Skip to content

Clarify definition of Workload Provenance #11

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
TheBankster wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Clarify definition of Workload Provenance #11

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion TWI_Definitions.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ _Trust_ is a decision, _trustworthiness_ is an externally verifiable/attributabl
- **Workload Identifier** is a stable construct, represented by a Workload Identity Document, around which Relying Parties can form long-lived Workload authorization policies.
- **Workload Identity** is the alias of the Workload as perceived by the Relying Party based on which Workload Identifier is presented to it by the Workload Instance.
- **Workload Credential** is an ephemeral representation of a Workload Identifier, that can be short- or long-lived and which is used to represent and prove Workload Identity to a Relying Party (WIMSE calls this "identity credentials").
- **Workload Provenance** is a unique linkage between a Workload Credential and the trusted entities (such as a vendor, developer, or credential issuer) responsible for the creation and/or attestation of the corresponding Workload.
- **Workload Provenance** is a verifiable linkage between a Workload Credential and the identifiable parties (such as a vendor, developer, or credential issuer) responsible for the creation and/or attestation of the corresponding Workload.

## Trustworthy Workload Identity Definition
A **Workload Identity** is said to be **Trustworthy** _iff_ the following three properties hold true:
Expand Down