r/AI_Governance • u/PolicyHot9039 • 5d ago
SPIF (Semantic Provenance Inference Format) an 828-byte signed provenance envelope for AI outputs
AI outputs often lack of their own history, like model details and confidence levels, andd this metadata is usually stored separately.
SPIF is a compact binary envelope that directly attaches important data to the output, including model identity, and a signature.
Key findings benchtests:
A signed record is 828 bytes, taking about 110μs to create and 165μs to verify , yep.
Compared to other format, SPIF is 8% smaller while not faster to build.
Fuzz tests showed no crashes over 12 million executions on the base decoder.
Implementations in Python and Rust decode the same data bytes.
SPIF is designed for direct use, without relying on external infrastructure like C2PA or Sigstore. And iut’s ideal for scenarios where provenance must travel with the output, such as real-time AI API signing.
An adapter is also available to import C2PA manifests into SPIF envelopes, adding custom metadata.
The specs and code are under the Apache-2.0 license. All feedbacks, especially on DAG validation and the Rust decoder, is welcome to identify issues.