How to meet it
OWASP AISVS v1.01
AI-Assisted Secure Coding (Appendix C) · Generation Audit Trail Completeness and Validation
Check provenance is complete and consistent
Verify that origin and generation metadata is checked for completeness and consistency: no missing or ambiguous fields, values normalized to a single representation, and a signature chain that validates back to a trusted root.
OWASP AISVS v1.01, requirement AC.10.2
In plain English
Check provenance records are complete and consistent: no missing or ambiguous fields, values in one standard form, and a signature chain back to a trusted root.
What good looks like
- Completeness and consistency are checked automatically.
- Values are normalised.
- Signature chains are validated.
How teams usually do it
- Validation in the verification step of the pipeline.
Evidence an auditor would accept
- Validation configuration and results.
Common mistakes
- Checking that fields exist but not that they agree with each other.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.