What problem does it solve?
Track provenance for every generated artifact — prompts, models, training data similarity, external dependencies, and user contributions. Produces a lineage statement on close-phase. Flags incompatible licenses, concerns around training-data similarity, and unattributed user contributions. Pairs with sbom-slsa (sbom = composition, lineage = origin).
Core Features & Use Cases
- Build a provenance lineage for each artifact, capturing prompt source, model details, external inputs, and derived sources with attribution.
- Reconcile licenses by pulling each dependency's license, cross-checking against the project's declared license, and flagging incompatibilities.
- Run similarity checks on creative outputs to flag high similarity with known corpora and require attribution as needed.
- Write and attach a lineage statement to release assets, ensuring traceability across the delivery lifecycle.
- Integrate with sbom-slsa for composition lineage and provenance tracking.
Quick Start
Run the ip-lineage workflow during release to generate a lineage statement for each shipped artifact.
