ip-lineage

What problem does it solve?

Track provenance for every generated artifact — prompts, models, training data similarity, external dependencies, and user contributions. Produces a lineage statement on close-phase. Flags incompatible licenses, concerns around training-data similarity, and unattributed user contributions. Pairs with sbom-slsa (sbom = composition, lineage = origin).

Core Features & Use Cases

• Build a provenance lineage for each artifact, capturing prompt source, model details, external inputs, and derived sources with attribution.
• Reconcile licenses by pulling each dependency's license, cross-checking against the project's declared license, and flagging incompatibilities.
• Run similarity checks on creative outputs to flag high similarity with known corpora and require attribution as needed.
• Write and attach a lineage statement to release assets, ensuring traceability across the delivery lifecycle.
• Integrate with sbom-slsa for composition lineage and provenance tracking.

Quick Start

Run the ip-lineage workflow during release to generate a lineage statement for each shipped artifact.