---
path: /studio/isis/provenance-tracking
surface: studio
domain: isis
auth: signed-in + studio entitlement (NOT AAA-gated)
source: apps/oshun/web/src/app/studio/isis/provenance-tracking/page.tsx
status: walked
last_walked:
  '2026-05-29 automated runtime walk (Playwright headless) — render, /v1 data
  (2xx), console/page-errors, expected content, screenshot verified; live
  screen-reader, touch, offline, and telemetry-delivery checks pending a manual
  AT pass. Evidence: WALKTHROUGH/results/runtime-sweep-2026-05-29.md; body
  re-derived 2026-06-03 from current source (lane-console architecture)'
---

# Isis Provenance Tracking

## Purpose

Admin §24.9 lane console that seals 3D output provenance bundles over the real
three-d-pipelines `buildThreeDProvenance` — binding the source 2D refs, the
registered pipeline-class hash, the model version, and the watermark token into
one SHA-256 bundle hash, and rejecting bundles whose watermark token diverged
through the post-process chain. All reads and seals flow through
`/v1/admin/isis/3d-provenance`; it is admin-scoped and fails closed.

## Entry points

- Sibling quick-action from `/studio/isis/output-manifest`
- Studio index (`/studio`)
- Direct URL / bookmark

## Layout regions

`page.tsx` mounts `<ShellLayout active="studio">` (no breadcrumb panel) and three
panels: the workspace, the Route Map, and sibling quick-actions.

- **Header**: shell header
- **Workspace panel** (`data-isis-provenance-tracking-workspace`):
  - `<h1>` (`WorkspaceHeading`) "Isis Provenance Tracking Workspace"
  - Summary paragraph (`data-provenance-summary`)
  - Registered pipeline classes list (`data-provenance-classes`, each
    `data-provenance-class=<classId>`)
  - "Seal a provenance bundle" form (`data-provenance-form`)
  - Sealed-bundles list (`data-provenance-bundles`, each
    `data-provenance-bundle`); empty state `data-provenance-bundles-empty`
- **Route Map panel** (`data-isis-provenance-tracking-route-map`): `<h2>Route
  Map</h2>` over `STUDIO_ISIS_PROVENANCE_TRACKING_ROUTE_MAP` (5 entries)
- **Sibling quick-actions panel**: `/studio/isis/output-manifest`, `/studio`

## States

- [ ] **Loading** — `data-provenance-loading`
- [ ] **Unauthorized** — 401/403 admin-scope fail-closed;
      `data-provenance-unauthorized`
- [ ] **Error** — non-OK or malformed response; `data-provenance-error`
- [ ] **Ready (form)** — response present; pipeline classes + seal form + bundles
      render
- [ ] **Result** — after a seal POST, `data-provenance-result`
      (`data-provenance-status`); a watermark token that diverged through the
      chain is rejected (Seal failed)

## Interactions

### Seal a provenance bundle (`data-provenance-form`)

- [ ] **Output id** (`data-provenance-outputid`, text input)
- [ ] **Provider** (`data-provenance-provider`, `<select>`)
- [ ] **Mode** (`data-provenance-mode`, `<select>`)
- [ ] **Pipeline class** (`data-provenance-classid`, `<select>` from the
      registered pipeline classes)
- [ ] **Source 2D asset ids (comma-separated)** (`data-provenance-sources`, text
      input)
- [ ] **Model version** (`data-provenance-modelversion`, text input)
- [ ] **Watermark token** (`data-provenance-watermark`, text input)
- [ ] **Watermark after each step (comma-separated)** (`data-provenance-chain`,
      text input)
- [ ] **Seal bundle** (`data-provenance-seal`, button; "Sealing…" while in
      flight) — disabled until valid; `POST /v1/admin/isis/3d-provenance`

### Route Map

- [ ] **Route-map articles** ×5

### Sibling quick-actions

- [ ] **Open Isis Output Manifest workspace** → `/studio/isis/output-manifest`
- [ ] **Back to Studio workspace index** → `/studio`

## Data & contracts

- **Reads**: `GET /v1/admin/isis/3d-provenance` (registered pipeline classes +
  sealed bundles)
- **Writes**: `POST /v1/admin/isis/3d-provenance` (seal a provenance bundle via
  `buildThreeDProvenance`; returns the SHA-256 bundle hash or a rejection when the
  watermark token diverged)
- **Realtime**: none
- **Caching**: client fetch on mount, `cache: 'no-store'`, `buildBffAuthHeaders()`
- **Auth/role check**: admin-scoped, fail-closed (401/403); route gated on
  signed-in + studio entitlement
- **Component sources**:
  - `apps/oshun/web/src/components/studio/StudioIsisProvenanceTrackingWorkspace.tsx`
  - `apps/oshun/web/src/components/studio/StudioIsisProvenanceTrackingRouteMap.ts`

## Cross-references

- Studio overview: [`../../studio-overview.md`](../../studio-overview.md)
- Sibling routes:
  - [`studio-isis-output-manifest.md`](./studio-isis-output-manifest.md)
  - [`studio-isis-lineage-graph.md`](./studio-isis-lineage-graph.md)
  - [`studio-isis-topology-verification.md`](./studio-isis-topology-verification.md)

## Open questions / known gaps

- [ ] No breadcrumb on this route — navigation is via sibling quick-actions
- [ ] The seal binds provenance at the bundle level; confirm where the resulting
      bundle hash is persisted and surfaced to downstream consumers (e.g. the
      `GeneratedArtifactProvenanceInspector` in the Output Registry / Outputs hubs)