aimarket-provenance

Cryptographic provenance receipts for every AI output — Ed25519 + W3C Verifiable Credentials.

Infrastructure-layer plugin for AIMarket Hub. Auto-attaches a tamper-evident receipt to every successful /invoke, and exposes public verify endpoints for auditors and end users.

Try it: verify any receipt at verify.modelmarket.dev — paste a receipt JSON or open its verify_url. Client-side Ed25519 check, no backend.

Source-of-truth note. Unlike the other aimarket-* plugins, which were compressed into thin shims that re-export from aimarket_hub.* (see commit 2f958a23), this plugin is the full, standalone implementation — receipt, storage, verifier, and API live here under aimarket_provenance/. There is intentionally no parallel copy under plugins/aimarket-provenance/. Keep that asymmetric on purpose: the hub ships provenance in-process by default; the package is the only edit surface.

Documentation

Why this exists

Regulated and high-trust AI workflows need proof of what model ran, on what input hash, at what time, signed by whom — without storing full prompts on a public ledger. Provenance is the infrastructure abstract layer between raw invoke results and external audit systems.

Features

• Auto-receipt on invoke — provenance_receipt field on every invoke response
• W3C Verifiable Credential format with Ed25519 hub signature
• Provenance chains — parent_receipts link multi-step pipelines
• TEE + ZK metadata — optional attestation fields embedded in receipt
• Public verify — anyone can verify without API token
• Protected attest — optional Bearer token for manual receipt creation

Installation

cd aimarket-hub
pip install -e plugins/aimarket-provenance
aimarket serve

Verify:

curl http://localhost:9083/ai-market/v2/plugins | jq '.plugins[] | select(.name=="provenance")'
curl http://localhost:9083/.well-known/ai-market.json | jq '.plugin_extensions.provenance'

API Endpoints

Auto-receipt on invoke

curl -X POST http://localhost:9083/ai-market/v2/invoke \
  -H "Content-Type: application/json" \
  -d '{
    "product_id": "prod-demo",
    "capability_id": "translate@v1",
    "source_hub": "local",
    "input": {"text": "Hello"}
  }' | jq '.provenance_receipt'

{
  "receipt_id": "urn:aimarket:receipt:abc123...",
  "verify_url": "https://verify.modelmarket.dev/r/abc123"
}

Manual attest

curl -X POST http://localhost:9083/ai-market/v2/p/provenance/attest \
  -H "Authorization: Bearer $AIMARKET_PROVENANCE_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "model_id": "legal.review@v1@prod-legal",
    "provider_hub": "https://provider.example.com",
    "input": {"documents": {"hash": "sha256:..."}},
    "output": {"risk": "low", "issues": 0},
    "parent_receipts": ["urn:aimarket:receipt:parent-id"],
    "latency_ms": 4200,
    "price_usd": 0.15
  }'

Configuration

Back up provenance_signing_key — losing it invalidates verification of historical receipts.

Storage

Receipts persist in provenance.db (SQLite) or PostgreSQL when DATABASE_URL is set. Migration 005_provenance_receipts in hub schema.

Combine with

License

Apache-2.0 · Part of AIMarket Hub