@techreport{ietf-opsawg-yang-provenance-05, number = {draft-ietf-opsawg-yang-provenance-05}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-opsawg-yang-provenance/05/}, author = {Diego Lopez and Antonio Pastor and Alex Huang Feng and Ana Méndez Pérez and Henk Birkholz}, title = {{Applying COSE Signatures for YANG Data Provenance}}, pagetotal = 45, year = 2026, month = may, day = 29, abstract = {This document defines a mechanism based on CBOR Object Signing and Encryption (COSE) signatures to provide and verify the provenance of YANG data, so it is possible to verify the origin and integrity of a dataset, even when those data are going to be processed and/or applied in workflows where a crypto-enabled data transport directly from the original data source is not available. As the application of evidence-based OAM automation and the use of tools such as AI/ML grow, provenance validation becomes more relevant in all scenarios, in support of the assuring the origin and integrity of data. The use of compact signatures facilitates the inclusion of provenance strings in any YANG schema requiring them.}, }