L2 is defined per track.
Makoto has two producer tracks, Origin and Transform, and each defines its own L2. L2 moves evidence generation from a person to a hosted platform, which signs and assesses it in a standard SLSA Verification Summary Attestation.
MAKOTO_ORIGIN_LEVEL_2
MAKOTO_TRANSFORM_LEVEL_2How to read a level. A track level says how origin or transformation evidence was produced (Section 8.3). Levels are cumulative within a track, and the level for a final artifact is the minimum qualified level among all reachable statements in that track. What a receiver established about one handoff is a separate verified property.
L1 in each trackL2 in each trackL3 in each trackAssurance modelSpecification overview
Origin L2 · Platform-authenticated capture
| User benefit | A consumer can detect evidence added or changed after capture and can attribute the observation to a hosted capture platform rather than a person's workstation. |
|---|---|
| Producer evidence | Origin L1 evidence plus a SLSA VSA issued by the capture platform. Its inputAttestations include the exact origin envelope; its assessment policy requires automatic, contemporaneous provenance generation and a platform signing identity. |
| Receiver verification | Verify the VSA signature with a consumer-configured key; require the configured verifier.id and assessment-policy URI and digest; require verificationResult: PASSED, a subject matching the captured artifact, the exact origin-envelope digest in inputAttestations, and MAKOTO_ORIGIN_LEVEL_2 or higher in verifiedLevels. |
Origin L2 in the assurance model · Specification section 8.4
Transform L2 · Platform-authenticated execution
| User benefit | A consumer can detect tampering after the run and attribute the provenance to a hosted pipeline rather than user-authored metadata. |
|---|---|
| Producer evidence | Transform L1 evidence plus a platform-issued SLSA VSA. Its assessment policy requires all steps to run on hosted infrastructure and the platform, not user-defined steps, to generate and sign provenance. |
| Receiver verification | Verify the VSA signature, configured verifier identity, assessment-policy digest, subjects, and every referenced transformation envelope; require verificationResult: PASSED and MAKOTO_TRANSFORM_LEVEL_2 or higher. The receiver's trust input explicitly lists the platform or assessor key allowed to make this claim. |
Transform L2 in the assurance model · Specification section 8.5
Identifiers
A verification summary names a track level with a stable identifier in verifiedLevels. A graph with no transformation has no Transform level and reports MAKOTO_TRANSFORM_LEVEL_UNEVALUATED, never a silent L1.
MAKOTO_ORIGIN_LEVEL_2
MAKOTO_TRANSFORM_LEVEL_2What a level does not establish
No track level is an allow or deny decision, and none establishes data-content correctness. Makoto cannot establish that a signer told the truth or that a source was correct (Section 8.2). See what Makoto does not cover and the correctness handoff.