@aiwg/cli 2026.9.21 → 2026.10.0

package/schemas/decision/DecisionRoutingPolicy.v1.schema.json

@@ -0,0 +1,132 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://aiwg.io/schemas/decision/DecisionRoutingPolicy.v1.schema.json",
+  "title": "Decision Routing Policy",
+  "description": "D28 default-off/shadow policy for capability-constrained route selection. It cannot grant permissions.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "id", "version", "mode", "policyVersion", "candidates", "defaultRouteId", "deterministicFallbackRouteId", "utility", "ceilings", "jevEvidence"],
+  "properties": {
+    "schemaVersion": { "const": "decision-routing-policy/v1" },
+    "id": { "$ref": "#/$defs/name" },
+    "version": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$" },
+    "mode": { "enum": ["disabled", "shadow"], "description": "No mode executes a Jev-selected route; shadow executes only the deterministic route." },
+    "policyVersion": { "$ref": "#/$defs/name" },
+    "candidates": { "type": "array", "minItems": 1, "maxItems": 16, "items": { "$ref": "#/$defs/candidate" } },
+    "defaultRouteId": { "type": ["string", "null"], "minLength": 1 },
+    "deterministicFallbackRouteId": { "type": ["string", "null"], "minLength": 1 },
+    "utility": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["taskFit", "complexityFit", "ambiguityPenalty", "latencyPenalty", "costPenalty", "healthPenalty"],
+      "properties": {
+        "taskFit": { "$ref": "#/$defs/nonnegativeNumber" },
+        "complexityFit": { "$ref": "#/$defs/nonnegativeNumber" },
+        "ambiguityPenalty": { "$ref": "#/$defs/nonnegativeNumber" },
+        "latencyPenalty": { "$ref": "#/$defs/nonnegativeNumber" },
+        "costPenalty": { "$ref": "#/$defs/nonnegativeNumber" },
+        "healthPenalty": { "$ref": "#/$defs/nonnegativeNumber" }
+      }
+    },
+    "ceilings": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["maxAttempts", "maxFallbacks", "maxCostMicros", "deadlineMs", "retryDelayMs", "unknownCost"],
+      "properties": {
+        "maxAttempts": { "type": "integer", "minimum": 1, "maximum": 32 },
+        "maxFallbacks": { "type": "integer", "minimum": 0, "maximum": 15 },
+        "maxCostMicros": { "type": "integer", "minimum": 0 },
+        "deadlineMs": { "type": "integer", "minimum": 1 },
+        "retryDelayMs": { "type": "integer", "minimum": 1, "maximum": 30000 },
+        "unknownCost": { "const": "reject" }
+      }
+    },
+    "jevEvidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["enabled", "calibrationRequired", "compatibleProfiles", "uncertaintyThresholdBps"],
+      "properties": {
+        "enabled": { "type": "boolean" },
+        "calibrationRequired": { "const": true },
+        "compatibleProfiles": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+        "uncertaintyThresholdBps": { "$ref": "#/$defs/bps" }
+      }
+    }
+  },
+  "$defs": {
+    "name": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:/-]*$" },
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "bps": { "type": "integer", "minimum": 0, "maximum": 10000 },
+    "nonnegativeNumber": { "type": "number", "minimum": 0 },
+    "pin": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "version", "digest"],
+      "properties": {
+        "id": { "$ref": "#/$defs/name" },
+        "version": { "type": "string", "minLength": 1 },
+        "digest": { "$ref": "#/$defs/digest" }
+      }
+    },
+    "candidate": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "binding", "model", "subagent", "capabilities", "permissions", "policy", "operations"],
+      "properties": {
+        "id": { "$ref": "#/$defs/name" },
+        "binding": { "$ref": "#/$defs/pin" },
+        "subagent": { "anyOf": [{ "type": "null" }, { "$ref": "#/$defs/pin" }] },
+        "model": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["provider", "backend", "requested", "pinnedVersion"],
+          "properties": {
+            "provider": { "$ref": "#/$defs/name" },
+            "backend": { "$ref": "#/$defs/name" },
+            "requested": { "$ref": "#/$defs/name" },
+            "pinnedVersion": { "$ref": "#/$defs/name" }
+          }
+        },
+        "capabilities": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+        "permissions": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["tools", "network", "filesystem", "secrets", "actions"],
+          "properties": {
+            "tools": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+            "network": { "type": "boolean" },
+            "filesystem": { "enum": ["none", "read", "write"] },
+            "secrets": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+            "actions": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/name" } }
+          }
+        },
+        "policy": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["privacy", "authorizationScopes", "regions", "contextBytes", "allowlisted", "executable"],
+          "properties": {
+            "privacy": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+            "authorizationScopes": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+            "regions": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+            "contextBytes": { "type": "integer", "minimum": 0 },
+            "allowlisted": { "type": "boolean" },
+            "executable": { "type": "boolean" }
+          }
+        },
+        "operations": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["health", "latencyMsP95", "priceCatalogVersion", "costMicrosPerAttempt", "maxAttempts", "deadlineMs"],
+          "properties": {
+            "health": { "enum": ["healthy", "degraded", "rate-limited", "outage", "circuit-open"] },
+            "latencyMsP95": { "type": "integer", "minimum": 0 },
+            "priceCatalogVersion": { "$ref": "#/$defs/name" },
+            "costMicrosPerAttempt": { "type": ["integer", "null"], "minimum": 0 },
+            "maxAttempts": { "type": "integer", "minimum": 1 },
+            "deadlineMs": { "type": "integer", "minimum": 1 }
+          }
+        }
+      }
+    }
+  }
+}

package/schemas/decision/DecisionRoutingShadowReport.v1.schema.json

@@ -0,0 +1,170 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://aiwg.io/schemas/decision/DecisionRoutingShadowReport.v1.schema.json",
+  "title": "Decision Routing Shadow Report",
+  "description": "D28 paired held-out comparison of fixed, heuristic and Jev-assisted routing. It carries its observations so any verifier can rebuild it against a separately trusted preregistration digest.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "id", "preregistration", "holdoutAccessedAt", "evaluatedAt", "observations", "arms", "comparisons", "integrity", "integrityFindings", "decision", "reasons", "digest"],
+  "properties": {
+    "schemaVersion": { "const": "decision-routing-shadow-report/v1" },
+    "id": { "$ref": "#/$defs/name" },
+    "preregistration": { "$ref": "#/$defs/preregistration" },
+    "holdoutAccessedAt": { "type": ["string", "null"], "format": "date-time" },
+    "evaluatedAt": { "type": "string", "format": "date-time" },
+    "observations": { "type": "array", "maxItems": 300000, "items": { "$ref": "#/$defs/observation" } },
+    "arms": { "type": "array", "minItems": 3, "maxItems": 3, "items": { "$ref": "#/$defs/arm" } },
+    "comparisons": {
+      "type": "object", "additionalProperties": false,
+      "required": ["baselineArm", "candidateArm", "pairedN", "quality", "economics", "latencyP95IncreaseMs", "providerCallsPerTask", "budgetCompliant"],
+      "properties": {
+        "baselineArm": { "enum": ["fixed", "heuristic"] },
+        "candidateArm": { "const": "jev-assisted" },
+        "pairedN": { "type": "integer", "minimum": 0 },
+        "quality": {
+          "type": "object", "additionalProperties": false, "required": ["marginBps", "interval", "decision"],
+          "properties": {
+            "marginBps": { "type": "integer", "minimum": -10000, "maximum": 0 },
+            "interval": {
+              "anyOf": [{ "type": "null" }, {
+                "type": "object", "additionalProperties": false, "required": ["lowerBps", "upperBps", "estimateBps", "n", "method"],
+                "properties": {
+                  "lowerBps": { "type": "integer", "minimum": -10000, "maximum": 10000 },
+                  "upperBps": { "type": "integer", "minimum": -10000, "maximum": 10000 },
+                  "estimateBps": { "type": "integer", "minimum": -10000, "maximum": 10000 },
+                  "n": { "type": "integer", "minimum": 1 },
+                  "method": { "enum": ["newcombe-hybrid-score", "tango-score"] }
+                }
+              }]
+            },
+            "decision": { "enum": ["non-inferior", "not-non-inferior", "insufficient"] }
+          }
+        },
+        "economics": {
+          "type": "object", "additionalProperties": false, "required": ["baselineRiskAdjustedMicros", "candidateRiskAdjustedMicros", "netSavingsMicros"],
+          "properties": {
+            "baselineRiskAdjustedMicros": { "type": "integer", "minimum": 0 },
+            "candidateRiskAdjustedMicros": { "type": "integer", "minimum": 0 },
+            "netSavingsMicros": { "type": "integer" }
+          }
+        },
+        "latencyP95IncreaseMs": { "type": "integer" },
+        "providerCallsPerTask": { "type": "number", "minimum": 0 },
+        "budgetCompliant": { "type": "boolean" }
+      }
+    },
+    "integrity": { "type": "object", "additionalProperties": true },
+    "integrityFindings": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+    "decision": { "enum": ["PROMOTE", "HOLD", "ROLLBACK"] },
+    "reasons": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+    "digest": { "$ref": "#/$defs/digest" }
+  },
+  "$defs": {
+    "name": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:/-]*$" },
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "count": { "type": "integer", "minimum": 0 },
+    "rate": { "type": "number", "minimum": 0, "maximum": 1 },
+    "pin": {
+      "type": "object", "additionalProperties": false, "required": ["id", "version", "digest"],
+      "properties": { "id": { "$ref": "#/$defs/name" }, "version": { "type": "string", "minLength": 1 }, "digest": { "$ref": "#/$defs/digest" } }
+    },
+    "thresholds": {
+      "type": "object", "additionalProperties": false,
+      "required": ["minimumOverallN", "minimumSliceN", "ciMethod", "ciLevelBps", "qualityNonInferiorityMarginBps", "maxFailureRate", "maxReworkRate", "maxFallbackRate", "maxHumanOverrideRate", "maxLatencyP95IncreaseMs", "maxProviderCallsPerTask", "failurePenaltyMicros", "humanOverridePenaltyMicros", "budgetComplianceRequired", "positiveNetEconomicsRequired"],
+      "properties": {
+        "minimumOverallN": { "type": "integer", "minimum": 30 },
+        "minimumSliceN": { "type": "integer", "minimum": 10 },
+        "ciMethod": { "enum": ["newcombe-10", "tango"] },
+        "ciLevelBps": { "type": "integer", "minimum": 5001, "maximum": 9998 },
+        "qualityNonInferiorityMarginBps": { "type": "integer", "minimum": 0, "maximum": 10000 },
+        "maxFailureRate": { "$ref": "#/$defs/rate" },
+        "maxReworkRate": { "$ref": "#/$defs/rate" },
+        "maxFallbackRate": { "$ref": "#/$defs/rate" },
+        "maxHumanOverrideRate": { "$ref": "#/$defs/rate" },
+        "maxLatencyP95IncreaseMs": { "type": "integer", "minimum": 0 },
+        "maxProviderCallsPerTask": { "type": "number", "minimum": 0 },
+        "failurePenaltyMicros": { "$ref": "#/$defs/count" },
+        "humanOverridePenaltyMicros": { "$ref": "#/$defs/count" },
+        "budgetComplianceRequired": { "type": "boolean" },
+        "positiveNetEconomicsRequired": { "type": "boolean" }
+      }
+    },
+    "preregistration": {
+      "type": "object", "additionalProperties": false,
+      "required": ["schemaVersion", "policy", "baselineArm", "registeredAt", "tasks", "thresholds", "digest"],
+      "properties": {
+        "schemaVersion": { "const": "decision-routing-preregistration/v1" },
+        "policy": { "$ref": "#/$defs/pin" },
+        "baselineArm": { "enum": ["fixed", "heuristic"] },
+        "registeredAt": { "type": "string", "format": "date-time" },
+        "tasks": {
+          "type": "array", "minItems": 30, "maxItems": 100000,
+          "items": {
+            "type": "object", "additionalProperties": false, "required": ["id", "slice"],
+            "properties": { "id": { "$ref": "#/$defs/name" }, "slice": { "$ref": "#/$defs/name" } }
+          }
+        },
+        "thresholds": { "$ref": "#/$defs/thresholds" },
+        "digest": { "$ref": "#/$defs/digest" }
+      }
+    },
+    "observation": {
+      "type": "object", "additionalProperties": false,
+      "required": ["arm", "taskId", "slice", "success", "rework", "fallback", "humanOverride", "providerCalls", "inputTokens", "outputTokens", "attemptCostMicros", "reworkCostMicros", "budgetMicros", "latencyMs", "accepted", "policyViolation"],
+      "properties": {
+        "arm": { "enum": ["fixed", "heuristic", "jev-assisted"] },
+        "taskId": { "$ref": "#/$defs/name" },
+        "slice": { "$ref": "#/$defs/name" },
+        "success": { "type": "boolean" },
+        "rework": { "type": "boolean" },
+        "fallback": { "type": "boolean" },
+        "humanOverride": { "type": "boolean" },
+        "providerCalls": { "$ref": "#/$defs/count" },
+        "inputTokens": { "$ref": "#/$defs/count" },
+        "outputTokens": { "$ref": "#/$defs/count" },
+        "attemptCostMicros": { "$ref": "#/$defs/count" },
+        "reworkCostMicros": { "$ref": "#/$defs/count" },
+        "budgetMicros": { "$ref": "#/$defs/count" },
+        "latencyMs": { "$ref": "#/$defs/count" },
+        "accepted": { "type": "boolean" },
+        "policyViolation": { "type": "boolean" }
+      }
+    },
+    "arm": {
+      "type": "object", "additionalProperties": false,
+      "required": ["arm", "sampleN", "slices", "successRate", "failureRate", "reworkRate", "fallbackRate", "selectiveCoverage", "humanOverrideRate", "providerCalls", "inputTokens", "outputTokens", "attemptCostMicros", "reworkCostMicros", "totalCostMicros", "riskAdjustedCostMicros", "overBudgetTasks", "latencyMsP95", "policyViolations"],
+      "properties": {
+        "arm": { "enum": ["fixed", "heuristic", "jev-assisted"] },
+        "sampleN": { "$ref": "#/$defs/count" },
+        "slices": { "type": "object", "additionalProperties": { "$ref": "#/$defs/slice" } },
+        "successRate": { "$ref": "#/$defs/rate" },
+        "failureRate": { "$ref": "#/$defs/rate" },
+        "reworkRate": { "$ref": "#/$defs/rate" },
+        "fallbackRate": { "$ref": "#/$defs/rate" },
+        "selectiveCoverage": { "$ref": "#/$defs/rate" },
+        "humanOverrideRate": { "$ref": "#/$defs/rate" },
+        "providerCalls": { "$ref": "#/$defs/count" },
+        "inputTokens": { "$ref": "#/$defs/count" },
+        "outputTokens": { "$ref": "#/$defs/count" },
+        "attemptCostMicros": { "$ref": "#/$defs/count" },
+        "reworkCostMicros": { "$ref": "#/$defs/count" },
+        "totalCostMicros": { "$ref": "#/$defs/count" },
+        "riskAdjustedCostMicros": { "$ref": "#/$defs/count" },
+        "overBudgetTasks": { "$ref": "#/$defs/count" },
+        "latencyMsP95": { "$ref": "#/$defs/count" },
+        "policyViolations": { "$ref": "#/$defs/count" }
+      }
+    },
+    "slice": {
+      "type": "object", "additionalProperties": false,
+      "required": ["sampleN", "successRate", "failureRate", "reworkRate", "fallbackRate"],
+      "properties": {
+        "sampleN": { "$ref": "#/$defs/count" },
+        "successRate": { "$ref": "#/$defs/rate" },
+        "failureRate": { "$ref": "#/$defs/rate" },
+        "reworkRate": { "$ref": "#/$defs/rate" },
+        "fallbackRate": { "$ref": "#/$defs/rate" }
+      }
+    }
+  }
+}

package/schemas/decision/DecisionRoutingTask.v1.schema.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://aiwg.io/schemas/decision/DecisionRoutingTask.v1.schema.json",
+  "title": "Decision Routing Task",
+  "description": "D28 closed task envelope. Every hard requirement is mandatory; unknown requirements fail closed. Only projected state is model-visible.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["id", "description", "requirements", "state", "projection"],
+  "properties": {
+    "id": { "$ref": "#/$defs/name" },
+    "description": { "type": "string", "maxLength": 4096, "description": "Operator-facing only; never sent to Jev." },
+    "requirements": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["capabilities", "privacy", "authorizationScopes", "region", "tools", "contextBytes", "allowlist", "maxCostMicros", "deadlineMs", "providers", "authorized"],
+      "properties": {
+        "capabilities": { "$ref": "#/$defs/names" },
+        "privacy": { "$ref": "#/$defs/name" },
+        "authorizationScopes": { "$ref": "#/$defs/names" },
+        "region": { "$ref": "#/$defs/name" },
+        "tools": { "$ref": "#/$defs/names" },
+        "contextBytes": { "type": "integer", "minimum": 0 },
+        "allowlist": { "$ref": "#/$defs/names" },
+        "maxCostMicros": { "type": "integer", "minimum": 0 },
+        "deadlineMs": { "type": "integer", "minimum": 1 },
+        "providers": { "$ref": "#/$defs/names" },
+        "authorized": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["tools", "network", "filesystem", "secrets", "actions"],
+          "description": "Ordinary authorization ceiling. A route binding holding more than this is excluded.",
+          "properties": {
+            "tools": { "$ref": "#/$defs/names" },
+            "network": { "type": "boolean" },
+            "filesystem": { "enum": ["none", "read", "write"] },
+            "secrets": { "$ref": "#/$defs/names" },
+            "actions": { "$ref": "#/$defs/names" }
+          }
+        }
+      }
+    },
+    "state": { "description": "Ambient task state. Only fields declared by the projection reach Jev." },
+    "projection": { "type": "object", "description": "D10 DecisionProjectionPolicy, validated by validateProjectionPolicy." }
+  },
+  "$defs": {
+    "name": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:/-]*$" },
+    "names": { "type": "array", "uniqueItems": true, "maxItems": 64, "items": { "$ref": "#/$defs/name" } }
+  }
+}

package/schemas/decision/DecisionRuleset.schema.json

@@ -86,7 +86,7 @@
             ],
             "additionalProperties": false
           },
-          "minItems": 1
+          "minItems": 0
         },
         "rules": {
           "type": "array",
@@ -120,7 +120,13 @@
         "composition": {
           "enum": [
             "first-match",
-            "collect"
+            "unique",
+            "any",
+            "collect",
+            "collect-sum",
+            "collect-min",
+            "collect-max",
+            "collect-count"
           ]
         },
         "conflict": {

package/schemas/decision/DecisionRuleset.v1alpha2.schema.json

@@ -86,7 +86,7 @@
             ],
             "additionalProperties": false
           },
-          "minItems": 1
+          "minItems": 0
         },
         "rules": {
           "type": "array",
@@ -120,7 +120,13 @@
         "composition": {
           "enum": [
             "first-match",
-            "collect"
+            "unique",
+            "any",
+            "collect",
+            "collect-sum",
+            "collect-min",
+            "collect-max",
+            "collect-count"
           ]
         },
         "conflict": {

package/schemas/decision/DecisionSensitivityPlan.v1.schema.json

@@ -0,0 +1,191 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://aiwg.io/schemas/decision/DecisionSensitivityPlan.v1.schema.json",
+  "title": "Decision Sensitivity Plan",
+  "description": "D23 bounded counterfactual sensitivity plan. Default-off reviewer analysis only; it cannot authorize actions.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion", "id", "version", "mode", "tenantId", "workspaceId", "projectId", "actor", "purpose",
+    "sourceSubject", "source", "analysisKind", "allowedPaths", "pathDomains", "variants", "budgets",
+    "privacy", "retention", "baselineStability", "unchangedVariant", "authorization", "probeControl",
+    "requestedMetrics", "comparisonBaseline"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "decision-sensitivity-plan/v1" },
+    "id": { "$ref": "#/$defs/name" },
+    "version": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$" },
+    "mode": { "enum": ["disabled", "shadow"] },
+    "tenantId": { "$ref": "#/$defs/name" },
+    "workspaceId": { "$ref": "#/$defs/name" },
+    "projectId": { "$ref": "#/$defs/name" },
+    "actor": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["principalId", "authenticatedAt"],
+      "properties": {
+        "principalId": { "$ref": "#/$defs/name" },
+        "authenticatedAt": { "$ref": "#/$defs/dateTime" }
+      }
+    },
+    "purpose": { "type": "string", "minLength": 1, "maxLength": 256 },
+    "sourceSubject": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["tenantId", "workspaceId", "projectId", "subjectRef"],
+      "properties": {
+        "tenantId": { "$ref": "#/$defs/name" },
+        "workspaceId": { "$ref": "#/$defs/name" },
+        "projectId": { "$ref": "#/$defs/name" },
+        "subjectRef": { "$ref": "#/$defs/name" }
+      }
+    },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["ruleset", "binding", "result", "evidencePins", "policyPins"],
+      "properties": {
+        "ruleset": { "$ref": "#/$defs/pin" },
+        "binding": { "$ref": "#/$defs/pin" },
+        "result": { "$ref": "#/$defs/pin" },
+        "evidencePins": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/pin" } },
+        "policyPins": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/pin" } }
+      }
+    },
+    "analysisKind": { "enum": ["policy-replay", "input-reevaluation"] },
+    "allowedPaths": { "type": "array", "minItems": 1, "maxItems": 64, "uniqueItems": true, "items": { "$ref": "#/$defs/pointer" } },
+    "pathDomains": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 64,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["path", "values", "sensitivity"],
+        "properties": {
+          "path": { "$ref": "#/$defs/pointer" },
+          "values": { "type": "array", "minItems": 1, "maxItems": 32, "items": { "$ref": "#/$defs/json" } },
+          "sensitivity": { "enum": ["public", "internal", "confidential", "restricted"] }
+        }
+      }
+    },
+    "variants": { "type": "array", "minItems": 1, "maxItems": 128, "items": { "$ref": "#/$defs/variant" } },
+    "budgets": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["maxVariants", "maxBackendCalls", "maxTokens", "maxCostMicros", "concurrency", "deadlineMs"],
+      "properties": {
+        "maxVariants": { "type": "integer", "minimum": 1, "maximum": 128 },
+        "maxBackendCalls": { "type": "integer", "minimum": 0, "maximum": 512 },
+        "maxTokens": { "type": "integer", "minimum": 0 },
+        "maxCostMicros": { "type": "integer", "minimum": 0 },
+        "concurrency": { "type": "integer", "minimum": 1, "maximum": 16 },
+        "deadlineMs": { "type": "integer", "minimum": 1, "maximum": 3600000 }
+      }
+    },
+    "privacy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["egress", "redaction", "summaryPrecisionBps", "differencing"],
+      "properties": {
+        "egress": { "enum": ["metadata-only", "no-external-egress"] },
+        "redaction": { "enum": ["hash-values", "opaque-ids"] },
+        "summaryPrecisionBps": { "type": "integer", "minimum": 1, "maximum": 10000 },
+        "differencing": { "enum": ["deny", "coarsen"] }
+      }
+    },
+    "retention": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["class", "deleteAfterEpochMs", "legalHold"],
+      "properties": {
+        "class": { "enum": ["ephemeral", "review-evidence"] },
+        "deleteAfterEpochMs": { "type": "integer", "minimum": 0 },
+        "legalHold": { "type": "boolean" }
+      }
+    },
+    "baselineStability": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["enabled", "repeats"],
+      "properties": {
+        "enabled": { "type": "boolean" },
+        "repeats": { "type": "integer", "minimum": 0, "maximum": 32 }
+      }
+    },
+    "unchangedVariant": { "enum": ["deduplicate", "retain-control"] },
+    "authorization": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["authorizedLabels", "authorizedActions", "approvedAt", "expiresAt"],
+      "properties": {
+        "authorizedLabels": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+        "authorizedActions": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/name" } },
+        "approvedAt": { "$ref": "#/$defs/dateTime" },
+        "expiresAt": { "$ref": "#/$defs/dateTime" }
+      }
+    },
+    "probeControl": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["windowId", "maxPerPrincipalSubjectPath", "maxReportsPerWindow", "prohibitMembershipQueries"],
+      "properties": {
+        "windowId": { "$ref": "#/$defs/name" },
+        "maxPerPrincipalSubjectPath": { "type": "integer", "minimum": 1, "maximum": 128 },
+        "maxReportsPerWindow": { "type": "integer", "minimum": 1, "maximum": 128 },
+        "prohibitMembershipQueries": { "type": "boolean" }
+      }
+    },
+    "requestedMetrics": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "enum": ["outcome-change", "acceptance-change", "rule-change", "distribution-distance", "minimum-threshold-change", "stability-repeat"] }
+    },
+    "comparisonBaseline": { "enum": ["source-result", "stability-control"] }
+  },
+  "$defs": {
+    "name": { "type": "string", "minLength": 1, "maxLength": 160, "pattern": "^[A-Za-z0-9][A-Za-z0-9._:/-]*$" },
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "dateTime": { "type": "string", "format": "date-time" },
+    "pointer": { "type": "string", "pattern": "^(|/(?:[^/~]|~0|~1)*)+$" },
+    "pin": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "version", "digest"],
+      "properties": {
+        "id": { "$ref": "#/$defs/name" },
+        "version": { "type": "string", "minLength": 1, "maxLength": 80 },
+        "digest": { "$ref": "#/$defs/digest" }
+      }
+    },
+    "json": {
+      "anyOf": [
+        { "type": "null" },
+        { "type": "boolean" },
+        { "type": "number" },
+        { "type": "string", "maxLength": 2048 },
+        { "type": "array", "maxItems": 64, "items": { "$ref": "#/$defs/json" } },
+        { "type": "object", "maxProperties": 64, "additionalProperties": { "$ref": "#/$defs/json" } }
+      ]
+    },
+    "change": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "value"],
+      "properties": {
+        "path": { "$ref": "#/$defs/pointer" },
+        "value": { "$ref": "#/$defs/json" }
+      }
+    },
+    "variant": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "changes"],
+      "properties": {
+        "id": { "$ref": "#/$defs/name" },
+        "changes": { "type": "array", "minItems": 1, "maxItems": 16, "items": { "$ref": "#/$defs/change" } }
+      }
+    }
+  }
+}