@aiwg/cli 2026.9.20 → 2026.9.21

package/schemas/decision/DecisionEnsembleIntegrityReport.v1.schema.json

@@ -0,0 +1,64 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://aiwg.io/schemas/decision/DecisionEnsembleIntegrityReport.v1.schema.json",
+  "title": "Decision Ensemble Integrity Report",
+  "description": "D17 extension of the #2037/#2048 eval-integrity report. It carries the upstream integrity fields unchanged and may only keep or tighten the upstream PROMOTE/HOLD/ROLLBACK decision.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "subject", "integrity", "pairedDeltas", "findings", "upstreamDecision", "decision", "digest"],
+  "properties": {
+    "schemaVersion": { "const": "decision-ensemble-integrity-report/v1" },
+    "subject": {
+      "type": "object", "additionalProperties": false, "required": ["kind", "id", "digest", "eligibilityId"],
+      "properties": {
+        "kind": { "const": "champion-challenger" },
+        "id": { "type": "string", "minLength": 1 },
+        "digest": { "$ref": "#/$defs/digest" },
+        "eligibilityId": { "type": "string", "minLength": 1 }
+      }
+    },
+    "integrity": {
+      "type": "object", "additionalProperties": false,
+      "required": ["sample_n", "uncertainty", "paired_baseline", "integrity_mode", "fresh_workspace_required", "fresh_workspace_verified", "integrity_state", "trusted_score_source", "compromise_labels", "weak_signal_reason", "release_gate"],
+      "properties": {
+        "sample_n": { "type": "integer", "minimum": 0 },
+        "uncertainty": {},
+        "paired_baseline": {},
+        "integrity_mode": { "type": "string", "minLength": 1 },
+        "fresh_workspace_required": { "type": "boolean" },
+        "fresh_workspace_verified": { "type": "boolean" },
+        "integrity_state": { "type": "string", "minLength": 1 },
+        "trusted_score_source": { "type": "string", "minLength": 1 },
+        "compromise_labels": { "type": "array", "items": { "type": "string" } },
+        "weak_signal_reason": { "type": ["string", "null"] },
+        "release_gate": {
+          "type": "object", "additionalProperties": false, "required": ["decision", "reasons"],
+          "properties": { "decision": { "$ref": "#/$defs/gateDecision" }, "reasons": { "type": "array", "items": { "type": "string" } } }
+        }
+      }
+    },
+    "pairedDeltas": {
+      "type": "array",
+      "items": {
+        "type": "object", "additionalProperties": false, "required": ["metric", "delta", "pairs", "comparison", "bound", "minimumPairs", "passed"],
+        "properties": {
+          "metric": { "enum": ["quality", "calibration", "risk-coverage", "abstention", "latency", "tokens", "cost", "slice"] },
+          "delta": { "type": ["number", "null"] },
+          "pairs": { "type": "integer", "minimum": 0 },
+          "comparison": { "enum": ["delta-at-least", "delta-at-most"] },
+          "bound": { "type": "number" },
+          "minimumPairs": { "type": "integer", "minimum": 1 },
+          "passed": { "type": "boolean" }
+        }
+      }
+    },
+    "findings": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+    "upstreamDecision": { "$ref": "#/$defs/gateDecision" },
+    "decision": { "$ref": "#/$defs/gateDecision" },
+    "digest": { "$ref": "#/$defs/digest" }
+  },
+  "$defs": {
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "gateDecision": { "enum": ["PROMOTE", "HOLD", "ROLLBACK"] }
+  }
+}

package/schemas/decision/DecisionEnsemblePolicy.v1.schema.json

@@ -0,0 +1,130 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://aiwg.io/schemas/decision/DecisionEnsemblePolicy.v1.schema.json",
+  "title": "Decision Ensemble Policy",
+  "description": "D17 contract for a bounded, versioned ensemble over pinned decision members. Contract only: this schema does not enable ensemble dispatch.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "id", "version", "mode", "riskTiers", "definition", "primitive", "compatibleUncertaintyProfiles", "requiredCapabilities", "members", "aggregation", "disagreement", "acceptance", "calibration", "ceilings"],
+  "properties": {
+    "schemaVersion": { "const": "decision-ensemble-policy/v1" },
+    "id": { "$ref": "#/$defs/name" },
+    "version": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$" },
+    "mode": { "enum": ["disabled", "offline-shadow", "advisory"] },
+    "riskTiers": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+    "definition": { "$ref": "#/$defs/pin" },
+    "primitive": { "$ref": "#/$defs/primitive" },
+    "options": { "type": "array", "minItems": 2, "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+    "levels": { "type": "integer", "minimum": 2, "maximum": 100 },
+    "compatibleUncertaintyProfiles": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+    "requiredCapabilities": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+    "members": { "type": "array", "minItems": 1, "maxItems": 16, "items": { "$ref": "#/$defs/member" } },
+    "aggregation": {
+      "type": "object", "additionalProperties": false, "required": ["algorithm", "tieRule"],
+      "properties": {
+        "algorithm": { "enum": ["majority-v1", "mean-probability-v1", "score-distribution-mean-v1", "score-median-v1"] },
+        "tieRule": { "enum": ["lowest-canonical-value", "defer", "review"] }
+      }
+    },
+    "disagreement": {
+      "type": "object", "additionalProperties": false, "required": ["metric", "thresholdBps", "onExceeded"],
+      "properties": {
+        "metric": { "enum": ["vote-share-v1", "normalized-entropy-v1", "jensen-shannon-v1", "score-dispersion-v1"] },
+        "thresholdBps": { "$ref": "#/$defs/bps" },
+        "onExceeded": { "$ref": "#/$defs/deferRoute" }
+      }
+    },
+    "acceptance": {
+      "type": "object", "additionalProperties": false, "required": ["minimumSuccessfulMembers", "onInsufficientMembers", "highAgreementWarningBps"],
+      "properties": {
+        "minimumSuccessfulMembers": { "type": "integer", "minimum": 1 },
+        "onInsufficientMembers": { "$ref": "#/$defs/deferRoute" },
+        "highAgreementWarningBps": { "$ref": "#/$defs/bps" }
+      }
+    },
+    "calibration": {
+      "type": "object", "additionalProperties": false, "required": ["requirement"],
+      "properties": { "requirement": { "enum": ["advisory", "required"] } }
+    },
+    "ceilings": {
+      "type": "object", "additionalProperties": false,
+      "required": ["members", "attempts", "deadlineMs", "tokens", "costMicros", "unknownCost", "concurrency", "fallbackDepth"],
+      "properties": {
+        "members": { "type": "integer", "minimum": 1, "maximum": 16 },
+        "attempts": { "type": "integer", "minimum": 1, "maximum": 256 },
+        "deadlineMs": { "type": "integer", "minimum": 1, "maximum": 3600000 },
+        "tokens": { "type": "integer", "minimum": 1 },
+        "costMicros": { "type": "integer", "minimum": 1 },
+        "unknownCost": {
+          "oneOf": [
+            { "type": "object", "additionalProperties": false, "required": ["rule"], "properties": { "rule": { "const": "reject" } } },
+            { "type": "object", "additionalProperties": false, "required": ["rule", "boundMicrosPerAttempt"],
+              "properties": { "rule": { "const": "reserve-bound" }, "boundMicrosPerAttempt": { "type": "integer", "minimum": 1 } } }
+          ]
+        },
+        "concurrency": { "type": "integer", "minimum": 1, "maximum": 16 },
+        "fallbackDepth": { "type": "integer", "minimum": 0, "maximum": 3 }
+      }
+    }
+  },
+  "allOf": [
+    { "if": { "properties": { "primitive": { "const": "choice" } } }, "then": { "required": ["options"], "properties": { "options": true, "levels": false } } },
+    { "if": { "properties": { "primitive": { "const": "ordinal-score" } } }, "then": { "required": ["levels"], "properties": { "levels": true, "options": false } } },
+    { "if": { "properties": { "primitive": { "const": "truth-probability" } } }, "then": { "properties": { "options": false, "levels": false } } }
+  ],
+  "$defs": {
+    "name": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:/-]*$" },
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "bps": { "type": "integer", "minimum": 0, "maximum": 10000 },
+    "primitive": { "enum": ["choice", "truth-probability", "ordinal-score"] },
+    "deferRoute": { "enum": ["defer", "review"] },
+    "pin": {
+      "type": "object", "additionalProperties": false, "required": ["id", "version", "digest"],
+      "properties": { "id": { "$ref": "#/$defs/name" }, "version": { "type": "string", "minLength": 1 }, "digest": { "$ref": "#/$defs/digest" } }
+    },
+    "member": {
+      "type": "object", "additionalProperties": false,
+      "required": ["id", "memberType", "definition", "binding", "adapter", "model", "primitive", "uncertaintyProfile", "requiredCapabilities", "capabilities", "calibration", "samples", "fallbackDepth", "estimate", "approvalReference"],
+      "properties": {
+        "id": { "$ref": "#/$defs/name" },
+        "memberType": { "enum": ["model-version", "provider-backend", "repeated-sample", "prompt-adapter"] },
+        "definition": { "$ref": "#/$defs/pin" },
+        "binding": { "$ref": "#/$defs/pin" },
+        "adapter": {
+          "type": "object", "additionalProperties": false, "required": ["id", "version"],
+          "properties": { "id": { "$ref": "#/$defs/name" }, "version": { "type": "string", "minLength": 1 } }
+        },
+        "model": {
+          "type": "object", "additionalProperties": false, "required": ["provider", "backend", "requested", "pinnedVersion"],
+          "properties": {
+            "provider": { "$ref": "#/$defs/name" }, "backend": { "$ref": "#/$defs/name" },
+            "requested": { "$ref": "#/$defs/name" }, "pinnedVersion": { "$ref": "#/$defs/name" }
+          }
+        },
+        "primitive": { "$ref": "#/$defs/primitive" },
+        "uncertaintyProfile": { "$ref": "#/$defs/name" },
+        "requiredCapabilities": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+        "capabilities": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+        "calibration": {
+          "anyOf": [
+            { "type": "null" },
+            { "type": "object", "additionalProperties": false, "required": ["artifactId", "artifactDigest"],
+              "properties": { "artifactId": { "$ref": "#/$defs/name" }, "artifactDigest": { "$ref": "#/$defs/digest" } } }
+          ]
+        },
+        "samples": { "type": "integer", "minimum": 1, "maximum": 32 },
+        "fallbackDepth": { "type": "integer", "minimum": 0, "maximum": 3 },
+        "estimate": {
+          "type": "object", "additionalProperties": false, "required": ["attemptsPerSample", "tokensPerAttempt", "costMicrosPerAttempt", "deadlineMsPerAttempt"],
+          "properties": {
+            "attemptsPerSample": { "type": "integer", "minimum": 1 },
+            "tokensPerAttempt": { "type": "integer", "minimum": 0 },
+            "costMicrosPerAttempt": { "type": ["integer", "null"], "minimum": 0 },
+            "deadlineMsPerAttempt": { "type": "integer", "minimum": 1 }
+          }
+        },
+        "approvalReference": { "type": ["string", "null"], "minLength": 1 }
+      }
+    }
+  }
+}

package/schemas/decision/DecisionGraph.v1.schema.json

@@ -0,0 +1,77 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://aiwg.io/schemas/decision/DecisionGraph.v1.schema.json",
+  "title": "Decision Graph v1 (offline contract; runtime disabled)",
+  "type": "object",
+  "required": ["schemaVersion", "id", "entry", "terminals", "nodes", "edges", "budget"],
+  "additionalProperties": false,
+  "properties": {
+    "schemaVersion": { "const": "decision-graph/v1" },
+    "id": { "$ref": "#/$defs/name" },
+    "entry": { "$ref": "#/$defs/name" },
+    "terminals": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+    "pattern": { "enum": ["custom", "shortlist-rerank", "taxonomy-beam", "extractor-verifier-fallback"] },
+    "nodes": { "type": "array", "minItems": 1, "maxItems": 128, "items": { "$ref": "#/$defs/node" } },
+    "edges": { "type": "array", "maxItems": 512, "items": { "$ref": "#/$defs/edge" } },
+    "budget": { "$ref": "#/$defs/budget" },
+    "stageBudgets": {
+      "type": "array", "maxItems": 128,
+      "items": {
+        "type": "object", "additionalProperties": false, "required": ["stage", "limits"],
+        "properties": {
+          "stage": { "type": "integer", "minimum": 0, "maximum": 127 },
+          "limits": { "$ref": "#/$defs/budget" }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "name": { "type": "string", "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$" },
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "pin": {
+      "type": "object", "additionalProperties": false,
+      "required": ["id", "version", "digest"],
+      "properties": { "id": { "$ref": "#/$defs/name" }, "version": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._-]{0,63}$" }, "digest": { "$ref": "#/$defs/digest" } }
+    },
+    "node": {
+      "type": "object", "additionalProperties": false,
+      "required": ["id", "stage", "subject", "target", "model", "egress", "stateDigest", "definition", "binding", "input", "output"],
+      "properties": {
+        "id": { "$ref": "#/$defs/name" }, "stage": { "type": "integer", "minimum": 0, "maximum": 127 },
+        "subject": { "$ref": "#/$defs/name" }, "target": { "$ref": "#/$defs/name" },
+        "model": { "$ref": "#/$defs/name" }, "egress": { "$ref": "#/$defs/name" },
+        "stateDigest": { "$ref": "#/$defs/digest" },
+        "definition": { "$ref": "#/$defs/pin" }, "binding": { "$ref": "#/$defs/pin" },
+        "input": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+        "output": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/name" } }
+      }
+    },
+    "edge": {
+      "type": "object", "additionalProperties": false,
+      "required": ["from", "to", "source", "destination"],
+      "properties": {
+        "from": { "$ref": "#/$defs/name" }, "to": { "$ref": "#/$defs/name" },
+        "source": { "$ref": "#/$defs/name" }, "destination": { "$ref": "#/$defs/name" },
+        "when": {
+          "type": "object", "additionalProperties": false,
+          "required": ["source", "equals"],
+          "properties": { "source": { "$ref": "#/$defs/name" }, "equals": { "type": "boolean" } }
+        }
+      }
+    },
+    "budget": {
+      "type": "object", "additionalProperties": false,
+      "required": ["attempts", "deadlineMs", "tokens", "costMicros", "fanOut", "beamWidth", "depth", "concurrency"],
+      "properties": {
+        "attempts": { "type": "integer", "minimum": 1, "maximum": 1000 },
+        "deadlineMs": { "type": "integer", "minimum": 1, "maximum": 86400000 },
+        "tokens": { "type": "integer", "minimum": 1, "maximum": 10000000 },
+        "costMicros": { "type": "integer", "minimum": 1, "maximum": 1000000000 },
+        "fanOut": { "type": "integer", "minimum": 1, "maximum": 128 },
+        "beamWidth": { "type": "integer", "minimum": 1, "maximum": 128 },
+        "depth": { "type": "integer", "minimum": 1, "maximum": 128 },
+        "concurrency": { "type": "integer", "minimum": 1, "maximum": 128 }
+      }
+    }
+  }
+}

package/schemas/decision/DecisionJob.v1.schema.json

@@ -0,0 +1,71 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://aiwg.io/schemas/decision/DecisionJob.v1.schema.json",
+  "title": "AIWG Decision Job v1 (contract only; dispatch disabled)",
+  "type": "object", "additionalProperties": false,
+  "required": ["schemaVersion", "id", "scope", "fingerprint", "state", "items", "summary", "createdAtEpochMs", "expiresAtEpochMs", "budget"],
+  "properties": {
+    "schemaVersion": { "const": "decision-job/v1" },
+    "id": { "$ref": "#/$defs/id" },
+    "scope": {
+      "type": "object", "additionalProperties": false,
+      "required": ["tenantId", "projectId", "workspaceId", "principalId"],
+      "properties": { "tenantId": { "$ref": "#/$defs/id" }, "projectId": { "$ref": "#/$defs/id" }, "workspaceId": { "$ref": "#/$defs/id" }, "principalId": { "$ref": "#/$defs/id" } }
+    },
+    "fingerprint": { "$ref": "#/$defs/digest" },
+    "state": { "enum": ["validating", "queued", "running", "partially-completed", "completed", "cancel-requested", "canceled", "expired", "failed"] },
+    "items": { "type": "array", "minItems": 1, "maxItems": 1000, "items": { "$ref": "#/$defs/item" } },
+    "summary": { "type": "object", "additionalProperties": { "type": "integer", "minimum": 0 }, "minProperties": 1 },
+    "createdAtEpochMs": { "type": "integer", "minimum": 0 },
+    "expiresAtEpochMs": { "type": "integer", "minimum": 1 },
+    "budget": {
+      "type": "object", "additionalProperties": false,
+      "required": ["maxAttempts", "maxTokens", "maxCostMicros", "maxConcurrency"],
+      "properties": {
+        "maxAttempts": { "type": "integer", "minimum": 1, "maximum": 1000 },
+        "maxTokens": { "type": "integer", "minimum": 1, "maximum": 10000000 },
+        "maxCostMicros": { "type": "integer", "minimum": 1, "maximum": 1000000000 },
+        "maxConcurrency": { "type": "integer", "minimum": 1, "maximum": 128 }
+      }
+    }
+  },
+  "$defs": {
+    "id": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9_-]{0,127}$" },
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "item": {
+      "type": "object", "additionalProperties": false,
+      "required": ["id", "fingerprint", "subjectDigest", "definitionDigest", "bindingDigest", "state", "attempts"],
+      "properties": {
+        "id": { "$ref": "#/$defs/id" }, "fingerprint": { "$ref": "#/$defs/digest" },
+        "subjectDigest": { "$ref": "#/$defs/digest" },
+        "definitionDigest": { "$ref": "#/$defs/digest" }, "bindingDigest": { "$ref": "#/$defs/digest" },
+        "rulesetDigest": { "$ref": "#/$defs/digest" },
+        "state": { "enum": ["queued", "running", "succeeded", "abstained", "review", "unsupported", "retryable-failed", "permanent-failed", "canceled", "expired", "execution-unknown"] },
+        "attempts": { "type": "array", "maxItems": 1000, "items": {
+          "type": "object", "additionalProperties": false,
+          "required": ["id", "requestDigest", "outcome"],
+          "properties": {
+            "id": { "$ref": "#/$defs/id" }, "requestDigest": { "$ref": "#/$defs/digest" },
+            "receiptDigest": { "$ref": "#/$defs/digest" },
+            "reservedTokens": { "type": "integer", "minimum": 0, "maximum": 10000000 },
+            "reservedCostMicros": { "type": "integer", "minimum": 0, "maximum": 1000000000 },
+            "outcome": { "enum": ["dispatched", "succeeded", "failed", "execution-unknown"] },
+            "resolution": {
+              "description": "D16 opt-in resolution of an execution-unknown attempt through a verified effect (digest-match only).",
+              "type": "object", "additionalProperties": false,
+              "required": ["method", "effectId", "reason", "receiptDigest"],
+              "properties": {
+                "method": { "const": "effect-ledger" },
+                "effectId": { "type": "string", "pattern": "^eff1_[a-z2-7]{51}[aq]$" },
+                "reason": { "const": "digest-match" },
+                "receiptDigest": { "$ref": "#/$defs/digest" }
+              }
+            }
+          }
+        } },
+        "resultDigest": { "$ref": "#/$defs/digest" },
+        "errorCode": { "$ref": "#/$defs/id" }
+      }
+    }
+  }
+}

package/schemas/decision/DecisionLifecyclePolicy.v1.schema.json

@@ -0,0 +1,52 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://aiwg.io/schemas/decision/DecisionLifecyclePolicy.v1.schema.json",
+  "title": "AIWG Decision Lifecycle Policy v1",
+  "description": "Trusted host lifecycle controls (decision-lifecycle/v1). Every surface must declare classification, access scope, retention, export, deletion and backup handling; omissions are rejected rather than defaulted. Mirrors validateDecisionLifecyclePolicy.",
+  "type": "object",
+  "required": ["version", "surfaces"],
+  "additionalProperties": false,
+  "properties": {
+    "version": { "const": "decision-lifecycle/v1" },
+    "surfaces": {
+      "type": "object",
+      "required": [
+        "state", "receipt", "trace", "debug-sidecar", "cache", "job", "review",
+        "calibration", "evaluation", "export", "preprocessing-lineage"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "state": { "$ref": "#/$defs/rule" },
+        "receipt": { "$ref": "#/$defs/rule" },
+        "trace": { "$ref": "#/$defs/rule" },
+        "debug-sidecar": { "$ref": "#/$defs/rule" },
+        "cache": { "$ref": "#/$defs/rule" },
+        "job": { "$ref": "#/$defs/rule" },
+        "review": { "$ref": "#/$defs/rule" },
+        "calibration": { "$ref": "#/$defs/rule" },
+        "evaluation": { "$ref": "#/$defs/rule" },
+        "export": { "$ref": "#/$defs/rule" },
+        "preprocessing-lineage": { "$ref": "#/$defs/rule" }
+      }
+    }
+  },
+  "$defs": {
+    "rule": {
+      "type": "object",
+      "required": ["classification", "accessScopes", "retentionMs", "export", "deletion", "backup"],
+      "additionalProperties": false,
+      "properties": {
+        "classification": { "enum": ["public", "internal", "confidential", "restricted"] },
+        "accessScopes": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "retentionMs": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 },
+        "export": { "enum": ["denied", "sanitized"] },
+        "deletion": { "enum": ["erase", "tombstone"] },
+        "backup": { "enum": ["not-persisted", "expire-with-primary"] }
+      }
+    }
+  }
+}

package/schemas/decision/DecisionProjectionPolicy.v1.schema.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://aiwg.io/schemas/decision/DecisionProjectionPolicy.v1.schema.json",
+  "title": "AIWG Decision Projection Policy v1",
+  "description": "Trusted host control data selecting the only state fields an adapter may receive. Runtime validation (validateProjectionPolicy) additionally enforces destination authorization, one stable subject, unique outputs and secret-material rejection.",
+  "type": "object",
+  "required": ["version", "provider", "model", "origin", "region", "purpose", "allowIncompleteContext", "fields"],
+  "additionalProperties": false,
+  "properties": {
+    "version": { "$ref": "#/$defs/nonEmpty" },
+    "provider": { "$ref": "#/$defs/nonEmpty" },
+    "model": { "$ref": "#/$defs/nonEmpty" },
+    "origin": { "$ref": "#/$defs/httpsUri" },
+    "region": { "$ref": "#/$defs/nonEmpty" },
+    "purpose": { "$ref": "#/$defs/nonEmpty" },
+    "allowIncompleteContext": { "type": "boolean" },
+    "maxSensitivity": { "$ref": "#/$defs/sensitivity" },
+    "fields": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/field" }
+    }
+  },
+  "$defs": {
+    "nonEmpty": { "type": "string", "minLength": 1, "pattern": "\\S" },
+    "httpsUri": { "type": "string", "format": "uri", "pattern": "^https://[^/@\\s]+(?:/.*)?$" },
+    "nonEmptyList": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/nonEmpty" }
+    },
+    "sensitivity": { "enum": ["public", "internal", "confidential", "restricted"] },
+    "field": {
+      "type": "object",
+      "required": [
+        "pointer", "output", "source", "subject", "trust", "sensitivity", "purpose", "retentionClass",
+        "accessScopes", "exportPolicy", "deletionPolicy", "backupPolicy", "allowedProviders",
+        "allowedModels", "allowedOrigins", "allowedRegions"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "pointer": { "type": "string", "pattern": "^/" },
+        "output": { "type": "string", "pattern": "^[A-Za-z][A-Za-z0-9_.-]*$" },
+        "source": { "$ref": "#/$defs/nonEmpty" },
+        "subject": { "$ref": "#/$defs/nonEmpty" },
+        "trust": { "enum": ["verified", "untrusted"] },
+        "sensitivity": { "$ref": "#/$defs/sensitivity" },
+        "purpose": { "$ref": "#/$defs/nonEmpty" },
+        "retentionClass": { "$ref": "#/$defs/nonEmpty" },
+        "accessScopes": { "$ref": "#/$defs/nonEmptyList" },
+        "exportPolicy": { "enum": ["denied", "sanitized"] },
+        "deletionPolicy": { "enum": ["erase", "tombstone"] },
+        "backupPolicy": { "enum": ["expire-with-primary", "not-persisted"] },
+        "allowedProviders": { "$ref": "#/$defs/nonEmptyList" },
+        "allowedModels": { "$ref": "#/$defs/nonEmptyList" },
+        "allowedOrigins": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/$defs/httpsUri" }
+        },
+        "allowedRegions": { "$ref": "#/$defs/nonEmptyList" }
+      }
+    }
+  }
+}

package/schemas/decision/DecisionProviderPrefixCompatibility.v1.schema.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://aiwg.io/schemas/decision/DecisionProviderPrefixCompatibility.v1.schema.json",
+  "title": "AIWG Decision Provider Prefix Compatibility Record v1",
+  "description": "Pinned permission to reuse a provider prefix across one exact identity change. Scope, data class, region, egress, provider and prefix bytes can never be permitted to change.",
+  "type": "object",
+  "required": ["schemaVersion", "fromIdentityDigest", "toIdentityDigest", "permits", "aliasSnapshot", "approvedBy", "expiresAtEpochMs"],
+  "additionalProperties": false,
+  "properties": {
+    "schemaVersion": { "const": "decision-provider-prefix-compatibility/v1" },
+    "fromIdentityDigest": { "$ref": "#/$defs/digest" },
+    "toIdentityDigest": { "$ref": "#/$defs/digest" },
+    "permits": {
+      "type": "array", "minItems": 1, "uniqueItems": true,
+      "items": { "enum": ["requestedModel", "actualModel", "apiRevision", "backend", "policy"] }
+    },
+    "aliasSnapshot": {
+      "oneOf": [
+        { "type": "null" },
+        {
+          "type": "object",
+          "required": ["alias", "snapshotId", "approvedActualModels", "validUntilEpochMs"],
+          "additionalProperties": false,
+          "properties": {
+            "alias": { "type": "string", "minLength": 1 },
+            "snapshotId": { "type": "string", "minLength": 1 },
+            "approvedActualModels": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } },
+            "validUntilEpochMs": { "type": "integer", "minimum": 0 }
+          }
+        }
+      ]
+    },
+    "approvedBy": { "type": "string", "minLength": 1 },
+    "expiresAtEpochMs": { "type": "integer", "minimum": 0 }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "permits": { "type": "array", "contains": { "enum": ["requestedModel", "actualModel"] } } } },
+      "then": { "properties": { "aliasSnapshot": { "type": "object" } } }
+    }
+  ],
+  "$defs": {
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }
+  }
+}

package/schemas/decision/DecisionProviderPrefixEvidence.v1.schema.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://aiwg.io/schemas/decision/DecisionProviderPrefixEvidence.v1.schema.json",
+  "title": "AIWG Decision Provider Prefix Evidence v1",
+  "type": "object",
+  "required": ["schemaVersion", "identityDigest", "status", "source", "cacheVersion", "savedInputTokens", "expiresAtEpochMs"],
+  "additionalProperties": false,
+  "properties": {
+    "schemaVersion": { "const": "decision-provider-prefix-evidence/v1" },
+    "identityDigest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "status": { "enum": ["hit", "miss", "bypass", "unsupported", "unknown"] },
+    "source": { "enum": ["provider-report", "documented-unsupported", "policy-bypass", "unreported"] },
+    "cacheVersion": { "oneOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] },
+    "savedInputTokens": { "oneOf": [{ "type": "integer", "minimum": 0 }, { "type": "null" }] },
+    "expiresAtEpochMs": { "oneOf": [{ "type": "number" }, { "type": "null" }] }
+  }
+}

package/schemas/decision/DecisionProviderPrefixIdentity.v1.schema.json

@@ -0,0 +1,36 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://aiwg.io/schemas/decision/DecisionProviderPrefixIdentity.v1.schema.json",
+  "title": "AIWG Decision Provider Prefix Identity v1",
+  "description": "Protected semantic identity of a provider prompt prefix. Only its digest appears in evidence and telemetry.",
+  "type": "object",
+  "required": ["schemaVersion", "orderedPrefixDigest", "provider", "backend", "requestedModel", "actualModel", "apiRevision", "policy", "tenantId", "workspaceId", "dataClass", "region", "egressPolicyDigest"],
+  "additionalProperties": false,
+  "properties": {
+    "schemaVersion": { "const": "decision-provider-prefix-identity/v1" },
+    "orderedPrefixDigest": { "$ref": "#/$defs/digest" },
+    "provider": { "type": "string", "minLength": 1 },
+    "backend": { "type": "string", "minLength": 1 },
+    "requestedModel": { "type": "string", "minLength": 1 },
+    "actualModel": { "oneOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] },
+    "apiRevision": { "type": "string", "minLength": 1 },
+    "policy": {
+      "type": "object",
+      "required": ["id", "version", "ttlMs"],
+      "additionalProperties": false,
+      "properties": {
+        "id": { "type": "string", "minLength": 1 },
+        "version": { "type": "string", "minLength": 1 },
+        "ttlMs": { "type": "integer", "minimum": 1 }
+      }
+    },
+    "tenantId": { "type": "string", "minLength": 1 },
+    "workspaceId": { "type": "string", "minLength": 1 },
+    "dataClass": { "type": "string", "minLength": 1 },
+    "region": { "type": "string", "minLength": 1 },
+    "egressPolicyDigest": { "$ref": "#/$defs/digest" }
+  },
+  "$defs": {
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }
+  }
+}