Schema reference

`verification-report.schema.json`

The report contract. Separate outcomes per check, never a single collapsed verdict.

Title: Makoto v0.2 Verification Report
Identifier: https://usemakoto.dev/schema/v0.2/verification-report.schema.json
Digest: sha256:f1d47e7c8273deff5a65a6901d4f0b00f2eecaf7da5d4bc29055508a8877c3ae
Raw: /schema/v0.2/verification-report.schema.json
Carried in: The report makoto verify bundle --json writes, one per verification.
Responsibility: Stable decision, checks, digests, results, warnings, errors, and tool identity.

All schemas §15 §16.3 §Appendix A §Appendix C Fields Raw JSON

A real instance. Read from demos/end-to-end/artifacts/reports/positive.json, which validates against this schema.

{
  "actualHeads": [
    {
      "sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"
    }
  ],
  "actualNonce": null,
  "actualRecipient": "example:downstream-team",
  "artifacts": [
    {
      "applicableProfileCount": 1,
      "artifactKind": "ordinary",
      "digest": {
        "sha256": "ecd821dbe6f4204c4aad64878643d7954cb8c94abbf8d0b28f9c2bfc272f781e"
      },
      "digestPrerequisiteChecks": [],
      "digestStatus": "pass",
      "head": {
        "sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"
      },
      "lifecycleRole": "final",
      "profilePrerequisiteChecks": [],
      "profileStatus": "pass",
      "statementDigest": {
        "sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"
      },
      "subjectName": "customers.public.json"
    }
  ],
  "bundleId": "urn:uuid:55555555-5555-4555-8555-555555555555",
  "checks": [
    {
      "id": "load-safely",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "parse-strictly",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "index-payloads",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "core-schemas",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "signatures",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "authorization-thresholds",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "metadata-profiles",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "authorization",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "graph-dependency-artifacts",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "graph",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "roots-and-heads",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "completeness-anchor",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "freshness-anchors",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "artifact-bytes",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "artifact-profiles",
      "prerequisiteChecks": [],
      "status": "pass"
    },
    {
      "id": "decision",
      "prerequisiteChecks": [],
      "status": "pass"
    }
  ],
  "coreCatalogDigest": {
    "sha256": "b68cb2cae64cfcd2a5021a725505ccbaa80dfaa053322ce276af9c6650860304"
  },
  "datasetEntries": [],
  "decision": "allow",
  "errors": [],
  "evaluationTime": "2026-09-16T16:00:00Z",
  "expectedArtifacts": [
    {
      "digest": {
        "sha256": "ecd821dbe6f4204c4aad64878643d7954cb8c94abbf8d0b28f9c2bfc272f781e"
      },
      "head": {
        "sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"
      },
      "subjectName": "customers.public.json"
    }
  ],
  "expectedHeads": [
    {
      "sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"
    }
  ],
  "expectedManifestDigest": {
    "sha256": "e24aae77ba1374162edff49aa0ab1d8dd7e38c333e134a2128ad1598fec99fb7"
  },
  "expectedNonce": null,
  "expectedRecipient": null,
  "handoff": {
    "authorization": "pass",
    "completeness": "pass",
    "freshnessChecks": {
      "expected-artifacts": "pass",
      "expected-heads": "pass",
      "expected-manifest": "pass",
      "max-age": "not_checked",
      "nonce": "not_checked"
    },
    "freshnessMethod": "multiple",
    "freshnessStatus": "pass",
    "signatures": [
      {
        "cryptographic": "pass",
        "keyKnown": true,
        "keyid": "sha256:d016df3d83373617c06b5e1d6359caa06eeba8b3af2c7077234f109f2194516c"
      }
    ]
  },
  "manifestDigest": {
    "sha256": "e24aae77ba1374162edff49aa0ab1d8dd7e38c333e134a2128ad1598fec99fb7"
  },
  "nonceStatus": "not_checked",
  "policyDigest": {
    "sha256": "614eb137303bcea78f25ded2e332a10649358484f9582984c1730ddc106ebfcd"
  },
  "policyDigestEncoding": "exact-input-bytes",
  "primaryError": null,
  "profiles": [
    {
      "closureDigest": {
        "sha256": "8c13490145ccdfe6958163ef0c578afb57da07772c2071932f8a4d98870e776e"
      },
      "critical": true,
      "digest": {
        "sha256": "31934d2cf8fa7b5af2f8e4cf591d96278c4f59ddb6bb190afccb93701244f9eb"
      },
      "id": "https://schemas.example.internal/makoto/public-transform-metadata-v1.schema.json",
      "mediaType": null,
      "prerequisiteChecks": [],
      "requiredByAuthorizationRuleIds": [
        "urn:makoto:demo:rule:public-safe"
      ],
      "requiredByManifest": false,
      "requiredByPolicy": false,
      "resolution": "pass",
      "statementDigest": {
        "sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"
      },
      "subjectName": null,
      "target": "predicate",
      "validation": "pass"
    },
    {
      "closureDigest": {
        "sha256": "57eec614be9b2141ad536f486ff4400b514d79b8b1cc9642a839cf1a39b10794"
      },
      "critical": true,
      "digest": {
        "sha256": "68169d043c628fda5435cbd7845b02ea3e0d850b7a509c0b35fd304463fffacb"
      },
      "id": "https://schemas.example.internal/makoto/customer-public-v1.schema.json",
      "mediaType": "application/json",
      "prerequisiteChecks": [],
      "requiredByAuthorizationRuleIds": [],
      "requiredByManifest": true,
      "requiredByPolicy": true,
      "resolution": "pass",
      "statementDigest": {
        "sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"
      },
      "subjectName": "customers.public.json",
      "target": "artifact",
      "validation": "pass"
    }
  ],
  "quarantinedStatements": [],
  "recipientStatus": "not_checked",
  "reportTruncated": false,
  "reportVersion": "0.2",
  "roots": [
    {
      "sha256": "56b7be4394fe09c62ec7a3d5763cecc251e9696f267f35b2acc717b0d170a27a"
    }
  ],
  "statements": [
    {
      "authorization": "pass",
      "authorizationPrerequisiteChecks": [],
      "authorizingRuleIds": [
        "urn:makoto:demo:rule:normalize"
      ],
      "candidateRuleIds": [
        "urn:makoto:demo:rule:normalize"
      ],
      "coreSchema": "pass",
      "coreSchemaPrerequisiteChecks": [],
      "digest": {
        "sha256": "1f28b72bcd4c1e9b7df71403ac6bb1670c2f2b09628ca6d76a2fa384db9a0848"
      },
      "eventId": "urn:uuid:22222222-2222-4222-8222-222222222222",
      "graph": "pass",
      "graphPrerequisiteChecks": [],
      "predicateType": "https://usemakoto.dev/predicate/v0.2/transform",
      "signatures": [
        {
          "cryptographic": "pass",
          "keyKnown": true,
          "keyid": "sha256:47dea58ea00fae9417ee19d76755bfef690899021132effb04fe1f9e4f0c8059"
        }
      ]
    },
    {
      "authorization": "pass",
      "authorizationPrerequisiteChecks": [],
      "authorizingRuleIds": [
        "urn:makoto:demo:rule:origin"
      ],
      "candidateRuleIds": [
        "urn:makoto:demo:rule:origin"
      ],
      "coreSchema": "pass",
      "coreSchemaPrerequisiteChecks": [],
      "digest": {
        "sha256": "56b7be4394fe09c62ec7a3d5763cecc251e9696f267f35b2acc717b0d170a27a"
      },
      "eventId": "urn:uuid:11111111-1111-4111-8111-111111111111",
      "graph": "pass",
      "graphPrerequisiteChecks": [],
      "predicateType": "https://usemakoto.dev/predicate/v0.2/origin",
      "signatures": [
        {
          "cryptographic": "pass",
          "keyKnown": true,
          "keyid": "sha256:fd110d301d2f077de1414b8f99f441b1403fab207b2052fbd2c065e4ee8e7dc2"
        }
      ]
    },
    {
      "authorization": "pass",
      "authorizationPrerequisiteChecks": [],
      "authorizingRuleIds": [
        "urn:makoto:demo:rule:public-safe"
      ],
      "candidateRuleIds": [
        "urn:makoto:demo:rule:public-safe"
      ],
      "coreSchema": "pass",
      "coreSchemaPrerequisiteChecks": [],
      "digest": {
        "sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"
      },
      "eventId": "urn:uuid:33333333-3333-4333-8333-333333333333",
      "graph": "pass",
      "graphPrerequisiteChecks": [],
      "predicateType": "https://usemakoto.dev/predicate/v0.2/transform",
      "signatures": [
        {
          "cryptographic": "pass",
          "keyKnown": true,
          "keyid": "sha256:8cef065b7af83669150b7d32704d3d3e75c3e9aee0d4f6740544c68e81b377aa"
        }
      ]
    }
  ],
  "summary": {
    "artifactsChecked": 1,
    "artifactsDeclared": 1,
    "heads": 1,
    "historicalMaterialsChecked": 0,
    "historicalMaterialsDeclared": 0,
    "manifestSignaturesAuthorized": 1,
    "manifestSignaturesRequired": 1,
    "manifestSignaturesValid": 1,
    "profilesDeclared": 2,
    "profilesValidated": 2,
    "quarantinedStatementsTotal": 0,
    "roots": 1,
    "signaturesChecked": 4,
    "signaturesTotal": 4,
    "signaturesValid": 4,
    "statementsAuthorized": 3,
    "statementsReachable": 3,
    "statementsTotal": 3,
    "statementsValid": 3
  },
  "tool": {
    "name": "makoto",
    "version": "0.3.0a0"
  },
  "unindexedEnvelopes": [],
  "unreferencedFiles": [
    {
      "path": "schemas/resources/31934d2cf8fa7b5af2f8e4cf591d96278c4f59ddb6bb190afccb93701244f9eb.schema.json",
      "reason": "unreferenced",
      "status": "not_checked"
    },
    {
      "path": "schemas/resources/68169d043c628fda5435cbd7845b02ea3e0d850b7a509c0b35fd304463fffacb.schema.json",
      "reason": "unreferenced",
      "status": "not_checked"
    }
  ],
  "warnings": []
}

Fields

Top level integer nullableInteger decimalString digest nullableDigest digestArray nullableString timestamp status errorCode warningCode signature handoff expectedArtifact summary statement profile artifact datasetEntry unindexedEnvelope quarantinedStatement unreferencedFile check checkLoadSafely checkParseStrictly checkIndexPayloads checkCoreSchemas checkSignatures checkAuthorizationThresholds checkMetadataProfiles checkAuthorization checkGraphDependencyArtifacts checkGraph checkRootsAndHeads checkCompletenessAnchor checkFreshnessAnchors checkArtifactBytes checkArtifactProfiles checkDecision diagnosticContext diagnosticBase error warning tool topLevelPrerequisites profilePrerequisites recordPrerequisites contextPath contextLimit contextStatementDigestMismatch contextPathOrEvidence contextGraphStatement contextProfile contextSignature contextEvidenceIdentity contextProfileOrStatement contextRequiredProfile contextDataset contextManifestSet contextBundle contextExpectedActual contextArtifactOrPath contextArtifact contextDatasetSize contextProfileArtifact contextPolicyOverlap

Top level#

Shape object

closed object

Field	Type	Constraints, rules, and a real value
reportVersion required	string constant	= "0.2" `"0.2"`
decision required	enum	one of: "allow", "deny", "indeterminate" `"allow"`
reportTruncated required	boolean	`false`
primaryError required	one of: errorCode \| null	`null`
bundleId required	nullableString	`"urn:uuid:55555555-5555-4555-8555-555555555555"`
evaluationTime required	timestamp	`"2026-09-16T16:00:00Z"`
policyDigest required	digest	`{"sha256": "614eb137303bcea78f25ded2e332a10649358484f9582984c1730ddc106ebfcd"}`
policyDigestEncoding required	string constant	= "exact-input-bytes" `"exact-input-bytes"`
coreCatalogDigest required	digest	`{"sha256": "b68cb2cae64cfcd2a5021a725505ccbaa80dfaa053322ce276af9c6650860304"}`
manifestDigest required	nullableDigest	`{"sha256": "e24aae77ba1374162edff49aa0ab1d8dd7e38c333e134a2128ad1598fec99fb7"}`
expectedManifestDigest required	nullableDigest	`{"sha256": "e24aae77ba1374162edff49aa0ab1d8dd7e38c333e134a2128ad1598fec99fb7"}`
handoff required	handoff	`{"authorization": "pass", "completeness": "pass", "freshnessChecks": {"expected-artifacts": "pa…`
expectedHeads required	digestArray	`[{"sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"}]`
actualHeads required	digestArray	`[{"sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"}]`
expectedArtifacts required	array of expectedArtifact	`[{"digest": {"sha256": "ecd821dbe6f4204c4aad64878643d7954cb8c94abbf8d0b28f9c2bfc272f781e"}, "he…`
expectedRecipient required	nullableString	`null`
actualRecipient required	nullableString	`"example:downstream-team"`
recipientStatus required	status	`"not_checked"`
expectedNonce required	nullableString	`null`
actualNonce required	nullableString	`null`
nonceStatus required	status	`"not_checked"`
roots required	digestArray	`[{"sha256": "56b7be4394fe09c62ec7a3d5763cecc251e9696f267f35b2acc717b0d170a27a"}]`
summary required	summary	`{"artifactsChecked": 1, "artifactsDeclared": 1, "heads": 1, "historicalMaterialsChecked": 0, "h…`
statements required	array of statement	`[{"authorization": "pass", "authorizationPrerequisiteChecks": [], "authorizingRuleIds": ["urn:m…`
profiles required	array of profile	`[{"closureDigest": {"sha256": "8c13490145ccdfe6958163ef0c578afb57da07772c2071932f8a4d98870e776e…`
artifacts required	array of artifact	`[{"applicableProfileCount": 1, "artifactKind": "ordinary", "digest": {"sha256": "ecd821dbe6f420…`
unindexedEnvelopes required	array of unindexedEnvelope	`[]`
quarantinedStatements required	array of quarantinedStatement	`[]`
datasetEntries required	array of datasetEntry	`[]`
unreferencedFiles required	array of unreferencedFile	`[{"path": "schemas/resources/31934d2cf8fa7b5af2f8e4cf591d96278c4f59ddb6bb190afccb93701244f9eb.s…`
checks required	array	min items 16 max items 16 `[{"id": "load-safely", "prerequisiteChecks": [], "status": "pass"}, {"id": "parse-strictly", "p…`
warnings required	array of warning	`[]`
errors required	array of error	`[]`
tool required	tool	`{"name": "makoto", "version": "0.3.0a0"}`

integer#

Shape integer

≥ 0
≤ 9007199254740991

Appears at artifacts[].applicableProfileCount, summary.artifactsChecked, summary.artifactsDeclared, summary.heads, summary.historicalMaterialsChecked, summary.historicalMaterialsDeclared, summary.manifestSignaturesAuthorized, summary.manifestSignaturesRequired…

nullableInteger#

Shape one of 2 variants

Appears at summary.artifactsChecked, summary.artifactsDeclared, summary.heads, summary.historicalMaterialsChecked, summary.historicalMaterialsDeclared, summary.manifestSignaturesAuthorized, summary.manifestSignaturesRequired, summary.manifestSignaturesValid…

Variants (2)

Exactly one of these shapes must match.

#	Base
1	integer
2	null

decimalString#

Shape string

min length 1

Appears at datasetEntries[].declaredSize, errors[].context.actualSize, errors[].context.declaredSize

digest#

Shape object

closed object

Appears at actualHeads[], artifacts[].digest, artifacts[].head, artifacts[].statementDigest, coreCatalogDigest, datasetEntries[].digest, datasetEntries[].manifestStatementDigest, errors[].context.*…

Field	Type	Constraints, rules, and a real value
sha256 required	string	min length 64 max length 64 `"614eb137303bcea78f25ded2e332a10649358484f9582984c1730ddc106ebfcd"`

nullableDigest#

Shape one of 2 variants

Appears at artifacts[].head, expectedManifestDigest, manifestDigest

Variants (2)

Exactly one of these shapes must match.

#	Base
1	digest
2	null

digestArray#

Shape array of digest

Appears at actualHeads, expectedHeads, roots

nullableString#

Shape one of 2 variants

Appears at actualNonce, actualRecipient, bundleId, expectedNonce, expectedRecipient, profiles[].mediaType, profiles[].subjectName, statements[].eventId…

Variants (2)

Exactly one of these shapes must match.

#	Base
1	string
2	null

timestamp#

Shape string

min length 20
max length 30

Appears at evaluationTime

status#

Shape enum

one of: "pass", "fail", "indeterminate", "not_checked", "skipped"

Appears at artifacts[].digestStatus, artifacts[].profileStatus, datasetEntries[].digestStatus, datasetEntries[].sizeStatus, handoff.authorization, handoff.completeness, handoff.freshnessChecks.expected-artifacts, handoff.freshnessChecks.expected-heads…

errorCode#

Shape enum

one of: "E_BUNDLE_UNSAFE_PATH", "E_JSON_INVALID", "E_JSON_DUPLICATE_KEY", "E_ENVELOPE_MALFORMED", "E_PAYLOAD_TYPE", "E_STATEMENT_DIGEST", "E_CORE_SCHEMA", "E_CATALOG_INVALID", "E_PROFILE_UNRESOLVED", "E_PROFILE_INVALID", "E_PROFILE_TARGET_MISSING", "E_REQUIRED_PROFILE_MISSING", "E_SIGNATURE_INVALID", "E_SIGNER_UNAUTHORIZED", "E_PREDICATE_SEMANTICS_UNSUPPORTED", "E_EVENT_ID_DUPLICATE", "E_PREDECESSOR_MISSING", "E_PREDECESSOR_SUBJECT", "E_INPUT_DIGEST", "E_DATASET_MANIFEST_INVALID", "E_DATASET_MANIFEST_REQUIRED", "E_GRAPH_CYCLE", "E_ROOT_INVALID", "E_HANDOFF_REQUIRED", "E_MANIFEST_SET", "E_FRESHNESS_REQUIRED", "E_EXPECTED_MANIFEST", "E_EXPECTED_HEAD", "E_EXPECTED_ARTIFACT", "E_HANDOFF_RECIPIENT", "E_HANDOFF_NONCE", "E_HANDOFF_STALE", "E_ARTIFACT_MISSING", "E_ARTIFACT_DIGEST", "E_ARTIFACT_SIZE", "E_ARTIFACT_FORMAT", "E_RESOURCE_LIMIT"

Appears at primaryError, unindexedEnvelopes[].diagnosticCode

warningCode#

Shape enum

one of: "W_PROFILE_INDETERMINATE", "W_PROFILE_RESOURCE_LIMIT", "W_ARTIFACT_VALIDATION_LIMIT", "W_HISTORICAL_ARTIFACT_NOT_CHECKED", "W_SIGNATURE_UNKNOWN", "W_FRESHNESS_NOT_CHECKED", "W_ARTIFACT_UNPROFILED", "W_POLICY_RULE_OVERLAP"

signature#

Shape object

closed object

Appears at handoff.signatures[], statements[].signatures[]

Field	Type	Constraints, rules, and a real value
keyid required	string	min length 71 max length 71 `"sha256:d016df3d83373617c06b5e1d6359caa06eeba8b3af2c7077234f109f2194516c"`
keyKnown required	boolean	`true`
cryptographic required	status	`"pass"`

handoff#

Shape object

closed object

Appears at handoff

Field	Type	Constraints, rules, and a real value
signatures required	array of signature	`[{"cryptographic": "pass", "keyKnown": true, "keyid": "sha256:d016df3d83373617c06b5e1d6359caa06…`
authorization required	status	`"pass"`
completeness required	status	`"pass"`
freshnessMethod required	enum	one of: "expected-manifest", "expected-heads", "expected-artifacts", "nonce", "max-age", "multiple", "none" `"multiple"`
freshnessChecks required	object	closed object `{"expected-artifacts": "pass", "expected-heads": "pass", "expected-manifest": "pass", "max-age"…`
freshnessStatus required	status	`"pass"`

expectedArtifact#

Shape object

closed object

Appears at expectedArtifacts[]

Field	Type	Constraints, rules, and a real value
head required	digest	`{"sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"}`
subjectName required	string	min length 1 max length 4096 `"customers.public.json"`
digest required	digest	`{"sha256": "ecd821dbe6f4204c4aad64878643d7954cb8c94abbf8d0b28f9c2bfc272f781e"}`

summary#

Shape object

closed object

Appears at summary

Field	Type	Constraints, rules, and a real value
statementsTotal required	nullableInteger	`3`
quarantinedStatementsTotal required	nullableInteger	`0`
statementsReachable required	nullableInteger	`3`
statementsValid required	nullableInteger	`3`
statementsAuthorized required	nullableInteger	`3`
signaturesTotal required	nullableInteger	`4`
signaturesChecked required	nullableInteger	`4`
signaturesValid required	nullableInteger	`4`
manifestSignaturesRequired required	nullableInteger	`1`
manifestSignaturesValid required	nullableInteger	`1`
manifestSignaturesAuthorized required	nullableInteger	`1`
roots required	nullableInteger	`1`
heads required	nullableInteger	`1`
artifactsDeclared required	nullableInteger	`1`
artifactsChecked required	nullableInteger	`1`
historicalMaterialsDeclared required	nullableInteger	`0`
historicalMaterialsChecked required	nullableInteger	`0`
profilesDeclared required	nullableInteger	`2`
profilesValidated required	nullableInteger	`2`

statement#

Shape object

closed object

Appears at statements[]

Field	Type	Constraints, rules, and a real value
digest required	digest	`{"sha256": "1f28b72bcd4c1e9b7df71403ac6bb1670c2f2b09628ca6d76a2fa384db9a0848"}`
predicateType required	nullableString	`"https://usemakoto.dev/predicate/v0.2/transform"`
eventId required	nullableString	`"urn:uuid:22222222-2222-4222-8222-222222222222"`
coreSchema required	status	`"pass"`
coreSchemaPrerequisiteChecks required	recordPrerequisites	`[]`
signatures required	array of signature	`[{"cryptographic": "pass", "keyKnown": true, "keyid": "sha256:47dea58ea00fae9417ee19d76755bfef6…`
candidateRuleIds required	array of string	each: min length 1 each: max length 4096 `["urn:makoto:demo:rule:normalize"]`
authorizingRuleIds required	array of string	each: min length 1 each: max length 4096 `["urn:makoto:demo:rule:normalize"]`
authorization required	status	`"pass"`
authorizationPrerequisiteChecks required	recordPrerequisites	`[]`
graph required	status	`"pass"`
graphPrerequisiteChecks required	recordPrerequisites	`[]`

Conditional rules

When coreSchema = "skipped"; requires coreSchema: then coreSchemaPrerequisiteChecks min items 1.
When not coreSchema = "skipped"; requires coreSchema: coreSchemaPrerequisiteChecks max items 0.
When authorization = "skipped"; requires authorization: then authorizationPrerequisiteChecks min items 1.
When not authorization = "skipped"; requires authorization: authorizationPrerequisiteChecks max items 0.
When graph = "skipped"; requires graph: then graphPrerequisiteChecks min items 1.
When not graph = "skipped"; requires graph: graphPrerequisiteChecks max items 0.

profile#

Shape object

closed object

Appears at profiles[]

Field	Type	Constraints, rules, and a real value
statementDigest required	digest	`{"sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"}`
id required	string	min length 1 max length 4096 `"https://schemas.example.internal/makoto/public-transform-metadata-v1.schema.json"`
digest required	digest	`{"sha256": "31934d2cf8fa7b5af2f8e4cf591d96278c4f59ddb6bb190afccb93701244f9eb"}`
closureDigest required	digest	`{"sha256": "8c13490145ccdfe6958163ef0c578afb57da07772c2071932f8a4d98870e776e"}`
target required	enum	one of: "statement", "predicate", "artifact" `"predicate"`
subjectName required	nullableString	`null`
mediaType required	nullableString	`null`
critical required	boolean	`true`
requiredByManifest required	boolean	`false`
requiredByPolicy required	boolean	`false`
requiredByAuthorizationRuleIds required	array of string	each: min length 1 each: max length 4096 `["urn:makoto:demo:rule:public-safe"]`
resolution required	status	`"pass"`
validation required	status	`"pass"`
prerequisiteChecks required	profilePrerequisites	`[]`

Conditional rules

When validation = "skipped"; requires validation: then prerequisiteChecks min items 1.
When not validation = "skipped"; requires validation: prerequisiteChecks max items 0.

artifact#

Shape object

closed object

Appears at artifacts[]

Field	Type	Constraints, rules, and a real value
lifecycleRole required	enum	one of: "final", "historical" `"final"`
artifactKind required	enum	one of: "ordinary", "dataset-manifest" `"ordinary"`
statementDigest required	digest	`{"sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"}`
head required	nullableDigest	`{"sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"}`
subjectName required	string	min length 1 max length 4096 `"customers.public.json"`
digest required	digest	`{"sha256": "ecd821dbe6f4204c4aad64878643d7954cb8c94abbf8d0b28f9c2bfc272f781e"}`
digestStatus required	status	`"pass"`
digestPrerequisiteChecks required	recordPrerequisites	`[]`
profileStatus required	status	`"pass"`
profilePrerequisiteChecks required	recordPrerequisites	`[]`
applicableProfileCount required	integer	`1`

Conditional rules

When digestStatus = "skipped"; requires digestStatus: then digestPrerequisiteChecks min items 1.
When not digestStatus = "skipped"; requires digestStatus: digestPrerequisiteChecks max items 0.
When profileStatus = "skipped"; requires profileStatus: then profilePrerequisiteChecks min items 1.
When not profileStatus = "skipped"; requires profileStatus: profilePrerequisiteChecks max items 0.

datasetEntry#

Shape object

closed object

Appears at datasetEntries[]

Field	Type	Constraints, rules, and a real value
manifestStatementDigest required	digest
manifestSubjectName required	string	min length 1 max length 4096
entryName required	string	min length 1 max length 1024
digest required	digest
declaredSize required	one of: decimalString \| null
digestStatus required	status
digestPrerequisiteChecks required	recordPrerequisites
sizeStatus required	status
sizePrerequisiteChecks required	recordPrerequisites

Conditional rules

When digestStatus = "skipped"; requires digestStatus: then digestPrerequisiteChecks min items 1.
When not digestStatus = "skipped"; requires digestStatus: digestPrerequisiteChecks max items 0.
When sizeStatus = "skipped"; requires sizeStatus: then sizePrerequisiteChecks min items 1.
When not sizeStatus = "skipped"; requires sizeStatus: sizePrerequisiteChecks max items 0.

unindexedEnvelope#

Shape object

closed object

Appears at unindexedEnvelopes[]

Field	Type	Constraints, rules, and a real value
path required	string	min length 1 max length 1024
payloadTypeStatus required	enum	one of: "pass", "fail", "not_checked"
diagnosticCode required	one of: errorCode \| null

quarantinedStatement#

Shape object

closed object

Appears at quarantinedStatements[]

Field	Type	Constraints, rules, and a real value
path required	string	min length 1 max length 1024
digest required	digest

unreferencedFile#

Shape object

closed object

Appears at unreferencedFiles[]

Field	Type	Constraints, rules, and a real value
path required	string	min length 1 max length 1024 `"schemas/resources/31934d2cf8fa7b5af2f8e4cf591d96278c4f59ddb6bb190afccb93701244f9eb.schema.json"`
status required	string constant	= "not_checked" `"not_checked"`
reason required	string constant	= "unreferenced" `"unreferenced"`

check#

Shape object

closed object

Field	Type	Constraints, rules, and a real value
id required	string
status required	status
prerequisiteChecks required	topLevelPrerequisites

Conditional rules

When status = "skipped": then prerequisiteChecks min items 1.
When not status = "skipped": prerequisiteChecks max items 0.

checkLoadSafely#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "load-safely"

checkParseStrictly#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "parse-strictly"

checkIndexPayloads#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "index-payloads"

checkCoreSchemas#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "core-schemas"

checkSignatures#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "signatures"

checkAuthorizationThresholds#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "authorization-thresholds"

checkMetadataProfiles#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "metadata-profiles"

checkAuthorization#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "authorization"

checkGraphDependencyArtifacts#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "graph-dependency-artifacts"

checkGraph#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "graph"

checkRootsAndHeads#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "roots-and-heads"

checkCompletenessAnchor#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "completeness-anchor"

checkFreshnessAnchors#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "freshness-anchors"

checkArtifactBytes#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "artifact-bytes"

checkArtifactProfiles#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "artifact-profiles"

checkDecision#

Shape check

Field	Type	Constraints, rules, and a real value
id optional	string constant	= "decision"

diagnosticContext#

Appears at errors[].context, warnings[].context

diagnosticBase#

Shape object

closed object

Appears at errors[], warnings[]

Field	Type	Constraints, rules, and a real value
code required	string	`"E_SIGNATURE_INVALID"`
step required	integer	`5`
message required	string	max length 4096 `"signature verification failed"`
context required	diagnosticContext	`{"keyid": "sha256:8cef065b7af83669150b7d32704d3d3e75c3e9aee0d4f6740544c68e81b377aa", "statement…`
causedByCheck required	string	`"signatures"`

error#

Shape one of 70 variants

Appears at errors[]

Variants (70)

Exactly one of these shapes must match.

#	Base	code	step	causedByCheck	context
1	diagnosticBase	`"E_BUNDLE_UNSAFE_PATH"`	`1`	`"load-safely"`	contextPath
2	diagnosticBase	`"E_BUNDLE_UNSAFE_PATH"`	`2`	`"parse-strictly"`	contextPath
3	diagnosticBase	`"E_BUNDLE_UNSAFE_PATH"`	`4`	`"core-schemas"`	contextPath
4	diagnosticBase	`"E_BUNDLE_UNSAFE_PATH"`	`8`	`"graph-dependency-artifacts"`	contextPath
5	diagnosticBase	`"E_BUNDLE_UNSAFE_PATH"`	`12`	`"artifact-bytes"`	contextPath
6	diagnosticBase	`"E_RESOURCE_LIMIT"`	`1`	`"load-safely"`	contextLimit
7	diagnosticBase	`"E_RESOURCE_LIMIT"`	`2`	`"parse-strictly"`	contextLimit
8	diagnosticBase	`"E_RESOURCE_LIMIT"`	`3`	`"index-payloads"`	contextLimit
9	diagnosticBase	`"E_RESOURCE_LIMIT"`	`4`	`"core-schemas"`	contextLimit
10	diagnosticBase	`"E_RESOURCE_LIMIT"`	`5`	`"signatures"`	contextLimit
11	diagnosticBase	`"E_RESOURCE_LIMIT"`	`6`	`"authorization-thresholds"`	contextLimit
12	diagnosticBase	`"E_RESOURCE_LIMIT"`	`7`	`"metadata-profiles"`	contextLimit
13	diagnosticBase	`"E_RESOURCE_LIMIT"`	`7`	`"authorization"`	contextLimit
14	diagnosticBase	`"E_RESOURCE_LIMIT"`	`8`	`"graph-dependency-artifacts"`	contextLimit
15	diagnosticBase	`"E_RESOURCE_LIMIT"`	`9`	`"graph"`	contextLimit
16	diagnosticBase	`"E_RESOURCE_LIMIT"`	`10`	`"roots-and-heads"`	contextLimit
17	diagnosticBase	`"E_RESOURCE_LIMIT"`	`11`	`"completeness-anchor"`	contextLimit
18	diagnosticBase	`"E_RESOURCE_LIMIT"`	`11`	`"freshness-anchors"`	contextLimit
19	diagnosticBase	`"E_RESOURCE_LIMIT"`	`12`	`"artifact-bytes"`	contextLimit
20	diagnosticBase	`"E_RESOURCE_LIMIT"`	`13`	`"artifact-profiles"`	contextLimit
21	diagnosticBase	`"E_RESOURCE_LIMIT"`	`14`	`"decision"`	contextLimit
22	diagnosticBase	`"E_HANDOFF_REQUIRED"`	`1`	`"load-safely"`	contextPath
23	diagnosticBase	`"E_HANDOFF_REQUIRED"`	`2`	`"parse-strictly"`	contextPath
24	diagnosticBase	`"E_JSON_INVALID"`	`2`	`"parse-strictly"`	contextPath
25	diagnosticBase	`"E_JSON_INVALID"`	`3`	`"index-payloads"`	contextPath
26	diagnosticBase	`"E_JSON_INVALID"`	`4`	`"core-schemas"`	contextPath
27	diagnosticBase	`"E_JSON_DUPLICATE_KEY"`	`2`	`"parse-strictly"`	contextPath
28	diagnosticBase	`"E_JSON_DUPLICATE_KEY"`	`3`	`"index-payloads"`	contextPath
29	diagnosticBase	`"E_JSON_DUPLICATE_KEY"`	`4`	`"core-schemas"`	contextPath
30	diagnosticBase	`"E_ENVELOPE_MALFORMED"`	`2`	`"parse-strictly"`	contextPath
31	diagnosticBase	`"E_PAYLOAD_TYPE"`	`2`	`"parse-strictly"`	contextPath
32	diagnosticBase	`"E_STATEMENT_DIGEST"`	`3`	`"index-payloads"`	contextStatementDigestMismatch
33	diagnosticBase	`"E_CORE_SCHEMA"`	`2`	`"core-schemas"`	contextPathOrEvidence
34	diagnosticBase	`"E_CORE_SCHEMA"`	`4`	`"core-schemas"`	contextPathOrEvidence
35	diagnosticBase	`"E_CATALOG_INVALID"`	`4`	`"core-schemas"`	contextPath
36	diagnosticBase	`"E_PREDICATE_SEMANTICS_UNSUPPORTED"`	`4`	`"core-schemas"`	contextGraphStatement
37	diagnosticBase	`"E_PROFILE_TARGET_MISSING"`	`4`	`"core-schemas"`	contextProfile
38	diagnosticBase	`"E_SIGNATURE_INVALID"`	`5`	`"signatures"`	contextSignature
39	diagnosticBase	`"E_SIGNER_UNAUTHORIZED"`	`6`	`"authorization-thresholds"`	contextEvidenceIdentity
40	diagnosticBase	`"E_PROFILE_UNRESOLVED"`	`7`	`"metadata-profiles"`	contextProfileOrStatement
41	diagnosticBase	`"E_PROFILE_UNRESOLVED"`	`7`	`"authorization"`	contextProfileOrStatement
42	diagnosticBase	`"E_PROFILE_UNRESOLVED"`	`8`	`"graph-dependency-artifacts"`	contextProfileOrStatement
43	diagnosticBase	`"E_PROFILE_UNRESOLVED"`	`13`	`"artifact-profiles"`	contextProfileOrStatement
44	diagnosticBase	`"E_PROFILE_INVALID"`	`7`	`"metadata-profiles"`	contextProfileOrStatement
45	diagnosticBase	`"E_PROFILE_INVALID"`	`8`	`"graph-dependency-artifacts"`	contextProfileOrStatement
46	diagnosticBase	`"E_PROFILE_INVALID"`	`13`	`"artifact-profiles"`	contextProfileOrStatement
47	diagnosticBase	`"E_REQUIRED_PROFILE_MISSING"`	`11`	`"completeness-anchor"`	contextRequiredProfile
48	diagnosticBase	`"E_REQUIRED_PROFILE_MISSING"`	`13`	`"artifact-profiles"`	contextRequiredProfile
49	diagnosticBase	`"E_DATASET_MANIFEST_INVALID"`	`8`	`"graph-dependency-artifacts"`	contextDataset
50	diagnosticBase	`"E_DATASET_MANIFEST_INVALID"`	`12`	`"artifact-bytes"`	contextDataset
51	diagnosticBase	`"E_DATASET_MANIFEST_REQUIRED"`	`8`	`"graph-dependency-artifacts"`	contextDataset
52	diagnosticBase	`"E_EVENT_ID_DUPLICATE"`	`9`	`"graph"`	contextGraphStatement
53	diagnosticBase	`"E_PREDECESSOR_MISSING"`	`9`	`"graph"`	contextGraphStatement
54	diagnosticBase	`"E_PREDECESSOR_SUBJECT"`	`9`	`"graph"`	contextGraphStatement
55	diagnosticBase	`"E_INPUT_DIGEST"`	`9`	`"graph"`	contextGraphStatement
56	diagnosticBase	`"E_GRAPH_CYCLE"`	`9`	`"graph"`	contextGraphStatement
57	diagnosticBase	`"E_ROOT_INVALID"`	`10`	`"roots-and-heads"`	contextGraphStatement
58	diagnosticBase	`"E_MANIFEST_SET"`	`11`	`"completeness-anchor"`	contextManifestSet
59	diagnosticBase	`"E_FRESHNESS_REQUIRED"`	`11`	`"freshness-anchors"`	contextBundle
60	diagnosticBase	`"E_EXPECTED_MANIFEST"`	`11`	`"freshness-anchors"`	contextExpectedActual
61	diagnosticBase	`"E_EXPECTED_HEAD"`	`11`	`"freshness-anchors"`	contextBundle
62	diagnosticBase	`"E_EXPECTED_ARTIFACT"`	`11`	`"freshness-anchors"`	contextBundle
63	diagnosticBase	`"E_HANDOFF_RECIPIENT"`	`11`	`"freshness-anchors"`	contextExpectedActual
64	diagnosticBase	`"E_HANDOFF_NONCE"`	`11`	`"freshness-anchors"`	contextExpectedActual
65	diagnosticBase	`"E_HANDOFF_STALE"`	`11`	`"freshness-anchors"`	contextBundle
66	diagnosticBase	`"E_ARTIFACT_MISSING"`	`12`	`"artifact-bytes"`	contextArtifactOrPath
67	diagnosticBase	`"E_ARTIFACT_DIGEST"`	`8`	`"graph-dependency-artifacts"`	contextArtifact
68	diagnosticBase	`"E_ARTIFACT_DIGEST"`	`12`	`"artifact-bytes"`	contextArtifact
69	diagnosticBase	`"E_ARTIFACT_SIZE"`	`12`	`"artifact-bytes"`	contextDatasetSize
70	diagnosticBase	`"E_ARTIFACT_FORMAT"`	`13`	`"artifact-profiles"`	contextProfileArtifact

warning#

Shape one of 11 variants

Appears at warnings[]

Variants (11)

Exactly one of these shapes must match.

#	Base	code	step	causedByCheck	context
1	diagnosticBase	`"W_POLICY_RULE_OVERLAP"`	`0`	`"authorization-thresholds"`	contextPolicyOverlap
2	diagnosticBase	`"W_SIGNATURE_UNKNOWN"`	`5`	`"signatures"`	contextSignature
3	diagnosticBase	`"W_PROFILE_INDETERMINATE"`	`7`	`"metadata-profiles"`	contextProfileOrStatement
4	diagnosticBase	`"W_PROFILE_INDETERMINATE"`	`8`	`"graph-dependency-artifacts"`	contextProfileOrStatement
5	diagnosticBase	`"W_PROFILE_INDETERMINATE"`	`13`	`"artifact-profiles"`	contextProfileOrStatement
6	diagnosticBase	`"W_PROFILE_RESOURCE_LIMIT"`	`7`	`"metadata-profiles"`	contextProfileOrStatement
7	diagnosticBase	`"W_ARTIFACT_VALIDATION_LIMIT"`	`8`	`"graph-dependency-artifacts"`	contextProfileOrStatement
8	diagnosticBase	`"W_ARTIFACT_VALIDATION_LIMIT"`	`13`	`"artifact-profiles"`	contextProfileOrStatement
9	diagnosticBase	`"W_HISTORICAL_ARTIFACT_NOT_CHECKED"`	`12`	`"artifact-bytes"`	contextArtifact
10	diagnosticBase	`"W_FRESHNESS_NOT_CHECKED"`	`11`	`"freshness-anchors"`	contextBundle
11	diagnosticBase	`"W_ARTIFACT_UNPROFILED"`	`13`	`"artifact-profiles"`	contextArtifact

tool#

Shape object

closed object

Appears at tool

Field	Type	Constraints, rules, and a real value
name required	string	min length 1 max length 4096 `"makoto"`
version required	string	min length 1 max length 4096 `"0.3.0a0"`

topLevelPrerequisites#

Shape array of enum

unique items
each: one of: "load-safely", "parse-strictly", "index-payloads", "core-schemas", "signatures", "authorization-thresholds", "metadata-profiles", "authorization", "graph-dependency-artifacts", "graph", "roots-and-heads", "completeness-anchor", "freshness-anchors", "artifact-bytes", "artifact-profiles", "decision"

profilePrerequisites#

Shape array of enum

unique items
each: one of: "authorization-thresholds", "metadata-profiles", "authorization", "graph-dependency-artifacts", "graph", "artifact-bytes", "artifact-profiles", "resolution"

Appears at profiles[].prerequisiteChecks

recordPrerequisites#

Shape array of enum

unique items
each: one of: "index-payloads", "core-schemas", "signatures", "authorization-thresholds", "metadata-profiles", "authorization", "graph-dependency-artifacts", "graph", "completeness-anchor", "artifact-bytes"

Appears at artifacts[].digestPrerequisiteChecks, artifacts[].profilePrerequisiteChecks, datasetEntries[].digestPrerequisiteChecks, datasetEntries[].sizePrerequisiteChecks, statements[].authorizationPrerequisiteChecks, statements[].coreSchemaPrerequisiteChecks, statements[].graphPrerequisiteChecks

contextPath#

Shape object

closed object

Appears at errors[].context

Field	Type	Constraints, rules, and a real value
path required	string	min length 1 max length 1024
value optional	any

contextLimit#

Shape object

closed object

Appears at errors[].context

Field	Type	Constraints, rules, and a real value
limit required	string	min length 1 max length 4096
path optional	string	min length 1 max length 1024
statementDigest optional	digest	`{"sha256": "c4af1b433b03c69ae3d4ed795d4f39e189118d1cc3c4dc52397f911f13d6dc3d"}`
profileId optional	string	min length 1 max length 4096 `"https://schemas.example.internal/makoto/customer-public-v1.schema.json"`
profileDigest optional	digest	`{"sha256": "68169d043c628fda5435cbd7845b02ea3e0d850b7a509c0b35fd304463fffacb"}`
subjectName optional	string	min length 1 max length 4096 `"customers.public.json"`
entryName optional	string	min length 1 max length 1024
value optional	any

contextStatementDigestMismatch#

Shape object

closed object

Appears at errors[].context

Field	Type	Constraints, rules, and a real value
statementDigest required	digest	`{"sha256": "c4af1b433b03c69ae3d4ed795d4f39e189118d1cc3c4dc52397f911f13d6dc3d"}`
declared required	any	`{"sha256": "99aee76db46a720405da6d0015d427c791b0d4e02367b9e2bc36ce82ae812bce"}`
actual optional	any
path optional	string	min length 1 max length 1024

contextPathOrEvidence#

Shape one of 3 variants

Appears at errors[].context

Variants (3)

Exactly one of these shapes must match.

#	Base	statementDigest	manifestDigest
1	object
2	object	digest
3	object		digest

contextGraphStatement#

Shape object

closed object

Appears at errors[].context

Field	Type	Constraints, rules, and a real value
statementDigest required	digest	`{"sha256": "c4af1b433b03c69ae3d4ed795d4f39e189118d1cc3c4dc52397f911f13d6dc3d"}`
predicateType optional	string	min length 1 max length 4096
eventId optional	string	min length 1 max length 4096
inputName optional	string	min length 1 max length 4096
predecessorStatementDigest optional	digest
predecessorSubjectName optional	string	min length 1 max length 4096
entryName optional	string	min length 1 max length 1024
expected optional	any
actual optional	any

contextProfile#

Shape object

closed object

Appears at errors[].context

Field	Type	Constraints, rules, and a real value
statementDigest required	digest	`{"sha256": "c4af1b433b03c69ae3d4ed795d4f39e189118d1cc3c4dc52397f911f13d6dc3d"}`
profileId required	string	min length 1 max length 4096 `"https://schemas.example.internal/makoto/customer-public-v1.schema.json"`
profileDigest required	digest	`{"sha256": "68169d043c628fda5435cbd7845b02ea3e0d850b7a509c0b35fd304463fffacb"}`
profileClosureDigest optional	digest
profileTarget optional	enum	one of: "statement", "predicate", "artifact"
subjectName optional	string	min length 1 max length 4096 `"customers.public.json"`
mediaType optional	one of: string \| null

contextSignature#

Shape object

closed object

Appears at errors[].context, warnings[].context

Field	Type	Constraints, rules, and a real value
statementDigest required	digest	`{"sha256": "c4af1b433b03c69ae3d4ed795d4f39e189118d1cc3c4dc52397f911f13d6dc3d"}`
keyid required	string	min length 1 max length 4096 `"sha256:8cef065b7af83669150b7d32704d3d3e75c3e9aee0d4f6740544c68e81b377aa"`

contextEvidenceIdentity#

Shape one of 2 variants

Appears at errors[].context

Variants (2)

Exactly one of these shapes must match.

#	Base	statementDigest	manifestDigest
1	object	digest
2	object		digest

contextProfileOrStatement#

Shape one of 2 variants

Appears at errors[].context, warnings[].context

Variants (2)

Exactly one of these shapes must match.

#	Base	statementDigest	profileDigest	profileClosureDigest
1	object	digest
2	object	digest	digest	digest

contextRequiredProfile#

Shape object

closed object

Appears at errors[].context

Field	Type	Constraints, rules, and a real value
profileId required	string	min length 1 max length 4096 `"https://schemas.example.internal/makoto/customer-public-v1.schema.json"`
profileDigest required	digest	`{"sha256": "68169d043c628fda5435cbd7845b02ea3e0d850b7a509c0b35fd304463fffacb"}`
profileClosureDigest optional	digest
profileTarget optional	enum	one of: "statement", "predicate", "artifact"
head optional	digest	`{"sha256": "c4af1b433b03c69ae3d4ed795d4f39e189118d1cc3c4dc52397f911f13d6dc3d"}`
subjectName required	string	min length 1 max length 4096 `"customers.public.json"`
mediaType optional	one of: string \| null

contextDataset#

Shape object

closed object

Appears at errors[].context

Field	Type	Constraints, rules, and a real value
manifestStatementDigest required	digest
manifestSubjectName required	string	min length 1 max length 4096
entryName optional	string	min length 1 max length 1024
artifactDigest optional	digest	`{"sha256": "ecd821dbe6f4204c4aad64878643d7954cb8c94abbf8d0b28f9c2bfc272f781e"}`
path optional	string	min length 1 max length 1024

contextManifestSet#

Shape one of 3 variants

Appears at errors[].context

Variants (3)

Exactly one of these shapes must match.

#	Base	statementDigest	artifactDigest	head
1	object
2	object	digest	digest
3	object		digest	digest

contextBundle#

Shape object

closed object

Appears at errors[].context, warnings[].context

Field	Type	Constraints, rules, and a real value
bundleId required	string	min length 1 max length 4096 `"urn:makoto:demo:negative:edited-signed-metadata"`
expected optional	any
actual optional	any
issuedAt optional	string	min length 1 max length 4096
evaluationTime optional	string	min length 1 max length 4096
value optional	any

contextExpectedActual#

Shape object

closed object

Appears at errors[].context

Field	Type	Constraints, rules, and a real value
bundleId optional	string	min length 1 max length 4096 `"urn:makoto:demo:negative:edited-signed-metadata"`
expected required	any
actual required	any

contextArtifactOrPath#

Shape one of 3 variants

Appears at errors[].context

Variants (3)

Exactly one of these shapes must match.

#	Base	statementDigest	artifactDigest	head	manifestStatementDigest
1	object	digest	digest
2	object		digest	digest
3	object		digest		digest

contextArtifact#

Shape one of 4 variants

Appears at errors[].context, warnings[].context

Variants (4)

Exactly one of these shapes must match.

#	Base	statementDigest	artifactDigest	head	manifestStatementDigest
1	object	digest	digest
2	object		digest	digest
3	object		digest		digest
4	object		digest		digest

contextDatasetSize#

Shape object

closed object

Appears at errors[].context

Field	Type	Constraints, rules, and a real value
manifestStatementDigest required	digest
manifestSubjectName required	string	min length 1 max length 4096
entryName required	string	min length 1 max length 1024
artifactDigest optional	digest	`{"sha256": "ecd821dbe6f4204c4aad64878643d7954cb8c94abbf8d0b28f9c2bfc272f781e"}`
declaredSize required	decimalString
actualSize required	decimalString

contextProfileArtifact#

Shape object

closed object

Appears at errors[].context

Field	Type	Constraints, rules, and a real value
statementDigest required	digest	`{"sha256": "c4af1b433b03c69ae3d4ed795d4f39e189118d1cc3c4dc52397f911f13d6dc3d"}`
subjectName required	string	min length 1 max length 4096 `"customers.public.json"`
artifactDigest optional	digest	`{"sha256": "ecd821dbe6f4204c4aad64878643d7954cb8c94abbf8d0b28f9c2bfc272f781e"}`
profileId required	string	min length 1 max length 4096 `"https://schemas.example.internal/makoto/customer-public-v1.schema.json"`
profileDigest required	digest	`{"sha256": "68169d043c628fda5435cbd7845b02ea3e0d850b7a509c0b35fd304463fffacb"}`
profileClosureDigest optional	digest
profileTarget optional	enum	one of: "statement", "predicate", "artifact"
mediaType optional	one of: string \| null

contextPolicyOverlap#

Shape object

closed object

Appears at warnings[].context

Field	Type	Constraints, rules, and a real value
lessConstrainedRuleId required	string	min length 1 max length 4096
moreConstrainedRuleId required	string	min length 1 max length 4096

Real documents that validate

demos/end-to-end/artifacts/reports/positive.json
demos/end-to-end/artifacts/reports/edited-signed-metadata.json
demos/end-to-end/artifacts/reports/mutated-final-data.json
demos/end-to-end/artifacts/reports/private-schema-violation.json
demos/end-to-end/artifacts/reports/removed-predecessor.json
demos/end-to-end/artifacts/reports/rewired-step.json
demos/end-to-end/artifacts/reports/statement-digest-mismatch.json
demos/end-to-end/artifacts/reports/unauthorized-signer.json

Raw JSON

The published document (85,954 bytes)

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://usemakoto.dev/schema/v0.2/verification-report.schema.json",
  "title": "Makoto v0.2 Verification Report",
  "type": "object",
  "required": [
    "reportVersion",
    "decision",
    "reportTruncated",
    "primaryError",
    "bundleId",
    "evaluationTime",
    "policyDigest",
    "policyDigestEncoding",
    "coreCatalogDigest",
    "manifestDigest",
    "expectedManifestDigest",
    "handoff",
    "expectedHeads",
    "actualHeads",
    "expectedArtifacts",
    "expectedRecipient",
    "actualRecipient",
    "recipientStatus",
    "expectedNonce",
    "actualNonce",
    "nonceStatus",
    "roots",
    "summary",
    "statements",
    "profiles",
    "artifacts",
    "unindexedEnvelopes",
    "quarantinedStatements",
    "datasetEntries",
    "unreferencedFiles",
    "checks",
    "warnings",
    "errors",
    "tool"
  ],
  "properties": {
    "reportVersion": {
      "const": "0.2"
    },
    "decision": {
      "enum": [
        "allow",
        "deny",
        "indeterminate"
      ]
    },
    "reportTruncated": {
      "type": "boolean"
    },
    "primaryError": {
      "oneOf": [
        {
          "$ref": "#/$defs/errorCode"
        },
        {
          "type": "null"
        }
      ]
    },
    "bundleId": {
      "$ref": "#/$defs/nullableString"
    },
    "evaluationTime": {
      "$ref": "#/$defs/timestamp"
    },
    "policyDigest": {
      "$ref": "#/$defs/digest"
    },
    "policyDigestEncoding": {
      "const": "exact-input-bytes"
    },
    "coreCatalogDigest": {
      "$ref": "#/$defs/digest"
    },
    "manifestDigest": {
      "$ref": "#/$defs/nullableDigest"
    },
    "expectedManifestDigest": {
      "$ref": "#/$defs/nullableDigest"
    },
    "handoff": {
      "$ref": "#/$defs/handoff"
    },
    "expectedHeads": {
      "$ref": "#/$defs/digestArray"
    },
    "actualHeads": {
      "$ref": "#/$defs/digestArray"
    },
    "expectedArtifacts": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/expectedArtifact"
      }
    },
    "expectedRecipient": {
      "$ref": "#/$defs/nullableString"
    },
    "actualRecipient": {
      "$ref": "#/$defs/nullableString"
    },
    "recipientStatus": {
      "$ref": "#/$defs/status"
    },
    "expectedNonce": {
      "$ref": "#/$defs/nullableString"
    },
    "actualNonce": {
      "$ref": "#/$defs/nullableString"
    },
    "nonceStatus": {
      "$ref": "#/$defs/status"
    },
    "roots": {
      "$ref": "#/$defs/digestArray"
    },
    "summary": {
      "$ref": "#/$defs/summary"
    },
    "statements": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/statement"
      }
    },
    "profiles": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/profile"
      }
    },
    "artifacts": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/artifact"
      }
    },
    "unindexedEnvelopes": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/unindexedEnvelope"
      }
    },
    "quarantinedStatements": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/quarantinedStatement"
      }
    },
    "datasetEntries": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/datasetEntry"
      }
    },
    "unreferencedFiles": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/unreferencedFile"
      }
    },
    "checks": {
      "type": "array",
      "minItems": 16,
      "maxItems": 16,
      "prefixItems": [
        {
          "$ref": "#/$defs/checkLoadSafely"
        },
        {
          "$ref": "#/$defs/checkParseStrictly"
        },
        {
          "$ref": "#/$defs/checkIndexPayloads"
        },
        {
          "$ref": "#/$defs/checkCoreSchemas"
        },
        {
          "$ref": "#/$defs/checkSignatures"
        },
        {
          "$ref": "#/$defs/checkAuthorizationThresholds"
        },
        {
          "$ref": "#/$defs/checkMetadataProfiles"
        },
        {
          "$ref": "#/$defs/checkAuthorization"
        },
        {
          "$ref": "#/$defs/checkGraphDependencyArtifacts"
        },
        {
          "$ref": "#/$defs/checkGraph"
        },
        {
          "$ref": "#/$defs/checkRootsAndHeads"
        },
        {
          "$ref": "#/$defs/checkCompletenessAnchor"
        },
        {
          "$ref": "#/$defs/checkFreshnessAnchors"
        },
        {
          "$ref": "#/$defs/checkArtifactBytes"
        },
        {
          "$ref": "#/$defs/checkArtifactProfiles"
        },
        {
          "$ref": "#/$defs/checkDecision"
        }
      ]
    },
    "warnings": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/warning"
      }
    },
    "errors": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/error"
      }
    },
    "tool": {
      "$ref": "#/$defs/tool"
    }
  },
  "$defs": {
    "integer": {
      "type": "integer",
      "minimum": 0,
      "maximum": 9007199254740991
    },
    "nullableInteger": {
      "oneOf": [
        {
          "$ref": "#/$defs/integer"
        },
        {
          "type": "null"
        }
      ]
    },
    "decimalString": {
      "type": "string",
      "minLength": 1
    },
    "digest": {
      "type": "object",
      "required": [
        "sha256"
      ],
      "properties": {
        "sha256": {
          "type": "string",
          "minLength": 64,
          "maxLength": 64
        }
      },
      "additionalProperties": false
    },
    "nullableDigest": {
      "oneOf": [
        {
          "$ref": "#/$defs/digest"
        },
        {
          "type": "null"
        }
      ]
    },
    "digestArray": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/digest"
      }
    },
    "nullableString": {
      "oneOf": [
        {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        {
          "type": "null"
        }
      ]
    },
    "timestamp": {
      "type": "string",
      "minLength": 20,
      "maxLength": 30
    },
    "status": {
      "enum": [
        "pass",
        "fail",
        "indeterminate",
        "not_checked",
        "skipped"
      ]
    },
    "errorCode": {
      "enum": [
        "E_BUNDLE_UNSAFE_PATH",
        "E_JSON_INVALID",
        "E_JSON_DUPLICATE_KEY",
        "E_ENVELOPE_MALFORMED",
        "E_PAYLOAD_TYPE",
        "E_STATEMENT_DIGEST",
        "E_CORE_SCHEMA",
        "E_CATALOG_INVALID",
        "E_PROFILE_UNRESOLVED",
        "E_PROFILE_INVALID",
        "E_PROFILE_TARGET_MISSING",
        "E_REQUIRED_PROFILE_MISSING",
        "E_SIGNATURE_INVALID",
        "E_SIGNER_UNAUTHORIZED",
        "E_PREDICATE_SEMANTICS_UNSUPPORTED",
        "E_EVENT_ID_DUPLICATE",
        "E_PREDECESSOR_MISSING",
        "E_PREDECESSOR_SUBJECT",
        "E_INPUT_DIGEST",
        "E_DATASET_MANIFEST_INVALID",
        "E_DATASET_MANIFEST_REQUIRED",
        "E_GRAPH_CYCLE",
        "E_ROOT_INVALID",
        "E_HANDOFF_REQUIRED",
        "E_MANIFEST_SET",
        "E_FRESHNESS_REQUIRED",
        "E_EXPECTED_MANIFEST",
        "E_EXPECTED_HEAD",
        "E_EXPECTED_ARTIFACT",
        "E_HANDOFF_RECIPIENT",
        "E_HANDOFF_NONCE",
        "E_HANDOFF_STALE",
        "E_ARTIFACT_MISSING",
        "E_ARTIFACT_DIGEST",
        "E_ARTIFACT_SIZE",
        "E_ARTIFACT_FORMAT",
        "E_RESOURCE_LIMIT"
      ]
    },
    "warningCode": {
      "enum": [
        "W_PROFILE_INDETERMINATE",
        "W_PROFILE_RESOURCE_LIMIT",
        "W_ARTIFACT_VALIDATION_LIMIT",
        "W_HISTORICAL_ARTIFACT_NOT_CHECKED",
        "W_SIGNATURE_UNKNOWN",
        "W_FRESHNESS_NOT_CHECKED",
        "W_ARTIFACT_UNPROFILED",
        "W_POLICY_RULE_OVERLAP"
      ]
    },
    "signature": {
      "type": "object",
      "required": [
        "keyid",
        "keyKnown",
        "cryptographic"
      ],
      "properties": {
        "keyid": {
          "type": "string",
          "minLength": 71,
          "maxLength": 71
        },
        "keyKnown": {
          "type": "boolean"
        },
        "cryptographic": {
          "$ref": "#/$defs/status"
        }
      },
      "additionalProperties": false
    },
    "handoff": {
      "type": "object",
      "required": [
        "signatures",
        "authorization",
        "completeness",
        "freshnessMethod",
        "freshnessChecks",
        "freshnessStatus"
      ],
      "properties": {
        "signatures": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/signature"
          }
        },
        "authorization": {
          "$ref": "#/$defs/status"
        },
        "completeness": {
          "$ref": "#/$defs/status"
        },
        "freshnessMethod": {
          "enum": [
            "expected-manifest",
            "expected-heads",
            "expected-artifacts",
            "nonce",
            "max-age",
            "multiple",
            "none"
          ]
        },
        "freshnessChecks": {
          "type": "object",
          "required": [
            "expected-manifest",
            "expected-heads",
            "expected-artifacts",
            "nonce",
            "max-age"
          ],
          "properties": {
            "expected-manifest": {
              "$ref": "#/$defs/status"
            },
            "expected-heads": {
              "$ref": "#/$defs/status"
            },
            "expected-artifacts": {
              "$ref": "#/$defs/status"
            },
            "nonce": {
              "$ref": "#/$defs/status"
            },
            "max-age": {
              "$ref": "#/$defs/status"
            }
          },
          "additionalProperties": false
        },
        "freshnessStatus": {
          "$ref": "#/$defs/status"
        }
      },
      "additionalProperties": false
    },
    "expectedArtifact": {
      "type": "object",
      "required": [
        "head",
        "subjectName",
        "digest"
      ],
      "properties": {
        "head": {
          "$ref": "#/$defs/digest"
        },
        "subjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "digest": {
          "$ref": "#/$defs/digest"
        }
      },
      "additionalProperties": false
    },
    "summary": {
      "type": "object",
      "required": [
        "statementsTotal",
        "quarantinedStatementsTotal",
        "statementsReachable",
        "statementsValid",
        "statementsAuthorized",
        "signaturesTotal",
        "signaturesChecked",
        "signaturesValid",
        "manifestSignaturesRequired",
        "manifestSignaturesValid",
        "manifestSignaturesAuthorized",
        "roots",
        "heads",
        "artifactsDeclared",
        "artifactsChecked",
        "historicalMaterialsDeclared",
        "historicalMaterialsChecked",
        "profilesDeclared",
        "profilesValidated"
      ],
      "properties": {
        "statementsTotal": {
          "$ref": "#/$defs/nullableInteger"
        },
        "quarantinedStatementsTotal": {
          "$ref": "#/$defs/nullableInteger"
        },
        "statementsReachable": {
          "$ref": "#/$defs/nullableInteger"
        },
        "statementsValid": {
          "$ref": "#/$defs/nullableInteger"
        },
        "statementsAuthorized": {
          "$ref": "#/$defs/nullableInteger"
        },
        "signaturesTotal": {
          "$ref": "#/$defs/nullableInteger"
        },
        "signaturesChecked": {
          "$ref": "#/$defs/nullableInteger"
        },
        "signaturesValid": {
          "$ref": "#/$defs/nullableInteger"
        },
        "manifestSignaturesRequired": {
          "$ref": "#/$defs/nullableInteger"
        },
        "manifestSignaturesValid": {
          "$ref": "#/$defs/nullableInteger"
        },
        "manifestSignaturesAuthorized": {
          "$ref": "#/$defs/nullableInteger"
        },
        "roots": {
          "$ref": "#/$defs/nullableInteger"
        },
        "heads": {
          "$ref": "#/$defs/nullableInteger"
        },
        "artifactsDeclared": {
          "$ref": "#/$defs/nullableInteger"
        },
        "artifactsChecked": {
          "$ref": "#/$defs/nullableInteger"
        },
        "historicalMaterialsDeclared": {
          "$ref": "#/$defs/nullableInteger"
        },
        "historicalMaterialsChecked": {
          "$ref": "#/$defs/nullableInteger"
        },
        "profilesDeclared": {
          "$ref": "#/$defs/nullableInteger"
        },
        "profilesValidated": {
          "$ref": "#/$defs/nullableInteger"
        }
      },
      "additionalProperties": false
    },
    "statement": {
      "type": "object",
      "required": [
        "digest",
        "predicateType",
        "eventId",
        "coreSchema",
        "coreSchemaPrerequisiteChecks",
        "signatures",
        "candidateRuleIds",
        "authorizingRuleIds",
        "authorization",
        "authorizationPrerequisiteChecks",
        "graph",
        "graphPrerequisiteChecks"
      ],
      "properties": {
        "digest": {
          "$ref": "#/$defs/digest"
        },
        "predicateType": {
          "$ref": "#/$defs/nullableString"
        },
        "eventId": {
          "$ref": "#/$defs/nullableString"
        },
        "coreSchema": {
          "$ref": "#/$defs/status"
        },
        "coreSchemaPrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        },
        "signatures": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/signature"
          }
        },
        "candidateRuleIds": {
          "type": "array",
          "items": {
            "type": "string",
            "minLength": 1,
            "maxLength": 4096
          }
        },
        "authorizingRuleIds": {
          "type": "array",
          "items": {
            "type": "string",
            "minLength": 1,
            "maxLength": 4096
          }
        },
        "authorization": {
          "$ref": "#/$defs/status"
        },
        "authorizationPrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        },
        "graph": {
          "$ref": "#/$defs/status"
        },
        "graphPrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        }
      },
      "additionalProperties": false,
      "allOf": [
        {
          "if": {
            "properties": {
              "coreSchema": {
                "const": "skipped"
              }
            },
            "required": [
              "coreSchema"
            ]
          },
          "then": {
            "properties": {
              "coreSchemaPrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "coreSchemaPrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        },
        {
          "if": {
            "properties": {
              "authorization": {
                "const": "skipped"
              }
            },
            "required": [
              "authorization"
            ]
          },
          "then": {
            "properties": {
              "authorizationPrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "authorizationPrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        },
        {
          "if": {
            "properties": {
              "graph": {
                "const": "skipped"
              }
            },
            "required": [
              "graph"
            ]
          },
          "then": {
            "properties": {
              "graphPrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "graphPrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        }
      ]
    },
    "profile": {
      "type": "object",
      "required": [
        "statementDigest",
        "id",
        "digest",
        "closureDigest",
        "target",
        "subjectName",
        "mediaType",
        "critical",
        "requiredByManifest",
        "requiredByPolicy",
        "requiredByAuthorizationRuleIds",
        "resolution",
        "validation",
        "prerequisiteChecks"
      ],
      "properties": {
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "id": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "digest": {
          "$ref": "#/$defs/digest"
        },
        "closureDigest": {
          "$ref": "#/$defs/digest"
        },
        "target": {
          "enum": [
            "statement",
            "predicate",
            "artifact"
          ]
        },
        "subjectName": {
          "$ref": "#/$defs/nullableString"
        },
        "mediaType": {
          "$ref": "#/$defs/nullableString"
        },
        "critical": {
          "type": "boolean"
        },
        "requiredByManifest": {
          "type": "boolean"
        },
        "requiredByPolicy": {
          "type": "boolean"
        },
        "requiredByAuthorizationRuleIds": {
          "type": "array",
          "items": {
            "type": "string",
            "minLength": 1,
            "maxLength": 4096
          }
        },
        "resolution": {
          "$ref": "#/$defs/status"
        },
        "validation": {
          "$ref": "#/$defs/status"
        },
        "prerequisiteChecks": {
          "$ref": "#/$defs/profilePrerequisites"
        }
      },
      "additionalProperties": false,
      "allOf": [
        {
          "if": {
            "properties": {
              "validation": {
                "const": "skipped"
              }
            },
            "required": [
              "validation"
            ]
          },
          "then": {
            "properties": {
              "prerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "prerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        }
      ]
    },
    "artifact": {
      "type": "object",
      "required": [
        "lifecycleRole",
        "artifactKind",
        "statementDigest",
        "head",
        "subjectName",
        "digest",
        "digestStatus",
        "digestPrerequisiteChecks",
        "profileStatus",
        "profilePrerequisiteChecks",
        "applicableProfileCount"
      ],
      "properties": {
        "lifecycleRole": {
          "enum": [
            "final",
            "historical"
          ]
        },
        "artifactKind": {
          "enum": [
            "ordinary",
            "dataset-manifest"
          ]
        },
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "head": {
          "$ref": "#/$defs/nullableDigest"
        },
        "subjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "digest": {
          "$ref": "#/$defs/digest"
        },
        "digestStatus": {
          "$ref": "#/$defs/status"
        },
        "digestPrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        },
        "profileStatus": {
          "$ref": "#/$defs/status"
        },
        "profilePrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        },
        "applicableProfileCount": {
          "$ref": "#/$defs/integer"
        }
      },
      "additionalProperties": false,
      "allOf": [
        {
          "if": {
            "properties": {
              "digestStatus": {
                "const": "skipped"
              }
            },
            "required": [
              "digestStatus"
            ]
          },
          "then": {
            "properties": {
              "digestPrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "digestPrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        },
        {
          "if": {
            "properties": {
              "profileStatus": {
                "const": "skipped"
              }
            },
            "required": [
              "profileStatus"
            ]
          },
          "then": {
            "properties": {
              "profilePrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "profilePrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        }
      ]
    },
    "datasetEntry": {
      "type": "object",
      "required": [
        "manifestStatementDigest",
        "manifestSubjectName",
        "entryName",
        "digest",
        "declaredSize",
        "digestStatus",
        "digestPrerequisiteChecks",
        "sizeStatus",
        "sizePrerequisiteChecks"
      ],
      "properties": {
        "manifestStatementDigest": {
          "$ref": "#/$defs/digest"
        },
        "manifestSubjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "entryName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "digest": {
          "$ref": "#/$defs/digest"
        },
        "declaredSize": {
          "oneOf": [
            {
              "$ref": "#/$defs/decimalString"
            },
            {
              "type": "null"
            }
          ]
        },
        "digestStatus": {
          "$ref": "#/$defs/status"
        },
        "digestPrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        },
        "sizeStatus": {
          "$ref": "#/$defs/status"
        },
        "sizePrerequisiteChecks": {
          "$ref": "#/$defs/recordPrerequisites"
        }
      },
      "additionalProperties": false,
      "allOf": [
        {
          "if": {
            "properties": {
              "digestStatus": {
                "const": "skipped"
              }
            },
            "required": [
              "digestStatus"
            ]
          },
          "then": {
            "properties": {
              "digestPrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "digestPrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        },
        {
          "if": {
            "properties": {
              "sizeStatus": {
                "const": "skipped"
              }
            },
            "required": [
              "sizeStatus"
            ]
          },
          "then": {
            "properties": {
              "sizePrerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "sizePrerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        }
      ]
    },
    "unindexedEnvelope": {
      "type": "object",
      "required": [
        "path",
        "payloadTypeStatus",
        "diagnosticCode"
      ],
      "properties": {
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "payloadTypeStatus": {
          "enum": [
            "pass",
            "fail",
            "not_checked"
          ]
        },
        "diagnosticCode": {
          "oneOf": [
            {
              "$ref": "#/$defs/errorCode"
            },
            {
              "type": "null"
            }
          ]
        }
      },
      "additionalProperties": false
    },
    "quarantinedStatement": {
      "type": "object",
      "required": [
        "path",
        "digest"
      ],
      "properties": {
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "digest": {
          "$ref": "#/$defs/digest"
        }
      },
      "additionalProperties": false
    },
    "unreferencedFile": {
      "type": "object",
      "required": [
        "path",
        "status",
        "reason"
      ],
      "properties": {
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "status": {
          "const": "not_checked"
        },
        "reason": {
          "const": "unreferenced"
        }
      },
      "additionalProperties": false
    },
    "check": {
      "type": "object",
      "required": [
        "id",
        "status",
        "prerequisiteChecks"
      ],
      "properties": {
        "id": {
          "type": "string"
        },
        "status": {
          "$ref": "#/$defs/status"
        },
        "prerequisiteChecks": {
          "$ref": "#/$defs/topLevelPrerequisites"
        }
      },
      "allOf": [
        {
          "if": {
            "properties": {
              "status": {
                "const": "skipped"
              }
            }
          },
          "then": {
            "properties": {
              "prerequisiteChecks": {
                "minItems": 1
              }
            }
          },
          "else": {
            "properties": {
              "prerequisiteChecks": {
                "maxItems": 0
              }
            }
          }
        }
      ],
      "additionalProperties": false
    },
    "checkLoadSafely": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "load-safely"
        }
      }
    },
    "checkParseStrictly": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "parse-strictly"
        }
      }
    },
    "checkIndexPayloads": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "index-payloads"
        }
      }
    },
    "checkCoreSchemas": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "core-schemas"
        }
      }
    },
    "checkSignatures": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "signatures"
        }
      }
    },
    "checkAuthorizationThresholds": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "authorization-thresholds"
        }
      }
    },
    "checkMetadataProfiles": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "metadata-profiles"
        }
      }
    },
    "checkAuthorization": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "authorization"
        }
      }
    },
    "checkGraphDependencyArtifacts": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "graph-dependency-artifacts"
        }
      }
    },
    "checkGraph": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "graph"
        }
      }
    },
    "checkRootsAndHeads": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "roots-and-heads"
        }
      }
    },
    "checkCompletenessAnchor": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "completeness-anchor"
        }
      }
    },
    "checkFreshnessAnchors": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "freshness-anchors"
        }
      }
    },
    "checkArtifactBytes": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "artifact-bytes"
        }
      }
    },
    "checkArtifactProfiles": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "artifact-profiles"
        }
      }
    },
    "checkDecision": {
      "$ref": "#/$defs/check",
      "properties": {
        "id": {
          "const": "decision"
        }
      }
    },
    "diagnosticContext": {
      "type": "object",
      "additionalProperties": {
        "oneOf": [
          {
            "type": "string",
            "maxLength": 4096
          },
          {
            "type": "integer",
            "minimum": -9007199254740991,
            "maximum": 9007199254740991
          },
          {
            "type": "boolean"
          },
          {
            "type": "null"
          },
          {
            "$ref": "#/$defs/digest"
          },
          {
            "type": "array",
            "items": {
              "type": "string",
              "maxLength": 4096
            }
          }
        ]
      }
    },
    "diagnosticBase": {
      "type": "object",
      "required": [
        "code",
        "step",
        "message",
        "context",
        "causedByCheck"
      ],
      "properties": {
        "code": {
          "type": "string"
        },
        "step": {
          "type": "integer"
        },
        "message": {
          "type": "string",
          "maxLength": 4096
        },
        "context": {
          "$ref": "#/$defs/diagnosticContext"
        },
        "causedByCheck": {
          "type": "string"
        }
      },
      "additionalProperties": false
    },
    "error": {
      "oneOf": [
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_BUNDLE_UNSAFE_PATH"
            },
            "step": {
              "const": 1
            },
            "causedByCheck": {
              "const": "load-safely"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_BUNDLE_UNSAFE_PATH"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_BUNDLE_UNSAFE_PATH"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_BUNDLE_UNSAFE_PATH"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_BUNDLE_UNSAFE_PATH"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 1
            },
            "causedByCheck": {
              "const": "load-safely"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 3
            },
            "causedByCheck": {
              "const": "index-payloads"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 5
            },
            "causedByCheck": {
              "const": "signatures"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 6
            },
            "causedByCheck": {
              "const": "authorization-thresholds"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "metadata-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "authorization"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 9
            },
            "causedByCheck": {
              "const": "graph"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 10
            },
            "causedByCheck": {
              "const": "roots-and-heads"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "completeness-anchor"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_RESOURCE_LIMIT"
            },
            "step": {
              "const": 14
            },
            "causedByCheck": {
              "const": "decision"
            },
            "context": {
              "$ref": "#/$defs/contextLimit"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_HANDOFF_REQUIRED"
            },
            "step": {
              "const": 1
            },
            "causedByCheck": {
              "const": "load-safely"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_HANDOFF_REQUIRED"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_JSON_INVALID"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_JSON_INVALID"
            },
            "step": {
              "const": 3
            },
            "causedByCheck": {
              "const": "index-payloads"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_JSON_INVALID"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_JSON_DUPLICATE_KEY"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_JSON_DUPLICATE_KEY"
            },
            "step": {
              "const": 3
            },
            "causedByCheck": {
              "const": "index-payloads"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_JSON_DUPLICATE_KEY"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ENVELOPE_MALFORMED"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PAYLOAD_TYPE"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "parse-strictly"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_STATEMENT_DIGEST"
            },
            "step": {
              "const": 3
            },
            "causedByCheck": {
              "const": "index-payloads"
            },
            "context": {
              "$ref": "#/$defs/contextStatementDigestMismatch"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_CORE_SCHEMA"
            },
            "step": {
              "const": 2
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextPathOrEvidence"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_CORE_SCHEMA"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextPathOrEvidence"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_CATALOG_INVALID"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PREDICATE_SEMANTICS_UNSUPPORTED"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_TARGET_MISSING"
            },
            "step": {
              "const": 4
            },
            "causedByCheck": {
              "const": "core-schemas"
            },
            "context": {
              "$ref": "#/$defs/contextProfile"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_SIGNATURE_INVALID"
            },
            "step": {
              "const": 5
            },
            "causedByCheck": {
              "const": "signatures"
            },
            "context": {
              "$ref": "#/$defs/contextSignature"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_SIGNER_UNAUTHORIZED"
            },
            "step": {
              "const": 6
            },
            "causedByCheck": {
              "const": "authorization-thresholds"
            },
            "context": {
              "$ref": "#/$defs/contextEvidenceIdentity"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_UNRESOLVED"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "metadata-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_UNRESOLVED"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "authorization"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_UNRESOLVED"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_UNRESOLVED"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_INVALID"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "metadata-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_INVALID"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PROFILE_INVALID"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_REQUIRED_PROFILE_MISSING"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "completeness-anchor"
            },
            "context": {
              "$ref": "#/$defs/contextRequiredProfile"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_REQUIRED_PROFILE_MISSING"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextRequiredProfile"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_DATASET_MANIFEST_INVALID"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextDataset"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_DATASET_MANIFEST_INVALID"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextDataset"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_DATASET_MANIFEST_REQUIRED"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextDataset"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_EVENT_ID_DUPLICATE"
            },
            "step": {
              "const": 9
            },
            "causedByCheck": {
              "const": "graph"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PREDECESSOR_MISSING"
            },
            "step": {
              "const": 9
            },
            "causedByCheck": {
              "const": "graph"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_PREDECESSOR_SUBJECT"
            },
            "step": {
              "const": 9
            },
            "causedByCheck": {
              "const": "graph"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_INPUT_DIGEST"
            },
            "step": {
              "const": 9
            },
            "causedByCheck": {
              "const": "graph"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_GRAPH_CYCLE"
            },
            "step": {
              "const": 9
            },
            "causedByCheck": {
              "const": "graph"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ROOT_INVALID"
            },
            "step": {
              "const": 10
            },
            "causedByCheck": {
              "const": "roots-and-heads"
            },
            "context": {
              "$ref": "#/$defs/contextGraphStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_MANIFEST_SET"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "completeness-anchor"
            },
            "context": {
              "$ref": "#/$defs/contextManifestSet"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_FRESHNESS_REQUIRED"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextBundle"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_EXPECTED_MANIFEST"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextExpectedActual"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_EXPECTED_HEAD"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextBundle"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_EXPECTED_ARTIFACT"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextBundle"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_HANDOFF_RECIPIENT"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextExpectedActual"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_HANDOFF_NONCE"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextExpectedActual"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_HANDOFF_STALE"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextBundle"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ARTIFACT_MISSING"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextArtifactOrPath"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ARTIFACT_DIGEST"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextArtifact"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ARTIFACT_DIGEST"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextArtifact"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ARTIFACT_SIZE"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextDatasetSize"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "E_ARTIFACT_FORMAT"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileArtifact"
            }
          }
        }
      ]
    },
    "warning": {
      "oneOf": [
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_POLICY_RULE_OVERLAP"
            },
            "step": {
              "const": 0
            },
            "causedByCheck": {
              "const": "authorization-thresholds"
            },
            "context": {
              "$ref": "#/$defs/contextPolicyOverlap"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_SIGNATURE_UNKNOWN"
            },
            "step": {
              "const": 5
            },
            "causedByCheck": {
              "const": "signatures"
            },
            "context": {
              "$ref": "#/$defs/contextSignature"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_PROFILE_INDETERMINATE"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "metadata-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_PROFILE_INDETERMINATE"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_PROFILE_INDETERMINATE"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_PROFILE_RESOURCE_LIMIT"
            },
            "step": {
              "const": 7
            },
            "causedByCheck": {
              "const": "metadata-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_ARTIFACT_VALIDATION_LIMIT"
            },
            "step": {
              "const": 8
            },
            "causedByCheck": {
              "const": "graph-dependency-artifacts"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_ARTIFACT_VALIDATION_LIMIT"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextProfileOrStatement"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_HISTORICAL_ARTIFACT_NOT_CHECKED"
            },
            "step": {
              "const": 12
            },
            "causedByCheck": {
              "const": "artifact-bytes"
            },
            "context": {
              "$ref": "#/$defs/contextArtifact"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_FRESHNESS_NOT_CHECKED"
            },
            "step": {
              "const": 11
            },
            "causedByCheck": {
              "const": "freshness-anchors"
            },
            "context": {
              "$ref": "#/$defs/contextBundle"
            }
          }
        },
        {
          "$ref": "#/$defs/diagnosticBase",
          "properties": {
            "code": {
              "const": "W_ARTIFACT_UNPROFILED"
            },
            "step": {
              "const": 13
            },
            "causedByCheck": {
              "const": "artifact-profiles"
            },
            "context": {
              "$ref": "#/$defs/contextArtifact"
            }
          }
        }
      ]
    },
    "tool": {
      "type": "object",
      "required": [
        "name",
        "version"
      ],
      "properties": {
        "name": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "version": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        }
      },
      "additionalProperties": false
    },
    "topLevelPrerequisites": {
      "type": "array",
      "uniqueItems": true,
      "items": {
        "enum": [
          "load-safely",
          "parse-strictly",
          "index-payloads",
          "core-schemas",
          "signatures",
          "authorization-thresholds",
          "metadata-profiles",
          "authorization",
          "graph-dependency-artifacts",
          "graph",
          "roots-and-heads",
          "completeness-anchor",
          "freshness-anchors",
          "artifact-bytes",
          "artifact-profiles",
          "decision"
        ]
      }
    },
    "profilePrerequisites": {
      "type": "array",
      "uniqueItems": true,
      "items": {
        "enum": [
          "authorization-thresholds",
          "metadata-profiles",
          "authorization",
          "graph-dependency-artifacts",
          "graph",
          "artifact-bytes",
          "artifact-profiles",
          "resolution"
        ]
      }
    },
    "recordPrerequisites": {
      "type": "array",
      "uniqueItems": true,
      "items": {
        "enum": [
          "index-payloads",
          "core-schemas",
          "signatures",
          "authorization-thresholds",
          "metadata-profiles",
          "authorization",
          "graph-dependency-artifacts",
          "graph",
          "completeness-anchor",
          "artifact-bytes"
        ]
      }
    },
    "contextPath": {
      "type": "object",
      "required": [
        "path"
      ],
      "properties": {
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "value": {}
      },
      "additionalProperties": false
    },
    "contextLimit": {
      "type": "object",
      "required": [
        "limit"
      ],
      "properties": {
        "limit": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "profileDigest": {
          "$ref": "#/$defs/digest"
        },
        "subjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "entryName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "value": {}
      },
      "additionalProperties": false
    },
    "contextStatementDigestMismatch": {
      "type": "object",
      "required": [
        "statementDigest",
        "declared"
      ],
      "properties": {
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "declared": {},
        "actual": {},
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        }
      },
      "additionalProperties": false
    },
    "contextPathOrEvidence": {
      "oneOf": [
        {
          "type": "object",
          "required": [
            "path"
          ],
          "properties": {
            "path": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "statementDigest"
          ],
          "properties": {
            "statementDigest": {
              "$ref": "#/$defs/digest"
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "manifestDigest"
          ],
          "properties": {
            "manifestDigest": {
              "$ref": "#/$defs/digest"
            }
          },
          "additionalProperties": false
        }
      ]
    },
    "contextGraphStatement": {
      "type": "object",
      "required": [
        "statementDigest"
      ],
      "properties": {
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "predicateType": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "eventId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "inputName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "predecessorStatementDigest": {
          "$ref": "#/$defs/digest"
        },
        "predecessorSubjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "entryName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "expected": {},
        "actual": {}
      },
      "additionalProperties": false
    },
    "contextProfile": {
      "type": "object",
      "required": [
        "statementDigest",
        "profileId",
        "profileDigest"
      ],
      "properties": {
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "profileDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileClosureDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileTarget": {
          "enum": [
            "statement",
            "predicate",
            "artifact"
          ]
        },
        "subjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "mediaType": {
          "oneOf": [
            {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            {
              "type": "null"
            }
          ]
        }
      },
      "additionalProperties": false
    },
    "contextSignature": {
      "type": "object",
      "required": [
        "statementDigest",
        "keyid"
      ],
      "properties": {
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "keyid": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        }
      },
      "additionalProperties": false
    },
    "contextEvidenceIdentity": {
      "oneOf": [
        {
          "type": "object",
          "required": [
            "statementDigest"
          ],
          "properties": {
            "statementDigest": {
              "$ref": "#/$defs/digest"
            },
            "ruleId": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "manifestDigest"
          ],
          "properties": {
            "manifestDigest": {
              "$ref": "#/$defs/digest"
            },
            "ruleId": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            }
          },
          "additionalProperties": false
        }
      ]
    },
    "contextProfileOrStatement": {
      "oneOf": [
        {
          "type": "object",
          "required": [
            "statementDigest"
          ],
          "properties": {
            "statementDigest": {
              "$ref": "#/$defs/digest"
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "statementDigest",
            "profileId",
            "profileDigest"
          ],
          "properties": {
            "statementDigest": {
              "$ref": "#/$defs/digest"
            },
            "profileId": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "profileDigest": {
              "$ref": "#/$defs/digest"
            },
            "profileClosureDigest": {
              "$ref": "#/$defs/digest"
            },
            "profileTarget": {
              "enum": [
                "statement",
                "predicate",
                "artifact"
              ]
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "mediaType": {
              "oneOf": [
                {
                  "type": "string",
                  "minLength": 1,
                  "maxLength": 4096
                },
                {
                  "type": "null"
                }
              ]
            }
          },
          "additionalProperties": false
        }
      ]
    },
    "contextRequiredProfile": {
      "type": "object",
      "required": [
        "profileId",
        "profileDigest",
        "subjectName"
      ],
      "properties": {
        "profileId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "profileDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileClosureDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileTarget": {
          "enum": [
            "statement",
            "predicate",
            "artifact"
          ]
        },
        "head": {
          "$ref": "#/$defs/digest"
        },
        "subjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "mediaType": {
          "oneOf": [
            {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            {
              "type": "null"
            }
          ]
        }
      },
      "additionalProperties": false
    },
    "contextDataset": {
      "type": "object",
      "required": [
        "manifestStatementDigest",
        "manifestSubjectName"
      ],
      "properties": {
        "manifestStatementDigest": {
          "$ref": "#/$defs/digest"
        },
        "manifestSubjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "entryName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "artifactDigest": {
          "$ref": "#/$defs/digest"
        },
        "path": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        }
      },
      "additionalProperties": false
    },
    "contextManifestSet": {
      "oneOf": [
        {
          "type": "object",
          "required": [
            "bundleId"
          ],
          "properties": {
            "bundleId": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "expected": {},
            "actual": {}
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "bundleId",
            "statementDigest",
            "subjectName",
            "artifactDigest"
          ],
          "properties": {
            "bundleId": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "statementDigest": {
              "$ref": "#/$defs/digest"
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "path": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "bundleId",
            "head",
            "subjectName",
            "artifactDigest"
          ],
          "properties": {
            "bundleId": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "head": {
              "$ref": "#/$defs/digest"
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "path": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            }
          },
          "additionalProperties": false
        }
      ]
    },
    "contextBundle": {
      "type": "object",
      "required": [
        "bundleId"
      ],
      "properties": {
        "bundleId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "expected": {},
        "actual": {},
        "issuedAt": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "evaluationTime": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "value": {}
      },
      "additionalProperties": false
    },
    "contextExpectedActual": {
      "type": "object",
      "required": [
        "expected",
        "actual"
      ],
      "properties": {
        "bundleId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "expected": {},
        "actual": {}
      },
      "additionalProperties": false
    },
    "contextArtifactOrPath": {
      "oneOf": [
        {
          "type": "object",
          "required": [
            "statementDigest",
            "subjectName",
            "artifactDigest"
          ],
          "properties": {
            "statementDigest": {
              "$ref": "#/$defs/digest"
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "path": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "head",
            "subjectName",
            "artifactDigest"
          ],
          "properties": {
            "head": {
              "$ref": "#/$defs/digest"
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "path": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            }
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "manifestStatementDigest",
            "manifestSubjectName",
            "entryName",
            "artifactDigest"
          ],
          "properties": {
            "manifestStatementDigest": {
              "$ref": "#/$defs/digest"
            },
            "manifestSubjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "entryName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "path": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            }
          },
          "additionalProperties": false
        }
      ]
    },
    "contextArtifact": {
      "oneOf": [
        {
          "type": "object",
          "required": [
            "statementDigest",
            "subjectName",
            "artifactDigest"
          ],
          "properties": {
            "statementDigest": {
              "$ref": "#/$defs/digest"
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "expected": {},
            "actual": {}
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "head",
            "subjectName",
            "artifactDigest"
          ],
          "properties": {
            "head": {
              "$ref": "#/$defs/digest"
            },
            "subjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "expected": {},
            "actual": {}
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "manifestStatementDigest",
            "manifestSubjectName",
            "artifactDigest"
          ],
          "properties": {
            "manifestStatementDigest": {
              "$ref": "#/$defs/digest"
            },
            "manifestSubjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "expected": {},
            "actual": {}
          },
          "additionalProperties": false
        },
        {
          "type": "object",
          "required": [
            "manifestStatementDigest",
            "manifestSubjectName",
            "entryName",
            "artifactDigest"
          ],
          "properties": {
            "manifestStatementDigest": {
              "$ref": "#/$defs/digest"
            },
            "manifestSubjectName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            "entryName": {
              "type": "string",
              "minLength": 1,
              "maxLength": 1024
            },
            "artifactDigest": {
              "$ref": "#/$defs/digest"
            },
            "expected": {},
            "actual": {}
          },
          "additionalProperties": false
        }
      ]
    },
    "contextDatasetSize": {
      "type": "object",
      "required": [
        "manifestStatementDigest",
        "manifestSubjectName",
        "entryName",
        "declaredSize",
        "actualSize"
      ],
      "properties": {
        "manifestStatementDigest": {
          "$ref": "#/$defs/digest"
        },
        "manifestSubjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "entryName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024
        },
        "artifactDigest": {
          "$ref": "#/$defs/digest"
        },
        "declaredSize": {
          "$ref": "#/$defs/decimalString"
        },
        "actualSize": {
          "$ref": "#/$defs/decimalString"
        }
      },
      "additionalProperties": false
    },
    "contextProfileArtifact": {
      "type": "object",
      "required": [
        "statementDigest",
        "subjectName",
        "profileId",
        "profileDigest"
      ],
      "properties": {
        "statementDigest": {
          "$ref": "#/$defs/digest"
        },
        "subjectName": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "artifactDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "profileDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileClosureDigest": {
          "$ref": "#/$defs/digest"
        },
        "profileTarget": {
          "enum": [
            "statement",
            "predicate",
            "artifact"
          ]
        },
        "mediaType": {
          "oneOf": [
            {
              "type": "string",
              "minLength": 1,
              "maxLength": 4096
            },
            {
              "type": "null"
            }
          ]
        }
      },
      "additionalProperties": false
    },
    "contextPolicyOverlap": {
      "type": "object",
      "required": [
        "lessConstrainedRuleId",
        "moreConstrainedRuleId"
      ],
      "properties": {
        "lessConstrainedRuleId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        },
        "moreConstrainedRuleId": {
          "type": "string",
          "minLength": 1,
          "maxLength": 4096
        }
      },
      "additionalProperties": false
    }
  },
  "additionalProperties": false
}

The published bytes, unmodified.