L3 is defined per track.
Makoto has two producer tracks, Origin and Transform, and each defines its own L3. L3 is the strongest producer control in each track: enforced capture policy for Origin, hardened isolated execution for Transform.
MAKOTO_ORIGIN_LEVEL_3
MAKOTO_TRANSFORM_LEVEL_3How to read a level. A track level says how origin or transformation evidence was produced (Section 8.3). Levels are cumulative within a track, and the level for a final artifact is the minimum qualified level among all reachable statements in that track. What a receiver established about one handoff is a separate verified property.
L1 in each trackL2 in each trackL3 in each trackAssurance modelSpecification overview
Origin L3 · Policy-controlled capture
| User benefit | A consumer can tell that required source identifiers, capture timing, approvals, and content controls were enforced at acquisition rather than documented later. |
|---|---|
| Producer evidence | Origin L2 evidence plus a digest-pinned assessment policy and contemporaneous control evidence showing that the capture platform continuously enforced the organization's declared controls. The standard reference profile is one such control set. |
| Receiver verification | Perform every Origin L2 check; require MAKOTO_ORIGIN_LEVEL_3; require the VSA policy digest to equal the consumer's expected L3 assessment policy; and require every profile and control-evidence digest named by that policy to be present and passing. A missing, not_checked, or failed required control denies L3. |
Origin L3 in the assurance model · Specification section 8.4
Transform L3 · Hardened execution
| User benefit | A consumer gets strong evidence that another tenant, a prior run, compromised upload credentials, or user-defined pipeline code could not silently rewrite the execution evidence. |
|---|---|
| Producer evidence | Transform L2 evidence plus a qualification showing ephemeral and isolated execution; no cross-run memory, filesystem, service, or cache influence; no access by user steps to provenance signing material; and capture of every permitted external influence as an input or parameter. |
| Receiver verification | Perform every Transform L2 check; require MAKOTO_TRANSFORM_LEVEL_3; pin the L3 assessment policy and verifier key; and verify every qualification evidence digest named by the VSA. Raw hardware quote bytes alone never satisfy L3. |
Transform L3 in the assurance model · Specification section 8.5
Identifiers
A verification summary names a track level with a stable identifier in verifiedLevels. A graph with no transformation has no Transform level and reports MAKOTO_TRANSFORM_LEVEL_UNEVALUATED, never a silent L1.
MAKOTO_ORIGIN_LEVEL_3
MAKOTO_TRANSFORM_LEVEL_3What a level does not establish
No track level is an allow or deny decision, and none establishes data-content correctness. Makoto cannot establish that a signer told the truth or that a source was correct (Section 8.2). See what Makoto does not cover and the correctness handoff.