation and Correction
An invalid Attestor object may require correction, but the correction path depends on materiality. A structural or bounded metadata defect may be corrected within the same canonical identity when Versioning permits. A correction that changes essential institutional meaning may require a new canonical object and supersession.
Validation Failure → Correction Review
Bounded Defect → Same-object revision may be permitted
Identity-changing Defect / Correction → New canonical object may be required
Validation does not override Versioning.
Validation vs. Conformance
Validation and Conformance are related but distinct. Validation asks whether a particular Attestor object satisfies its applicable normative requirements. Conformance asks whether an object, implementation, producer, or process meets the declared Attestor specification or profile requirements applicable to it.
Validation → Does this object satisfy its applicable normative checks?
Conformance → Does this object / implementation / process meet the declared Attestor specification or profile?
Validation supports Conformance
Validation ≠ Conformance
Validation vs. Publication
A valid object is not automatically published. Publication is a separate governed decision about public representation. Likewise, publication must not be treated as proof that an object has passed every applicable validation requirement unless the publication rules explicitly require that condition.
Valid ≠ Published
Published ≠ Automatically Valid
Validation State → Normative compliance context
Publication State → Public representation context
Executable Validation
The Validation architecture is implemented through normative Validation Requirements, the numbered VAL-* Rule Catalog, machine contracts, executable schemas, and versioned validator software. Validator v0.5 is the operative production validation endpoint.
Architecture → Established
Normative Validation Requirements → Established
Numbered VAL-* Rule Catalog → Established
Per-rule Results → pass · fail · not-applicable · not-tested
Aggregate Results → valid · invalid · incomplete · error
Validator → v0.5 operative production path
Execution Context → Contextual and object-local validation supported
Review-bound rules → May remain not-tested when genuinely nonmandatory
Mandatory not-tested → Prevents a complete valid determination
NOT-TESTED NEVER EQUALS PASS.
Production Validation Baseline
Validator v0.5 was exercised against the first canonical production Attestation and Trust Statement and again against their final Active · Published representations. Both final production objects returned VALID with zero mandatory requirements left not-tested.
ATT-2026-0001 → VALID
Pass → 68 · Fail → 0 · Not Applicable → 24
Review-bound Not Tested → 11 · Mandatory Not Tested → 0
TRST-2026-0001 → VALID
Pass → 78 · Fail → 0 · Not Applicable → 16
Review-bound Not Tested → 14 · Mandatory Not Tested → 0
Final State → Active · Published · V1.0
Final-State Revalidation → VALID for both objects
Governed Review Boundary
Validator v0.5 preserves the distinction between deterministic validation and genuinely review-dependent requirements. A Review-bound rule may remain not-tested in machine execution when nonmandatory for the aggregate result; that status is not silently converted into a pass. The first production operation separately completed governed Review with 25 / 25 requirements SATISFIED.
Machine Validation ≠ Governed Review
Not Tested ≠ Pass
Review Evidence → Preserved separately
Production Governed Review → 25 / 25 SATISFIED
What Validation Does Not Establish
Validation is a normative compliance determination. It does not independently establish truth, authority, eligibility, evidence sufficiency, evaluation outcome, publication, or institutional conformance.
Valid ≠ True
Valid ≠ Authoritative
Valid ≠ Eligible
Valid ≠ Supported
Valid ≠ Published
Valid ≠ Conformant by itself
Validation → Satisfaction of applicable normative structural and rule requirements
Current Validation Position
Validation is no longer only conceptual or pre-production. The architecture has been translated into executable rules and report semantics, exercised through Validator v0.5, and proven against the first canonical production Attestation and Trust Statement.
Validation Architecture → Established
Validation Requirements → Established
Numbered VAL-* Rule Catalog → Established
Machine result vocabulary → Established
Executable validator → v0.5
Production ATT validation → VALID
Production TRST validation → VALID
Final Active · Published ATT revalidation → VALID
Final Active · Published TRST revalidation → VALID
Mandatory not-tested → 0 for both final objects
Governed Review boundary → Preserved
Executable Validation → Operational and exercised in production
Production validation of ATT-2026-0001 and TRST-2026-0001 establishes a first-production baseline. It does not make future objects automatically valid; each future object must independently satisfy its applicable normative requirements.
Back to Attestor →