EOSC-ENTRUST D20.1 Second Deployable Demonstrator of Digital Objects & Workflows

This deliverable (D20.1) presents the Second Deployable Demonstrator of Digital Objects & Workflows (hereafter, the Demonstrator) developed under WP20 - Workflow Processing. It builds on Year 1 outputs D19.1, which provided the initial demonstrator and architectural approach for using RO-Crates and workflow technologies in TREs. In Year 2, the Demonstrator has matured into a fully deployable, federated prototype and demonstrated its capacity to run a cross-TRE “data pooling” federated analysis between TRE-FX (UNOTT) and TRE-BSC.

The Year 2 focus has been on improving deployment realism while enabling Five Safes–compliant executions, strengthening provenance, and enhancing federated interoperability. Development efforts centred around:

1. Adopting Five Safe TES principles, enabling policy-aware task execution across TREs using a common GA4GH TES interface.

2. Deployment of the Demonstrator in two ENTRUST TREs, aligning execution semantics across sites.

3. A production-ready RO-Crate Validation Service, supporting SHACL-based validation.

4. Enhancements to WfExS and Five Safe TES tooling for secure secrets handling within TREs

5. Validation  of the Demonstrator in Driver use cases

Through these improvements, WP20 now provides a demonstrator capable of federated, provenance-rich, policy-aware execution, consistent with the Five Safes principles and usable by TREs with heterogeneous compute backends. The demonstrator provides a technical foundation for further alignment with WP18 (AAAI) on accountability capture, and integrates with ongoing UK efforts such as DARE UK TREvolution.