How to meet it
OWASP AISVS v1.01
Monitoring, Logging & Anomaly Detection · Training Data & Model Lifecycle Audit
Tag documents with source and writer
Verify that every ingested document is tagged at write time with source, writer identity, and timestamp.
OWASP AISVS v1.01, requirement 12.5.4
In plain English
Tag every document at the moment it is ingested with its source, who wrote it in and when.
What good looks like
- Source, writer and timestamp are set at write time.
- Tags cannot be changed later.
- Retrieval and investigations can use them.
How teams usually do it
- The ingestion service sets tags from its own context, never from the document content.
Evidence an auditor would accept
- Ingestion code and sample metadata.
Common mistakes
- Letting the uploader set the source field.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.