From 93515d17cae141d889007b4c00cbb510cffcb19c Mon Sep 17 00:00:00 2001 From: Shawn Blackmore Date: Fri, 25 Sep 2026 08:44:18 -0700 Subject: [PATCH 1/2] docs: turn AI package into a v3.4 developer landing page --- README.md | 58 +++++++++++++++++++++++++++++++++++++++++++------------ 1 file changed, 46 insertions(+), 12 deletions(-) diff --git a/README.md b/README.md index c3ef2d7..90c545f 100644 --- a/README.md +++ b/README.md @@ -1,17 +1,27 @@ # ENTITY-AI -ENTITY v3.4.0 executable AI implementation package. +**ENTITY v3.4.0 executable AI implementation package.** -This repository configures the **one ENTITY Global Passport** for the AI domain. It does not define a separate passport protocol and does not modify ENTITY core semantics. +This repository configures the **one ENTITY Global Passport** for AI systems, models, datasets, derived outputs and related governance artifacts. It does not define a separate passport protocol and does not modify ENTITY core semantics. -## Release binding +[ENTITY](https://github.com/blackmore-technology-group/ENTITY) · [v3.4.0 release](https://github.com/blackmore-technology-group/ENTITY/releases/tag/v3.4.0) · [Global Passport documentation](https://github.com/blackmore-technology-group/ENTITY/blob/main/docs/v3.4/GLOBAL_PASSPORT.md) · [Domain packages](https://github.com/blackmore-technology-group/ENTITY/blob/main/docs/v3.4/DOMAIN_PACKAGES.md) -- Core source: `blackmore-technology-group/ENTITY` PR #41 -- Source head: `2d7529fbadb4dd04840d62b751294bf9a7f70ed5` -- Release snapshot: `3ff0e51ca2daabf50bc517e9c6e3438e8c150f1560cca6c99621621e3c855a90` -- Package SHA-256: `4877cb5bc76ef0803eace931ca1a9cba516c01ba94a2e0b4bc71bcb5dc1b0440` +## What this package is for + +Use ENTITY-AI as the starting point when you need persistent provenance, scoped authority, rights and evidence around AI-related assets while keeping model custody, hosting and platform control separate from sovereign authority. -## Required deployment facts +The v3.4 package includes mappings for **NIST AI RMF**, **SPDX 3** and **CycloneDX**. Those mappings describe correspondence; ENTITY does not redefine the external standards or turn a mapping into certification or regulatory compliance by itself. + +Typical evaluation paths include: + +- carrying origin, authority and evidence context with models, datasets or derived outputs; +- recording rights and usage constraints across training, inference or downstream derivation; +- preserving provenance through provider or platform changes; +- composing jurisdiction, privacy, trust, technical and AI-domain profiles inside one Global Passport. + +## Deploy the package + +Required deployment facts: - `organization` - `jurisdiction` @@ -20,10 +30,34 @@ This repository configures the **one ENTITY Global Passport** for the AI domain. `deployment.example.json` is intentionally non-production until every `CONFIGURE-ME` value is replaced with organization-specific facts. -## Verify +```text +Select package → configure organization facts → connect systems/data → ingest → verify passport → run conformance → deploy +``` + +## Verify locally + +```bash +python tools/verify_package.py +``` + +The verifier checks the repository inventory and the package/source-release binding. + +## Release binding + +- Core source: `blackmore-technology-group/ENTITY` PR #41 +- Source head: `2d7529fbadb4dd04840d62b751294bf9a7f70ed5` +- Release snapshot: `3ff0e51ca2daabf50bc517e9c6e3438e8c150f1560cca6c99621621e3c855a90` +- Package SHA-256: `4877cb5bc76ef0803eace931ca1a9cba516c01ba94a2e0b4bc71bcb5dc1b0440` + +## Go deeper + +- [ENTITY v3.4.0](https://github.com/blackmore-technology-group/ENTITY/releases/tag/v3.4.0) +- [Developer portal](https://github.com/blackmore-technology-group/ENTITY/blob/main/DEVELOPERS.md) +- [Engineering evidence](https://github.com/blackmore-technology-group/ENTITY/blob/main/docs/ENGINEERING_EVIDENCE.md) +- [Open contributor tasks](https://github.com/blackmore-technology-group/ENTITY/issues?q=is%3Aissue+is%3Aopen) -Run `python tools/verify_package.py`. The verifier checks the repository inventory and the package/source-release binding. +## Truth and compliance boundary -## Truth boundary +External standards remain externally authoritative and are mapped, not redefined. Package verification does **not** establish regulatory compliance, objective external truth, model safety, legal title or accounting fair value. Provider custody or model hosting does not create ENTITY authority. -External standards are mapped, not redefined. Package verification does not establish regulatory compliance, objective external truth, legal title or accounting fair value. Provider custody does not create ENTITY authority. +Deployment-specific legal, regulatory, safety, security and model-governance determinations remain the responsibility of the deploying organization. From f95670848455d9a6d4f16ab1b79b50c48bf45f2b Mon Sep 17 00:00:00 2001 From: Shawn Blackmore Date: Fri, 25 Sep 2026 08:54:41 -0700 Subject: [PATCH 2/2] chore: reseal README integrity after documentation update --- REPOSITORY_MANIFEST.json | 105 ++++++++------------------------------- 1 file changed, 21 insertions(+), 84 deletions(-) diff --git a/REPOSITORY_MANIFEST.json b/REPOSITORY_MANIFEST.json index 3acd8b4..f191a85 100644 --- a/REPOSITORY_MANIFEST.json +++ b/REPOSITORY_MANIFEST.json @@ -1,90 +1,27 @@ { "domain": "ai", "files": [ - { - "path": ".gitattributes", - "sha256": "d60f352d0db1404c70afb4bb8b2ca3fd1c610572aa40720e8a0b7baa7885418c" - }, - { - "path": ".github/workflows/verify.yml", - "sha256": "261f8eba4865fd6b237fd43d8008b9a5f7934d50615454bbc093e4ab5f4d05a8" - }, - { - "path": ".gitignore", - "sha256": "4cad133d4f0a6cf4bba15f1b8bbae48d6a55f20b94f75487c51a93cc6a5af59f" - }, - { - "path": "CODE_OF_CONDUCT.md", - "sha256": "075f9820f43599dceb334f3accba68d62c32589e38ef68c750c771e48695eafc" - }, - { - "path": "conformance.json", - "sha256": "1bc726541e3ce91d108b3307d7dc5ef9215f8caa49ea7a7131f2a29b10359cc3" - }, - { - "path": "deployment.example.json", - "sha256": "ac103b891ef4611514d1371ef057f7986bb54e5de63b255d912e79e0cbee35d6" - }, - { - "path": "deployment.schema.json", - "sha256": "5eb88c9a6cb54967bf7f7733d18f84422c044ff0871e6d28d5326fdf15a8ea4c" - }, - { - "path": "LICENSE", - "sha256": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4" - }, - { - "path": "mappings.json", - "sha256": "553d44ba8cc01ac0aa765f2d261632776aacceed1d95acab1dd680acf0d9986d" - }, - { - "path": "NOTICE", - "sha256": "0d5dbc5d8a225ba5eb152719ae4b0066ca64d3338c7dc857a68f502961a92dda" - }, - { - "path": "package.json", - "sha256": "112808e5a435a036a5992e035d218fe7556627cc0a3e0ecfe34ef5ceaffa7595" - }, - { - "path": "protocol/ENTITY_GLOBAL_PASSPORT.schema.json", - "sha256": "4fbfed9be1b1484bc5d28b8101d1c908b2ccced13e4e99ec896c5b054892ebdd" - }, - { - "path": "protocol/ENTITY_V3_4_GLOBAL_PASSPORT_CLEANROOM_KIT.min.json", - "sha256": "5869a3fd0ed6cb9f65bf4b20c3bd64933cad82f4aef05c5809e2e05af921f230" - }, - { - "path": "QUICKSTART.md", - "sha256": "e8a8006a98823c6f5a2086a0f093e0c95baeb26159d7d050caa7c41c578ef863" - }, - { - "path": "README.md", - "sha256": "cafd884e7bf00adda5764f22a53fc9d0d24a5eff8b5ec92f1c4ceec774daefff" - }, - { - "path": "sdk/canonical_global_passport_sdk.py", - "sha256": "50d40713fe7f8462f54388bd7650705fd3f17027f7692a7cf87bf3ad59230e64" - }, - { - "path": "sdk/README.md", - "sha256": "9981c36e7b44de00a2a2627376620da3716eebe7f64ff260f1fd0a1290838be4" - }, - { - "path": "SECURITY.md", - "sha256": "36da06976abc3b01e0963fd84acfc02d995f57a10699c7cf86c23628bea7a5a4" - }, - { - "path": "SOURCE_RELEASE.json", - "sha256": "cc17fb390fd78082d735dafc0e3e210f5df9104c319c8e1c396b723fc72c4c5a" - }, - { - "path": "templates.json", - "sha256": "41a8531ba28774db96004b2cfcb9dc5ad979bc11680d4d5d4cc9d06d7691d1f3" - }, - { - "path": "tools/verify_package.py", - "sha256": "1ad2cd598780182c10e69463ccc97f2417bfc49f18fcc64ac30fca8b687332a1" - } + {"path": ".gitattributes", "sha256": "d60f352d0db1404c70afb4bb8b2ca3fd1c610572aa40720e8a0b7baa7885418c"}, + {"path": ".github/workflows/verify.yml", "sha256": "261f8eba4865fd6b237fd43d8008b9a5f7934d50615454bbc093e4ab5f4d05a8"}, + {"path": ".gitignore", "sha256": "4cad133d4f0a6cf4bba15f1b8bbae48d6a55f20b94f75487c51a93cc6a5af59f"}, + {"path": "CODE_OF_CONDUCT.md", "sha256": "075f9820f43599dceb334f3accba68d62c32589e38ef68c750c771e48695eafc"}, + {"path": "conformance.json", "sha256": "1bc726541e3ce91d108b3307d7dc5ef9215f8caa49ea7a7131f2a29b10359cc3"}, + {"path": "deployment.example.json", "sha256": "ac103b891ef4611514d1371ef057f7986bb54e5de63b255d912e79e0cbee35d6"}, + {"path": "deployment.schema.json", "sha256": "5eb88c9a6cb54967bf7f7733d18f84422c044ff0871e6d28d5326fdf15a8ea4c"}, + {"path": "LICENSE", "sha256": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4"}, + {"path": "mappings.json", "sha256": "553d44ba8cc01ac0aa765f2d261632776aacceed1d95acab1dd680acf0d9986d"}, + {"path": "NOTICE", "sha256": "0d5dbc5d8a225ba5eb152719ae4b0066ca64d3338c7dc857a68f502961a92dda"}, + {"path": "package.json", "sha256": "112808e5a435a036a5992e035d218fe7556627cc0a3e0ecfe34ef5ceaffa7595"}, + {"path": "protocol/ENTITY_GLOBAL_PASSPORT.schema.json", "sha256": "4fbfed9be1b1484bc5d28b8101d1c908b2ccced13e4e99ec896c5b054892ebdd"}, + {"path": "protocol/ENTITY_V3_4_GLOBAL_PASSPORT_CLEANROOM_KIT.min.json", "sha256": "5869a3fd0ed6cb9f65bf4b20c3bd64933cad82f4aef05c5809e2e05af921f230"}, + {"path": "QUICKSTART.md", "sha256": "e8a8006a98823c6f5a2086a0f093e0c95baeb26159d7d050caa7c41c578ef863"}, + {"path": "README.md", "sha256": "66bee84f4a5d4238ab2c9d219f36823a1ae990e50ad3754daf0f746b3471160a"}, + {"path": "sdk/canonical_global_passport_sdk.py", "sha256": "50d40713fe7f8462f54388bd7650705fd3f17027f7692a7cf87bf3ad59230e64"}, + {"path": "sdk/README.md", "sha256": "9981c36e7b44de00a2a2627376620da3716eebe7f64ff260f1fd0a1290838be4"}, + {"path": "SECURITY.md", "sha256": "36da06976abc3b01e0963fd84acfc02d995f57a10699c7cf86c23628bea7a5a4"}, + {"path": "SOURCE_RELEASE.json", "sha256": "cc17fb390fd78082d735dafc0e3e210f5df9104c319c8e1c396b723fc72c4c5a"}, + {"path": "templates.json", "sha256": "41a8531ba28774db96004b2cfcb9dc5ad979bc11680d4d5d4cc9d06d7691d1f3"}, + {"path": "tools/verify_package.py", "sha256": "1ad2cd598780182c10e69463ccc97f2417bfc49f18fcc64ac30fca8b687332a1"} ], "package_sha256": "4877cb5bc76ef0803eace931ca1a9cba516c01ba94a2e0b4bc71bcb5dc1b0440", "release_snapshot_sha256": "3ff0e51ca2daabf50bc517e9c6e3438e8c150f1560cca6c99621621e3c855a90",