0.1.0 - ci-build

TrustAITransparencyIG, published by Selina Adlberger. This guide is not an authorized publication; it is the continuous build for version 0.1.0 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7Austria/AIST-TrustworthyAI-R5/ and changes regularly. See the Directory of published versions

Extension: LogIntegritySignature - Detailed Descriptions

Draft as of 2026-11-12

Definitions for the trust-ai-log-integrity extension.

See the documentation on how to interpret the contents of this table

0. Extension
Definition

Provides a digital signature and associated metadata to support verification of the integrity and origin of the AI execution audit record.


Optional Extension Element - found in all resources.

ShortTrust AI Log Integrity SignatureOptional Extensions Element
Control0..*
Is Modifierfalse
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
2. Extension.extension
Definition

An Extension


May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and managable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension.

ShortExtensionAdditional content defined by implementations
Comments

There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

Control0..0*
TypeExtension
Is Modifierfalse
Summaryfalse
Alternate Namesextensions, user content
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
SlicingThis element introduces a set of slices on Extension.extension. The slices are Unordered and Open, and can be differentiated using the following discriminators:
  • value @ url
4. Extension.url
Definition

Source of the definition for the extension code - a logical name or a URL.

Shortidentifies the meaning of the extension
Comments

The definition may point directly to a computable or human-readable definition of the extensibility codes, or it may be a logical URI as declared in some other specification. The definition SHALL be a URI for the Structure Definition defining the extension.

Control1..1
Typeuri
Is Modifierfalse
XML FormatIn the XML format, this property is represented as an attribute.
Summaryfalse
Fixed Value
{
  "url" : "http://example.org/fhir/trust-ai-transparency/StructureDefinition/trust-ai-log-integrity"
}
<url value="http://example.org/fhir/trust-ai-transparency/StructureDefinition/trust-ai-log-integrity"/>
6. Extension.value[x]
Definition

Value of extension - must be one of a constrained set of the data types (see Extensibility for a list).

ShortValue of extension
Control10..1
This element is affected by the following invariants: ext-1
TypeSignature, date, Meta, Address, Attachment, integer, Count, DataRequirement, Dosage, uuid, Identifier, RatioRange, Coding, SampledData, id, positiveInt, Distance, Availability, integer64, Period, Duration, canonical, Range, RelatedArtifact, base64Binary, UsageContext, Timing, decimal, ExtendedContactDetail, CodeableConcept, ParameterDefinition, dateTime, code, string, oid, instant, ContactPoint, HumanName, Money, markdown, Ratio, Age, Reference, TriggerDefinition, Quantity, uri, url, Annotation, ContactDetail, boolean, Expression, CodeableReference, unsignedInt, time
[x] NoteSeeChoice of Data Typesfor further information about how to use [x]
Is Modifierfalse
Summaryfalse
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
8. Extension.value[x].type
Definition

An indication of the reason that the entity signed this document. This may be explicitly included as part of the signature information and can be used when determining accountability for various actions concerning the document.

ShortIndication of the reason the entity signed the object(s)
Comments

Examples include attesting to: authorship, correct transcription, and witness of specific event. Also known as a "Commitment Type Indication".

Control10..*
BindingThe codes SHOULD be taken from SignatureTypeCodeshttp://hl7.org/fhir/ValueSet/signature-type|5.0.0
(preferred to http://hl7.org/fhir/ValueSet/signature-type|5.0.0)

An indication of the reason that an entity signed the object.

TypeCoding
Is Modifierfalse
Summarytrue
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
10. Extension.value[x].when
Definition

When the digital signature was signed.

ShortWhen the signature was created
Comments

This should agree with the information in the signature.

Control10..1
Typeinstant
Is Modifierfalse
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
Summarytrue
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
12. Extension.value[x].who
Definition

A reference to an application-usable description of the identity that signed (e.g. the signature used their private key).

ShortWho signed
Comments

This should agree with the information in the signature.

Control0..1
TypeReference(Device, Practitioner, PractitionerRole, RelatedPerson, Patient, Device, Organization)
Is Modifierfalse
Summarytrue
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
14. Extension.value[x].sigFormat
Definition

A mime type that indicates the technical format of the signature. Important mime types are application/signature+xml for X ML DigSig, application/jose for JWS, and image/* for a graphical image of a signature, etc.

ShortThe technical format of the signature
Control10..1
BindingThe codes SHALL be taken from MimeTypeshttp://hl7.org/fhir/ValueSet/mimetypes|5.0.0
(required to http://hl7.org/fhir/ValueSet/mimetypes|5.0.0)

BCP 13 (RFCs 2045, 2046, 2047, 4288, 4289 and 2049)

Typecode
Is Modifierfalse
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
Summaryfalse
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
16. Extension.value[x].data
Definition

The base64 encoding of the Signature content. When signature is not recorded electronically this element would be empty.

ShortThe actual signature content (XML DigSig. JWS, picture, etc.)
Comments

Where the signature type is an XML DigSig, the signed content is a FHIR Resource(s), the signature is of the XML form of the Resource(s) using XML-Signature (XMLDIG) "Detached Signature" form.

Control10..1
Typebase64Binary
Is Modifierfalse
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
Summaryfalse
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))

See the documentation on how to interpret the contents of this table

0. Extension
Definition

Provides a digital signature and associated metadata to support verification of the integrity and origin of the AI execution audit record.

ShortTrust AI Log Integrity Signature
2. Extension.extension
Control0..0
4. Extension.url
Fixed Value
{
  "url" : "http://example.org/fhir/trust-ai-transparency/StructureDefinition/trust-ai-log-integrity"
}
<url value="http://example.org/fhir/trust-ai-transparency/StructureDefinition/trust-ai-log-integrity"/>
6. Extension.value[x]
Control1..?
TypeSignature, date, Meta, Address, Attachment, integer, Count, DataRequirement, Dosage, uuid, Identifier, RatioRange, Coding, SampledData, id, positiveInt, Distance, Availability, integer64, Period, Duration, canonical, Range, RelatedArtifact, base64Binary, UsageContext, Timing, decimal, ExtendedContactDetail, CodeableConcept, ParameterDefinition, dateTime, code, string, oid, instant, ContactPoint, HumanName, Money, markdown, Ratio, Age, Reference, TriggerDefinition, Quantity, uri, url, Annotation, ContactDetail, boolean, Expression, CodeableReference, unsignedInt, time
[x] NoteSeeChoice of Data Typesfor further information about how to use [x]
8. Extension.value[x].type
Control1..?
10. Extension.value[x].when
Control1..?
12. Extension.value[x].who
TypeReference(Device)
14. Extension.value[x].sigFormat
Control1..?
16. Extension.value[x].data
Control1..?

See the documentation on how to interpret the contents of this table

0. Extension
Definition

Provides a digital signature and associated metadata to support verification of the integrity and origin of the AI execution audit record.

ShortTrust AI Log Integrity Signature
Control0..*
Is Modifierfalse
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
2. Extension.id
Definition

Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces.

ShortUnique id for inter-element referencing
Control0..1
This element is affected by the following invariants: ele-1
Typeid
Is Modifierfalse
XML FormatIn the XML format, this property is represented as an attribute.
Summaryfalse
4. Extension.extension
Definition

An Extension

ShortExtension
Control0..0
TypeExtension
Is Modifierfalse
Summaryfalse
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
SlicingThis element introduces a set of slices on Extension.extension. The slices are Unordered and Open, and can be differentiated using the following discriminators:
  • value @ url
6. Extension.url
Definition

Source of the definition for the extension code - a logical name or a URL.

Shortidentifies the meaning of the extension
Comments

The definition may point directly to a computable or human-readable definition of the extensibility codes, or it may be a logical URI as declared in some other specification. The definition SHALL be a URI for the Structure Definition defining the extension.

Control1..1
Typeuri
Is Modifierfalse
XML FormatIn the XML format, this property is represented as an attribute.
Summaryfalse
Fixed Value
{
  "url" : "http://example.org/fhir/trust-ai-transparency/StructureDefinition/trust-ai-log-integrity"
}
<url value="http://example.org/fhir/trust-ai-transparency/StructureDefinition/trust-ai-log-integrity"/>
8. Extension.value[x]
Definition

Value of extension - must be one of a constrained set of the data types (see Extensibility for a list).

ShortValue of extension
Control1..1
This element is affected by the following invariants: ext-1
TypeSignature
[x] NoteSeeChoice of Data Typesfor further information about how to use [x]
Is Modifierfalse
Summaryfalse
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
10. Extension.value[x].id
Definition

Unique id for the element within a resource (for internal references). This may be any string value that does not contain spaces.

ShortUnique id for inter-element referencing
Control0..1
This element is affected by the following invariants: ele-1
Typeid
Is Modifierfalse
XML FormatIn the XML format, this property is represented as an attribute.
Summaryfalse
12. Extension.value[x].extension
Definition

May be used to represent additional information that is not part of the basic definition of the element. To make the use of extensions safe and managable, there is a strict set of governance applied to the definition and use of extensions. Though any implementer can define an extension, there is a set of requirements that SHALL be met as part of the definition of the extension.

ShortAdditional content defined by implementations
Comments

There can be no stigma associated with the use of extensions by any application, project, or standard - regardless of the institution or jurisdiction that uses or defines the extensions. The use of extensions is what allows the FHIR specification to retain a core level of simplicity for everyone.

Control0..*
TypeExtension
Is Modifierfalse
Summaryfalse
Alternate Namesextensions, user content
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
ext-1: Must have either extensions or value[x], not both (extension.exists() != value.exists())
SlicingThis element introduces a set of slices on Extension.value[x].extension. The slices are Unordered and Open, and can be differentiated using the following discriminators:
  • value @ url
14. Extension.value[x].type
Definition

An indication of the reason that the entity signed this document. This may be explicitly included as part of the signature information and can be used when determining accountability for various actions concerning the document.

ShortIndication of the reason the entity signed the object(s)
Comments

Examples include attesting to: authorship, correct transcription, and witness of specific event. Also known as a "Commitment Type Indication".

Control1..*
BindingThe codes SHOULD be taken from SignatureTypeCodes
(preferred to http://hl7.org/fhir/ValueSet/signature-type|5.0.0)

An indication of the reason that an entity signed the object.

TypeCoding
Is Modifierfalse
Summarytrue
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
16. Extension.value[x].when
Definition

When the digital signature was signed.

ShortWhen the signature was created
Comments

This should agree with the information in the signature.

Control1..1
Typeinstant
Is Modifierfalse
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
Summarytrue
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
18. Extension.value[x].who
Definition

A reference to an application-usable description of the identity that signed (e.g. the signature used their private key).

ShortWho signed
Comments

This should agree with the information in the signature.

Control0..1
TypeReference(Device)
Is Modifierfalse
Summarytrue
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
20. Extension.value[x].onBehalfOf
Definition

A reference to an application-usable description of the identity that is represented by the signature.

ShortThe party represented
Comments

The party that can't sign. For example a child.

Control0..1
TypeReference(Practitioner, PractitionerRole, RelatedPerson, Patient, Device, Organization)
Is Modifierfalse
Summarytrue
Requirements

used when the signature is on behalf of a non-signer.

Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
22. Extension.value[x].targetFormat
Definition

A mime type that indicates the technical format of the target resources signed by the signature.

ShortThe technical format of the signed resources
Comments

"xml", "json" and "ttl" are allowed, which describe the simple encodings described in the specification (and imply appropriate bundle support). Otherwise, mime types are legal here.

Control0..1
BindingThe codes SHALL be taken from MimeTypes
(required to http://hl7.org/fhir/ValueSet/mimetypes|5.0.0)

BCP 13 (RFCs 2045, 2046, 2047, 4288, 4289 and 2049)

Typecode
Is Modifierfalse
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
Summaryfalse
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
24. Extension.value[x].sigFormat
Definition

A mime type that indicates the technical format of the signature. Important mime types are application/signature+xml for X ML DigSig, application/jose for JWS, and image/* for a graphical image of a signature, etc.

ShortThe technical format of the signature
Control1..1
BindingThe codes SHALL be taken from MimeTypes
(required to http://hl7.org/fhir/ValueSet/mimetypes|5.0.0)

BCP 13 (RFCs 2045, 2046, 2047, 4288, 4289 and 2049)

Typecode
Is Modifierfalse
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
Summaryfalse
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))
26. Extension.value[x].data
Definition

The base64 encoding of the Signature content. When signature is not recorded electronically this element would be empty.

ShortThe actual signature content (XML DigSig. JWS, picture, etc.)
Comments

Where the signature type is an XML DigSig, the signed content is a FHIR Resource(s), the signature is of the XML form of the Resource(s) using XML-Signature (XMLDIG) "Detached Signature" form.

Control1..1
Typebase64Binary
Is Modifierfalse
Primitive ValueThis primitive element may be present, or absent, or replaced by an extension
Summaryfalse
Invariantsele-1: All FHIR elements must have a @value or children (hasValue() or (children().count() > id.count()))