Origin predicate

The root of a Makoto provenance graph: who or what collected the data, from which source, and which exact artifact bytes were observed.

Predicate type

https://usemakoto.dev/predicate/v0.2/origin

JSON Schema

origin.schema.json

Statement envelope

in-toto Statement v1 shape carried in DSSE

Required meaning

An origin has a unique event ID and timestamp, at least one subject with an exact SHA-256 digest, and a source kind. It has no predecessor. A source URI is descriptive; the subject digest is what binds the collected snapshot.

{
  "schemaVersion": "0.2",
  "event": {"id": "urn:uuid:…", "occurredAt": "2026-09-16T16:00:00Z"},
  "source": {"kind": "urn:example:source:synthetic-file", "uri": "urn:example:data:raw"}
}