@agentproto/corpus-cli 0.1.0-alpha.1 → 0.1.0-alpha.2

package/dist/specs/resources/aip-24/draft/ASSEMBLY.schema.json

@@ -0,0 +1,411 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agentproto.sh/schemas/aip-24/ASSEMBLY.schema.json",
+  "title": "agentassembly/v1 frontmatter (AIP-24)",
+  "description": "Validates the YAML frontmatter portion of an AIP-24 ASSEMBLY.md (workspace root or per-context view). The single doctype 'assembly.workspace/v1' is used in both modes; the host distinguishes by checking whether `extends` is set. The discriminating field is `mode` — advisory | voting | peer | hierarchy — each selecting a different synthesis substrate. The `members[]` array references AIP-25 personas; AIP-24 does NOT define a member-as-doctype.",
+  "type": "object",
+  "required": ["schema", "name", "title", "description", "version", "mode"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": {
+      "const": "assembly.workspace/v1",
+      "description": "Discriminator for the AIP-24 workspace doctype."
+    },
+    "name": {
+      "type": "string",
+      "minLength": 2,
+      "maxLength": 96,
+      "pattern": "^[a-z][a-z0-9-]*[a-z0-9]$",
+      "description": "Stable kebab-case identifier for the assembly or view."
+    },
+    "title": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 200,
+      "description": "Human-readable assembly title."
+    },
+    "description": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 2000,
+      "description": "One-paragraph statement of purpose: what this assembly is, who it serves, why this mode is the right pattern."
+    },
+    "version": {
+      "type": "string",
+      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(-[A-Za-z0-9.-]+)?$",
+      "description": "Semantic version of the WORKSPACE shape. Bump on member roster / synthesis rule / locked-trait / audit policy changes. Independent of the assembly's content version."
+    },
+    "extends": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 512,
+      "pattern": "^(\\.\\./|\\./)[^\\s]+/ASSEMBLY\\.md$",
+      "description": "OPTIONAL — relative path to a parent ASSEMBLY.md. Presence makes the manifest a VIEW; absence makes it a WORKSPACE ROOT. Recursive composition; maximum chain depth is 8."
+    },
+    "appliesTo": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "pattern": "^(ws://(operators|companies|workspaces|skills)/[a-z][a-z0-9-]*|\\.\\./[^\\s]+)$",
+        "description": "Either a ws:// ref to an AIP-9 operator, AIP-22 company, AIP-20 work workspace, or AIP-3 skill, or a relative path to a consumer workspace folder."
+      },
+      "uniqueItems": true,
+      "description": "OPTIONAL — list of consumers this VIEW adapts the assembly for. Hosts MUST refuse the view if any binding does not resolve. Not inherited; views declare their own scope."
+    },
+    "mode": {
+      "enum": ["advisory", "voting", "peer", "hierarchy"],
+      "description": "The collaboration pattern. ONE-WAY SWITCH: once set at any ancestor, descendants MUST NOT change to a different mode. Refusal: assembly_mode_change (HARD). 'advisory' = silent overlay producing persona fragments (the implemented anchor — Simone's Council); 'voting' = quorum decision body; 'peer' = network of equals exchanging messages; 'hierarchy' = reporting tree with bottom-up aggregation."
+    },
+    "members": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/member" },
+      "default": [],
+      "description": "Member roster. Each member is a ref to an AIP-25 persona with assembly-specific role config. Merge-by-id (the role id, not the persona ref) across the extends chain."
+    },
+    "synthesis": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "rules": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/synthesisRule" },
+          "default": [],
+          "description": "Synthesis rules in declaration order. A rule MAY declare itself terminal to short-circuit further rule processing. Merge-by-id with parent."
+        },
+        "riskLevels": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/riskLevel" },
+          "description": "Severity-to-risk-level mapping. Severity ranges MUST be monotonic non-overlapping integer intervals. Whole-array override across the extends chain (child's mapping replaces parent's)."
+        }
+      },
+      "description": "How member outputs combine into a single guidance / decision / message log / hierarchy output."
+    },
+    "lockedTraits": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 200
+      },
+      "uniqueItems": true,
+      "default": [],
+      "description": "Anti-poisoning floor. Substrings (or regexes / semantic patterns per matchMode) that an output's text MUST NOT contain. UNION across the extends chain — additive only, child cannot remove parent's entries. Refusal: assembly_locked_trait_removed (HARD)."
+    },
+    "matchMode": {
+      "enum": ["substring", "regex", "semantic"],
+      "default": "substring",
+      "description": "Algorithm used to check outputs against lockedTraits. 'substring' (default, matches Simone v1) — case-insensitive substring match. 'regex' — RFC-3987-ish regex. 'semantic' — embedding match against the trait's semantic neighborhood; hosts that don't support semantic MUST fall back to substring with assembly_locked_trait_match_mode_unsupported warning."
+    },
+    "audit": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "consultations": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": true,
+              "description": "Whether each member invocation is persisted as a consultation row. ONE-WAY SWITCH: once true at any ancestor, descendants MUST NOT set false. Refusal: assembly_audit_disable (HARD)."
+            },
+            "retention": {
+              "type": "string",
+              "pattern": "^(forever|days:[1-9][0-9]*)$",
+              "default": "forever",
+              "description": "Retention policy for consultation rows. 'forever' — never evicted. 'days:<n>' — evict rows older than n days."
+            }
+          },
+          "description": "Consultation persistence policy."
+        },
+        "overlays": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": true,
+              "description": "Whether overlay fragments (advisory) / decision records (voting) / message log entries (peer) / rolled-up outputs (hierarchy) are persisted. ONE-WAY SWITCH: once true at any ancestor, descendants MUST NOT set false. Refusal: assembly_audit_disable (HARD)."
+            },
+            "maxActive": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 100,
+              "default": 10,
+              "description": "Cap on concurrent active artifacts (typically advisory overlay fragments). Older artifacts are evicted on write to keep the count under the cap."
+            },
+            "defaultTtl": {
+              "type": "string",
+              "pattern": "^P(?!$)((\\d+Y)?(\\d+M)?(\\d+W)?(\\d+D)?)?(T(\\d+H)?(\\d+M)?(\\d+S)?)?$",
+              "default": "P14D",
+              "description": "ISO 8601 duration applied as default TTL to advisory overlay fragments that don't specify their own. Examples: P14D (14 days), P3D (3 days), PT1H (1 hour)."
+            }
+          },
+          "description": "Overlay artifact persistence policy."
+        },
+        "signing": {
+          "enum": ["required", "optional", "none"],
+          "default": "optional",
+          "description": "Signing posture, composing with AIP-7 governance. 'required' — every artifact MUST carry a signature; 'optional' — signatures permitted; 'none' — no signing. ONE-WAY SWITCH on downgrade: once 'required' at any ancestor, descendants MUST NOT downgrade. Refusal: assembly_signing_downgrade (HARD)."
+        }
+      },
+      "description": "Audit policy. Composes with AIP-7 governance for signing. The runtime tables (consultations, overlays, decisions, message logs) are host-side data shaped by this policy; AIP-24 does not prescribe table names."
+    },
+    "identity": {
+      "type": "string",
+      "pattern": "^ws://identities/[a-z][a-z0-9-]*$",
+      "description": "OPTIONAL — AIP-23 base identity ref. The identity the assembly modulates (advisory) or attributes to (voting / peer / hierarchy)."
+    },
+    "governance": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 512,
+      "description": "OPTIONAL — AIP-7 policy or audit binding. May be a path to an AIP-7 policy file or a ws:// ref. Approval gates, signing keys, and audit retention compose with audit.signing and the workspace's one-way switches."
+    },
+    "work": {
+      "type": "string",
+      "pattern": "^ws://workspaces/[a-z][a-z0-9-]*$",
+      "description": "OPTIONAL — AIP-20 work workspace the assembly's artifacts attach to. Advisory overlays describe the agent's behavior on items in this workspace; voting decisions approve work items; hierarchy outputs roll up severity from work-item reviews."
+    },
+    "executor": {
+      "type": "string",
+      "pattern": "^ws://operators/[a-z][a-z0-9-]*$",
+      "description": "OPTIONAL — AIP-9 default executor operator. The runtime that calls defineAssemblyWorkspace, runs the member-execution pipeline, and persists the artifacts."
+    },
+    "defaults": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "triggerHeuristic": {
+          "type": "string",
+          "pattern": "^(every-n-messages|on-mode-change|manual|periodic|custom:[A-Za-z0-9_./:-]+)$",
+          "description": "OPTIONAL — default trigger heuristic for invoking the assembly. 'every-n-messages' — sample every N user messages; 'on-mode-change' — invoke when the conversation's mode changes; 'manual' — invoke only on explicit request; 'periodic' — invoke on triggerInterval_ms cadence; 'custom:<id>' — host-defined."
+        },
+        "triggerInterval_ms": {
+          "type": "integer",
+          "minimum": 1000,
+          "maximum": 86400000,
+          "description": "OPTIONAL — interval in milliseconds for periodic mode. Required when triggerHeuristic = 'periodic'."
+        }
+      },
+      "description": "Trigger defaults. Per-member overrides live on the members[] entries."
+    },
+    "display": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "defaultGrouping": {
+          "enum": ["phase", "role", "severity"],
+          "description": "OPTIONAL — default grouping for assembly views. 'phase' (advisory), 'role' (any mode), 'severity' (advisory / hierarchy)."
+        }
+      },
+      "description": "Display hints for UIs that render the assembly. Runtime-agnostic."
+    },
+    "metadata": {
+      "type": "object",
+      "additionalProperties": true,
+      "default": {},
+      "description": "Vendor-specific extensions, namespaced under <vendor>. Deep-merged across the extends chain. MUST NOT change the meaning of any spec field. The four one-way switches are spec-level invariants; vendor namespaces cannot bypass them."
+    }
+  },
+  "allOf": [
+    {
+      "description": "A view (any manifest with appliesTo set) MUST extend a parent. A workspace-root manifest has neither field.",
+      "if": {
+        "required": ["appliesTo"],
+        "properties": {
+          "appliesTo": { "type": "array", "minItems": 1 }
+        }
+      },
+      "then": {
+        "required": ["extends"]
+      }
+    },
+    {
+      "description": "When defaults.triggerHeuristic = 'periodic', defaults.triggerInterval_ms MUST be set.",
+      "if": {
+        "properties": {
+          "defaults": {
+            "properties": {
+              "triggerHeuristic": { "const": "periodic" }
+            },
+            "required": ["triggerHeuristic"]
+          }
+        },
+        "required": ["defaults"]
+      },
+      "then": {
+        "properties": {
+          "defaults": { "required": ["triggerInterval_ms"] }
+        }
+      }
+    }
+  ],
+  "$defs": {
+    "member": {
+      "type": "object",
+      "required": ["id", "persona", "role"],
+      "additionalProperties": false,
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 2,
+          "maxLength": 64,
+          "pattern": "^[a-z][a-z0-9-]*[a-z0-9]$",
+          "description": "Stable kebab-case role id within the assembly. Merge key. MUST be unique within a single manifest layer; collisions within one layer refuse with assembly_member_id_collision (HARD). Across layers, child replaces parent's by id."
+        },
+        "persona": {
+          "type": "string",
+          "pattern": "^ws://personas/[a-z][a-z0-9-]*$",
+          "description": "AIP-25 persona ref. Required. Hosts MUST resolve the persona at load time; unresolvable refs refuse with assembly_member_persona_unresolvable (HARD)."
+        },
+        "role": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 200,
+          "description": "Human-readable role label (e.g. Therapist, Sentinel, CFO, Brand Critic, Department Head)."
+        },
+        "phase": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64,
+          "description": "OPTIONAL — for advisory mode. Built-in: 'session' (per-message review), 'standing' (periodic deep dive), 'sentinel' (safety pre-filter). Custom phase ids are permitted; the host filters members to the active phase before invocation."
+        },
+        "triggers": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": [
+              "sample",
+              "sentinel-match",
+              "scheduled",
+              "manual",
+              "periodic"
+            ]
+          },
+          "uniqueItems": true,
+          "description": "OPTIONAL — which trigger kinds invoke this member. When omitted, the member is invoked on every assembly trigger."
+        },
+        "weight": {
+          "type": "number",
+          "exclusiveMinimum": 0,
+          "maximum": 100,
+          "description": "OPTIONAL — for voting mode. Multiplier on the cast vote. Default 1.0. Higher for senior reviewers, lower for junior. Quorum thresholds compute against the sum of weights in the voteClass."
+        },
+        "voteClass": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64,
+            "pattern": "^[a-z][a-z0-9-]*$"
+          },
+          "uniqueItems": true,
+          "description": "OPTIONAL — for voting mode. Which proposal classes this member is empowered to vote on. Examples: ['budget', 'security', 'architecture']. When omitted, the member votes on every class."
+        },
+        "parent": {
+          "type": "string",
+          "minLength": 2,
+          "maxLength": 64,
+          "pattern": "^[a-z][a-z0-9-]*[a-z0-9]$",
+          "description": "OPTIONAL — for hierarchy mode. Reporting parent's role id. Outputs cascade bottom-up; the parent receives this member's output as input. The host MUST detect cycles (assembly_hierarchy_cycle, HARD) and refuse parents that don't resolve to a member id (assembly_hierarchy_invalid_parent, HARD)."
+        },
+        "timeout_ms": {
+          "type": "integer",
+          "minimum": 100,
+          "maximum": 600000,
+          "default": 30000,
+          "description": "OPTIONAL — per-member execution cap in milliseconds. The host MUST cancel the member's invocation when the timeout elapses; cancelled invocations produce no output (treated as missing in synthesis)."
+        },
+        "gatherInput": {
+          "type": "object",
+          "required": ["strategy"],
+          "additionalProperties": false,
+          "properties": {
+            "strategy": {
+              "type": "string",
+              "pattern": "^(working-memory|recent-messages|digest|last-message-only|custom:[A-Za-z0-9_./:-]+)$",
+              "description": "Built-in: 'working-memory' (the agent's working memory for the current user/thread), 'recent-messages' (last N raw messages), 'digest' (a multi-day summary), 'last-message-only' (just the last user message). 'custom:<id>' delegates to a host-registered gather strategy."
+            },
+            "params": {
+              "type": "object",
+              "additionalProperties": true,
+              "default": {},
+              "description": "Strategy-specific parameters. Examples: { limit: 20 } for recent-messages; { window_days: 7 } for digest."
+            }
+          },
+          "description": "OPTIONAL — input-gathering configuration. When omitted, the host uses 'working-memory' with no params."
+        }
+      },
+      "description": "One member of the assembly. Carries the persona ref (the unit of identity) and the assembly-specific role config (phase / weight / voteClass / parent — depending on mode)."
+    },
+    "synthesisRule": {
+      "type": "object",
+      "required": ["id", "kind"],
+      "additionalProperties": false,
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 2,
+          "maxLength": 96,
+          "pattern": "^[a-z][a-z0-9-]*[a-z0-9]$",
+          "description": "Stable kebab-case rule id. Merge key. Same id across the extends chain → child replaces parent's; new ids appended."
+        },
+        "kind": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 96,
+          "description": "Built-in: 'terminal' | 'priority' | 'aggregate' | 'quorum' | 'majority' | 'unanimity' | 'escalate-on-severity'. Custom kinds are free-form strings resolved through the host's rule registry; unregistered kinds refuse with assembly_synthesis_rule_invalid (HARD)."
+        },
+        "appliesTo": {
+          "oneOf": [
+            { "type": "string", "const": "*" },
+            {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 2,
+                "maxLength": 64,
+                "pattern": "^[a-z][a-z0-9-]*[a-z0-9]$"
+              },
+              "uniqueItems": true,
+              "minItems": 1
+            }
+          ],
+          "description": "OPTIONAL — '*' (all members) or an array of member ids the rule applies to. Members listed MUST exist in the merged members[] array; unresolvable ids refuse with assembly_synthesis_unknown_member (HARD)."
+        },
+        "params": {
+          "type": "object",
+          "additionalProperties": true,
+          "default": {},
+          "description": "Kind-specific parameters. Examples: { triggerSeverity: 9 } for terminal; { triggerKind: sycophancy } for priority; { threshold: 0.66 } for quorum; { topN: 2 } for aggregate; { tieBreaker: chair-vote } for majority."
+        }
+      },
+      "description": "One synthesis rule. Rules apply in declaration order; a rule MAY declare itself terminal (via params or kind) to short-circuit further rule processing."
+    },
+    "riskLevel": {
+      "type": "object",
+      "required": ["range", "label"],
+      "additionalProperties": false,
+      "properties": {
+        "range": {
+          "type": "array",
+          "items": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 10
+          },
+          "minItems": 2,
+          "maxItems": 2,
+          "description": "Closed integer interval [min, max]. Severity values within the interval map to this level. Intervals across the riskLevels[] array MUST be monotonic non-overlapping."
+        },
+        "label": {
+          "type": "string",
+          "enum": ["ok", "watch", "intervene", "escalate"],
+          "description": "Risk-level label. The four built-in labels match the working Council implementation."
+        }
+      },
+      "description": "One severity-to-risk-level mapping entry."
+    }
+  }
+}

package/dist/specs/resources/aip-25/draft/PERSONA.schema.json

@@ -0,0 +1,257 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agentproto.sh/schemas/aip-25/PERSONA.schema.json",
+  "title": "PERSONA.md frontmatter (AIP-25)",
+  "description": "Validates the YAML frontmatter portion of an AIP-25 PERSONA.md manifest. Single-doc, no oneOf — every persona is the same shape. The body is markdown and not validated by this schema.",
+  "type": "object",
+  "required": ["schema", "name", "title", "description", "version"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": {
+      "const": "persona/v1",
+      "description": "Schema dispatch tag. MUST be 'persona/v1' for this version of AIP-25."
+    },
+    "name": {
+      "type": "string",
+      "minLength": 2,
+      "maxLength": 64,
+      "pattern": "^[a-z][a-z0-9-]*[a-z0-9]$",
+      "description": "Machine identifier. Lowercase, digits, dashes. Must start with a letter, end with a letter or digit. Unique within the registry that hosts the persona."
+    },
+    "title": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 120,
+      "description": "Human-readable display title, sentence case."
+    },
+    "description": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 2000,
+      "description": "One-paragraph elevator pitch. The persona's purpose, audience, and shape."
+    },
+    "version": {
+      "type": "string",
+      "pattern": "^\\d+\\.\\d+\\.\\d+(?:[-+][a-zA-Z0-9.-]+)?$",
+      "description": "Semver. Bump on breaking change to identity, voice, or boundaries."
+    },
+    "extends": {
+      "type": "string",
+      "pattern": "^(\\.{1,2}/)[^\\s]+PERSONA\\.md$",
+      "description": "Relative path to a parent PERSONA.md. Triggers composition. Path MUST end in 'PERSONA.md'."
+    },
+    "avatar": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Public visual face. URL, data URI, or 'ws://avatars/<slug>' ref. Schema does not validate scheme; the loader resolves."
+    },
+    "backstory": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "oneLineHook": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 280,
+          "description": "Punchy elevator hook. One sentence the catalog can show next to the persona name."
+        },
+        "background": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Long-form lore prose, in markdown. The character's history, motivations, and context."
+        },
+        "archetypes": {
+          "type": "array",
+          "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]*[a-z0-9]$" },
+          "uniqueItems": true,
+          "default": [],
+          "maxItems": 12,
+          "description": "Categorical archetype labels. Lowercase kebab-case. Examples: mentor, craftsman, sentinel, trickster. The catalog MAY cluster by these."
+        },
+        "era": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 80,
+          "description": "Free-form era label. Conventional values: 'contemporary', 'timeless', '<year>', '<year>-<year>', '<period>'. Free-form to accept any setting."
+        },
+        "setting": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 120,
+          "description": "Free-form setting label. Conventional values: 'real-world', 'fictional-<universe>'. Free-form to accept any setting."
+        }
+      },
+      "default": {}
+    },
+    "voice": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "register": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 80,
+          "description": "Voice register. Conventional values: warm-direct, playful, terse, academic. Custom values welcome — free-form to accept any author label."
+        },
+        "signaturePhrases": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1, "maxLength": 200 },
+          "uniqueItems": true,
+          "default": [],
+          "maxItems": 24,
+          "description": "Catchphrases the character uses. Append-and-dedupe under extends — lineage accumulates phrases."
+        },
+        "tonality": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1, "maxLength": 60 },
+          "uniqueItems": true,
+          "default": [],
+          "maxItems": 16,
+          "description": "Tonal adjectives. Examples: rigorous, encouraging, dry, warm. Append-and-dedupe under extends."
+        },
+        "formality": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 10,
+          "description": "Formality scale, 0 (extremely casual) to 10 (extremely formal). Optional."
+        },
+        "emojiUsage": {
+          "enum": ["never", "sparing", "frequent"],
+          "description": "Emoji posture. 'never' = no emojis ever; 'sparing' = occasional, intentional; 'frequent' = part of the voice."
+        },
+        "signOff": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 200,
+          "description": "Sign-off the persona uses to close messages. Examples: '—M.', 'Yours, Marcus', 'Until next time'."
+        }
+      },
+      "default": {}
+    },
+    "boundaries": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "refuses": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1, "maxLength": 200 },
+          "uniqueItems": true,
+          "default": [],
+          "description": "Topics the persona refuses outright. Free-form prose; the persona body SHOULD demonstrate the refusal posture in voice samples. Append-and-dedupe under extends."
+        },
+        "defers": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1, "maxLength": 200 },
+          "uniqueItems": true,
+          "default": [],
+          "description": "Topics the persona defers to a specialist on. Append-and-dedupe under extends."
+        },
+        "redirects": {
+          "type": "array",
+          "default": [],
+          "items": {
+            "type": "object",
+            "required": ["topic", "to"],
+            "additionalProperties": false,
+            "properties": {
+              "topic": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 200,
+                "description": "The topic the persona redirects."
+              },
+              "to": {
+                "type": "string",
+                "pattern": "^(ws://(personas|operators|skills)/[^\\s]+|\\.{1,2}/[^\\s]+)$",
+                "description": "Redirect target. ws:// ref to a persona/operator/skill, or a relative path."
+              },
+              "notes": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 500,
+                "description": "Optional prose describing why the redirect exists."
+              }
+            }
+          },
+          "description": "Topic-to-target redirects. Merge-by-`topic` under extends — child entry with same topic replaces parent's."
+        }
+      },
+      "default": {}
+    },
+    "defaultLocale": {
+      "type": "string",
+      "pattern": "^[a-z]{2,3}(-[A-Z][a-zA-Z0-9]+)*(-[A-Z]{2})?(-[a-zA-Z0-9]+)*$",
+      "description": "BCP-47 locale tag. Examples: 'en', 'en-US', 'fr-FR', 'pt-BR'."
+    },
+    "multilingual": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "pattern": "^[a-z]{2,3}(-[A-Z][a-zA-Z0-9]+)*(-[A-Z]{2})?(-[a-zA-Z0-9]+)*$"
+      },
+      "uniqueItems": true,
+      "default": [],
+      "maxItems": 32,
+      "description": "Fallback locales. BCP-47. Append-and-dedupe under extends."
+    },
+    "relationships": {
+      "type": "array",
+      "default": [],
+      "items": {
+        "type": "object",
+        "required": ["persona", "kind"],
+        "additionalProperties": false,
+        "properties": {
+          "persona": {
+            "type": "string",
+            "pattern": "^ws://personas/[^\\s]+$",
+            "description": "ws:// ref to another persona/v1 manifest in the registry."
+          },
+          "kind": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 60,
+            "description": "Relationship kind. Conventional values: mentor-of, peer-of, mentee-of, rival-of, partner-of. Free-form to accept any author label."
+          },
+          "notes": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 1000,
+            "description": "Optional prose describing the relationship."
+          }
+        }
+      },
+      "description": "Named relationships to other personas. Merge-by-`persona` under extends — child entry with same ref replaces parent's."
+    },
+    "identity": {
+      "type": "string",
+      "pattern": "^ws://identities/[^\\s]+$",
+      "description": "Optional AIP-23 identity workspace ref. The persona's inner substance."
+    },
+    "appliesTo": {
+      "type": "array",
+      "default": [],
+      "items": {
+        "type": "string",
+        "pattern": "^(ws://(operators|skills|assemblies/[a-z0-9-]+|personas)/[^\\s]+|\\.\\./[^\\s]+)$",
+        "description": "Cross-AIP ref. Operator (AIP-9), skill (AIP-3), assembly seat (AIP-24), or relative path."
+      },
+      "uniqueItems": true,
+      "description": "Bind this persona to specific consumers. Local-only — not inherited under extends."
+    },
+    "tags": {
+      "type": "array",
+      "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
+      "uniqueItems": true,
+      "default": [],
+      "maxItems": 16,
+      "description": "Catalog tags. Lowercase kebab-case. Append-and-dedupe under extends."
+    },
+    "metadata": {
+      "type": "object",
+      "additionalProperties": true,
+      "default": {},
+      "description": "Vendor extensions, namespaced under <vendor>. Hosts MUST tolerate unknown keys; vendor namespaces MUST NOT override the meaning of fields defined in this AIP."
+    }
+  }
+}