Is there an attribute that can show which process created a file?
Darwin is open source. I'm guessing you'll need to modify OS level things, a kernel extension, etc. and add this ability. 

Or you could modify the dynamic-view tools you know (fs_usage and/or lsof), have them check if a file is being created, and append the process chain that created it into the Spotlight comment, etc.