|
1 | 1 | --- |
2 | | -title: "K06 ATA 94 Tasklist" |
| 2 | +title: "K06 ATA 94 — Partitioned Uncertainty Resolution Index" |
3 | 3 | type: IDX |
4 | | -variant: "SPACET" |
| 4 | +variant: SPACET |
5 | 5 | status: Draft |
6 | | -knot_id: "K06" |
| 6 | +knot_id: K06 |
7 | 7 | ata: "94" |
| 8 | +lc_or_subbucket: "LC01" |
| 9 | +description: "GitHub-navigable hub for closing K06 (SSOT/Schemas/Identifiers) for ATA 94 (Digital Product Passport & Provenance Exports) with NKU control and TEKNIA sharing rules." |
8 | 10 | --- |
9 | 11 |
|
10 | | -# K06 — data-governance-ssot-schemas-identifiers |
11 | | -## ATA 94 — Tasklist |
| 12 | +# K06 — Data Governance (SSOT / Schemas / Identifiers) |
| 13 | +## ATA 94 — Partitioned Uncertainty Resolution Index (IDX) |
12 | 14 |
|
13 | | -## Uncertainty to Resolve (ATA-specific) |
14 | | -- ... |
| 15 | +This file is the **single navigation hub** for all artifacts required to close **K06** for **ATA 94** (your domain for **Digital Product Passport (DPP) and provenance exports**). |
| 16 | +NKU progress is credited only when each partition is closed with **evidence + approval**. |
| 17 | + |
| 18 | +> ATA 94 is the “external-facing consequence” of K06: if SSOT/schema/identifier governance is weak, DPP exports become non-auditable and non-reproducible. |
| 19 | +
|
| 20 | +--- |
| 21 | + |
| 22 | +## 1) Global Navigation (GitHub-navigable) |
| 23 | + |
| 24 | +- Knot overview: [K06 overview](../../00_00_IDX_LC01_SPACET_k06-data-governance-ssot-schemas-identifiers_v01.md) |
| 25 | + _Comment:_ Canonical K06 scope, impacted ATAs, closure criteria, and shared definitions. |
| 26 | + |
| 27 | +- Portal index: [AMPEL360-SPACE-T-PORTAL index](../../../../../00_00_IDX_LC01_SPACET_stakeholder-entrypoints_v01.md) |
| 28 | + _Comment:_ Global entry point; use it to navigate stakeholders and the knot portfolio. |
| 29 | + |
| 30 | +- Stakeholder entrypoint (AI): [STK_AI entrypoint](../../../../00_00_IDX_LC01_SPACET_stakeholder-ai-entrypoint_v01.md) |
| 31 | + _Comment:_ AI/ML execution lane; automation hooks and governance helpers. |
| 32 | + |
| 33 | +- ATA 94 home (DPP): [AMPEL360_SPACE-T/N-NEURAL_NETWORKS/ATA 94](../../../../../../AMPEL360_SPACE-T/N-NEURAL_NETWORKS/ATA_94-DPP/) |
| 34 | + _Comment:_ Intended authoritative location for ATA 94 DPP outputs. If your folder name differs, update only this link target. |
| 35 | + |
| 36 | +--- |
| 37 | + |
| 38 | +## 2) ATA 94 K06 Focus (what uncertainty we are closing) |
| 39 | + |
| 40 | +### Uncertainty to Resolve (ATA-specific) |
| 41 | +K06 within ATA 94 is the absence of a single governed SSOT for: |
| 42 | +- **DPP identity:** canonical IDs for passports, views, packages, and release states. |
| 43 | +- **DPP schema:** stable schemas for DPP payloads (materials, configurations, evidence, sustainability, compliance, models). |
| 44 | +- **Provenance & signatures:** deterministic hashing, signing, and provenance metadata (what was exported, from where, when, using which tools/versions). |
| 45 | +- **Trace references:** unambiguous links to trace graph snapshots and evidence packs (ATA 93/90/98). |
| 46 | +- **Publication lifecycle:** draft vs baseline release, redaction rules, and sharing classification. |
| 47 | +- **Enforcement:** CI gates preventing uncontrolled DPP changes and ensuring export reproducibility. |
| 48 | + |
| 49 | +### Primary consumers (typical) |
| 50 | +- Configuration management, compliance and audit stakeholders, sustainability reporting, customer/authority evidence packs, internal release pipelines, toolchains consuming DPP packs. |
| 51 | + |
| 52 | +--- |
| 53 | + |
| 54 | +## 3) Partitioned Uncertainty Resolution Pathway (P1–P8) |
| 55 | + |
| 56 | +Each partition corresponds to a dedicated folder. **Do not credit closure** unless the partition’s “Done” definition is satisfied. |
| 57 | + |
| 58 | +### P1 — Work Breakdown & Ownership (Execution Closure) |
| 59 | +- Folder: [01_WBS/](01_WBS/) |
| 60 | + _Comment:_ Converts uncertainty into executable work packages (tasks, owners, inputs/outputs). |
| 61 | + |
| 62 | +- WBS index: [K06 ATA 94 Work Breakdown](01_WBS/94_00_IDX_LC01_SPACET_k06-ata-94-workbreakdown_v01.md) |
| 63 | + _Closes:_ “We don’t know what to do next / who owns it.” |
| 64 | + _Done when:_ T001–T009 exist with owners, acceptance criteria, and artifact links. |
| 65 | + |
| 66 | +- RACI (CSV): [RACI](01_WBS/94_00_MAT_LC06_SPACET_k06-ata-94-raci_v01.csv) |
| 67 | + _Closes:_ Responsibility ambiguity (execution vs approval). |
| 68 | + _Done when:_ CM approval path is explicit and accepted. |
| 69 | + |
| 70 | +**Task stubs (minimum set — expanded for DPP domain):** |
| 71 | +- T001: [SSOT source & ownership](01_WBS/94_00_ACT_LC06_SPACET_k06-t001-ssot-source-ownership_v01.md) |
| 72 | + _Comment:_ Declares authoritative sources for DPP content (registries, schemas, trace snapshots) and sets change control. |
| 73 | + |
| 74 | +- T002: [DPP identifier grammar](01_WBS/94_00_ACT_LC06_SPACET_k06-t002-dpp-identifier-grammar_v01.md) |
| 75 | + _Comment:_ Canonical IDs for DPP passports, views, export packs, and releases. |
| 76 | + |
| 77 | +- T003: [DPP schema definition](01_WBS/94_00_ACT_LC06_SPACET_k06-t003-dpp-schema-definition_v01.md) |
| 78 | + _Comment:_ Stabilizes DPP payload semantics (fields, required evidence pointers, compatibility rules). |
| 79 | + |
| 80 | +- T004: [Provenance & signing rules](01_WBS/94_00_ACT_LC06_SPACET_k06-t004-provenance-signing-rules_v01.md) |
| 81 | + _Comment:_ Defines hashing/signing, metadata requirements, and verification procedure. |
| 82 | + |
| 83 | +- T005: [Export publication](01_WBS/94_00_ACT_LC06_SPACET_k06-t005-export-publication_v01.md) |
| 84 | + _Comment:_ Deterministic generation of DPP packs (manifest + payload + trace snapshot pointers). |
| 85 | + |
| 86 | +- T006: [CI validation gates](01_WBS/94_00_ACT_LC06_SPACET_k06-t006-ci-validation-gates_v01.md) |
| 87 | + _Comment:_ Enforces DPP schema validity, provenance completeness, and trace link integrity. |
| 88 | + |
| 89 | +- T007: [Redaction & classification policy](01_WBS/94_00_ACT_LC06_SPACET_k06-t007-redaction-classification-policy_v01.md) |
| 90 | + _Comment:_ Controls what can be shared externally and how to redact sensitive fields. |
| 91 | + |
| 92 | +- T008: [Baseline DPP view definition](01_WBS/94_00_ACT_LC06_SPACET_k06-t008-baseline-dpp-view-definition_v01.md) |
| 93 | + _Comment:_ Defines which DPP views are mandatory for releases and what evidence is required. |
| 94 | + |
| 95 | +- T009: [Verification procedure](01_WBS/94_00_ACT_LC06_SPACET_k06-t009-dpp-verification-procedure_v01.md) |
| 96 | + _Comment:_ Defines how consumers verify authenticity, completeness, and trace links. |
| 97 | + |
| 98 | +--- |
| 99 | + |
| 100 | +### P2 — IDs & Registry (Identity Closure) |
| 101 | +- Folder: [02_IDS_REGISTRY/](02_IDS_REGISTRY/) |
| 102 | + _Comment:_ Ensures every DPP view/export pack has a unique ID, owner, lifecycle state, and dedup policy. |
| 103 | + |
| 104 | +- Standard (STD): [DPP identifier grammar](02_IDS_REGISTRY/94_00_STD_LC03_SPACET_dpp-identifier-grammar_v01.md) |
| 105 | + _Done when:_ Grammar is approved and referenced by export tooling + CI. |
| 106 | + |
| 107 | +- Registry (TAB/CSV): [DPP registry](02_IDS_REGISTRY/94_00_TAB_LC03_SPACET_dpp-registry_v01.csv) |
| 108 | + _Done when:_ Registry is SSOT (no duplicates), with owners/status and required metadata. |
| 109 | + |
| 110 | +- Registry (TAB/CSV): [DPP view registry](02_IDS_REGISTRY/94_00_TAB_LC03_SPACET_dpp-view-registry_v01.csv) |
| 111 | + _Done when:_ Views are enumerated with scope, required evidence, and release applicability. |
| 112 | + |
| 113 | +- Change log (LOG): [Registry change log](02_IDS_REGISTRY/94_00_LOG_LC03_SPACET_registry-change-log_v01.md) |
| 114 | + _Done when:_ Every change references a decision (P7). |
| 115 | + |
| 116 | +--- |
| 117 | + |
| 118 | +### P3 — Schema & Versioning (Semantic Closure) |
| 119 | +- Folder: [03_SCHEMA/](03_SCHEMA/) |
| 120 | + _Comment:_ Defines authoritative DPP schemas and compatibility rules. |
| 121 | + |
| 122 | +- Schema (SCH/JSON): [DPP payload schema](03_SCHEMA/94_00_SCH_LC03_SPACET_dpp-payload-schema_v01.json) |
| 123 | + _Done when:_ Validates DPP payloads and is used by CI. |
| 124 | + |
| 125 | +- Schema (SCH/JSON): [DPP manifest schema](03_SCHEMA/94_00_SCH_LC03_SPACET_dpp-manifest-schema_v01.json) |
| 126 | + _Done when:_ Validates manifest metadata (tool versions, hashes, trace pointers, classification). |
| 127 | + |
| 128 | +- Standard (STD): [Schema versioning policy](03_SCHEMA/94_00_STD_LC03_SPACET_schema-versioning-policy_v01.md) |
| 129 | + _Done when:_ Compatibility/breaking-change rules exist and are enforced. |
| 130 | + |
| 131 | +- Standard (STD): [Redaction rules](03_SCHEMA/94_00_STD_LC03_SPACET_redaction-rules_v01.md) |
| 132 | + _Done when:_ Redaction is standardized and verifiable. |
| 133 | + |
| 134 | +--- |
| 135 | + |
| 136 | +### P4 — Exports (Consumable Data Closure) |
| 137 | +- Folder: [04_EXPORTS/](04_EXPORTS/) |
| 138 | + _Comment:_ Deterministic DPP export packs with manifests, payloads, and verifiable pointers. |
| 139 | + |
| 140 | +- Baseline export (TAB/CSV): [Baseline DPP registry export](04_EXPORTS/94_00_TAB_LC04_SPACET_baseline-dpp-registry-export_v01.csv) |
| 141 | + _Done when:_ Export is reproducible and validated. |
| 142 | + |
| 143 | +- Manifest (RPT): [Export manifest](04_EXPORTS/94_00_RPT_LC04_SPACET_export-manifest_v01.md) |
| 144 | + _Done when:_ Inputs/tools/versions are recorded; rebuild is deterministic. |
| 145 | + |
| 146 | +- Diagram (DIA): [DPP pack structure map](04_EXPORTS/94_00_DIA_LC04_SPACET_dpp-pack-structure-map_v01.md) |
| 147 | + _Done when:_ Diagram references match schemas/registries and exported packs. |
| 148 | + |
| 149 | +--- |
| 150 | + |
| 151 | +### P5 — CI Gates (Enforcement Closure) |
| 152 | +- Folder: [05_CI_GATES/](05_CI_GATES/) |
| 153 | + _Comment:_ Prevents uncontrolled DPP changes and enforces provenance and trace integrity. |
| 154 | + |
| 155 | +- Requirements (STD): [CI validation requirements](05_CI_GATES/94_00_STD_LC05_SPACET_ci-validation-requirements_v01.md) |
| 156 | + _Done when:_ Rules map to checks; failures are actionable. |
| 157 | + |
| 158 | +- Checklist (LOG): [CI checklist](05_CI_GATES/94_00_LOG_LC05_SPACET_ci-checklist_v01.md) |
| 159 | + _Done when:_ Checklist matches CI outputs and reviewer expectations. |
| 160 | + |
| 161 | +- Sample run (RPT): [CI validation sample run](05_CI_GATES/94_00_RPT_LC05_SPACET_ci-validation-sample-run_v01.md) |
| 162 | + _Done when:_ Demonstrates pass/fail cases (missing provenance, invalid trace pointer, unregistered view). |
| 163 | + |
| 164 | +--- |
| 165 | + |
| 166 | +### P6 — Evidence Pack (Proof Closure) |
| 167 | +- Folder: [06_EVIDENCE/](06_EVIDENCE/) |
| 168 | + _Comment:_ NKU credit requires reproducible evidence and stable links, including signed pack verification. |
| 169 | + |
| 170 | +- Evidence pack index (IDX): [Evidence pack](06_EVIDENCE/94_00_IDX_LC06_SPACET_k06-ata-94-evidence-pack_v01.md) |
| 171 | + _Done when:_ All required evidence is linked and current. |
| 172 | + |
| 173 | +- Evidence links (TRC/CSV): [Evidence links register](06_EVIDENCE/94_00_TRC_LC06_SPACET_k06-ata-94-evidence-links_v01.csv) |
| 174 | + _Done when:_ Each claim has evidence links and status (OK/STALE/MISSING). |
| 175 | + |
| 176 | +- NKU ledger (TAB/CSV): [NKU ledger](06_EVIDENCE/94_00_TAB_LC06_SPACET_k06-ata-94-nku-ledger_v01.csv) |
| 177 | + _Done when:_ Partition scores are updated and backed by evidence + decision. |
| 178 | + |
| 179 | +--- |
| 180 | + |
| 181 | +### P7 — Decisions & Approvals (Authority Closure) |
| 182 | +- Folder: [07_DECISIONS/](07_DECISIONS/) |
| 183 | + _Comment:_ Converts evidence into approved baseline outcomes for DPP governance. |
| 184 | + |
| 185 | +- Decision minutes (MIN): [Decision minutes](07_DECISIONS/94_00_MIN_LC07_SPACET_k06-ata-94-decision-minutes_v01.md) |
| 186 | + _Done when:_ Decision, rationale, dissent/risks are recorded. |
| 187 | + |
| 188 | +- Approvals log (LOG): [Approvals log](07_DECISIONS/94_00_LOG_LC07_SPACET_k06-ata-94-approvals_v01.md) |
| 189 | + _Done when:_ CM approval + DPP authority sign-offs are referenced. |
| 190 | + |
| 191 | +--- |
| 192 | + |
| 193 | +### P8 — Traceability & Adoption (Impact Closure) |
| 194 | +- Folder: [08_TRACEABILITY/](08_TRACEABILITY/) |
| 195 | + _Comment:_ Ensures DPP consumers adopt the SSOT (schemas/registries/trace pointers) and can verify authenticity. |
| 196 | + |
| 197 | +- Consumers (TRC/CSV): [Consumers list](08_TRACEABILITY/94_00_TRC_LC08_SPACET_k06-ata-94-consumers_v01.csv) |
| 198 | + _Done when:_ Consumers are listed with pack version, verification method, and owner. |
| 199 | + |
| 200 | +- Adoption status (RPT): [Adoption status](08_TRACEABILITY/94_00_RPT_LC08_SPACET_k06-ata-94-adoption-status_v01.md) |
| 201 | + _Done when:_ Each consumer has status + remediation plan if blocked. |
| 202 | + |
| 203 | +--- |
| 204 | + |
| 205 | +## 4) Cross-ATA Links (same Knot, coupled closures) |
| 206 | + |
| 207 | +ATA 94 is downstream of the K06 spine; these couplings are mandatory. |
| 208 | + |
| 209 | +- [ATA 90 — Meta spine (NN / Schemas / Trace / DPP)](../ATA_90/) |
| 210 | + _Comment:_ Provenance expectations and TEKNIA packaging gates. |
| 211 | + |
| 212 | +- [ATA 91 — Schemas](../ATA_91/) |
| 213 | + _Comment:_ DPP payload/manifest must reference canonical schema IDs. |
| 214 | + |
| 215 | +- [ATA 93 — Traceability Graph](../ATA_93/) |
| 216 | + _Comment:_ DPP exports must point to trace graph snapshots and evidence links. |
| 217 | + |
| 218 | +- [ATA 95 — SBOM / ModelBOM](../ATA_95/) |
| 219 | + _Comment:_ DPP packs should reference software/model supply chain artifacts when applicable. |
| 220 | + |
| 221 | +- [ATA 98 — Signed Export Packs](../ATA_98/) |
| 222 | + _Comment:_ Signing/hashing and verification primitives for released DPP packs. |
| 223 | + |
| 224 | +- [ATA 99 — Master Registers](../ATA_99/) |
| 225 | + _Comment:_ Consolidated registers; prevents duplicated registries and drift. |
| 226 | + |
| 227 | +**Sim/Test Coupling (100+):** |
| 228 | +- [ATA 101](../ATA_101/) / [ATA 107](../ATA_107/) / [ATA 109](../ATA_109/) |
| 229 | + _Comment:_ Evidence packs feeding DPP must be trace-linked and verifiable. |
| 230 | + |
| 231 | +--- |
| 232 | + |
| 233 | +## 5) Control & Monitoring (NKU Values + TEKNIA Sharing Rules) |
| 234 | + |
| 235 | +### 5.1 NKU Control Model |
| 236 | +**Primary metric:** NKU Progress Score for K06/ATA94 |
| 237 | +**Source of truth:** [NKU ledger](06_EVIDENCE/94_00_TAB_LC06_SPACET_k06-ata-94-nku-ledger_v01.csv) |
| 238 | + |
| 239 | +**Scoring:** |
| 240 | +- `score ∈ {0, 0.5, 1.0}` |
| 241 | +- **NKU Score** = `Σ(weight × score)` across partitions P1..P8 |
| 242 | + |
| 243 | +**No-false-closure (mandatory):** |
| 244 | +- `score = 1.0` requires: |
| 245 | + - evidence link(s) in `06_EVIDENCE/...evidence-links...csv`, and |
| 246 | + - decision reference in `07_DECISIONS/...decision-minutes...md` (and approvals if applicable). |
| 247 | + |
| 248 | +### 5.2 Monitoring Cadence |
| 249 | +| Control Item | Owner | Frequency | Source | Comment | |
| 250 | +|---|---|---:|---|---| |
| 251 | +| NKU ledger updates | AI + DATA | Per PR affecting K06/ATA94 | NKU ledger + evidence links | No score uplift without links | |
| 252 | +| CI gate compliance | CM + Tooling | Per PR | CI gates + logs | Enforcement mechanism | |
| 253 | +| Provenance/signing checks | CM + Security + Tooling | Per PR + release | CI outputs + signed pack logs | “Unsigned release” is a blocker | |
| 254 | +| Evidence freshness | SE + V&V | Weekly / per gate | Evidence links register | Detect staleness | |
| 255 | +| Decision capture | CM WG + DPP Authority | At gate closure | Decisions + approvals | Required for closure | |
| 256 | +| Consumer verification | DPP consumers | Per release | Adoption status | Verify pack authenticity | |
| 257 | + |
| 258 | +### 5.3 Thresholds |
| 259 | +- Green ≥ 0.80; Amber 0.50–0.79; Red < 0.50 |
| 260 | +Hard blockers: missing P2/P3/P5 closure, missing P7 decision, missing signing/provenance for baseline exports, stale evidence for any closed item. |
| 261 | + |
| 262 | +### 5.4 TEKNIA Sharing Rules |
| 263 | +TEKTOKs may be created only when: |
| 264 | +- Evidence is reproducible (P6 complete) |
| 265 | +- Decision exists (P7 complete, CM-approved) |
| 266 | +- Dedup passes (SHA-256) |
| 267 | +- NV threshold met (≥ 0.50 internal, ≥ 0.65 external recommended) |
| 268 | + |
| 269 | +### 5.5 TEKNIA Packaging Requirements (mandatory metadata) |
| 270 | +Any TEKTOK that triggers or references a DPP export must include: |
| 271 | +- knot_id, ata, partitions_closed |
| 272 | +- dpp_view_id + dpp_pack_id + release_state |
| 273 | +- schema_ids referenced (payload + manifest) |
| 274 | +- trace_snapshot_id + evidence_links |
| 275 | +- hash_sha256 + signature metadata |
| 276 | +- classification + redaction notes |
| 277 | +- nv + rationale |
| 278 | + |
| 279 | +### 5.6 Enforcement |
| 280 | +CI should validate: |
| 281 | +- DPP schema compliance (payload + manifest) |
| 282 | +- DPP view registry membership and required evidence completeness |
| 283 | +- trace snapshot pointer validity (ATA 93) |
| 284 | +- signature/provenance completeness for baseline exports (ATA 98 coupling) |
| 285 | +- TEKNIA gate for “approved” TEKTOK status (NV + dedup) |
| 286 | + |
| 287 | +--- |
| 288 | + |
| 289 | +## 6) Practical Notes (common failure modes) |
| 290 | +- A DPP pack without deterministic provenance metadata is not auditable: treat as invalid. |
| 291 | +- Do not embed “live” repo paths without a release reference for baseline states; prefer signed export packs. |
| 292 | +- Redaction must be standardized; ad-hoc removal breaks verifiability and comparability. |
15 | 293 |
|
16 | | -## Tasks (minimum set) |
17 | | -1. Define ATA-specific scope, interfaces, owners. |
18 | | -2. Define decision criteria and evidence package. |
19 | | -3. Execute validation/verification activities. |
20 | | -4. Record decision; update baseline and trace links. |
|
0 commit comments