Definition
The signature binding a record to a named key holder at a point in time. An attestation carries the key-holder identifier, the algorithm, the signature, and when it was produced, so that authority that cannot be attributed to a key holder is distinguishable from authority nobody signed.
It matters because delegation otherwise becomes orphaned: capability exercises the authority and no one answers for it. An attestation older than the record's last transition covers a record that no longer exists, so re-attestation at renewal is part of the discipline rather than a courtesy.
Scale: Organizational · Phases: Design, Deployment, Audit · Measurability: Fully measurable · Maturity: Core concept
Adjacent terms
References
- STD-08 Delegation · Standard
- Authority grant schema · Schema