Guiding Questions

  1. Requirements & Use Cases

  • Which legal, contractual, or sectoral requirements exist for provenance and traceability?

  • Are there AI Act or other regulatory triggers that mandate detailed data lineage or traceability?

  • Are there business cases for using provenance data to add value (e.g., sustainability claims, quality certification)?

  1. Data Modelling

  • Will existing ontologies (e.g., W3C PROV-O, PAV) be adopted and extended for sector needs?

  • Should provenance be modelled as “events” (e.g., CloudEvents) for flexibility?

  1. Storage & Management

  • Will provenance/traceability data be stored locally by participants, by certified 3rd parties, or in a hybrid model?

  • What are the retention, encryption, and access control policies?

  1. Observability Scope

  • Which Control Plane activities (catalog publication, contract negotiation, transfer process) will be observable?

  • Will operational telemetry (uptime, performance) also be included under the same governance?

  1. Trust & Third Parties

  • Which organisations could act as certified observability service providers?

  • How will centralization risks be mitigated?

  1. Governance Linkages

  • How will rules for provenance and traceability be reflected in the rulebook?

  • Which governance body will approve changes to provenance and traceability standards or processes?

Last updated