Makoto
Menu
Machine-readable resources

Every hosted schema, with the bytes it is pinned by.

These are the resources a verifier resolves. Each one is served at a stable URL, digested in the catalog, and reproduced below exactly as published, so a reader can compare what a page claims against what the resolver will actually fetch.

Specification overviewNormative textCatalogCurrent release pointer

Each resource has a field reference: every property and definition with its type, whether it is required, its constraints, the rules the specification states for it, and a value read from a real document that validates. The raw catalog.json lists every resource with its digest.

Pin versioned URLs. /schema/latest.json is a convenience pointer to the current catalog for people. It is not an immutable protocol identifier and changes when a new version is published; cite the versioned resource and its digest instead.

Resource index

ResourceWhat it constrains
bundle.schema.jsonThe on-disk bundle layout a sender transfers: statements, attestations, schema closure, and final artifacts. Published bytes
catalog.jsonThe index of hosted resources and their digests. Not a schema itself; the document a resolver pins against. Published bytes
catalog.schema.jsonThe shape of that catalog, so a resolver can validate an index before trusting any entry in it. Published bytes
dataset-manifest.schema.jsonA partitioned dataset described as one subject: member parts, their digests, and the manifest that binds them. Published bytes
envelope.schema.jsonThe DSSE envelope. Signatures authenticate exact payload bytes and nothing about authorization. Published bytes
handoff.schema.jsonThe completeness anchor: roots, heads, statement set, required profiles, final artifacts, and named recipients. Published bytes
origin.schema.jsonThe origin predicate. Source claims, event identity and time, and the exact subjects first observed. Published bytes
profile-dialect.schema.jsonThe restricted JSON Schema dialect a private profile may use, bounded so resolution stays offline and terminating. Published bytes
profile-reference.schema.jsonA profile reference: the schema root URI plus its complete digest-pinned closure. Published bytes
statement.schema.jsonThe common in-toto statement wrapper every Makoto predicate is carried in. Published bytes
transform.schema.jsonThe transformation predicate. Operation metadata, exact predecessors, input artifacts, and output subjects. Published bytes
trust-policy.schema.jsonThe receiver-owned policy: which keys may make which claims, under which thresholds and resource limits. Published bytes
verification-report.schema.jsonThe report contract. Separate outcomes per check, never a single collapsed verdict. Published bytes

The resources

Digests are the catalog's own values. A resolver pins these bytes; it does not trust a live lookup.

bundle.schema.json#

The on-disk bundle layout a sender transfers: statements, attestations, schema closure, and final artifacts.

Identifier
https://usemakoto.dev/schema/v0.2/bundle.schema.json
Digest
sha256:2a6ca7b341abcbc0995369e5bf338e95f531cfaaa417715906da8169e5f829c8
Raw
/schema/v0.2/bundle.schema.json
Reference
Every field, with types, rules, and real values
Read the document (2,275 bytes)
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://usemakoto.dev/schema/v0.2/bundle.schema.json",
  "title": "Makoto v0.2 Bundle Index",
  "type": "object",
  "required": ["version", "manifest", "attestations", "artifacts"],
  "properties": {
    "version": { "const": "0.2" },
    "manifest": { "$ref": "#/$defs/path" },
    "attestations": {
      "type": "array",
      "items": { "$ref": "#/$defs/attestation" }
    },
    "artifacts": {
      "type": "array",
      "items": { "$ref": "#/$defs/artifact" }
    },
    "datasetEntries": {
      "type": "array",
      "items": { "$ref": "#/$defs/datasetEntry" }
    },
    "schemaCatalog": { "$ref": "#/$defs/path" }
  },
  "$defs": {
    "digest": {
      "type": "object",
      "required": ["sha256"],
      "properties": { "sha256": { "type": "string", "minLength": 64, "maxLength": 64 } },
      "additionalProperties": false
    },
    "path": {
      "type": "string",
      "minLength": 1,
      "maxLength": 1024
    },
    "attestation": {
      "type": "object",
      "required": ["statementDigest", "path"],
      "properties": {
        "statementDigest": { "$ref": "#/$defs/digest" },
        "path": { "$ref": "#/$defs/path" }
      },
      "additionalProperties": false
    },
    "artifact": {
      "type": "object",
      "required": ["statementDigest", "subjectName", "digest", "path"],
      "properties": {
        "statementDigest": { "$ref": "#/$defs/digest" },
        "subjectName": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "digest": { "$ref": "#/$defs/digest" },
        "path": { "$ref": "#/$defs/path" }
      },
      "additionalProperties": false
    },
    "datasetEntry": {
      "type": "object",
      "required": ["manifestStatementDigest", "manifestSubjectName", "entryName", "digest", "path"],
      "properties": {
        "manifestStatementDigest": { "$ref": "#/$defs/digest" },
        "manifestSubjectName": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "entryName": { "type": "string", "minLength": 1, "maxLength": 1024 },
        "digest": { "$ref": "#/$defs/digest" },
        "path": { "$ref": "#/$defs/path" }
      },
      "additionalProperties": false
    }
  },
  "additionalProperties": false
}

The published bytes, unmodified.

catalog.json#

The index of hosted resources and their digests. Not a schema itself; the document a resolver pins against.

Identifier
https://usemakoto.dev/schema/v0.2/catalog.json
Digest
sha256:b68cb2cae64cfcd2a5021a725505ccbaa80dfaa053322ce276af9c6650860304
Raw
/schema/v0.2/catalog.json
Reference
Every field, with types, rules, and real values
Read the document (2,274 bytes)
{
  "resources": [
    {
      "digest": {
        "sha256": "2a6ca7b341abcbc0995369e5bf338e95f531cfaaa417715906da8169e5f829c8"
      },
      "id": "https://usemakoto.dev/schema/v0.2/bundle.schema.json",
      "path": "bundle.schema.json"
    },
    {
      "digest": {
        "sha256": "30b478401528256f823a27418d1316ca27b1ccb8ecaf45d1afa2edbbcb1fd797"
      },
      "id": "https://usemakoto.dev/schema/v0.2/catalog.schema.json",
      "path": "catalog.schema.json"
    },
    {
      "digest": {
        "sha256": "5a0498a2911bbe3029c9dbcbcbbbb2c2ce683d280b796a5f09ad271d8e9b034f"
      },
      "id": "https://usemakoto.dev/schema/v0.2/dataset-manifest.schema.json",
      "path": "dataset-manifest.schema.json"
    },
    {
      "digest": {
        "sha256": "49de7cf790e3a0c7bd3b83ee7322164d2a5a829648fe1407c79c07f4d74a0f66"
      },
      "id": "https://usemakoto.dev/schema/v0.2/envelope.schema.json",
      "path": "envelope.schema.json"
    },
    {
      "digest": {
        "sha256": "762746d6636a9521382c58d6861f7ac87fd11fea990845d70389b68b4977f0d6"
      },
      "id": "https://usemakoto.dev/schema/v0.2/handoff.schema.json",
      "path": "handoff.schema.json"
    },
    {
      "digest": {
        "sha256": "3f56d68d758bb72c2bcbabd922e1ac7d6eb6dd9c3e6baa78a9f104cf0a64badc"
      },
      "id": "https://usemakoto.dev/schema/v0.2/origin.schema.json",
      "path": "origin.schema.json"
    },
    {
      "digest": {
        "sha256": "563ff211e383732113d7455bf5c6bf07d1a87401dd41e9db68bdd5e99b433fb8"
      },
      "id": "https://usemakoto.dev/schema/v0.2/profile-dialect.schema.json",
      "path": "profile-dialect.schema.json"
    },
    {
      "digest": {
        "sha256": "abe12266ae10b57d95d8fd14489c6cdaedd4ed67ef8f7a44db7b18249832665c"
      },
      "id": "https://usemakoto.dev/schema/v0.2/profile-reference.schema.json",
      "path": "profile-reference.schema.json"
    },
    {
      "digest": {
        "sha256": "dbe4487be9b44521e4fa9b63900992304b9fb4e4985b7899cb23af6916efe5e0"
      },
      "id": "https://usemakoto.dev/schema/v0.2/statement.schema.json",
      "path": "statement.schema.json"
    },
    {
      "digest": {
        "sha256": "8b8dad3361327578c79a5b69912fe77e747d4ac6d1c6b234327f1a56621b1a23"
      },
      "id": "https://usemakoto.dev/schema/v0.2/transform.schema.json",
      "path": "transform.schema.json"
    },
    {
      "digest": {
        "sha256": "5f18360abc901e175a16ec3a0ed1a4fa47626b34af08d64f6adb33c78fe9d6ac"
      },
      "id": "https://usemakoto.dev/schema/v0.2/trust-policy.schema.json",
      "path": "trust-policy.schema.json"
    },
    {
      "digest": {
        "sha256": "f1d47e7c8273deff5a65a6901d4f0b00f2eecaf7da5d4bc29055508a8877c3ae"
      },
      "id": "https://usemakoto.dev/schema/v0.2/verification-report.schema.json",
      "path": "verification-report.schema.json"
    }
  ],
  "version": "0.2"
}

Formatted for reading. The digested bytes are canonical single-line JSON; fetch the raw URL to compare them.

catalog.schema.json#

The shape of that catalog, so a resolver can validate an index before trusting any entry in it.

Identifier
https://usemakoto.dev/schema/v0.2/catalog.schema.json
Digest
sha256:30b478401528256f823a27418d1316ca27b1ccb8ecaf45d1afa2edbbcb1fd797
Raw
/schema/v0.2/catalog.schema.json
Reference
Every field, with types, rules, and real values
Read the document (1,049 bytes)
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://usemakoto.dev/schema/v0.2/catalog.schema.json",
  "title": "Makoto v0.2 Schema Catalog",
  "type": "object",
  "required": ["version", "resources"],
  "properties": {
    "version": { "const": "0.2" },
    "resources": {
      "type": "array",
      "items": { "$ref": "#/$defs/resource" }
    }
  },
  "$defs": {
    "digest": {
      "type": "object",
      "required": ["sha256"],
      "properties": { "sha256": { "type": "string", "minLength": 64, "maxLength": 64 } },
      "additionalProperties": false
    },
    "path": {
      "type": "string",
      "minLength": 1,
      "maxLength": 1024
    },
    "resource": {
      "type": "object",
      "required": ["id", "digest", "path"],
      "properties": {
        "id": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "digest": { "$ref": "#/$defs/digest" },
        "path": { "$ref": "#/$defs/path" }
      },
      "additionalProperties": false
    }
  },
  "additionalProperties": false
}

The published bytes, unmodified.

dataset-manifest.schema.json#

A partitioned dataset described as one subject: member parts, their digests, and the manifest that binds them.

Identifier
https://usemakoto.dev/schema/v0.2/dataset-manifest.schema.json
Digest
sha256:5a0498a2911bbe3029c9dbcbcbbbb2c2ce683d280b796a5f09ad271d8e9b034f
Raw
/schema/v0.2/dataset-manifest.schema.json
Reference
Every field, with types, rules, and real values
Read the document (1,182 bytes)
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://usemakoto.dev/schema/v0.2/dataset-manifest.schema.json",
  "title": "Makoto v0.2 Dataset Manifest",
  "type": "object",
  "required": ["version", "entries"],
  "properties": {
    "version": { "const": "0.2" },
    "entries": {
      "type": "array",
      "minItems": 1,
      "items": { "$ref": "#/$defs/entry" }
    }
  },
  "$defs": {
    "digest": {
      "type": "object",
      "required": ["sha256"],
      "properties": { "sha256": { "type": "string", "minLength": 64, "maxLength": 64 } },
      "additionalProperties": false
    },
    "logicalPath": {
      "type": "string",
      "minLength": 1,
      "maxLength": 1024
    },
    "entry": {
      "type": "object",
      "required": ["name", "digest"],
      "properties": {
        "name": { "$ref": "#/$defs/logicalPath" },
        "digest": { "$ref": "#/$defs/digest" },
        "size": { "type": "integer", "minimum": 0, "maximum": 9223372036854775807 },
        "mediaType": {
          "type": "string",
          "maxLength": 255
        }
      },
      "additionalProperties": false
    }
  },
  "additionalProperties": false
}

The published bytes, unmodified.

envelope.schema.json#

The DSSE envelope. Signatures authenticate exact payload bytes and nothing about authorization.

Identifier
https://usemakoto.dev/schema/v0.2/envelope.schema.json
Digest
sha256:49de7cf790e3a0c7bd3b83ee7322164d2a5a829648fe1407c79c07f4d74a0f66
Raw
/schema/v0.2/envelope.schema.json
Reference
Every field, with types, rules, and real values
Read the document (943 bytes)
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://usemakoto.dev/schema/v0.2/envelope.schema.json",
  "title": "Makoto v0.2 DSSE Envelope",
  "type": "object",
  "required": ["payloadType", "payload", "signatures"],
  "properties": {
    "payloadType": {
      "type": "string",
      "minLength": 3,
      "maxLength": 255
    },
    "payload": { "type": "string" },
    "signatures": {
      "type": "array",
      "minItems": 1,
      "items": { "$ref": "#/$defs/signature" }
    }
  },
  "$defs": {
    "signature": {
      "type": "object",
      "required": ["keyid", "sig"],
      "properties": {
        "keyid": {
          "type": "string",
          "minLength": 71,
          "maxLength": 71
        },
        "sig": {
          "type": "string",
          "minLength": 88,
          "maxLength": 88
        }
      },
      "additionalProperties": false
    }
  },
  "additionalProperties": false
}

The published bytes, unmodified.

handoff.schema.json#

The completeness anchor: roots, heads, statement set, required profiles, final artifacts, and named recipients.

Identifier
https://usemakoto.dev/schema/v0.2/handoff.schema.json
Digest
sha256:762746d6636a9521382c58d6861f7ac87fd11fea990845d70389b68b4977f0d6
Raw
/schema/v0.2/handoff.schema.json
Reference
Every field, with types, rules, and real values
Read the document (2,672 bytes)
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://usemakoto.dev/schema/v0.2/handoff.schema.json",
  "title": "Makoto v0.2 Handoff Manifest",
  "type": "object",
  "required": ["version", "bundleId", "issuedAt", "roots", "heads", "statements", "artifacts", "requiredProfiles"],
  "properties": {
    "version": { "const": "0.2" },
    "bundleId": { "type": "string", "minLength": 1, "maxLength": 4096 },
    "issuedAt": { "$ref": "#/$defs/timestamp" },
    "recipient": { "$ref": "#/$defs/audience" },
    "roots": { "$ref": "#/$defs/nonemptyDigests" },
    "heads": { "$ref": "#/$defs/nonemptyDigests" },
    "statements": { "$ref": "#/$defs/nonemptyDigests" },
    "artifacts": {
      "type": "array",
      "minItems": 1,
      "items": { "$ref": "#/$defs/artifact" }
    },
    "requiredProfiles": {
      "type": "array",
      "items": { "$ref": "#/$defs/requiredProfile" }
    },
    "nonce": { "$ref": "#/$defs/audience" }
  },
  "$defs": {
    "digest": {
      "type": "object",
      "required": ["sha256"],
      "properties": { "sha256": { "type": "string", "minLength": 64, "maxLength": 64 } },
      "additionalProperties": false
    },
    "timestamp": {
      "type": "string",
      "minLength": 20,
      "maxLength": 30
    },
    "audience": {
      "type": "string",
      "minLength": 1,
      "maxLength": 4096
    },
    "mediaType": {
      "type": "string",
      "maxLength": 255
    },
    "nonemptyDigests": {
      "type": "array",
      "minItems": 1,
      "items": { "$ref": "#/$defs/digest" }
    },
    "artifact": {
      "type": "object",
      "required": ["name", "digest", "head"],
      "properties": {
        "name": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "digest": { "$ref": "#/$defs/digest" },
        "mediaType": { "$ref": "#/$defs/mediaType" },
        "head": { "$ref": "#/$defs/digest" }
      },
      "additionalProperties": false
    },
    "requiredProfile": {
      "type": "object",
      "required": ["head", "id", "digest", "closureDigest", "target", "subjectName", "mediaType", "scope"],
      "properties": {
        "head": { "$ref": "#/$defs/digest" },
        "id": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "digest": { "$ref": "#/$defs/digest" },
        "closureDigest": { "$ref": "#/$defs/digest" },
        "target": { "const": "artifact" },
        "subjectName": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "mediaType": { "$ref": "#/$defs/mediaType" },
        "scope": { "const": "eachMatchingFinalArtifact" }
      },
      "additionalProperties": false
    }
  },
  "additionalProperties": false
}

The published bytes, unmodified.

origin.schema.json#

The origin predicate. Source claims, event identity and time, and the exact subjects first observed.

Identifier
https://usemakoto.dev/schema/v0.2/origin.schema.json
Digest
sha256:3f56d68d758bb72c2bcbabd922e1ac7d6eb6dd9c3e6baa78a9f104cf0a64badc
Raw
/schema/v0.2/origin.schema.json
Reference
Every field, with types, rules, and real values
Read the document (1,643 bytes)
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://usemakoto.dev/schema/v0.2/origin.schema.json",
  "title": "Makoto v0.2 Origin Predicate",
  "type": "object",
  "required": ["schemaVersion", "event", "source"],
  "properties": {
    "schemaVersion": { "const": "0.2" },
    "event": { "$ref": "#/$defs/event" },
    "source": { "$ref": "#/$defs/source" },
    "profiles": {
      "type": "array",
      "items": { "$ref": "https://usemakoto.dev/schema/v0.2/profile-reference.schema.json" }
    },
    "extensions": { "$ref": "#/$defs/extensions" }
  },
  "$defs": {
    "timestamp": {
      "type": "string",
      "minLength": 20,
      "maxLength": 30
    },
    "event": {
      "type": "object",
      "required": ["id", "occurredAt"],
      "properties": {
        "id": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "occurredAt": { "$ref": "#/$defs/timestamp" }
      },
      "additionalProperties": false
    },
    "source": {
      "type": "object",
      "required": ["kind"],
      "properties": {
        "kind": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "uri": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "name": { "type": "string", "maxLength": 4096 },
        "mediaType": {
          "type": "string",
          "maxLength": 255
        },
        "retrievedAt": { "$ref": "#/$defs/timestamp" },
        "version": { "type": "string", "maxLength": 4096 }
      },
      "additionalProperties": false
    },
    "extensions": {
      "type": "object",
      "additionalProperties": true
    }
  },
  "additionalProperties": false
}

The published bytes, unmodified.

profile-dialect.schema.json#

The restricted JSON Schema dialect a private profile may use, bounded so resolution stays offline and terminating.

Identifier
https://usemakoto.dev/schema/v0.2/profile-dialect.schema.json
Digest
sha256:563ff211e383732113d7455bf5c6bf07d1a87401dd41e9db68bdd5e99b433fb8
Raw
/schema/v0.2/profile-dialect.schema.json
Reference
Every field, with types, rules, and real values
Read the document (5,319 bytes)
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://usemakoto.dev/schema/v0.2/profile-dialect.schema.json",
  "$vocabulary": {
    "https://json-schema.org/draft/2020-12/vocab/core": true,
    "https://json-schema.org/draft/2020-12/vocab/applicator": true,
    "https://json-schema.org/draft/2020-12/vocab/validation": true,
    "https://json-schema.org/draft/2020-12/vocab/meta-data": true,
    "https://json-schema.org/draft/2020-12/vocab/format-annotation": true,
    "https://json-schema.org/draft/2020-12/vocab/content": true,
    "https://json-schema.org/draft/2020-12/vocab/unevaluated": true,
    "https://usemakoto.dev/vocab/v0.2/bounded-pattern": true
  },
  "$dynamicAnchor": "meta",
  "title": "Makoto v0.2 Organizational Profile Dialect",
  "type": "object",
  "required": ["$schema", "$id"],
  "allOf": [{ "$ref": "#/$defs/schemaObject" }],
  "$defs": {
    "nonnegativeInteger": { "type": "integer", "minimum": 0 },
    "schemaObject": {
      "type": "object",
      "properties": {
        "$schema": {
          "const": "https://usemakoto.dev/schema/v0.2/profile-dialect.schema.json"
        },
        "$id": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "$comment": { "type": "string" },
        "$ref": { "type": "string" },
        "$defs": { "$ref": "#/$defs/schemaMap" },
        "$anchor": {
          "type": "string",
          "pattern": "^[A-Za-z_][-A-Za-z0-9._]*$"
        },
        "type": {
          "oneOf": [
            {
              "enum": ["null", "boolean", "object", "array", "number", "string", "integer"]
            },
            {
              "type": "array",
              "minItems": 1,
              "uniqueItems": true,
              "items": {
                "enum": ["null", "boolean", "object", "array", "number", "string", "integer"]
              }
            }
          ]
        },
        "enum": { "type": "array", "minItems": 1 },
        "const": true,
        "multipleOf": { "type": "number", "exclusiveMinimum": 0 },
        "maximum": { "type": "number" },
        "exclusiveMaximum": { "type": "number" },
        "minimum": { "type": "number" },
        "exclusiveMinimum": { "type": "number" },
        "maxLength": { "$ref": "#/$defs/nonnegativeInteger" },
        "minLength": { "$ref": "#/$defs/nonnegativeInteger" },
        "makotoPattern": { "type": "string", "maxLength": 65536 },
        "maxItems": { "$ref": "#/$defs/nonnegativeInteger" },
        "minItems": { "$ref": "#/$defs/nonnegativeInteger" },
        "uniqueItems": { "type": "boolean" },
        "maxContains": { "$ref": "#/$defs/nonnegativeInteger" },
        "minContains": { "$ref": "#/$defs/nonnegativeInteger" },
        "maxProperties": { "$ref": "#/$defs/nonnegativeInteger" },
        "minProperties": { "$ref": "#/$defs/nonnegativeInteger" },
        "required": {
          "type": "array",
          "items": { "type": "string" },
          "uniqueItems": true
        },
        "dependentRequired": {
          "type": "object",
          "additionalProperties": {
            "type": "array",
            "items": { "type": "string" },
            "uniqueItems": true
          }
        },
        "allOf": { "$ref": "#/$defs/schemaArray" },
        "anyOf": { "$ref": "#/$defs/schemaArray" },
        "oneOf": { "$ref": "#/$defs/schemaArray" },
        "not": { "$ref": "#/$defs/nestedSchema" },
        "if": { "$ref": "#/$defs/nestedSchema" },
        "then": { "$ref": "#/$defs/nestedSchema" },
        "else": { "$ref": "#/$defs/nestedSchema" },
        "properties": { "$ref": "#/$defs/schemaMap" },
        "additionalProperties": { "$ref": "#/$defs/nestedSchema" },
        "unevaluatedProperties": { "$ref": "#/$defs/nestedSchema" },
        "propertyNames": { "$ref": "#/$defs/nestedSchema" },
        "dependentSchemas": { "$ref": "#/$defs/schemaMap" },
        "prefixItems": { "$ref": "#/$defs/schemaArray" },
        "items": { "$ref": "#/$defs/nestedSchema" },
        "contains": { "$ref": "#/$defs/nestedSchema" },
        "unevaluatedItems": { "$ref": "#/$defs/nestedSchema" },
        "title": { "type": "string" },
        "description": { "type": "string" },
        "default": true,
        "deprecated": { "type": "boolean" },
        "readOnly": { "type": "boolean" },
        "writeOnly": { "type": "boolean" },
        "examples": { "type": "array" },
        "contentEncoding": { "type": "string" },
        "contentMediaType": { "type": "string" },
        "contentSchema": { "$ref": "#/$defs/nestedSchema" },
        "format": { "type": "string" }
      },
      "additionalProperties": false
    },
    "nestedSchema": {
      "oneOf": [
        { "type": "boolean" },
        {
          "allOf": [
            { "$ref": "#/$defs/schemaObject" },
            {
              "not": {
                "anyOf": [
                  { "required": ["$schema"] },
                  { "required": ["$id"] },
                  { "required": ["$vocabulary"] }
                ]
              }
            }
          ]
        }
      ]
    },
    "schemaArray": {
      "type": "array",
      "minItems": 1,
      "items": { "$ref": "#/$defs/nestedSchema" }
    },
    "schemaMap": {
      "type": "object",
      "additionalProperties": { "$ref": "#/$defs/nestedSchema" }
    }
  }
}

The published bytes, unmodified.

profile-reference.schema.json#

A profile reference: the schema root URI plus its complete digest-pinned closure.

Identifier
https://usemakoto.dev/schema/v0.2/profile-reference.schema.json
Digest
sha256:abe12266ae10b57d95d8fd14489c6cdaedd4ed67ef8f7a44db7b18249832665c
Raw
/schema/v0.2/profile-reference.schema.json
Reference
Every field, with types, rules, and real values
Read the document (1,854 bytes)
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://usemakoto.dev/schema/v0.2/profile-reference.schema.json",
  "title": "Makoto v0.2 Profile Reference",
  "$ref": "#/$defs/profileReference",
  "$defs": {
    "digest": {
      "type": "object",
      "required": ["sha256"],
      "properties": {
        "sha256": { "type": "string", "minLength": 64, "maxLength": 64 }
      },
      "additionalProperties": false
    },
    "resource": {
      "type": "object",
      "required": ["id", "digest"],
      "properties": {
        "id": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "digest": { "$ref": "#/$defs/digest" }
      },
      "additionalProperties": false
    },
    "profileReference": {
      "type": "object",
      "required": ["id", "digest", "closureDigest", "target", "critical", "resources"],
      "properties": {
        "id": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "digest": { "$ref": "#/$defs/digest" },
        "closureDigest": { "$ref": "#/$defs/digest" },
        "target": { "enum": ["statement", "predicate", "artifact"] },
        "subjectName": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "mediaType": {
          "type": "string",
          "maxLength": 255
        },
        "critical": { "type": "boolean" },
        "resources": {
          "type": "array",
          "items": { "$ref": "#/$defs/resource" }
        }
      },
      "allOf": [
        {
          "if": { "properties": { "target": { "const": "artifact" } }, "required": ["target"] },
          "then": { "required": ["subjectName", "mediaType"] },
          "else": {
            "properties": {
              "subjectName": false,
              "mediaType": false
            }
          }
        }
      ],
      "additionalProperties": false
    }
  }
}

The published bytes, unmodified.

statement.schema.json#

The common in-toto statement wrapper every Makoto predicate is carried in.

Identifier
https://usemakoto.dev/schema/v0.2/statement.schema.json
Digest
sha256:dbe4487be9b44521e4fa9b63900992304b9fb4e4985b7899cb23af6916efe5e0
Raw
/schema/v0.2/statement.schema.json
Reference
Every field, with types, rules, and real values
Read the document (1,604 bytes)
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://usemakoto.dev/schema/v0.2/statement.schema.json",
  "title": "Makoto v0.2 in-toto Statement",
  "type": "object",
  "required": ["_type", "subject", "predicateType", "predicate"],
  "properties": {
    "_type": { "const": "https://in-toto.io/Statement/v1" },
    "subject": {
      "type": "array",
      "minItems": 1,
      "items": { "$ref": "#/$defs/subject" }
    },
    "predicateType": { "type": "string", "minLength": 1, "maxLength": 4096 },
    "predicate": { "type": "object" }
  },
  "allOf": [
    {
      "if": { "properties": { "predicateType": { "const": "https://usemakoto.dev/predicate/v0.2/origin" } } },
      "then": { "properties": { "predicate": { "$ref": "https://usemakoto.dev/schema/v0.2/origin.schema.json" } } }
    },
    {
      "if": { "properties": { "predicateType": { "const": "https://usemakoto.dev/predicate/v0.2/transform" } } },
      "then": { "properties": { "predicate": { "$ref": "https://usemakoto.dev/schema/v0.2/transform.schema.json" } } }
    }
  ],
  "$defs": {
    "digest": {
      "type": "object",
      "required": ["sha256"],
      "properties": { "sha256": { "type": "string", "minLength": 64, "maxLength": 64 } },
      "additionalProperties": false
    },
    "subject": {
      "type": "object",
      "required": ["name", "digest"],
      "properties": {
        "name": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "digest": { "$ref": "#/$defs/digest" }
      },
      "additionalProperties": false
    }
  },
  "additionalProperties": false
}

The published bytes, unmodified.

transform.schema.json#

The transformation predicate. Operation metadata, exact predecessors, input artifacts, and output subjects.

Identifier
https://usemakoto.dev/schema/v0.2/transform.schema.json
Digest
sha256:8b8dad3361327578c79a5b69912fe77e747d4ac6d1c6b234327f1a56621b1a23
Raw
/schema/v0.2/transform.schema.json
Reference
Every field, with types, rules, and real values
Read the document (2,889 bytes)
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://usemakoto.dev/schema/v0.2/transform.schema.json",
  "title": "Makoto v0.2 Transformation Predicate",
  "type": "object",
  "required": ["schemaVersion", "event", "operation", "inputs"],
  "properties": {
    "schemaVersion": { "const": "0.2" },
    "event": { "$ref": "#/$defs/event" },
    "operation": { "$ref": "#/$defs/operation" },
    "inputs": {
      "type": "array",
      "minItems": 1,
      "items": { "$ref": "#/$defs/input" }
    },
    "profiles": {
      "type": "array",
      "items": { "$ref": "https://usemakoto.dev/schema/v0.2/profile-reference.schema.json" }
    },
    "extensions": { "$ref": "#/$defs/extensions" }
  },
  "$defs": {
    "digest": {
      "type": "object",
      "required": ["sha256"],
      "properties": { "sha256": { "type": "string", "minLength": 64, "maxLength": 64 } },
      "additionalProperties": false
    },
    "timestamp": {
      "type": "string",
      "minLength": 20,
      "maxLength": 30
    },
    "event": {
      "type": "object",
      "required": ["id", "occurredAt"],
      "properties": {
        "id": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "occurredAt": { "$ref": "#/$defs/timestamp" }
      },
      "additionalProperties": false
    },
    "tool": {
      "type": "object",
      "properties": {
        "name": { "type": "string", "maxLength": 4096 },
        "version": { "type": "string", "maxLength": 4096 },
        "uri": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "digest": { "$ref": "#/$defs/digest" }
      },
      "additionalProperties": false
    },
    "operation": {
      "type": "object",
      "required": ["type"],
      "properties": {
        "type": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "name": { "type": "string", "maxLength": 4096 },
        "tool": { "$ref": "#/$defs/tool" },
        "parametersDigest": { "$ref": "#/$defs/digest" }
      },
      "additionalProperties": false
    },
    "provenance": {
      "type": "object",
      "required": ["statementDigest", "subjectName"],
      "properties": {
        "statementDigest": { "$ref": "#/$defs/digest" },
        "subjectName": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "entryName": { "type": "string", "minLength": 1, "maxLength": 1024 }
      },
      "additionalProperties": false
    },
    "input": {
      "type": "object",
      "required": ["name", "digest", "provenance"],
      "properties": {
        "name": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "digest": { "$ref": "#/$defs/digest" },
        "provenance": { "$ref": "#/$defs/provenance" }
      },
      "additionalProperties": false
    },
    "extensions": {
      "type": "object",
      "additionalProperties": true
    }
  },
  "additionalProperties": false
}

The published bytes, unmodified.

trust-policy.schema.json#

The receiver-owned policy: which keys may make which claims, under which thresholds and resource limits.

Identifier
https://usemakoto.dev/schema/v0.2/trust-policy.schema.json
Digest
sha256:5f18360abc901e175a16ec3a0ed1a4fa47626b34af08d64f6adb33c78fe9d6ac
Raw
/schema/v0.2/trust-policy.schema.json
Reference
Every field, with types, rules, and real values
Read the document (11,253 bytes)
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://usemakoto.dev/schema/v0.2/trust-policy.schema.json",
  "title": "Makoto v0.2 Consumer Trust Policy",
  "type": "object",
  "required": ["version", "keys", "rules", "handoff", "requiredProfiles", "limits"],
  "properties": {
    "version": { "const": "0.2" },
    "keys": {
      "type": "object",
      "propertyNames": { "type": "string", "minLength": 71, "maxLength": 71 },
      "additionalProperties": { "$ref": "#/$defs/key" }
    },
    "rules": {
      "type": "array",
      "maxItems": 1024,
      "items": { "$ref": "#/$defs/rule" }
    },
    "handoff": { "$ref": "#/$defs/handoffRule" },
    "requiredProfiles": {
      "type": "array",
      "items": { "$ref": "#/$defs/requiredProfile" }
    },
    "verificationSummary": { "$ref": "#/$defs/verificationSummary" },
    "limits": { "$ref": "#/$defs/limits" }
  },
  "$defs": {
    "digest": {
      "type": "object",
      "required": ["sha256"],
      "properties": { "sha256": { "type": "string", "minLength": 64, "maxLength": 64 } },
      "additionalProperties": false
    },
    "timestamp": {
      "type": "string",
      "minLength": 20,
      "maxLength": 30
    },
    "mediaType": {
      "type": "string",
      "maxLength": 255
    },
    "keyIds": {
      "type": "array",
      "minItems": 1,
      "items": { "type": "string", "minLength": 71, "maxLength": 71 }
    },
    "uris": {
      "type": "array",
      "minItems": 1,
      "items": { "type": "string", "minLength": 1, "maxLength": 4096 }
    },
    "key": {
      "type": "object",
      "required": ["type", "publicKey"],
      "properties": {
        "type": { "const": "ed25519" },
        "publicKey": { "type": "string", "minLength": 60, "maxLength": 60 },
        "label": { "type": "string", "maxLength": 4096 },
        "validFrom": { "$ref": "#/$defs/timestamp" },
        "validUntil": { "$ref": "#/$defs/timestamp" }
      },
      "additionalProperties": false
    },
    "profileConstraint": {
      "type": "object",
      "required": ["id", "target"],
      "properties": {
        "id": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "digest": { "$ref": "#/$defs/digest" },
        "closureDigest": { "$ref": "#/$defs/digest" },
        "target": { "enum": ["statement", "predicate"] }
      },
      "oneOf": [
        { "required": ["digest", "closureDigest"] },
        {
          "properties": {
            "digest": false,
            "closureDigest": false
          }
        }
      ],
      "additionalProperties": false
    },
    "rule": {
      "type": "object",
      "required": ["id", "predicateTypes", "authorizedKeyIds", "minimumSignatures"],
      "properties": {
        "id": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "predicateTypes": { "$ref": "#/$defs/uris" },
        "authorizedKeyIds": { "$ref": "#/$defs/keyIds" },
        "minimumSignatures": { "type": "integer", "minimum": 1 },
        "sourceKinds": { "$ref": "#/$defs/uris" },
        "sourceUris": { "$ref": "#/$defs/uris" },
        "operationTypes": { "$ref": "#/$defs/uris" },
        "profileConstraints": {
          "type": "array",
          "minItems": 1,
          "items": { "$ref": "#/$defs/profileConstraint" }
        }
      },
      "additionalProperties": false
    },
    "handoffRule": {
      "type": "object",
      "required": [
        "authorizedKeyIds",
        "minimumSignatures",
        "requireExpectedManifest",
        "requireExpectedHead",
        "requireExpectedArtifacts",
        "requireRecipient",
        "requireNonce",
        "allowReplayableHandoff"
      ],
      "properties": {
        "authorizedKeyIds": { "$ref": "#/$defs/keyIds" },
        "minimumSignatures": { "type": "integer", "minimum": 1 },
        "requireExpectedManifest": { "type": "boolean" },
        "requireExpectedHead": { "type": "boolean" },
        "requireExpectedArtifacts": { "type": "boolean" },
        "requireRecipient": { "type": "boolean" },
        "requireNonce": { "type": "boolean" },
        "allowReplayableHandoff": { "type": "boolean" },
        "maxAgeSeconds": { "type": "integer", "minimum": 0, "maximum": 315576000 },
        "maxFutureSkewSeconds": { "type": "integer", "minimum": 0, "maximum": 315576000 }
      },
      "oneOf": [
        { "required": ["maxAgeSeconds", "maxFutureSkewSeconds"] },
        {
          "properties": {
            "maxAgeSeconds": false,
            "maxFutureSkewSeconds": false
          }
        }
      ],
      "additionalProperties": false
    },
    "requiredProfile": {
      "type": "object",
      "required": ["id", "digest", "closureDigest", "target", "subjectName", "mediaType", "scope"],
      "properties": {
        "id": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "digest": { "$ref": "#/$defs/digest" },
        "closureDigest": { "$ref": "#/$defs/digest" },
        "target": { "const": "artifact" },
        "subjectName": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "mediaType": { "$ref": "#/$defs/mediaType" },
        "scope": { "const": "eachMatchingFinalArtifact" }
      },
      "additionalProperties": false
    },
    "resourceDescriptor": {
      "type": "object",
      "required": ["uri", "digest"],
      "properties": {
        "uri": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "digest": { "$ref": "#/$defs/digest" }
      },
      "additionalProperties": false
    },
    "assessmentProfile": {
      "type": "object",
      "required": ["id", "digest", "closureDigest", "target"],
      "properties": {
        "id": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "digest": { "$ref": "#/$defs/digest" },
        "closureDigest": { "$ref": "#/$defs/digest" },
        "target": { "enum": ["statement", "predicate"] }
      },
      "additionalProperties": false
    },
    "vsaVerifier": {
      "type": "object",
      "required": [
        "id", "verifierId", "authorizedKeyIds", "minimumSignatures", "policy", "resourceUri",
        "allowedVerifiedLevels", "independenceGroup"
      ],
      "properties": {
        "id": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "verifierId": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "authorizedKeyIds": { "$ref": "#/$defs/keyIds" },
        "minimumSignatures": { "type": "integer", "minimum": 1 },
        "policy": { "$ref": "#/$defs/resourceDescriptor" },
        "resourceUri": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "allowedVerifiedLevels": {
          "type": "array",
          "minItems": 1,
          "items": {
            "enum": [
              "MAKOTO_ORIGIN_LEVEL_2", "MAKOTO_ORIGIN_LEVEL_3",
              "MAKOTO_TRANSFORM_LEVEL_2", "MAKOTO_TRANSFORM_LEVEL_3"
            ]
          }
        },
        "independenceGroup": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "requiredProfiles": {
          "type": "array",
          "minItems": 1,
          "items": { "$ref": "#/$defs/assessmentProfile" }
        },
        "requiredControlEvidence": {
          "type": "array",
          "minItems": 1,
          "items": { "$ref": "#/$defs/resourceDescriptor" }
        }
      },
      "additionalProperties": false
    },
    "verificationSummary": {
      "type": "object",
      "required": [
        "resourceUri", "summaryPolicy", "requiredVerifiedLevels",
        "requiredProperties", "verifiers"
      ],
      "properties": {
        "resourceUri": { "type": "string", "minLength": 1, "maxLength": 4096 },
        "summaryPolicy": { "$ref": "#/$defs/resourceDescriptor" },
        "requiredVerifiedLevels": {
          "type": "array",
          "items": {
            "enum": [
              "MAKOTO_ORIGIN_LEVEL_1", "MAKOTO_ORIGIN_LEVEL_2",
              "MAKOTO_ORIGIN_LEVEL_3", "MAKOTO_TRANSFORM_LEVEL_1",
              "MAKOTO_TRANSFORM_LEVEL_2", "MAKOTO_TRANSFORM_LEVEL_3"
            ]
          }
        },
        "requiredProperties": {
          "type": "array",
          "items": {
            "enum": [
              "MAKOTO_AUTHORIZED", "MAKOTO_GRAPH_COMPLETE",
              "MAKOTO_FRESHNESS_ANCHORED", "MAKOTO_SCHEMA_CONFORMANT",
              "MAKOTO_REPRODUCED"
            ]
          }
        },
        "verifiers": {
          "type": "array",
          "items": { "$ref": "#/$defs/vsaVerifier" }
        }
      },
      "additionalProperties": false
    },
    "positiveInteger": { "type": "integer", "minimum": 1 },
    "limits": {
      "type": "object",
      "required": [
        "maxBundleFiles", "maxMetadataBytes", "maxArtifactBytesPerFile",
        "maxAggregateArtifactBytes", "maxSnapshotBytes", "maxArtifactValidationBytes",
        "maxJsonDepth", "maxJsonNumberChars", "maxJsonExponentMagnitude",
        "maxSchemaBytes", "maxSchemaResources", "maxSchemaEvaluationDepth",
        "maxSchemaOperations", "maxRegexLength", "profileEvaluationTimeoutSeconds",
        "profileWorkerMemoryBytes", "maxNdjsonLineBytes", "maxSignaturesTotal",
        "maxProfileEvaluations", "maxDiagnostics", "maxReportRecords", "maxReportBytes"
      ],
      "properties": {
        "maxBundleFiles": { "type": "integer", "minimum": 1, "maximum": 20000 },
        "maxMetadataBytes": { "type": "integer", "minimum": 1, "maximum": 268435456 },
        "maxArtifactBytesPerFile": { "type": "integer", "minimum": 1, "maximum": 1099511627776 },
        "maxAggregateArtifactBytes": { "type": "integer", "minimum": 1, "maximum": 2199023255552 },
        "maxSnapshotBytes": { "type": "integer", "minimum": 1, "maximum": 2199023255552 },
        "maxArtifactValidationBytes": { "type": "integer", "minimum": 1, "maximum": 1073741824 },
        "maxJsonDepth": { "type": "integer", "minimum": 8, "maximum": 256 },
        "maxJsonNumberChars": { "type": "integer", "minimum": 1, "maximum": 4096 },
        "maxJsonExponentMagnitude": { "type": "integer", "minimum": 1, "maximum": 100000 },
        "maxSchemaBytes": { "type": "integer", "minimum": 1, "maximum": 268435456 },
        "maxSchemaResources": { "type": "integer", "minimum": 1, "maximum": 4096 },
        "maxSchemaEvaluationDepth": { "type": "integer", "minimum": 1, "maximum": 1024 },
        "maxSchemaOperations": { "type": "integer", "minimum": 1, "maximum": 1000000000 },
        "maxRegexLength": { "type": "integer", "minimum": 1, "maximum": 65536 },
        "profileEvaluationTimeoutSeconds": { "type": "integer", "minimum": 1, "maximum": 60 },
        "profileWorkerMemoryBytes": { "type": "integer", "minimum": 1, "maximum": 4294967296 },
        "maxNdjsonLineBytes": { "type": "integer", "minimum": 1, "maximum": 67108864 },
        "maxSignaturesTotal": { "type": "integer", "minimum": 1, "maximum": 100000 },
        "maxProfileEvaluations": { "type": "integer", "minimum": 1, "maximum": 100000 },
        "maxDiagnostics": { "type": "integer", "minimum": 1, "maximum": 100000 },
        "maxReportRecords": { "type": "integer", "minimum": 64, "maximum": 200000 },
        "maxReportBytes": { "type": "integer", "minimum": 65536, "maximum": 268435456 }
      },
      "additionalProperties": false
    }
  },
  "additionalProperties": false
}

The published bytes, unmodified.

verification-report.schema.json#

The report contract. Separate outcomes per check, never a single collapsed verdict.

Identifier
https://usemakoto.dev/schema/v0.2/verification-report.schema.json
Digest
sha256:f1d47e7c8273deff5a65a6901d4f0b00f2eecaf7da5d4bc29055508a8877c3ae
Raw
/schema/v0.2/verification-report.schema.json
Reference
Every field, with types, rules, and real values
Read the document (85,954 bytes)
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://usemakoto.dev/schema/v0.2/verification-report.schema.json",
  "title": "Makoto v0.2 Verification Report",
  "type": "object",
  "required": [
    "reportVersion",
    "decision",
    "reportTruncated",
    "primaryError",
    "bundleId",
    "evaluationTime",
    "policyDigest",
    "policyDigestEncoding",
    "coreCatalogDigest",
    "manifestDigest",
    "expectedManifestDigest",
    "handoff",
    "expectedHeads",
    "actualHeads",
    "expectedArtifacts",
    "expectedRecipient",
    "actualRecipient",
    "recipientStatus",
    "expectedNonce",
    "actualNonce",
    "nonceStatus",
    "roots",
    "summary",
    "statements",
    "profiles",
    "artifacts",
    "unindexedEnvelopes",
    "quarantinedStatements",
    "datasetEntries",
    "unreferencedFiles",
    "checks",
    "warnings",
    "errors",
    "tool"
  ],
  "properties": {
    "reportVersion": {
      "const": "0.2"
    },
    "decision": {
      "enum": [
        "allow",
        "deny",
        "indeterminate"
      ]
    },
    "reportTruncated": {
      "type": "boolean"
    },
    "primaryError": {
      "oneOf": [
        {
          "$ref": "#/$defs/errorCode"
        },
        {
          "type": "null"
        }
      ]
    },
    "bundleId": {
      "$ref": "#/$defs/nullableString"
    },
    "evaluationTime": {
      "$ref": "#/$defs/timestamp"
    },
    "policyDigest": {
      "$ref": "#/$defs/digest"
    },
    "policyDigestEncoding": {
      "const": "exact-input-bytes"
    },
    "coreCatalogDigest": {
      "$ref": "#/$defs/digest"
    },
    "manifestDigest": {
      "$ref": "#/$defs/nullableDigest"
    },
    "expectedManifestDigest": {
      "$ref": "#/$defs/nullableDigest"
    },
    "handoff": {
      "$ref": "#/$defs/handoff"
    },
    "expectedHeads": {
      "$ref": "#/$defs/digestArray"
    },
    "actualHeads": {
      "$ref": "#/$defs/digestArray"
    },
    "expectedArtifacts": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/expectedArtifact"
      }
    },
    "expectedRecipient": {
      "$ref": "#/$defs/nullableString"
    },
    "actualRecipient": {
      "$ref": "#/$defs/nullableString"
    },
    "recipientStatus": {
      "$ref": "#/$defs/status"
    },
    "expectedNonce": {
      "$ref": "#/$defs/nullableString"
    },
    "actualNonce": {
      "$ref": "#/$defs/nullableString"
    },
    "nonceStatus": {
      "$ref": "#/$defs/status"
    },
    "roots": {
      "$ref": "#/$defs/digestArray"
    },
    "summary": {
      "$ref": "#/$defs/summary"
    },
    "statements": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/statement"
      }
    },
    "profiles": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/profile"
      }
    },
    "artifacts": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/artifact"
      }
    },
    "unindexedEnvelopes": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/unindexedEnvelope"
      }
    },
    "quarantinedStatements": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/quarantinedStatement"
      }
    },
    "datasetEntries": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/datasetEntry"
      }
    },
    "unreferencedFiles": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/unreferencedFile"
      }
    },
    "checks": {
      "type": "array",
      "minItems": 16,
      "maxItems": 16,
      "prefixItems": [
        {
          "$ref": "#/$defs/checkLoadSafely"
        },
        {
          "$ref": "#/$defs/checkParseStrictly"
        },
        {
          "$ref": "#/$defs/checkIndexPayloads"
        },
        {
          "$ref": "#/$defs/checkCoreSchemas"
        },
        {
          "$ref": "#/$defs/checkSignatures"
        },
        {
          "$ref": "#/$defs/checkAuthorizationThresholds"
        },
        {
          "$ref": "#/$defs/checkMetadataProfiles"
        },
        {
          "$ref": "#/$defs/checkAuthorization"
        },
        {
          "$ref": "#/$defs/checkGraphDependencyArtifacts"
        },
        {
          "$ref": "#/$defs/checkGraph"
        },
        {
          "$ref": "#/$defs/checkRootsAndHeads"
        },
        {
          "$ref": "#/$defs/checkCompletenessAnchor"
        },
        {
          "$ref": "#/$defs/checkFreshnessAnchors"
        },
        {
          "$ref": "#/$defs/checkArtifactBytes"
        },
        {
          "$ref": "#/$defs/checkArtifactProfiles"
        },
        {
          "$ref": "#/$defs/checkDecision"
        }
      ]
    },
    "warnings": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/warning"
      }
    },
    "errors": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/error"
      }
    },
    "tool": {
      "$ref": "#/$defs/tool"
    }
  },
  "$defs": {
    "integer": {
      "type": "integer",
      "minimum": 0,
      "maximum": 9007199254740991
    },
    "nullableInteger": {
      "oneOf": [
        {
          "$ref": "#/$defs/integer"
        },
        {
          "type": "null"
        }
      ]
    },
    "decimalString": {
      "type": "string",
      "minLength": 1
    },
    "digest": {
      "type": "object",
      "required": [
        "sha256"
      ],
      "properties": {
        "sha256": {
          "type": "string",
          "minLength": 64,
          "maxLength": 64
        }
      },
      "additionalProperties": false
    },
    "nullableDigest": {
      "oneOf": [
        {
          "$ref": "#/$defs/digest"
        },
        {
          "type": "null"
        }
      ]
    },
    "digestArray": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/digest"
      }
    },
    "nullableString": {
      "oneOf": [
        {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        {
          "type": "null"
        }
      ]
    },
    "timestamp": {
      "type": "string",
      "minLength": 20,
      "maxLength": 30
    },
    "status": {
      "enum": [
        "pass",
        "fail",
        "indeterminate",
        "not_checked",
        "skipped"
      ]
    },
    "errorCode": {
      "enum": [
        "E_BUNDLE_UNSAFE_PATH",
        "E_JSON_INVALID",
        "E_JSON_DUPLICATE_KEY",
        "E_ENVELOPE_MALFORMED",
        "E_PAYLOAD_TYPE",
        "E_STATEMENT_DIGEST",
        "E_CORE_SCHEMA",
        "E_CATALOG_INVALID",
        "E_PROFILE_UNRESOLVED",
        "E_PROFILE_INVALID",
        "E_PROFILE_TARGET_MISSING",
        "E_REQUIRED_PROFILE_MISSING",
        "E_SIGNATURE_INVALID",
        "E_SIGNER_UNAUTHORIZED",
        "E_PREDICATE_SEMANTICS_UNSUPPORTED",
        "E_EVENT_ID_DUPLICATE",
        "E_PREDECESSOR_MISSING",
        "E_PREDECESSOR_SUBJECT",
        "E_INPUT_DIGEST",
        "E_DATASET_MANIFEST_INVALID",
        "E_DATASET_MANIFEST_REQUIRED",
        "E_GRAPH_CYCLE",
        "E_ROOT_INVALID",
        "E_HANDOFF_REQUIRED",
        "E_MANIFEST_SET",
        "E_FRESHNESS_REQUIRED",
        "E_EXPECTED_MANIFEST",
        "E_EXPECTED_HEAD",
        "E_EXPECTED_ARTIFACT",
        "E_HANDOFF_RECIPIENT",
        "E_HANDOFF_NONCE",
        "E_HANDOFF_STALE",
        "E_ARTIFACT_MISSING",
        "E_ARTIFACT_DIGEST",
        "E_ARTIFACT_SIZE",
        "E_ARTIFACT_FORMAT",
        "E_RESOURCE_LIMIT"
      ]
    },
    "warningCode": {
      "enum": [
        "W_PROFILE_INDETERMINATE",
        "W_PROFILE_RESOURCE_LIMIT",
        "W_ARTIFACT_VALIDATION_LIMIT",
        "W_HISTORICAL_ARTIFACT_NOT_CHECKED",
        "W_SIGNATURE_UNKNOWN",
        "W_FRESHNESS_NOT_CHECKED",
        "W_ARTIFACT_UNPROFILED",
        "W_POLICY_RULE_OVERLAP"
      ]
    },
    "signature": {
      "type": "object",
      "required": [
        "keyid",
        "keyKnown",
        "cryptographic"
      ],
      "properties": {
        "keyid": {
          "type": "string",
          "minLength": 71,
          "maxLength": 71
        },
        "keyKnown": {
          "type": "boolean"
        },
        "cryptographic": {
          "$ref": "#/$defs/status"
        }
      },
      "additionalProperties": false
    },
    "handoff": {
      "type": "object",
      "required": [
        "signatures",
        "authorization",
        "completeness",
        "freshnessMethod",
        "freshnessChecks",
        "freshnessStatus"
      ],
      "properties": {
        "signatures": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/signature"
          }
        },
        "authorization": {
          "$ref": "#/$defs/status"
        },
        "completeness": {
          "$ref": "#/$defs/status"
        },
        "freshnessMethod": {
          "enum": [
            "expected-manifest",
            "expected-heads",
            "expected-artifacts",
            "nonce",
            "max-age",
            "multiple",
            "none"
          ]
        },
        "freshnessChecks": {
          "type": "object",
          "required": [
            "expected-manifest",
            "expected-heads",
            "expected-artifacts",
            "nonce",
            "max-age"
          ],
          "properties": {
            "expected-manifest": {
              "$ref": "#/$defs/status"
            },
            "expected-heads": {
              "$ref": "#/$defs/status"
            },
            "expected-artifacts": {
              "$ref": "#/$defs/status"
            },
            "nonce": {
              "$ref": "#/$defs/status"
            },
            "max-age": {
              "$ref": "#/$defs/status"
            }
          },
          "additionalProperties": false
        },
        "freshnessStatus": {
          "$ref": "#/$defs/status"
        }
      },
      "additionalProperties": false
    },
    "expectedArtifact": {
      "type": "object",
      "required": [
        "head",
        "subjectName",
        "digest"
      ],
      "properties": {
        "head": {
          "$ref": "#/$defs/digest"
        },
        "subjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "digest": {
          "$ref": "#/$defs/digest"
        }
      },
      "additionalProperties": false
    },
    "summary": {
      "type": "object",
      "required": [
        "statementsTotal",
        "quarantinedStatementsTotal",
        "statementsReachable",
        "statementsValid",
        "statementsAuthorized",
        "signaturesTotal",
        "signaturesChecked",
        "signaturesValid",
        "manifestSignaturesRequired",
        "manifestSignaturesValid",
        "manifestSignaturesAuthorized",
        "roots",
        "heads",
        "artifactsDeclared",
        "artifactsChecked",
        "historicalMaterialsDeclared",
        "historicalMaterialsChecked",
        "profilesDeclared",
        "profilesValidated"
      ],
      "properties": {
        "statementsTotal": {
          "$ref": "#/$defs/nullableInteger"
        },
        "quarantinedStatementsTotal": {
          "$ref": "#/$defs/nullableInteger"
        },
        "statementsReachable": {
          "$ref": "#/$defs/nullableInteger"
        },
        "statementsValid": {
          "$ref": "#/$defs/nullableInteger"
        },
        "statementsAuthorized": {
          "$ref": "#/$defs/nullableInteger"
        },
        "signaturesTotal": {
          "$ref": "#/$defs/nullableInteger"
        },
        "signaturesChecked": {
          "$ref": "#/$defs/nullableInteger"
        },
        "signaturesValid": {
          "$ref": "#/$defs/nullableInteger"
        },
        "manifestSignaturesRequired": {
          "$ref": "#/$defs/nullableInteger"
        },
        "manifestSignaturesValid": {
          "$ref": "#/$defs/nullableInteger"
        },
        "manifestSignaturesAuthorized": {
          "$ref": "#/$defs/nullableInteger"
        },
        "roots": {
          "$ref": "#/$defs/nullableInteger"
        },
        "heads": {
          "$ref": "#/$defs/nullableInteger"
        },
        "artifactsDeclared": {
          "$ref": "#/$defs/nullableInteger"
        },
        "artifactsChecked": {
          "$ref": "#/$defs/nullableInteger"
        },
        "historicalMaterialsDeclared": {
          "$ref": "#/$defs/nullableInteger"
        },
        "historicalMaterialsChecked": {
          "$ref": "#/$defs/nullableInteger"
        },
        "profilesDeclared": {
          "$ref": "#/$defs/nullableInteger"
        },
        "profilesValidated": {
          "$ref": "#/$defs/nullableInteger"
        }
      },
      "additionalProperties": false
    },
    "statement": {
      "type": "object",
      "required": [
        "digest",
        "predicateType",
        "eventId",
        "coreSchema",
        "coreSchemaPrerequisiteChecks",
        "signatures",
        "candidateRuleIds",
        "authorizingRuleIds",
        "authorization",
        "authorizationPrerequisiteChecks",
        "graph",
        "graphPrerequisiteChecks"
      ],
      "properties": {
        "digest": {
          "$ref": "#/$defs/digest"
        },
        "predicateType": {
          "$ref": "#/$defs/nullableString"
        },
        "eventId": {
          "$ref": "#/$defs/nullableString"
        },
        "coreSchema": {
          "$ref": "#/$defs/status"
        },
        "coreSchemaPrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        },
        "signatures": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/signature"
          }
        },
        "candidateRuleIds": {
          "type": "array",
          "items": {
            "type": "string",
            "minLength": 1,
            "maxLength": 4096
          }
        },
        "authorizingRuleIds": {
          "type": "array",
          "items": {
            "type": "string",
            "minLength": 1,
            "maxLength": 4096
          }
        },
        "authorization": {
          "$ref": "#/$defs/status"
        },
        "authorizationPrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        },
        "graph": {
          "$ref": "#/$defs/status"
        },
        "graphPrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        }
      },
      "additionalProperties": false,
      "allOf": [
        {
          "if": {
            "properties": {
              "coreSchema": {
                "const": "skipped"
              }
            },
            "required": [
              "coreSchema"
            ]
          },
          "then": {
            "properties": {
              "coreSchemaPrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "coreSchemaPrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        },
        {
          "if": {
            "properties": {
              "authorization": {
                "const": "skipped"
              }
            },
            "required": [
              "authorization"
            ]
          },
          "then": {
            "properties": {
              "authorizationPrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "authorizationPrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        },
        {
          "if": {
            "properties": {
              "graph": {
                "const": "skipped"
              }
            },
            "required": [
              "graph"
            ]
          },
          "then": {
            "properties": {
              "graphPrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "graphPrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        }
      ]
    },
    "profile": {
      "type": "object",
      "required": [
        "statementDigest",
        "id",
        "digest",
        "closureDigest",
        "target",
        "subjectName",
        "mediaType",
        "critical",
        "requiredByManifest",
        "requiredByPolicy",
        "requiredByAuthorizationRuleIds",
        "resolution",
        "validation",
        "prerequisiteChecks"
      ],
      "properties": {
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "id": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "digest": {
          "$ref": "#/$defs/digest"
        },
        "closureDigest": {
          "$ref": "#/$defs/digest"
        },
        "target": {
          "enum": [
            "statement",
            "predicate",
            "artifact"
          ]
        },
        "subjectName": {
          "$ref": "#/$defs/nullableString"
        },
        "mediaType": {
          "$ref": "#/$defs/nullableString"
        },
        "critical": {
          "type": "boolean"
        },
        "requiredByManifest": {
          "type": "boolean"
        },
        "requiredByPolicy": {
          "type": "boolean"
        },
        "requiredByAuthorizationRuleIds": {
          "type": "array",
          "items": {
            "type": "string",
            "minLength": 1,
            "maxLength": 4096
          }
        },
        "resolution": {
          "$ref": "#/$defs/status"
        },
        "validation": {
          "$ref": "#/$defs/status"
        },
        "prerequisiteChecks": {
          "$ref": "#/$defs/profilePrerequisites"
        }
      },
      "additionalProperties": false,
      "allOf": [
        {
          "if": {
            "properties": {
              "validation": {
                "const": "skipped"
              }
            },
            "required": [
              "validation"
            ]
          },
          "then": {
            "properties": {
              "prerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "prerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        }
      ]
    },
    "artifact": {
      "type": "object",
      "required": [
        "lifecycleRole",
        "artifactKind",
        "statementDigest",
        "head",
        "subjectName",
        "digest",
        "digestStatus",
        "digestPrerequisiteChecks",
        "profileStatus",
        "profilePrerequisiteChecks",
        "applicableProfileCount"
      ],
      "properties": {
        "lifecycleRole": {
          "enum": [
            "final",
            "historical"
          ]
        },
        "artifactKind": {
          "enum": [
            "ordinary",
            "dataset-manifest"
          ]
        },
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "head": {
          "$ref": "#/$defs/nullableDigest"
        },
        "subjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "digest": {
          "$ref": "#/$defs/digest"
        },
        "digestStatus": {
          "$ref": "#/$defs/status"
        },
        "digestPrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        },
        "profileStatus": {
          "$ref": "#/$defs/status"
        },
        "profilePrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        },
        "applicableProfileCount": {
          "$ref": "#/$defs/integer"
        }
      },
      "additionalProperties": false,
      "allOf": [
        {
          "if": {
            "properties": {
              "digestStatus": {
                "const": "skipped"
              }
            },
            "required": [
              "digestStatus"
            ]
          },
          "then": {
            "properties": {
              "digestPrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "digestPrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        },
        {
          "if": {
            "properties": {
              "profileStatus": {
                "const": "skipped"
              }
            },
            "required": [
              "profileStatus"
            ]
          },
          "then": {
            "properties": {
              "profilePrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "profilePrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        }
      ]
    },
    "datasetEntry": {
      "type": "object",
      "required": [
        "manifestStatementDigest",
        "manifestSubjectName",
        "entryName",
        "digest",
        "declaredSize",
        "digestStatus",
        "digestPrerequisiteChecks",
        "sizeStatus",
        "sizePrerequisiteChecks"
      ],
      "properties": {
        "manifestStatementDigest": {
          "$ref": "#/$defs/digest"
        },
        "manifestSubjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "entryName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "digest": {
          "$ref": "#/$defs/digest"
        },
        "declaredSize": {
          "oneOf": [
            {
              "$ref": "#/$defs/decimalString"
            },
            {
              "type": "null"
            }
          ]
        },
        "digestStatus": {
          "$ref": "#/$defs/status"
        },
        "digestPrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        },
        "sizeStatus": {
          "$ref": "#/$defs/status"
        },
        "sizePrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        }
      },
      "additionalProperties": false,
      "allOf": [
        {
          "if": {
            "properties": {
              "digestStatus": {
                "const": "skipped"
              }
            },
            "required": [
              "digestStatus"
            ]
          },
          "then": {
            "properties": {
              "digestPrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "digestPrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        },
        {
          "if": {
            "properties": {
              "sizeStatus": {
                "const": "skipped"
              }
            },
            "required": [
              "sizeStatus"
            ]
          },
          "then": {
            "properties": {
              "sizePrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "sizePrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        }
      ]
    },
    "unindexedEnvelope": {
      "type": "object",
      "required": [
        "path",
        "payloadTypeStatus",
        "diagnosticCode"
      ],
      "properties": {
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "payloadTypeStatus": {
          "enum": [
            "pass",
            "fail",
            "not_checked"
          ]
        },
        "diagnosticCode": {
          "oneOf": [
            {
              "$ref": "#/$defs/errorCode"
            },
            {
              "type": "null"
            }
          ]
        }
      },
      "additionalProperties": false
    },
    "quarantinedStatement": {
      "type": "object",
      "required": [
        "path",
        "digest"
      ],
      "properties": {
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "digest": {
          "$ref": "#/$defs/digest"
        }
      },
      "additionalProperties": false
    },
    "unreferencedFile": {
      "type": "object",
      "required": [
        "path",
        "status",
        "reason"
      ],
      "properties": {
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "status": {
          "const": "not_checked"
        },
        "reason": {
          "const": "unreferenced"
        }
      },
      "additionalProperties": false
    },
    "check": {
      "type": "object",
      "required": [
        "id",
        "status",
        "prerequisiteChecks"
      ],
      "properties": {
        "id": {
          "type": "string"
        },
        "status": {
          "$ref": "#/$defs/status"
        },
        "prerequisiteChecks": {
          "$ref": "#/$defs/topLevelPrerequisites"
        }
      },
      "allOf": [
        {
          "if": {
            "properties": {
              "status": {
                "const": "skipped"
              }
            }
          },
          "then": {
            "properties": {
              "prerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "prerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        }
      ],
      "additionalProperties": false
    },
    "checkLoadSafely": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "load-safely"
        }
      }
    },
    "checkParseStrictly": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "parse-strictly"
        }
      }
    },
    "checkIndexPayloads": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "index-payloads"
        }
      }
    },
    "checkCoreSchemas": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "core-schemas"
        }
      }
    },
    "checkSignatures": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "signatures"
        }
      }
    },
    "checkAuthorizationThresholds": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "authorization-thresholds"
        }
      }
    },
    "checkMetadataProfiles": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "metadata-profiles"
        }
      }
    },
    "checkAuthorization": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "authorization"
        }
      }
    },
    "checkGraphDependencyArtifacts": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "graph-dependency-artifacts"
        }
      }
    },
    "checkGraph": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "graph"
        }
      }
    },
    "checkRootsAndHeads": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "roots-and-heads"
        }
      }
    },
    "checkCompletenessAnchor": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "completeness-anchor"
        }
      }
    },
    "checkFreshnessAnchors": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "freshness-anchors"
        }
      }
    },
    "checkArtifactBytes": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "artifact-bytes"
        }
      }
    },
    "checkArtifactProfiles": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "artifact-profiles"
        }
      }
    },
    "checkDecision": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "decision"
        }
      }
    },
    "diagnosticContext": {
      "type": "object",
      "additionalProperties": {
        "oneOf": [
          {
            "type": "string",
            "maxLength": 4096
          },
          {
            "type": "integer",
            "minimum": -9007199254740991,
            "maximum": 9007199254740991
          },
          {
            "type": "boolean"
          },
          {
            "type": "null"
          },
          {
            "$ref": "#/$defs/digest"
          },
          {
            "type": "array",
            "items": {
              "type": "string",
              "maxLength": 4096
            }
          }
        ]
      }
    },
    "diagnosticBase": {
      "type": "object",
      "required": [
        "code",
        "step",
        "message",
        "context",
        "causedByCheck"
      ],
      "properties": {
        "code": {
          "type": "string"
        },
        "step": {
          "type": "integer"
        },
        "message": {
          "type": "string",
          "maxLength": 4096
        },
        "context": {
          "$ref": "#/$defs/diagnosticContext"
        },
        "causedByCheck": {
          "type": "string"
        }
      },
      "additionalProperties": false
    },
    "error": {
      "oneOf": [
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_BUNDLE_UNSAFE_PATH"
            },
            "step": {
              "const": 1
            },
            "causedByCheck": {
              "const": "load-safely"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_BUNDLE_UNSAFE_PATH"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_BUNDLE_UNSAFE_PATH"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_BUNDLE_UNSAFE_PATH"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_BUNDLE_UNSAFE_PATH"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 1
            },
            "causedByCheck": {
              "const": "load-safely"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 3
            },
            "causedByCheck": {
              "const": "index-payloads"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 5
            },
            "causedByCheck": {
              "const": "signatures"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 6
            },
            "causedByCheck": {
              "const": "authorization-thresholds"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "metadata-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "authorization"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 9
            },
            "causedByCheck": {
              "const": "graph"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 10
            },
            "causedByCheck": {
              "const": "roots-and-heads"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "completeness-anchor"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 14
            },
            "causedByCheck": {
              "const": "decision"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_HANDOFF_REQUIRED"
            },
            "step": {
              "const": 1
            },
            "causedByCheck": {
              "const": "load-safely"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_HANDOFF_REQUIRED"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_JSON_INVALID"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_JSON_INVALID"
            },
            "step": {
              "const": 3
            },
            "causedByCheck": {
              "const": "index-payloads"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_JSON_INVALID"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_JSON_DUPLICATE_KEY"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_JSON_DUPLICATE_KEY"
            },
            "step": {
              "const": 3
            },
            "causedByCheck": {
              "const": "index-payloads"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_JSON_DUPLICATE_KEY"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ENVELOPE_MALFORMED"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PAYLOAD_TYPE"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_STATEMENT_DIGEST"
            },
            "step": {
              "const": 3
            },
            "causedByCheck": {
              "const": "index-payloads"
            },
            "context": {
              "$ref": "#/$defs/contextStatementDigestMismatch"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_CORE_SCHEMA"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextPathOrEvidence"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_CORE_SCHEMA"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextPathOrEvidence"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_CATALOG_INVALID"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PREDICATE_SEMANTICS_UNSUPPORTED"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_TARGET_MISSING"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextProfile"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_SIGNATURE_INVALID"
            },
            "step": {
              "const": 5
            },
            "causedByCheck": {
              "const": "signatures"
            },
            "context": {
              "$ref": "#/$defs/contextSignature"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_SIGNER_UNAUTHORIZED"
            },
            "step": {
              "const": 6
            },
            "causedByCheck": {
              "const": "authorization-thresholds"
            },
            "context": {
              "$ref": "#/$defs/contextEvidenceIdentity"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_UNRESOLVED"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "metadata-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_UNRESOLVED"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "authorization"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_UNRESOLVED"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_UNRESOLVED"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_INVALID"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "metadata-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_INVALID"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_INVALID"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_REQUIRED_PROFILE_MISSING"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "completeness-anchor"
            },
            "context": {
              "$ref": "#/$defs/contextRequiredProfile"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_REQUIRED_PROFILE_MISSING"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextRequiredProfile"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_DATASET_MANIFEST_INVALID"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextDataset"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_DATASET_MANIFEST_INVALID"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextDataset"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_DATASET_MANIFEST_REQUIRED"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextDataset"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_EVENT_ID_DUPLICATE"
            },
            "step": {
              "const": 9
            },
            "causedByCheck": {
              "const": "graph"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PREDECESSOR_MISSING"
            },
            "step": {
              "const": 9
            },
            "causedByCheck": {
              "const": "graph"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PREDECESSOR_SUBJECT"
            },
            "step": {
              "const": 9
            },
            "causedByCheck": {
              "const": "graph"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_INPUT_DIGEST"
            },
            "step": {
              "const": 9
            },
            "causedByCheck": {
              "const": "graph"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_GRAPH_CYCLE"
            },
            "step": {
              "const": 9
            },
            "causedByCheck": {
              "const": "graph"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ROOT_INVALID"
            },
            "step": {
              "const": 10
            },
            "causedByCheck": {
              "const": "roots-and-heads"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_MANIFEST_SET"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "completeness-anchor"
            },
            "context": {
              "$ref": "#/$defs/contextManifestSet"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_FRESHNESS_REQUIRED"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextBundle"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_EXPECTED_MANIFEST"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextExpectedActual"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_EXPECTED_HEAD"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextBundle"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_EXPECTED_ARTIFACT"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextBundle"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_HANDOFF_RECIPIENT"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextExpectedActual"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_HANDOFF_NONCE"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextExpectedActual"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_HANDOFF_STALE"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextBundle"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ARTIFACT_MISSING"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextArtifactOrPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ARTIFACT_DIGEST"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextArtifact"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ARTIFACT_DIGEST"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextArtifact"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ARTIFACT_SIZE"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextDatasetSize"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ARTIFACT_FORMAT"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileArtifact"
            }
          }
        }
      ]
    },
    "warning": {
      "oneOf": [
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_POLICY_RULE_OVERLAP"
            },
            "step": {
              "const": 0
            },
            "causedByCheck": {
              "const": "authorization-thresholds"
            },
            "context": {
              "$ref": "#/$defs/contextPolicyOverlap"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_SIGNATURE_UNKNOWN"
            },
            "step": {
              "const": 5
            },
            "causedByCheck": {
              "const": "signatures"
            },
            "context": {
              "$ref": "#/$defs/contextSignature"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_PROFILE_INDETERMINATE"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "metadata-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_PROFILE_INDETERMINATE"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_PROFILE_INDETERMINATE"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_PROFILE_RESOURCE_LIMIT"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "metadata-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_ARTIFACT_VALIDATION_LIMIT"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_ARTIFACT_VALIDATION_LIMIT"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_HISTORICAL_ARTIFACT_NOT_CHECKED"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextArtifact"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_FRESHNESS_NOT_CHECKED"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextBundle"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_ARTIFACT_UNPROFILED"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextArtifact"
            }
          }
        }
      ]
    },
    "tool": {
      "type": "object",
      "required": [
        "name",
        "version"
      ],
      "properties": {
        "name": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "version": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        }
      },
      "additionalProperties": false
    },
    "topLevelPrerequisites": {
      "type": "array",
      "uniqueItems": true,
      "items": {
        "enum": [
          "load-safely",
          "parse-strictly",
          "index-payloads",
          "core-schemas",
          "signatures",
          "authorization-thresholds",
          "metadata-profiles",
          "authorization",
          "graph-dependency-artifacts",
          "graph",
          "roots-and-heads",
          "completeness-anchor",
          "freshness-anchors",
          "artifact-bytes",
          "artifact-profiles",
          "decision"
        ]
      }
    },
    "profilePrerequisites": {
      "type": "array",
      "uniqueItems": true,
      "items": {
        "enum": [
          "authorization-thresholds",
          "metadata-profiles",
          "authorization",
          "graph-dependency-artifacts",
          "graph",
          "artifact-bytes",
          "artifact-profiles",
          "resolution"
        ]
      }
    },
    "recordPrerequisites": {
      "type": "array",
      "uniqueItems": true,
      "items": {
        "enum": [
          "index-payloads",
          "core-schemas",
          "signatures",
          "authorization-thresholds",
          "metadata-profiles",
          "authorization",
          "graph-dependency-artifacts",
          "graph",
          "completeness-anchor",
          "artifact-bytes"
        ]
      }
    },
    "contextPath": {
      "type": "object",
      "required": [
        "path"
      ],
      "properties": {
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "value": {}
      },
      "additionalProperties": false
    },
    "contextLimit": {
      "type": "object",
      "required": [
        "limit"
      ],
      "properties": {
        "limit": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "profileDigest": {
          "$ref": "#/$defs/digest"
        },
        "subjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "entryName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "value": {}
      },
      "additionalProperties": false
    },
    "contextStatementDigestMismatch": {
      "type": "object",
      "required": [
        "statementDigest",
        "declared"
      ],
      "properties": {
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "declared": {},
        "actual": {},
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        }
      },
      "additionalProperties": false
    },
    "contextPathOrEvidence": {
      "oneOf": [
        {
          "type": "object",
          "required": [
            "path"
          ],
          "properties": {
            "path": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "statementDigest"
          ],
          "properties": {
            "statementDigest": {
              "$ref": "#/$defs/digest"
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "manifestDigest"
          ],
          "properties": {
            "manifestDigest": {
              "$ref": "#/$defs/digest"
            }
          },
          "additionalProperties": false
        }
      ]
    },
    "contextGraphStatement": {
      "type": "object",
      "required": [
        "statementDigest"
      ],
      "properties": {
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "predicateType": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "eventId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "inputName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "predecessorStatementDigest": {
          "$ref": "#/$defs/digest"
        },
        "predecessorSubjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "entryName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "expected": {},
        "actual": {}
      },
      "additionalProperties": false
    },
    "contextProfile": {
      "type": "object",
      "required": [
        "statementDigest",
        "profileId",
        "profileDigest"
      ],
      "properties": {
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "profileDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileClosureDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileTarget": {
          "enum": [
            "statement",
            "predicate",
            "artifact"
          ]
        },
        "subjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "mediaType": {
          "oneOf": [
            {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            {
              "type": "null"
            }
          ]
        }
      },
      "additionalProperties": false
    },
    "contextSignature": {
      "type": "object",
      "required": [
        "statementDigest",
        "keyid"
      ],
      "properties": {
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "keyid": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        }
      },
      "additionalProperties": false
    },
    "contextEvidenceIdentity": {
      "oneOf": [
        {
          "type": "object",
          "required": [
            "statementDigest"
          ],
          "properties": {
            "statementDigest": {
              "$ref": "#/$defs/digest"
            },
            "ruleId": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "manifestDigest"
          ],
          "properties": {
            "manifestDigest": {
              "$ref": "#/$defs/digest"
            },
            "ruleId": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            }
          },
          "additionalProperties": false
        }
      ]
    },
    "contextProfileOrStatement": {
      "oneOf": [
        {
          "type": "object",
          "required": [
            "statementDigest"
          ],
          "properties": {
            "statementDigest": {
              "$ref": "#/$defs/digest"
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "statementDigest",
            "profileId",
            "profileDigest"
          ],
          "properties": {
            "statementDigest": {
              "$ref": "#/$defs/digest"
            },
            "profileId": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "profileDigest": {
              "$ref": "#/$defs/digest"
            },
            "profileClosureDigest": {
              "$ref": "#/$defs/digest"
            },
            "profileTarget": {
              "enum": [
                "statement",
                "predicate",
                "artifact"
              ]
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "mediaType": {
              "oneOf": [
                {
                  "type": "string",
                  "minLength": 1,
                  "maxLength": 4096
                },
                {
                  "type": "null"
                }
              ]
            }
          },
          "additionalProperties": false
        }
      ]
    },
    "contextRequiredProfile": {
      "type": "object",
      "required": [
        "profileId",
        "profileDigest",
        "subjectName"
      ],
      "properties": {
        "profileId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "profileDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileClosureDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileTarget": {
          "enum": [
            "statement",
            "predicate",
            "artifact"
          ]
        },
        "head": {
          "$ref": "#/$defs/digest"
        },
        "subjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "mediaType": {
          "oneOf": [
            {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            {
              "type": "null"
            }
          ]
        }
      },
      "additionalProperties": false
    },
    "contextDataset": {
      "type": "object",
      "required": [
        "manifestStatementDigest",
        "manifestSubjectName"
      ],
      "properties": {
        "manifestStatementDigest": {
          "$ref": "#/$defs/digest"
        },
        "manifestSubjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "entryName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "artifactDigest": {
          "$ref": "#/$defs/digest"
        },
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        }
      },
      "additionalProperties": false
    },
    "contextManifestSet": {
      "oneOf": [
        {
          "type": "object",
          "required": [
            "bundleId"
          ],
          "properties": {
            "bundleId": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "expected": {},
            "actual": {}
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "bundleId",
            "statementDigest",
            "subjectName",
            "artifactDigest"
          ],
          "properties": {
            "bundleId": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "statementDigest": {
              "$ref": "#/$defs/digest"
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "path": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "bundleId",
            "head",
            "subjectName",
            "artifactDigest"
          ],
          "properties": {
            "bundleId": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "head": {
              "$ref": "#/$defs/digest"
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "path": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            }
          },
          "additionalProperties": false
        }
      ]
    },
    "contextBundle": {
      "type": "object",
      "required": [
        "bundleId"
      ],
      "properties": {
        "bundleId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "expected": {},
        "actual": {},
        "issuedAt": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "evaluationTime": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "value": {}
      },
      "additionalProperties": false
    },
    "contextExpectedActual": {
      "type": "object",
      "required": [
        "expected",
        "actual"
      ],
      "properties": {
        "bundleId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "expected": {},
        "actual": {}
      },
      "additionalProperties": false
    },
    "contextArtifactOrPath": {
      "oneOf": [
        {
          "type": "object",
          "required": [
            "statementDigest",
            "subjectName",
            "artifactDigest"
          ],
          "properties": {
            "statementDigest": {
              "$ref": "#/$defs/digest"
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "path": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "head",
            "subjectName",
            "artifactDigest"
          ],
          "properties": {
            "head": {
              "$ref": "#/$defs/digest"
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "path": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "manifestStatementDigest",
            "manifestSubjectName",
            "entryName",
            "artifactDigest"
          ],
          "properties": {
            "manifestStatementDigest": {
              "$ref": "#/$defs/digest"
            },
            "manifestSubjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "entryName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "path": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            }
          },
          "additionalProperties": false
        }
      ]
    },
    "contextArtifact": {
      "oneOf": [
        {
          "type": "object",
          "required": [
            "statementDigest",
            "subjectName",
            "artifactDigest"
          ],
          "properties": {
            "statementDigest": {
              "$ref": "#/$defs/digest"
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "expected": {},
            "actual": {}
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "head",
            "subjectName",
            "artifactDigest"
          ],
          "properties": {
            "head": {
              "$ref": "#/$defs/digest"
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "expected": {},
            "actual": {}
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "manifestStatementDigest",
            "manifestSubjectName",
            "artifactDigest"
          ],
          "properties": {
            "manifestStatementDigest": {
              "$ref": "#/$defs/digest"
            },
            "manifestSubjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "expected": {},
            "actual": {}
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "manifestStatementDigest",
            "manifestSubjectName",
            "entryName",
            "artifactDigest"
          ],
          "properties": {
            "manifestStatementDigest": {
              "$ref": "#/$defs/digest"
            },
            "manifestSubjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "entryName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "expected": {},
            "actual": {}
          },
          "additionalProperties": false
        }
      ]
    },
    "contextDatasetSize": {
      "type": "object",
      "required": [
        "manifestStatementDigest",
        "manifestSubjectName",
        "entryName",
        "declaredSize",
        "actualSize"
      ],
      "properties": {
        "manifestStatementDigest": {
          "$ref": "#/$defs/digest"
        },
        "manifestSubjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "entryName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "artifactDigest": {
          "$ref": "#/$defs/digest"
        },
        "declaredSize": {
          "$ref": "#/$defs/decimalString"
        },
        "actualSize": {
          "$ref": "#/$defs/decimalString"
        }
      },
      "additionalProperties": false
    },
    "contextProfileArtifact": {
      "type": "object",
      "required": [
        "statementDigest",
        "subjectName",
        "profileId",
        "profileDigest"
      ],
      "properties": {
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "subjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "artifactDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "profileDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileClosureDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileTarget": {
          "enum": [
            "statement",
            "predicate",
            "artifact"
          ]
        },
        "mediaType": {
          "oneOf": [
            {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            {
              "type": "null"
            }
          ]
        }
      },
      "additionalProperties": false
    },
    "contextPolicyOverlap": {
      "type": "object",
      "required": [
        "lessConstrainedRuleId",
        "moreConstrainedRuleId"
      ],
      "properties": {
        "lessConstrainedRuleId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "moreConstrainedRuleId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        }
      },
      "additionalProperties": false
    }
  },
  "additionalProperties": false
}

The published bytes, unmodified.