@b00dea/cockpit 0.0.0-stage → 0.1.0

package/cockpit.schema.json

@@ -0,0 +1,2574 @@
+{
+  "$schema": "http://json-schema.org/draft-04/schema#",
+  "type": "object",
+  "properties": {
+    "unconfirmed": {
+      "description": "Answers no person has stated yet; init writes them and doctor reports them.",
+      "minItems": 1,
+      "maxItems": 11,
+      "type": "array",
+      "items": {
+        "type": "string",
+        "enum": [
+          "cockpit.name",
+          "sibling",
+          "estate.runnable",
+          "ports.bases",
+          "environment.install_policies",
+          "environment.test_data",
+          "environment.compose_files",
+          "environment.machine",
+          "environment.posture",
+          "testing",
+          "guards"
+        ]
+      }
+    },
+    "cockpit": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9-]*$",
+          "description": "Name of this cockpit."
+        },
+        "siblings_root": {
+          "default": "..",
+          "description": "Directory holding the sibling checkouts, relative to the cockpit.",
+          "type": "string"
+        },
+        "guide_cap": {
+          "default": 200,
+          "description": "Most lines of always-loaded guidance; preflight fails above it.",
+          "type": "integer",
+          "minimum": 0,
+          "exclusiveMinimum": true,
+          "maximum": 9007199254740991
+        }
+      },
+      "required": [
+        "name"
+      ],
+      "additionalProperties": false,
+      "description": "Identity and layout of this cockpit."
+    },
+    "sibling": {
+      "minItems": 1,
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "slug": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$",
+            "description": "Short name of the sibling; also how the root AGENTS.md labels its copied guides."
+          },
+          "dir": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "."
+                ]
+              },
+              {
+                "type": "string",
+                "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+              }
+            ],
+            "description": "Checkout directory under the siblings root, or . for the siblings root itself."
+          },
+          "remote": {
+            "description": "Git remote to clone from; required when acquire is auto or manual and not allowed when none.",
+            "type": "string",
+            "minLength": 1
+          },
+          "branch": {
+            "description": "Branch to check out when cloning.",
+            "type": "string",
+            "minLength": 1
+          },
+          "mount": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "always",
+                  "host",
+                  "none"
+                ]
+              },
+              {
+                "type": "string",
+                "pattern": "^profile:[a-z0-9-]+$"
+              }
+            ],
+            "description": "How the stack uses the checkout: always mounted, mounted under a profile, host only, or not mounted."
+          },
+          "acquire": {
+            "type": "string",
+            "enum": [
+              "auto",
+              "manual",
+              "none"
+            ],
+            "description": "How the checkout reaches disk: cloned by setup, cloned by a person, or not a repository."
+          },
+          "var": {
+            "type": "string",
+            "pattern": "^(?!(?:DOCKER_|COMPOSE_|LD_|DYLD_|LIBPATH$|SHLIB_PATH$|NODE_OPTIONS$|NODE_PATH$|BASH_ENV$|ENV$|PATH$|IFS$))[A-Z][A-Z0-9_]*$",
+            "description": "Name of the exported *_DIR environment variable that points at the checkout."
+          },
+          "toolchain": {
+            "default": "none",
+            "description": "Toolchain that installs and tests the sibling; none for a directory of data.",
+            "type": "string",
+            "enum": [
+              "node",
+              "python",
+              "ruby",
+              "go",
+              "rust",
+              "dotnet",
+              "none"
+            ]
+          },
+          "gate": {
+            "description": "Set to operator for a lane that touches live data or local hardware; it never runs by default and asks first.",
+            "type": "string",
+            "enum": [
+              "operator"
+            ]
+          },
+          "host_reason": {
+            "description": "Why the sibling cannot join the stack; required when mount is host.",
+            "type": "string",
+            "minLength": 1
+          },
+          "guides": {
+            "default": [
+              "CLAUDE.md",
+              "AGENTS.md"
+            ],
+            "description": "Guide files the sibling publishes, copied into the cockpit's root AGENTS.md by sync.",
+            "type": "array",
+            "items": {
+              "type": "string",
+              "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+            }
+          },
+          "instruction_pointer": {
+            "default": false,
+            "description": "Let setup add a pointer to the cockpit guide in this sibling, when the command line also approves it.",
+            "type": "boolean"
+          },
+          "purpose": {
+            "type": "string",
+            "minLength": 1,
+            "description": "What the sibling is for; printed when its checkout is missing."
+          },
+          "environment_files": {
+            "description": "Template and instance environment file pairs the sibling needs.",
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "template": {
+                  "type": "string",
+                  "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$",
+                  "description": "Tracked template file the instance is created from."
+                },
+                "instance": {
+                  "type": "string",
+                  "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$",
+                  "description": "Machine-local file created from the template and left out of version control."
+                }
+              },
+              "required": [
+                "template",
+                "instance"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "derives": {
+            "description": "Facts about the sibling that cockpit derives rows or MCP servers from.",
+            "type": "object",
+            "properties": {
+              "mcp_sources": {
+                "minItems": 1,
+                "maxItems": 256,
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "path": {
+                      "type": "string",
+                      "maxLength": 4096,
+                      "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$",
+                      "description": "JSON file in the sibling with a top-level mcpServers object, as agent tools read from .mcp.json."
+                    },
+                    "provenance": {
+                      "type": "object",
+                      "properties": {
+                        "source": {
+                          "type": "string",
+                          "maxLength": 4096,
+                          "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$",
+                          "description": "File or place the value came from, relative to the repository."
+                        },
+                        "observed_on": {
+                          "description": "Date the source was looked at; required unless kind is declared.",
+                          "type": "string",
+                          "format": "date",
+                          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))$"
+                        },
+                        "kind": {
+                          "type": "string",
+                          "enum": [
+                            "declared",
+                            "measured",
+                            "inferred"
+                          ],
+                          "description": "How the value was established: declared by this file, measured, or inferred."
+                        },
+                        "reason": {
+                          "type": "string",
+                          "minLength": 1,
+                          "maxLength": 4096,
+                          "pattern": "\\S",
+                          "description": "Why the value is what it is."
+                        },
+                        "confirmed": {
+                          "description": "Set to true once a person has confirmed an inferred value; inferred values require it.",
+                          "type": "boolean"
+                        }
+                      },
+                      "required": [
+                        "source",
+                        "kind",
+                        "reason"
+                      ],
+                      "additionalProperties": false,
+                      "description": "Where this MCP source declaration came from.",
+                      "anyOf": [
+                        {
+                          "properties": {
+                            "kind": {
+                              "enum": [
+                                "declared"
+                              ]
+                            }
+                          }
+                        },
+                        {
+                          "properties": {
+                            "kind": {
+                              "enum": [
+                                "measured"
+                              ]
+                            }
+                          },
+                          "required": [
+                            "observed_on"
+                          ]
+                        },
+                        {
+                          "properties": {
+                            "kind": {
+                              "enum": [
+                                "inferred"
+                              ]
+                            },
+                            "confirmed": {
+                              "enum": [
+                                true
+                              ]
+                            }
+                          },
+                          "required": [
+                            "confirmed",
+                            "observed_on"
+                          ]
+                        }
+                      ]
+                    }
+                  },
+                  "required": [
+                    "path",
+                    "provenance"
+                  ],
+                  "additionalProperties": false
+                },
+                "description": "MCP server declaration files this sibling publishes."
+              }
+            },
+            "required": [
+              "mcp_sources"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "required": [
+          "slug",
+          "dir",
+          "mount",
+          "acquire",
+          "var",
+          "purpose"
+        ],
+        "additionalProperties": false,
+        "allOf": [
+          {
+            "oneOf": [
+              {
+                "properties": {
+                  "acquire": {
+                    "enum": [
+                      "none"
+                    ]
+                  }
+                },
+                "not": {
+                  "required": [
+                    "remote"
+                  ]
+                }
+              },
+              {
+                "properties": {
+                  "acquire": {
+                    "enum": [
+                      "auto",
+                      "manual"
+                    ]
+                  }
+                },
+                "required": [
+                  "remote"
+                ]
+              }
+            ]
+          },
+          {
+            "anyOf": [
+              {
+                "properties": {
+                  "mount": {
+                    "enum": [
+                      "host"
+                    ]
+                  }
+                },
+                "required": [
+                  "host_reason"
+                ]
+              },
+              {
+                "properties": {
+                  "mount": {
+                    "not": {
+                      "enum": [
+                        "host"
+                      ]
+                    }
+                  }
+                }
+              }
+            ]
+          },
+          {
+            "anyOf": [
+              {
+                "properties": {
+                  "gate": {
+                    "enum": [
+                      "operator"
+                    ]
+                  }
+                },
+                "required": [
+                  "gate"
+                ]
+              },
+              {
+                "not": {
+                  "anyOf": [
+                    {
+                      "properties": {
+                        "mount": {
+                          "enum": [
+                            "host"
+                          ]
+                        }
+                      }
+                    },
+                    {
+                      "properties": {
+                        "purpose": {
+                          "pattern": "\\b(?:[lL][iI][vV][eE]|[pP][rR][oO][dD][uU][cC][tT][iI][oO][nN]|[hH][aA][rR][dD][wW][aA][rR][eE]|[sS][iI][mM][uU][lL][aA][tT][oO][rR])\\b"
+                        }
+                      }
+                    }
+                  ]
+                }
+              }
+            ]
+          }
+        ]
+      },
+      "description": "Product repositories the cockpit works across."
+    },
+    "ports": {
+      "type": "object",
+      "properties": {
+        "step": {
+          "default": 100,
+          "description": "Offset between consecutive stacks' published ports.",
+          "type": "integer",
+          "minimum": 0,
+          "exclusiveMinimum": true,
+          "maximum": 9007199254740991
+        },
+        "count": {
+          "default": 27,
+          "description": "Number of stacks that can run side by side.",
+          "type": "integer",
+          "minimum": 0,
+          "exclusiveMinimum": true,
+          "maximum": 9007199254740991
+        },
+        "bases": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "Base host port for each port variable; stack n publishes base plus n times step.",
+          "patternProperties": {
+            "^[A-Z][A-Z0-9_]*$": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 65535
+            }
+          }
+        }
+      },
+      "required": [
+        "bases"
+      ],
+      "additionalProperties": false,
+      "description": "Port leasing for running stacks side by side."
+    },
+    "guards": {
+      "description": "Rules that restrict what agents may run.",
+      "default": {},
+      "type": "object",
+      "properties": {
+        "hosted_db_hosts": {
+          "default": [],
+          "description": "Hosted database host names the guards keep agents away from.",
+          "maxItems": 128,
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^(?:\\*\\.)?(?=[a-z0-9.-]{1,253}(?![\\s\\S]))[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?![\\s\\S])"
+          }
+        },
+        "vendor_endpoint_hosts": {
+          "default": [],
+          "description": "Real vendor endpoint host names the guards keep agents away from.",
+          "maxItems": 128,
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^(?:\\*\\.)?(?=[a-z0-9.-]{1,253}(?![\\s\\S]))[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*(?![\\s\\S])"
+          }
+        },
+        "protected_branches": {
+          "default": [
+            "main",
+            "master"
+          ],
+          "description": "Branches the guards keep agents from pushing to or rewriting.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "allow": {
+          "default": [],
+          "description": "Commands allowed in addition to the built-in rules.",
+          "maxItems": 64,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "argv": {
+                "minItems": 1,
+                "maxItems": 32,
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "pattern": "^[^\\x00-\\x1f\\x7f-\\x9f\\uD800-\\uDFFF]{1,128}(?![\\s\\S])"
+                },
+                "description": "Command prefix, as an argument list, that is allowed."
+              },
+              "reason": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 512,
+                "allOf": [
+                  {
+                    "type": "string",
+                    "pattern": "\\S"
+                  },
+                  {
+                    "type": "string",
+                    "pattern": "^[^\\x00-\\x1f\\x7f-\\x9f]+$"
+                  }
+                ],
+                "description": "Why the command is allowed."
+              },
+              "cwd": {
+                "description": "Allow only when run from this directory, relative to the cockpit.",
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "enum": [
+                      "."
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "maxLength": 4096,
+                    "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+                  }
+                ]
+              }
+            },
+            "required": [
+              "argv",
+              "reason"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "deny": {
+          "default": [],
+          "description": "Commands refused in addition to the built-in rules.",
+          "maxItems": 64,
+          "type": "array",
+          "items": {
+            "anyOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "prefix": {
+                    "minItems": 1,
+                    "maxItems": 32,
+                    "type": "array",
+                    "items": {
+                      "type": "string",
+                      "pattern": "^[^\\x00-\\x1f\\x7f-\\x9f\\uD800-\\uDFFF]{1,128}(?![\\s\\S])"
+                    },
+                    "description": "Command prefix, as an argument list, that is refused."
+                  },
+                  "reason": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 512,
+                    "allOf": [
+                      {
+                        "type": "string",
+                        "pattern": "\\S"
+                      },
+                      {
+                        "type": "string",
+                        "pattern": "^[^\\x00-\\x1f\\x7f-\\x9f]+$"
+                      }
+                    ],
+                    "description": "Why the command is refused."
+                  },
+                  "fix": {
+                    "description": "Safer command or step to suggest instead.",
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 512,
+                    "allOf": [
+                      {
+                        "type": "string",
+                        "pattern": "\\S"
+                      },
+                      {
+                        "type": "string",
+                        "pattern": "^[^\\x00-\\x1f\\x7f-\\x9f]+$"
+                      }
+                    ]
+                  }
+                },
+                "required": [
+                  "prefix",
+                  "reason"
+                ],
+                "additionalProperties": false
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "contains": {
+                    "minItems": 1,
+                    "maxItems": 32,
+                    "type": "array",
+                    "items": {
+                      "type": "string",
+                      "pattern": "^[^\\x00-\\x1f\\x7f-\\x9f\\uD800-\\uDFFF]{1,128}(?![\\s\\S])"
+                    },
+                    "description": "Argument sequence that is refused wherever it appears in a command."
+                  },
+                  "reason": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 512,
+                    "allOf": [
+                      {
+                        "type": "string",
+                        "pattern": "\\S"
+                      },
+                      {
+                        "type": "string",
+                        "pattern": "^[^\\x00-\\x1f\\x7f-\\x9f]+$"
+                      }
+                    ],
+                    "description": "Why the command is refused."
+                  },
+                  "fix": {
+                    "description": "Safer command or step to suggest instead.",
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 512,
+                    "allOf": [
+                      {
+                        "type": "string",
+                        "pattern": "\\S"
+                      },
+                      {
+                        "type": "string",
+                        "pattern": "^[^\\x00-\\x1f\\x7f-\\x9f]+$"
+                      }
+                    ]
+                  }
+                },
+                "required": [
+                  "contains",
+                  "reason"
+                ],
+                "additionalProperties": false
+              }
+            ]
+          }
+        }
+      },
+      "additionalProperties": false
+    },
+    "mcp": {
+      "description": "Approval of MCP servers.",
+      "default": {},
+      "type": "object",
+      "properties": {
+        "approved": {
+          "default": {},
+          "description": "Approved MCP servers, each mapped to the sha256 of the declaration a person reviewed; others stay disabled.",
+          "type": "object",
+          "additionalProperties": false,
+          "patternProperties": {
+            "^(?=[\\s\\S]{0,128}$)(?:^[a-zA-Z0-9][a-zA-Z0-9_-]*$)": {
+              "type": "string",
+              "pattern": "^[a-f0-9]{64}$"
+            }
+          }
+        }
+      },
+      "additionalProperties": false
+    },
+    "work": {
+      "description": "How work orders are accepted, graded and closed.",
+      "default": {},
+      "type": "object",
+      "properties": {
+        "grading": {
+          "default": "independent",
+          "description": "How an order earns done: independent (an evaluator grades it), checks (cockpit ran every criterion's check and all passed) or self (the agent reports met or unmet with a note).",
+          "type": "string",
+          "enum": [
+            "independent",
+            "checks",
+            "self"
+          ]
+        },
+        "evaluators": {
+          "description": "Agent tools that run the independent grader for work grade and cockpit grade, tried in order: codexcli, claudecode, opencode. Defaults to the tools surfaces.tools lists that can evaluate, in that order, with the tool running the command moved last when it is detected (Claude Code or Codex), so another tool grades first. A list given here is used exactly as written.",
+          "minItems": 1,
+          "maxItems": 3,
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": [
+              "codexcli",
+              "claudecode",
+              "opencode"
+            ]
+          }
+        },
+        "attempt_cap": {
+          "default": 2,
+          "description": "Failed checks or grades before an order is blocked; may be lowered but not raised.",
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 2
+        },
+        "wip_cap": {
+          "default": 3,
+          "description": "Accepted orders that may be unfinished at once; may be lowered but not raised.",
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 3
+        },
+        "verification_timeout_seconds": {
+          "default": 1800,
+          "description": "Seconds one criterion's check command may run before it is stopped and reported as not run.",
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 7200
+        },
+        "evaluator_timeout_seconds": {
+          "default": 900,
+          "description": "Seconds one independent grading run may take before it is stopped.",
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 7200
+        },
+        "gates": {
+          "description": "Who passes each work-order decision.",
+          "default": {},
+          "type": "object",
+          "properties": {
+            "accept": {
+              "description": "Who accepts a draft work order: agent, person or ci. Default agent.",
+              "type": "string",
+              "enum": [
+                "agent",
+                "person",
+                "ci"
+              ]
+            },
+            "amend": {
+              "description": "Who accepts a changed contract. Default agent. Removing or rewriting an accepted criterion always needs a person or ci.",
+              "type": "string",
+              "enum": [
+                "agent",
+                "person",
+                "ci"
+              ]
+            },
+            "answer": {
+              "description": "Who answers an open question on an order. Default agent.",
+              "type": "string",
+              "enum": [
+                "agent",
+                "person",
+                "ci"
+              ]
+            },
+            "signoff": {
+              "description": "Who closes a graded order. Default agent.",
+              "type": "string",
+              "enum": [
+                "agent",
+                "person",
+                "ci"
+              ]
+            }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    },
+    "autonomy": {
+      "description": "Which decisions an agent may take without a person.",
+      "default": {},
+      "type": "object",
+      "properties": {
+        "sync": {
+          "description": "Who may run a sync that writes: agent, person or ci. Default agent.",
+          "type": "string",
+          "enum": [
+            "agent",
+            "person",
+            "ci"
+          ]
+        },
+        "stale_delete": {
+          "description": "Who approves sync deleting files cockpit generated before and no longer generates. Default agent.",
+          "type": "string",
+          "enum": [
+            "agent",
+            "person",
+            "ci"
+          ]
+        },
+        "reset": {
+          "description": "Who may apply a reset, which deletes stack data. Default person.",
+          "type": "string",
+          "enum": [
+            "agent",
+            "person",
+            "ci"
+          ]
+        },
+        "mcp_approve": {
+          "description": "Who approves a declared MCP server: person records each digest in [mcp.approved]; agent lets sync enable every declared server as declared, so an agent that writes a sibling MCP source starts that process outside the guard. Default person.",
+          "type": "string",
+          "enum": [
+            "agent",
+            "person"
+          ]
+        }
+      },
+      "additionalProperties": false
+    },
+    "browser": {
+      "description": "Browser automation for the stack.",
+      "type": "object",
+      "properties": {
+        "engine": {
+          "default": "chromium",
+          "description": "Browser engine to drive.",
+          "type": "string",
+          "enum": [
+            "chromium",
+            "firefox",
+            "webkit"
+          ]
+        },
+        "network_exposure": {
+          "default": "<loopback>",
+          "description": "Network rules the browser may reach beyond loopback; the default is loopback only.",
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 512,
+          "pattern": "^[a-z0-9.*:<>\\[\\],-]+$"
+        },
+        "network_exposure_reason": {
+          "description": "Why the browser needs wider network access; required when network_exposure is wider than loopback.",
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 512
+        },
+        "harnesses": {
+          "minItems": 1,
+          "maxItems": 3,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "target": {
+                "type": "string",
+                "enum": [
+                  "claudecode",
+                  "codexcli",
+                  "opencode"
+                ],
+                "description": "Agent tool the browser is wired to."
+              },
+              "version": {
+                "type": "string",
+                "pattern": "^\\d+\\.\\d+\\.\\d+$",
+                "description": "Version of the agent tool the wiring was checked against."
+              }
+            },
+            "required": [
+              "target",
+              "version"
+            ],
+            "additionalProperties": false
+          },
+          "description": "Agent tools, with versions, that are wired to the browser.",
+          "uniqueItems": true
+        },
+        "images": {
+          "type": "object",
+          "properties": {
+            "mcp": {
+              "type": "object",
+              "properties": {
+                "reference": {
+                  "type": "string",
+                  "pattern": "^[a-z0-9][a-z0-9./:_-]*@sha256:[a-f0-9]{64}$",
+                  "description": "Image reference pinned by sha256 digest."
+                },
+                "driver_version": {
+                  "type": "string",
+                  "maxLength": 128,
+                  "pattern": "^(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)(?:-(?:0|[1-9]\\d*|\\d*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[A-Za-z-][0-9A-Za-z-]*))*)?$",
+                  "description": "Playwright driver version the image carries."
+                }
+              },
+              "required": [
+                "reference",
+                "driver_version"
+              ],
+              "additionalProperties": false,
+              "description": "Image that serves the browser MCP server."
+            }
+          },
+          "required": [
+            "mcp"
+          ],
+          "additionalProperties": false,
+          "description": "Pinned container images for the browser."
+        },
+        "project": {
+          "type": "object",
+          "properties": {
+            "manifest": {
+              "description": "package.json for the project; omit to use the one beside the lockfile.",
+              "type": "string",
+              "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+            },
+            "manifest_sha256": {
+              "description": "SHA-256 of the manifest; required when manifest is set.",
+              "type": "string",
+              "pattern": "^[a-f0-9]{64}$"
+            },
+            "lockfile": {
+              "type": "string",
+              "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$",
+              "description": "Lockfile that pins the Playwright driver the browser commands load."
+            },
+            "sha256": {
+              "type": "string",
+              "pattern": "^[a-f0-9]{64}$",
+              "description": "SHA-256 of the lockfile."
+            },
+            "driver_version": {
+              "type": "string",
+              "maxLength": 128,
+              "pattern": "^(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)(?:-(?:0|[1-9]\\d*|\\d*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[A-Za-z-][0-9A-Za-z-]*))*)?$",
+              "description": "Playwright driver version the lockfile pins."
+            }
+          },
+          "required": [
+            "lockfile",
+            "sha256",
+            "driver_version"
+          ],
+          "additionalProperties": false,
+          "description": "Node project the browser commands load their Playwright driver from."
+        },
+        "endpoint": {
+          "description": "WebSocket address of the browser server, using an allowed loopback host.",
+          "type": "string",
+          "format": "uri"
+        },
+        "max_clients": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 64,
+          "description": "Most browser clients that may connect at once."
+        },
+        "proxy": {
+          "type": "object",
+          "properties": {
+            "host_variable": {
+              "description": "Port variable in [ports.bases] that leases the proxy port.",
+              "type": "string",
+              "maxLength": 128,
+              "pattern": "^[A-Z][A-Z0-9_]*$"
+            },
+            "server_port": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 65535,
+              "description": "Port the browser server listens on."
+            },
+            "proxy_port": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 65535,
+              "description": "Port the proxy listens on; differs from server_port."
+            },
+            "allowed_hosts": {
+              "minItems": 1,
+              "maxItems": 64,
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 260
+              },
+              "description": "Host and port pairs the proxy allows.",
+              "uniqueItems": true
+            },
+            "bind": {
+              "default": "127.0.0.1",
+              "description": "Loopback address the proxy binds to.",
+              "type": "string",
+              "enum": [
+                "127.0.0.1",
+                "::1"
+              ]
+            }
+          },
+          "required": [
+            "server_port",
+            "proxy_port",
+            "allowed_hosts"
+          ],
+          "additionalProperties": false,
+          "description": "Proxy the browser reaches the application through."
+        },
+        "resolver": {
+          "default": [],
+          "description": "Fixed host name to address mappings the browser uses.",
+          "maxItems": 64,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "hostname": {
+                "type": "string",
+                "pattern": "^(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\\.)+[a-z][a-z0-9-]*$",
+                "description": "Host name to resolve."
+              },
+              "address": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "format": "ipv4",
+                    "pattern": "^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$"
+                  },
+                  {
+                    "type": "string",
+                    "format": "ipv6",
+                    "pattern": "^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:))$"
+                  }
+                ],
+                "description": "Address the host name resolves to."
+              }
+            },
+            "required": [
+              "hostname",
+              "address"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "authentication": {
+          "type": "object",
+          "properties": {
+            "policy": {
+              "type": "string",
+              "enum": [
+                "none",
+                "serialized",
+                "per-worker"
+              ],
+              "description": "Whether sessions share no sign-in, take turns on one, or each keep their own."
+            },
+            "states": {
+              "default": [],
+              "description": "Saved sign-in states, one per worker.",
+              "maxItems": 64,
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "worker": {
+                    "type": "string",
+                    "pattern": "^[a-z0-9][a-z0-9_-]{0,63}$",
+                    "description": "Name of the worker the state belongs to."
+                  },
+                  "path": {
+                    "type": "string",
+                    "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$",
+                    "description": "Saved sign-in state file under the auth artifact root."
+                  }
+                },
+                "required": [
+                  "worker",
+                  "path"
+                ],
+                "additionalProperties": false
+              }
+            }
+          },
+          "required": [
+            "policy"
+          ],
+          "additionalProperties": false,
+          "description": "How browser sessions sign in to the application."
+        },
+        "data": {
+          "type": "object",
+          "properties": {
+            "mode": {
+              "type": "string",
+              "enum": [
+                "empty",
+                "seeded",
+                "restored"
+              ],
+              "description": "What the data is: empty, seeded by the product, or restored from real data."
+            },
+            "isolated": {
+              "type": "boolean",
+              "description": "True when the data is separate from anyone else's."
+            },
+            "reaches_production": {
+              "type": "boolean",
+              "description": "True when browser actions can affect production."
+            }
+          },
+          "required": [
+            "mode",
+            "isolated",
+            "reaches_production"
+          ],
+          "additionalProperties": false,
+          "description": "Statement about the data the browser touches; cockpit cannot observe it."
+        },
+        "request_preapproval": {
+          "default": false,
+          "description": "Run browser tools without prompts; allowed only on isolated, non-production, non-restored data.",
+          "type": "boolean"
+        },
+        "artifacts": {
+          "type": "object",
+          "properties": {
+            "mcp": {
+              "type": "string",
+              "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$",
+              "description": "Generated host path for the browser MCP server's files."
+            },
+            "cli": {
+              "type": "string",
+              "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$",
+              "description": "Generated host path for command-line browser output."
+            },
+            "auth": {
+              "type": "string",
+              "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$",
+              "description": "Generated host path for saved sign-in state."
+            }
+          },
+          "required": [
+            "mcp",
+            "cli",
+            "auth"
+          ],
+          "additionalProperties": false,
+          "description": "Generated host paths for browser output."
+        }
+      },
+      "required": [
+        "harnesses",
+        "images",
+        "project",
+        "max_clients",
+        "proxy",
+        "authentication",
+        "data",
+        "artifacts"
+      ],
+      "additionalProperties": false,
+      "anyOf": [
+        {
+          "properties": {
+            "request_preapproval": {
+              "enum": [
+                false
+              ]
+            }
+          }
+        },
+        {
+          "properties": {
+            "data": {
+              "required": [
+                "mode",
+                "isolated",
+                "reaches_production"
+              ],
+              "properties": {
+                "mode": {
+                  "enum": [
+                    "empty",
+                    "seeded"
+                  ]
+                },
+                "isolated": {
+                  "enum": [
+                    true
+                  ]
+                },
+                "reaches_production": {
+                  "enum": [
+                    false
+                  ]
+                }
+              }
+            }
+          }
+        }
+      ]
+    },
+    "testing": {
+      "description": "Test stages and gates.",
+      "type": "object",
+      "properties": {
+        "stages": {
+          "minItems": 1,
+          "maxItems": 128,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9-]{0,63}$",
+                "description": "Name of the stage."
+              },
+              "command": {
+                "minItems": 1,
+                "maxItems": 128,
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1,
+                  "maxLength": 4096
+                },
+                "description": "Command to run, as an argument list."
+              },
+              "requires_stack": {
+                "type": "boolean",
+                "description": "True when the stage needs the stack running."
+              },
+              "timeout_seconds": {
+                "default": 1800,
+                "description": "Seconds the stage may run before it is stopped and the gate reports DEGRADED.",
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 7200
+              },
+              "select": {
+                "description": "Arguments appended to the command when test-run --select names that kind; {value} becomes the selected value.",
+                "type": "object",
+                "properties": {
+                  "spec": {
+                    "description": "Arguments that select tests by spec; {value} becomes the selection.",
+                    "minItems": 1,
+                    "maxItems": 32,
+                    "type": "array",
+                    "items": {
+                      "type": "string",
+                      "minLength": 1,
+                      "maxLength": 4096
+                    }
+                  },
+                  "file": {
+                    "description": "Arguments that select tests by file; {value} becomes the selection.",
+                    "minItems": 1,
+                    "maxItems": 32,
+                    "type": "array",
+                    "items": {
+                      "type": "string",
+                      "minLength": 1,
+                      "maxLength": 4096
+                    }
+                  },
+                  "test": {
+                    "description": "Arguments that select tests by test name; {value} becomes the selection.",
+                    "minItems": 1,
+                    "maxItems": 32,
+                    "type": "array",
+                    "items": {
+                      "type": "string",
+                      "minLength": 1,
+                      "maxLength": 4096
+                    }
+                  },
+                  "route": {
+                    "description": "Arguments that select tests by route; {value} becomes the selection.",
+                    "minItems": 1,
+                    "maxItems": 32,
+                    "type": "array",
+                    "items": {
+                      "type": "string",
+                      "minLength": 1,
+                      "maxLength": 4096
+                    }
+                  }
+                },
+                "additionalProperties": false
+              }
+            },
+            "required": [
+              "id",
+              "command",
+              "requires_stack"
+            ],
+            "additionalProperties": false
+          },
+          "description": "Commands that make up the test gates."
+        },
+        "gates": {
+          "minItems": 1,
+          "maxItems": 128,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9-]{0,63}$",
+                "description": "Name of the gate."
+              },
+              "tier": {
+                "type": "string",
+                "enum": [
+                  "targeted",
+                  "full"
+                ],
+                "description": "Whether the gate covers targeted changes or the full suite."
+              },
+              "stages": {
+                "minItems": 1,
+                "maxItems": 128,
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "pattern": "^[a-z][a-z0-9-]{0,63}$"
+                },
+                "description": "Stages the gate runs, by id."
+              },
+              "changes": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 4096,
+                "description": "Kind of change that calls for this gate."
+              }
+            },
+            "required": [
+              "id",
+              "tier",
+              "stages",
+              "changes"
+            ],
+            "additionalProperties": false
+          },
+          "description": "Named gates that run stages before handing back changes."
+        },
+        "native_hooks": {
+          "default": {
+            "install": "inspect"
+          },
+          "description": "How the repository's own git hooks are handled.",
+          "type": "object",
+          "properties": {
+            "install": {
+              "default": "inspect",
+              "description": "Inspect the repository's hooks, or install them as the policy file declares.",
+              "type": "string",
+              "enum": [
+                "inspect",
+                "explicit-native"
+              ]
+            }
+          },
+          "additionalProperties": false
+        },
+        "native_hook_policy": {
+          "description": "Policy file for installing the repository's hooks; required for explicit-native.",
+          "type": "object",
+          "properties": {
+            "path": {
+              "type": "string",
+              "maxLength": 4096,
+              "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$",
+              "description": "Policy file, relative to the cockpit."
+            },
+            "sha256": {
+              "type": "string",
+              "pattern": "^[a-f0-9]{64}$",
+              "description": "SHA-256 of the policy file."
+            }
+          },
+          "required": [
+            "path",
+            "sha256"
+          ],
+          "additionalProperties": false
+        }
+      },
+      "required": [
+        "stages",
+        "gates"
+      ],
+      "additionalProperties": false,
+      "oneOf": [
+        {
+          "properties": {
+            "native_hooks": {
+              "properties": {
+                "install": {
+                  "enum": [
+                    "inspect"
+                  ]
+                }
+              }
+            }
+          },
+          "not": {
+            "required": [
+              "native_hook_policy"
+            ]
+          }
+        },
+        {
+          "properties": {
+            "native_hooks": {
+              "properties": {
+                "install": {
+                  "enum": [
+                    "explicit-native"
+                  ]
+                }
+              },
+              "required": [
+                "install"
+              ]
+            }
+          },
+          "required": [
+            "native_hooks",
+            "native_hook_policy"
+          ]
+        }
+      ]
+    },
+    "environment": {
+      "description": "How the stack is reached, signed in to, built and kept.",
+      "default": {},
+      "type": "object",
+      "properties": {
+        "addressing": {
+          "description": "How the product is reached locally: by host name or by leased port.",
+          "type": "string",
+          "enum": [
+            "hostname",
+            "port"
+          ]
+        },
+        "authentication": {
+          "description": "How the product signs in locally: real sign-in, bypassed, or none.",
+          "type": "string",
+          "enum": [
+            "real",
+            "bypassed",
+            "none"
+          ]
+        },
+        "posture_requirements": {
+          "description": "Posture facts the product relies on, each tagged with the posture it depends on.",
+          "minItems": 1,
+          "maxItems": 128,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "requirement": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 64,
+                "pattern": "^[a-z][a-z0-9-]*$",
+                "description": "Name of the posture requirement the product relies on."
+              },
+              "addressing": {
+                "description": "Addressing posture this requirement depends on; set at least one of addressing and authentication.",
+                "type": "string",
+                "enum": [
+                  "hostname",
+                  "port"
+                ]
+              },
+              "authentication": {
+                "description": "Authentication posture this requirement depends on; set at least one of addressing and authentication.",
+                "type": "string",
+                "enum": [
+                  "real",
+                  "bypassed",
+                  "none"
+                ]
+              }
+            },
+            "required": [
+              "requirement"
+            ],
+            "additionalProperties": false,
+            "anyOf": [
+              {
+                "required": [
+                  "addressing"
+                ]
+              },
+              {
+                "required": [
+                  "authentication"
+                ]
+              }
+            ]
+          }
+        },
+        "machine": {
+          "description": "Least the container runtime must offer before the stack starts.",
+          "type": "object",
+          "properties": {
+            "runtime_memory_mb": {
+              "type": "integer",
+              "minimum": 0,
+              "exclusiveMinimum": true,
+              "maximum": 9007199254740991,
+              "description": "Least memory in megabytes the container runtime must offer before the stack starts."
+            },
+            "runtime_cpus": {
+              "type": "number",
+              "minimum": 0,
+              "exclusiveMinimum": true,
+              "description": "Least number of CPUs the container runtime must offer before the stack starts."
+            },
+            "free_disk_mb": {
+              "type": "integer",
+              "minimum": 0,
+              "exclusiveMinimum": true,
+              "maximum": 9007199254740991,
+              "description": "Least free disk space in megabytes the stack needs before it starts."
+            },
+            "cold_start_seconds": {
+              "type": "integer",
+              "minimum": 0,
+              "exclusiveMinimum": true,
+              "maximum": 3600,
+              "description": "Seconds a first start may take; start fails and reports unhealthy beyond it. At most one hour."
+            }
+          },
+          "required": [
+            "runtime_memory_mb",
+            "runtime_cpus",
+            "free_disk_mb",
+            "cold_start_seconds"
+          ],
+          "additionalProperties": false
+        },
+        "resettable_volumes": {
+          "default": [],
+          "description": "Compose volumes that reset may delete and recreate, named by their Compose key.",
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9_.-]*$"
+          },
+          "uniqueItems": true
+        },
+        "generated_host_paths": {
+          "default": [],
+          "description": "Host paths cockpit generates and owns, relative to the cockpit.",
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+          },
+          "uniqueItems": true
+        },
+        "compose_files": {
+          "default": [],
+          "description": "Compose files, relative to the cockpit, that make up the stack; cockpit runs them as written.",
+          "type": "array",
+          "items": {
+            "type": "string",
+            "allOf": [
+              {
+                "type": "string",
+                "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+              },
+              {
+                "type": "string",
+                "pattern": "^[^:]+$"
+              }
+            ]
+          },
+          "uniqueItems": true
+        },
+        "entrypoint_derivatives": {
+          "default": [],
+          "description": "Addresses derived from leased ports, such as application origins and callback URLs.",
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "pattern": "^[a-z0-9][a-z0-9-]*$",
+                "description": "Name that identifies this entrypoint in command output."
+              },
+              "kind": {
+                "type": "string",
+                "enum": [
+                  "entrypoint",
+                  "origin",
+                  "callback_url",
+                  "advertised_listener",
+                  "cors_origin",
+                  "public_base_url"
+                ],
+                "description": "What the address is used for, such as an application origin or a callback URL."
+              },
+              "port": {
+                "type": "string",
+                "pattern": "^[A-Z][A-Z0-9_]*$",
+                "description": "Port-base variable from [ports.bases] whose leased port this address uses."
+              },
+              "path": {
+                "type": "string",
+                "pattern": "^\\/(?!\\/)(?!\\.{1,2}(?:\\/|$))(?!.*\\/\\.{1,2}(?:\\/|$))(?!.*[%\\\\?#\\x00-\\x20\\x7f]).*$",
+                "description": "Absolute URL path appended to the origin."
+              },
+              "hostname": {
+                "description": "Named local URL host, a subdomain of .localhost; omit to use 127.0.0.1.",
+                "type": "string",
+                "maxLength": 253,
+                "pattern": "^(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\\.)+localhost(?![\\s\\S])"
+              },
+              "scheme": {
+                "description": "URL scheme, http or https; omit to use http.",
+                "type": "string",
+                "enum": [
+                  "http",
+                  "https"
+                ]
+              }
+            },
+            "required": [
+              "name",
+              "kind",
+              "port",
+              "path"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "install_policies": {
+          "default": [],
+          "description": "The build and test commands the guard admits for each toolchain and lockfile.",
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "toolchain": {
+                "type": "string",
+                "enum": [
+                  "node",
+                  "python",
+                  "ruby",
+                  "go",
+                  "rust",
+                  "dotnet"
+                ],
+                "description": "Toolchain of the siblings this policy applies to."
+              },
+              "lockfile": {
+                "type": "string",
+                "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$",
+                "description": "Lockfile, relative to the sibling, that selects this policy."
+              },
+              "build": {
+                "description": "Build command, as an argument list, when the product owns one.",
+                "minItems": 1,
+                "maxItems": 32,
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "pattern": "^[^\\x00-\\x1f\\x7f-\\x9f\\uD800-\\uDFFF]{1,128}(?![\\s\\S])"
+                }
+              },
+              "test": {
+                "description": "Test command, as an argument list, when the product owns one.",
+                "minItems": 1,
+                "maxItems": 32,
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "pattern": "^[^\\x00-\\x1f\\x7f-\\x9f\\uD800-\\uDFFF]{1,128}(?![\\s\\S])"
+                }
+              }
+            },
+            "required": [
+              "toolchain",
+              "lockfile"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "seed": {
+          "description": "Command up runs once the stack is healthy, whenever a resettable volume was created since the last successful seed.",
+          "type": "object",
+          "properties": {
+            "argv": {
+              "minItems": 1,
+              "maxItems": 256,
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              },
+              "description": "Command, as an argument list, that fills the resettable volumes; it runs on the host in the cockpit directory with the leased ports in its environment."
+            },
+            "timeout_seconds": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 3600,
+              "description": "Seconds the seed may run before it is stopped."
+            }
+          },
+          "required": [
+            "argv",
+            "timeout_seconds"
+          ],
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    },
+    "surfaces": {
+      "description": "Instructions, skills and settings generated for agent tools.",
+      "default": {},
+      "type": "object",
+      "properties": {
+        "tools": {
+          "default": [
+            "claudecode",
+            "codexcli",
+            "opencode"
+          ],
+          "description": "Agent tools whose instructions, skills and settings sync writes and check compares. Defaults to the tools whose guard is measured (claudecode, codexcli, opencode); the other shipped targets are written only when listed.",
+          "minItems": 1,
+          "maxItems": 5,
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": [
+              "claudecode",
+              "codexcli",
+              "opencode",
+              "cursor",
+              "grokcli"
+            ]
+          }
+        },
+        "overlays": {
+          "default": [],
+          "description": "Team-owned rules, subagents, skills and hooks added to the generated surfaces.",
+          "maxItems": 256,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "maxLength": 128,
+                "pattern": "^[a-z0-9][a-z0-9-]*$",
+                "description": "Name of the declaration; an overlay that reuses a core name replaces it."
+              },
+              "feature": {
+                "type": "string",
+                "enum": [
+                  "rules",
+                  "subagents",
+                  "skills",
+                  "hooks"
+                ],
+                "description": "Kind of surface the overlay provides."
+              },
+              "sources": {
+                "minItems": 1,
+                "maxItems": 256,
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "path": {
+                      "allOf": [
+                        {
+                          "type": "string",
+                          "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+                        },
+                        {
+                          "type": "string",
+                          "maxLength": 4096,
+                          "pattern": "^(?!.*(?:^|\\/)(?:\\.git|internal|node_modules)(?:\\/|$)).+$"
+                        }
+                      ],
+                      "description": "Path of the source file."
+                    },
+                    "bytes": {
+                      "type": "string",
+                      "maxLength": 65536,
+                      "description": "Full text of the source."
+                    }
+                  },
+                  "required": [
+                    "path",
+                    "bytes"
+                  ],
+                  "additionalProperties": false
+                },
+                "description": "Files that make up the declaration."
+              },
+              "source": {
+                "allOf": [
+                  {
+                    "type": "string",
+                    "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+                  },
+                  {
+                    "type": "string",
+                    "maxLength": 4096,
+                    "pattern": "^(?!.*(?:^|\\/)(?:\\.git|internal|node_modules)(?:\\/|$)).+$"
+                  }
+                ],
+                "description": "Where the declaration was read from."
+              },
+              "replaces": {
+                "description": "Core declaration this overlay replaces; required when the name matches a core one.",
+                "type": "object",
+                "properties": {
+                  "name": {
+                    "type": "string",
+                    "maxLength": 128,
+                    "pattern": "^[a-z0-9][a-z0-9-]*$",
+                    "description": "Name of the core declaration being replaced."
+                  },
+                  "sha256": {
+                    "type": "string",
+                    "pattern": "^[a-f0-9]{64}$",
+                    "description": "SHA-256 of the original core declaration, recorded so a later change to it is reported."
+                  }
+                },
+                "required": [
+                  "name",
+                  "sha256"
+                ],
+                "additionalProperties": false
+              }
+            },
+            "required": [
+              "name",
+              "feature",
+              "sources",
+              "source"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "harnesses": {
+          "default": [],
+          "description": "Agent tools beyond the shipped ones, with measured capabilities.",
+          "maxItems": 64,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "maxLength": 128,
+                "allOf": [
+                  {
+                    "type": "string",
+                    "pattern": "^[a-z0-9][a-z0-9-]*$"
+                  },
+                  {
+                    "type": "string",
+                    "pattern": "^(?!(?:claudecode|codexcli|opencode|cursor|grokcli)$)"
+                  }
+                ],
+                "description": "Name of the custom harness; cannot reuse a shipped one."
+              },
+              "capabilities": {
+                "minItems": 6,
+                "maxItems": 6,
+                "type": "array",
+                "items": {
+                  "oneOf": [
+                    {
+                      "type": "object",
+                      "properties": {
+                        "feature": {
+                          "type": "string",
+                          "enum": [
+                            "rules",
+                            "mcp",
+                            "subagents",
+                            "skills",
+                            "hooks",
+                            "permissions"
+                          ],
+                          "description": "Surface feature this row describes."
+                        },
+                        "measured_on": {
+                          "type": "string",
+                          "format": "date",
+                          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))$",
+                          "description": "Date the capability was measured."
+                        },
+                        "spelling": {
+                          "allOf": [
+                            {
+                              "type": "string",
+                              "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+                            },
+                            {
+                              "type": "string",
+                              "maxLength": 4096,
+                              "pattern": "^(?!.*(?:^|\\/)(?:\\.git|internal|node_modules)(?:\\/|$)).+$"
+                            }
+                          ],
+                          "description": "File the harness reads for this feature."
+                        },
+                        "control": {
+                          "allOf": [
+                            {
+                              "type": "string",
+                              "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+                            },
+                            {
+                              "type": "string",
+                              "maxLength": 4096,
+                              "pattern": "^(?!.*(?:^|\\/)(?:\\.git|internal|node_modules)(?:\\/|$)).+$"
+                            }
+                          ],
+                          "description": "Path of the deliberately broken control file the capability was measured against."
+                        },
+                        "mechanism": {
+                          "type": "object",
+                          "properties": {
+                            "module": {
+                              "allOf": [
+                                {
+                                  "type": "string",
+                                  "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+                                },
+                                {
+                                  "type": "string",
+                                  "maxLength": 4096,
+                                  "pattern": "^(?!.*(?:^|\\/)(?:\\.git|internal|node_modules)(?:\\/|$)).+$"
+                                }
+                              ],
+                              "description": "Module that implements the capability."
+                            },
+                            "export": {
+                              "type": "string",
+                              "maxLength": 128,
+                              "pattern": "^[A-Za-z_$][A-Za-z0-9_$]*$",
+                              "description": "Export of the module that implements the capability."
+                            }
+                          },
+                          "required": [
+                            "module",
+                            "export"
+                          ],
+                          "additionalProperties": false,
+                          "description": "Code that emits the surface."
+                        },
+                        "state": {
+                          "type": "string",
+                          "enum": [
+                            "enforced"
+                          ],
+                          "description": "Whether the harness enforces, only instructs, or lacks this capability."
+                        },
+                        "evidence": {
+                          "type": "object",
+                          "properties": {
+                            "reference": {
+                              "allOf": [
+                                {
+                                  "type": "string",
+                                  "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+                                },
+                                {
+                                  "type": "string",
+                                  "maxLength": 4096,
+                                  "pattern": "^(?!.*(?:^|\\/)(?:\\.git|internal|node_modules)(?:\\/|$)).+$"
+                                }
+                              ],
+                              "description": "Probe record or file, relative to the cockpit."
+                            },
+                            "sha256": {
+                              "type": "string",
+                              "pattern": "^[a-f0-9]{64}$",
+                              "description": "SHA-256 of the evidence."
+                            }
+                          },
+                          "required": [
+                            "reference",
+                            "sha256"
+                          ],
+                          "additionalProperties": false,
+                          "description": "Evidence that the harness enforces the capability."
+                        }
+                      },
+                      "required": [
+                        "feature",
+                        "measured_on",
+                        "spelling",
+                        "control",
+                        "mechanism",
+                        "state",
+                        "evidence"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "feature": {
+                          "type": "string",
+                          "enum": [
+                            "rules",
+                            "mcp",
+                            "subagents",
+                            "skills",
+                            "hooks",
+                            "permissions"
+                          ],
+                          "description": "Surface feature this row describes."
+                        },
+                        "measured_on": {
+                          "type": "string",
+                          "format": "date",
+                          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))$",
+                          "description": "Date the capability was measured."
+                        },
+                        "spelling": {
+                          "allOf": [
+                            {
+                              "type": "string",
+                              "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+                            },
+                            {
+                              "type": "string",
+                              "maxLength": 4096,
+                              "pattern": "^(?!.*(?:^|\\/)(?:\\.git|internal|node_modules)(?:\\/|$)).+$"
+                            }
+                          ],
+                          "description": "File the harness reads for this feature."
+                        },
+                        "control": {
+                          "allOf": [
+                            {
+                              "type": "string",
+                              "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+                            },
+                            {
+                              "type": "string",
+                              "maxLength": 4096,
+                              "pattern": "^(?!.*(?:^|\\/)(?:\\.git|internal|node_modules)(?:\\/|$)).+$"
+                            }
+                          ],
+                          "description": "Path of the deliberately broken control file the capability was measured against."
+                        },
+                        "mechanism": {
+                          "type": "object",
+                          "properties": {
+                            "module": {
+                              "allOf": [
+                                {
+                                  "type": "string",
+                                  "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+                                },
+                                {
+                                  "type": "string",
+                                  "maxLength": 4096,
+                                  "pattern": "^(?!.*(?:^|\\/)(?:\\.git|internal|node_modules)(?:\\/|$)).+$"
+                                }
+                              ],
+                              "description": "Module that implements the capability."
+                            },
+                            "export": {
+                              "type": "string",
+                              "maxLength": 128,
+                              "pattern": "^[A-Za-z_$][A-Za-z0-9_$]*$",
+                              "description": "Export of the module that implements the capability."
+                            }
+                          },
+                          "required": [
+                            "module",
+                            "export"
+                          ],
+                          "additionalProperties": false,
+                          "description": "Code that emits the surface."
+                        },
+                        "state": {
+                          "type": "string",
+                          "enum": [
+                            "instructed"
+                          ],
+                          "description": "Whether the harness enforces, only instructs, or lacks this capability."
+                        }
+                      },
+                      "required": [
+                        "feature",
+                        "measured_on",
+                        "spelling",
+                        "control",
+                        "mechanism",
+                        "state"
+                      ],
+                      "additionalProperties": false
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "feature": {
+                          "type": "string",
+                          "enum": [
+                            "rules",
+                            "mcp",
+                            "subagents",
+                            "skills",
+                            "hooks",
+                            "permissions"
+                          ],
+                          "description": "Surface feature this row describes."
+                        },
+                        "measured_on": {
+                          "type": "string",
+                          "format": "date",
+                          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))$",
+                          "description": "Date the capability was measured."
+                        },
+                        "state": {
+                          "type": "string",
+                          "enum": [
+                            "unavailable"
+                          ],
+                          "description": "Whether the harness enforces, only instructs, or lacks this capability."
+                        },
+                        "reason": {
+                          "type": "string",
+                          "minLength": 1,
+                          "maxLength": 4096,
+                          "pattern": "\\S",
+                          "description": "Why the capability is unavailable."
+                        }
+                      },
+                      "required": [
+                        "feature",
+                        "measured_on",
+                        "state",
+                        "reason"
+                      ],
+                      "additionalProperties": false
+                    }
+                  ]
+                },
+                "description": "One row per surface feature saying what the harness supports."
+              }
+            },
+            "required": [
+              "name",
+              "capabilities"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "bundles": {
+          "default": [],
+          "description": "Bundle formats to publish, such as a Claude plugin bundle.",
+          "maxItems": 1,
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": [
+              "claudecode-plugin"
+            ]
+          }
+        },
+        "adopted": {
+          "default": [],
+          "description": "Harness settings files cockpit merges with its own output.",
+          "maxItems": 3,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "path": {
+                "type": "string",
+                "enum": [
+                  ".claude/settings.json",
+                  ".codex/config.toml",
+                  ".codex/hooks.json"
+                ],
+                "description": "Harness settings file that was adopted."
+              },
+              "source": {
+                "allOf": [
+                  {
+                    "type": "string",
+                    "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$"
+                  },
+                  {
+                    "type": "string",
+                    "maxLength": 4096,
+                    "pattern": "^(?!.*(?:^|\\/)(?:\\.git|internal|node_modules)(?:\\/|$)).+$"
+                  }
+                ],
+                "description": "Where the adopted copy now lives, under cockpit/adopted/."
+              },
+              "sha256": {
+                "type": "string",
+                "pattern": "^[a-f0-9]{64}$",
+                "description": "SHA-256 of the bytes that were moved, as a record for review."
+              },
+              "adopted_on": {
+                "type": "string",
+                "format": "date",
+                "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))$",
+                "description": "Date the file was adopted."
+              },
+              "provenance": {
+                "type": "object",
+                "properties": {
+                  "source": {
+                    "type": "string",
+                    "maxLength": 4096,
+                    "pattern": "^(?!\\/)(?![A-Za-z][A-Za-z0-9+.-]*:)(?!.*(?:^|\\/)\\.{1,2}(?:\\/|$))(?!.*\\\\)(?:[^/\\x00-\\x1f\\x7f]+\\/)*[^/\\x00-\\x1f\\x7f]+$",
+                    "description": "File or place the value came from, relative to the repository."
+                  },
+                  "observed_on": {
+                    "description": "Date the source was looked at; required unless kind is declared.",
+                    "type": "string",
+                    "format": "date",
+                    "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))$"
+                  },
+                  "kind": {
+                    "type": "string",
+                    "enum": [
+                      "declared",
+                      "measured",
+                      "inferred"
+                    ],
+                    "description": "How the value was established: declared by this file, measured, or inferred."
+                  },
+                  "reason": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 4096,
+                    "pattern": "\\S",
+                    "description": "Why the value is what it is."
+                  },
+                  "confirmed": {
+                    "description": "Set to true once a person has confirmed an inferred value; inferred values require it.",
+                    "type": "boolean"
+                  }
+                },
+                "required": [
+                  "source",
+                  "kind",
+                  "reason"
+                ],
+                "additionalProperties": false,
+                "description": "Where the adoption came from; its kind must be declared.",
+                "anyOf": [
+                  {
+                    "properties": {
+                      "kind": {
+                        "enum": [
+                          "declared"
+                        ]
+                      }
+                    }
+                  },
+                  {
+                    "properties": {
+                      "kind": {
+                        "enum": [
+                          "measured"
+                        ]
+                      }
+                    },
+                    "required": [
+                      "observed_on"
+                    ]
+                  },
+                  {
+                    "properties": {
+                      "kind": {
+                        "enum": [
+                          "inferred"
+                        ]
+                      },
+                      "confirmed": {
+                        "enum": [
+                          true
+                        ]
+                      }
+                    },
+                    "required": [
+                      "confirmed",
+                      "observed_on"
+                    ]
+                  }
+                ]
+              }
+            },
+            "required": [
+              "path",
+              "source",
+              "sha256",
+              "adopted_on",
+              "provenance"
+            ],
+            "additionalProperties": false
+          }
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "required": [
+    "cockpit",
+    "sibling",
+    "ports"
+  ],
+  "additionalProperties": false,
+  "x-cockpit-runtime-checks": [
+    {
+      "path": "sibling[].slug",
+      "rule": "unique"
+    },
+    {
+      "path": "sibling[].dir",
+      "rule": "unique"
+    },
+    {
+      "path": "sibling[].var",
+      "rule": "unique"
+    },
+    {
+      "path": "sibling[].environment_files[].instance",
+      "rule": "unique"
+    },
+    {
+      "path": "environment.resettable_volumes[]",
+      "rule": "unique"
+    },
+    {
+      "path": "environment.resettable_volumes[]",
+      "rule": "declared_compose_volume_key"
+    },
+    {
+      "path": "environment.generated_host_paths[]",
+      "rule": "unique"
+    },
+    {
+      "path": "environment.compose_files[]",
+      "rule": "unique"
+    },
+    {
+      "path": "environment.entrypoint_derivatives[].name",
+      "rule": "unique"
+    },
+    {
+      "path": "environment.install_policies[].toolchain+lockfile",
+      "rule": "unique"
+    },
+    {
+      "path": "environment.posture_requirements[].requirement",
+      "rule": "unique"
+    },
+    {
+      "path": "environment.entrypoint_derivatives[].port",
+      "rule": "declared_in_ports.bases"
+    },
+    {
+      "path": "browser.artifacts",
+      "rule": "exact_environment.generated_host_paths_coverage"
+    },
+    {
+      "path": "browser",
+      "rule": "matches_environment_addressing_authentication_and_client_cap"
+    },
+    {
+      "path": "browser.images",
+      "rule": "mcp_driver_shares_major_minor_with_project_driver"
+    },
+    {
+      "path": "testing.gates[].stages[]",
+      "rule": "references_declared_testing_stage"
+    },
+    {
+      "path": "sibling[].environment_files[]",
+      "rule": "template_and_instance_differ"
+    },
+    {
+      "path": "sibling[].derives.mcp_sources[].path",
+      "rule": "unique_within_sibling"
+    },
+    {
+      "path": "environment.seed",
+      "rule": "requires_resettable_volumes"
+    },
+    {
+      "path": "ports",
+      "rule": "count_times_base_count_within_shared_input_budget",
+      "limit": 4096
+    },
+    {
+      "path": "surfaces.overlays[].name",
+      "rule": "unique"
+    },
+    {
+      "path": "surfaces.overlays[].sources[].path",
+      "rule": "unique"
+    },
+    {
+      "path": "surfaces.overlays[].sources",
+      "rule": "feature_namespace_and_complete_skill_definitions"
+    },
+    {
+      "path": "surfaces.overlays[].sources[].bytes",
+      "rule": "utf8_byte_length_at_most_65536"
+    },
+    {
+      "path": "surfaces.overlays[].replaces.name",
+      "rule": "matches_declaration_name"
+    },
+    {
+      "path": "surfaces.harnesses[].name",
+      "rule": "unique"
+    },
+    {
+      "path": "surfaces.harnesses[].capabilities",
+      "rule": "one_row_per_surface_feature"
+    },
+    {
+      "path": "surfaces.harnesses[].capabilities[].spelling",
+      "rule": "unique_when_emitted"
+    },
+    {
+      "path": "surfaces.adopted[].path",
+      "rule": "unique"
+    },
+    {
+      "path": "surfaces.adopted[].source",
+      "rule": "equals_cockpit/adopted/<path>"
+    },
+    {
+      "path": "surfaces.adopted[].provenance.kind",
+      "rule": "declared"
+    }
+  ],
+  "x-cockpit-editor-limitations": [
+    {
+      "path": "sibling[].environment_files[].instance",
+      "rule": "unique"
+    },
+    {
+      "path": "sibling[].environment_files[]",
+      "rule": "template_and_instance_differ"
+    },
+    {
+      "path": "sibling[].derives.mcp_sources[].path",
+      "rule": "unique_within_sibling"
+    },
+    {
+      "path": "environment.seed",
+      "rule": "requires_resettable_volumes"
+    },
+    {
+      "path": "environment.entrypoint_derivatives[].name",
+      "rule": "unique"
+    },
+    {
+      "path": "environment.entrypoint_derivatives[].port",
+      "rule": "declared_in_ports.bases"
+    },
+    {
+      "path": "environment.install_policies[].toolchain+lockfile",
+      "rule": "unique"
+    },
+    {
+      "path": "environment.posture_requirements[].requirement",
+      "rule": "unique"
+    },
+    {
+      "path": "browser.artifacts",
+      "rule": "exact_environment.generated_host_paths_coverage"
+    },
+    {
+      "path": "browser",
+      "rule": "matches_environment_addressing_authentication_and_client_cap"
+    },
+    {
+      "path": "browser.images",
+      "rule": "mcp_driver_shares_major_minor_with_project_driver"
+    },
+    {
+      "path": "testing.gates[].stages[]",
+      "rule": "references_declared_testing_stage"
+    },
+    {
+      "path": "surfaces.overlays[].name",
+      "rule": "unique"
+    },
+    {
+      "path": "surfaces.overlays[].sources[].path",
+      "rule": "unique"
+    },
+    {
+      "path": "surfaces.overlays[].sources",
+      "rule": "feature_namespace_and_complete_skill_definitions"
+    },
+    {
+      "path": "surfaces.overlays[].sources[].bytes",
+      "rule": "utf8_byte_length_at_most_65536"
+    },
+    {
+      "path": "surfaces.overlays[].replaces.name",
+      "rule": "matches_declaration_name"
+    },
+    {
+      "path": "surfaces.harnesses[].name",
+      "rule": "unique"
+    },
+    {
+      "path": "surfaces.harnesses[].capabilities",
+      "rule": "one_row_per_surface_feature"
+    },
+    {
+      "path": "surfaces.harnesses[].capabilities[].spelling",
+      "rule": "unique_when_emitted"
+    },
+    {
+      "path": "surfaces.adopted[].path",
+      "rule": "unique"
+    },
+    {
+      "path": "surfaces.adopted[].source",
+      "rule": "equals_cockpit/adopted/<path>"
+    },
+    {
+      "path": "surfaces.adopted[].provenance.kind",
+      "rule": "declared"
+    }
+  ]
+}