L1 is defined per track.
Makoto has two producer tracks, Origin and Transform, and each defines its own L1. L1 is where every producer starts: signed statements from wherever the capture or transformation runs. It needs no hosted platform.
MAKOTO_ORIGIN_LEVEL_1
MAKOTO_TRANSFORM_LEVEL_1How to read a level. A track level says how origin or transformation evidence was produced (Section 8.3). Levels are cumulative within a track, and the level for a final artifact is the minimum qualified level among all reachable statements in that track. What a receiver established about one handoff is a separate verified property.
L1 in each trackL2 in each trackL3 in each trackAssurance modelSpecification overview
Origin L1 · Traceable capture
| User benefit | A consumer can trace the artifact to one claimed source observation instead of starting with an unexplained file. |
|---|---|
| Producer evidence | A core-valid Makoto origin statement names the source kind, unique event ID, claimed event time, and exact subject digests, and is carried in a valid DSSE envelope. |
| Receiver verification | Verify the envelope and payload through parse-strictly, core-schemas, index-payloads, and signatures; verify that each reachable root is an origin and that its subject digest is the predecessor digest used downstream. Artifact bytes, when supplied, must match. |
Origin L1 in the assurance model · Specification section 8.4
Transform L1 · Traceable execution
| User benefit | A consumer gets a stack trace for data: the exact predecessor and operation behind every handed-off artifact are named. |
|---|---|
| Producer evidence | Every reachable non-origin node is a core-valid Makoto transformation statement binding each input digest to a predecessor statement and subject, naming an operation.type, and binding exact output digests. |
| Receiver verification | Require core-schemas, graph, graph-dependency-artifacts, roots-and-heads, and completeness-anchor to pass; recompute statement, predecessor, input, and subject digests. Missing or rewired steps fail deterministically rather than lowering a score. |
Transform L1 in the assurance model · Specification section 8.5
Identifiers
A verification summary names a track level with a stable identifier in verifiedLevels. A graph with no transformation has no Transform level and reports MAKOTO_TRANSFORM_LEVEL_UNEVALUATED, never a silent L1.
MAKOTO_ORIGIN_LEVEL_1
MAKOTO_TRANSFORM_LEVEL_1What a level does not establish
No track level is an allow or deny decision, and none establishes data-content correctness. Makoto cannot establish that a signer told the truth or that a source was correct (Section 8.2). See what Makoto does not cover and the correctness handoff.