AI Governance Engineer
GitHub

Build provenance (SLSA)

By Updated

A verifiable record, in the SLSA format, of what built an artefact, by what process and from which top-level inputs. Its build levels run from L1, provenance exists, through L2, signed by a hosted build platform, to L3, hardened builds whose provenance is very hard to forge 1. For a model, inputs include the base model's digest and dataset admission records.

Developed in
ch. 05, Pattern: Model Artefact Integrity
Chapters
ch. 05, Patterns
Contrast with
Model signing
Source
1 numbered reference, listed below

Where it is used

One chapter of the Body of Knowledge uses the term. Each link opens the first section that does.

Patterns that use this term

One pattern page uses the term.

  • Safetensors

    A file format for storing a model's tensors safely, as opposed to Python pickle, whose loading can run arbitrary code and which the Python documentation calls…

Sources

  1. [1] SLSA specification v1.2, Build track basics (provenance: what built the artefact, by what process and from which top-level inputs; Build L1 provenance exists, L2 hosted build platform, L3 hardened builds). OpenSSF SLSA project. n.d. (accessed 2026-09-25). https://slsa.dev/spec/v1.2/build-track-basics (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). Build provenance (SLSA). In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/build-provenance-slsa. CC BY 4.0

BibTeX

@misc{aige2026buildprovenanceslsa,
  author  = {Jorge García Aibar},
  title   = {{Build provenance (SLSA)}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/build-provenance-slsa}
}