@devtrack-solution/codesdd 1.2.2 → 1.2.3

package/schemas/sdd/quality-evidence-bundle.schema.json

@@ -0,0 +1,1228 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "schema_version": {
+      "type": "number",
+      "const": 1
+    },
+    "run": {
+      "type": "object",
+      "properties": {
+        "schema_version": {
+          "type": "number",
+          "const": 1
+        },
+        "run_id": {
+          "type": "string",
+          "pattern": "^qrun-[0-9]{8}t[0-9]{6}z-[a-z0-9-]+$"
+        },
+        "scenario_ref": {
+          "type": "string",
+          "pattern": "^QVAL-\\d{4}$"
+        },
+        "feature_ref": {
+          "type": "string",
+          "pattern": "^FEAT-\\d{4}$"
+        },
+        "started_at": {
+          "type": "string",
+          "format": "date-time",
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
+        },
+        "finished_at": {
+          "type": "string",
+          "format": "date-time",
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
+        },
+        "mode": {
+          "type": "string",
+          "enum": [
+            "dry_run",
+            "apply_sandbox",
+            "runtime",
+            "traceability"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "enum": [
+            "passed",
+            "warning",
+            "failed",
+            "blocked"
+          ]
+        },
+        "plugin_ref": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string",
+              "minLength": 1
+            },
+            "version": {
+              "type": "string",
+              "minLength": 1
+            },
+            "capability": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "id",
+            "version",
+            "capability"
+          ],
+          "additionalProperties": false
+        },
+        "command": {
+          "type": "object",
+          "properties": {
+            "argv": {
+              "minItems": 1,
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "cwd": {
+              "default": ".",
+              "type": "string",
+              "minLength": 1
+            },
+            "env_keys": {
+              "default": [],
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          },
+          "required": [
+            "argv",
+            "cwd",
+            "env_keys"
+          ],
+          "additionalProperties": false
+        },
+        "schema_versions": {
+          "default": {},
+          "type": "object",
+          "propertyNames": {
+            "type": "string"
+          },
+          "additionalProperties": {
+            "type": "string"
+          }
+        },
+        "artifacts": {
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "findings": {
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "code": {
+                "type": "string",
+                "pattern": "^[A-Z][A-Z0-9_]*$"
+              },
+              "severity": {
+                "type": "string",
+                "enum": [
+                  "info",
+                  "warn",
+                  "error",
+                  "blocker"
+                ]
+              },
+              "message": {
+                "type": "string",
+                "minLength": 1
+              },
+              "remediation": {
+                "type": "string",
+                "minLength": 1
+              },
+              "path": {
+                "type": "string",
+                "minLength": 1
+              },
+              "gate_id": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "required": [
+              "code",
+              "severity",
+              "message",
+              "remediation"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "evidence_bundle_path": {
+          "type": "string",
+          "minLength": 1
+        },
+        "metadata": {
+          "default": {},
+          "type": "object",
+          "propertyNames": {
+            "type": "string"
+          },
+          "additionalProperties": {}
+        }
+      },
+      "required": [
+        "schema_version",
+        "run_id",
+        "scenario_ref",
+        "feature_ref",
+        "started_at",
+        "mode",
+        "status",
+        "command",
+        "schema_versions",
+        "artifacts",
+        "findings",
+        "metadata"
+      ],
+      "additionalProperties": false
+    },
+    "scenario": {
+      "type": "object",
+      "properties": {
+        "schema_version": {
+          "type": "number",
+          "const": 1
+        },
+        "id": {
+          "type": "string",
+          "pattern": "^QVAL-\\d{4}$"
+        },
+        "title": {
+          "type": "string",
+          "minLength": 10
+        },
+        "feature_ref": {
+          "type": "string",
+          "pattern": "^FEAT-\\d{4}$"
+        },
+        "mode": {
+          "type": "string",
+          "enum": [
+            "dry_run",
+            "apply_sandbox",
+            "runtime",
+            "traceability"
+          ]
+        },
+        "intent": {
+          "type": "string",
+          "minLength": 30
+        },
+        "authority": {
+          "minItems": 1,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "type": {
+                "type": "string",
+                "enum": [
+                  "adr",
+                  "skill",
+                  "foundation",
+                  "debate",
+                  "epic",
+                  "feature",
+                  "schema"
+                ]
+              },
+              "ref": {
+                "type": "string",
+                "minLength": 1
+              },
+              "path": {
+                "type": "string",
+                "minLength": 1
+              },
+              "version": {
+                "type": "string",
+                "minLength": 1
+              },
+              "update_policy": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "required": [
+              "type",
+              "ref",
+              "update_policy"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "input": {
+          "type": "object",
+          "properties": {
+            "prompt": {
+              "type": "string",
+              "minLength": 1
+            },
+            "fixture_path": {
+              "type": "string",
+              "minLength": 1
+            },
+            "payload": {
+              "default": {},
+              "type": "object",
+              "propertyNames": {
+                "type": "string"
+              },
+              "additionalProperties": {}
+            }
+          },
+          "required": [
+            "payload"
+          ],
+          "additionalProperties": false
+        },
+        "expected_artifacts": {
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "path_pattern": {
+                "type": "string",
+                "minLength": 1
+              },
+              "required": {
+                "default": true,
+                "type": "boolean"
+              },
+              "artifact_class": {
+                "type": "string",
+                "minLength": 1
+              },
+              "checksum_required": {
+                "default": false,
+                "type": "boolean"
+              }
+            },
+            "required": [
+              "path_pattern",
+              "required",
+              "artifact_class",
+              "checksum_required"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "gates": {
+          "minItems": 1,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string",
+                "minLength": 1
+              },
+              "type": {
+                "type": "string",
+                "enum": [
+                  "schema",
+                  "filesystem",
+                  "import",
+                  "runtime",
+                  "evidence",
+                  "certification",
+                  "drift"
+                ]
+              },
+              "severity": {
+                "default": "warn",
+                "type": "string",
+                "enum": [
+                  "warn",
+                  "fail"
+                ]
+              },
+              "issue_codes": {
+                "default": [],
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "pattern": "^[A-Z][A-Z0-9_]*$"
+                }
+              },
+              "remediation": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "required": [
+              "id",
+              "type",
+              "severity",
+              "issue_codes",
+              "remediation"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "negative_variants": {
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string",
+                "minLength": 1
+              },
+              "description": {
+                "type": "string",
+                "minLength": 10
+              },
+              "expected_issue_codes": {
+                "minItems": 1,
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "pattern": "^[A-Z][A-Z0-9_]*$"
+                }
+              }
+            },
+            "required": [
+              "id",
+              "description",
+              "expected_issue_codes"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "allowed_nondeterminism": {
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "required_evidence": {
+          "minItems": 1,
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        }
+      },
+      "required": [
+        "schema_version",
+        "id",
+        "title",
+        "mode",
+        "intent",
+        "authority",
+        "input",
+        "expected_artifacts",
+        "gates",
+        "negative_variants",
+        "allowed_nondeterminism",
+        "required_evidence"
+      ],
+      "additionalProperties": false
+    },
+    "architecture_schema": {
+      "type": "object",
+      "properties": {
+        "schema_version": {
+          "type": "number",
+          "const": 1
+        },
+        "id": {
+          "type": "string",
+          "pattern": "^ARCH-GATE-[a-z0-9][a-z0-9-]*$"
+        },
+        "title": {
+          "type": "string",
+          "minLength": 10
+        },
+        "stack": {
+          "type": "string",
+          "minLength": 1
+        },
+        "authority": {
+          "minItems": 1,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "type": {
+                "type": "string",
+                "enum": [
+                  "adr",
+                  "skill",
+                  "foundation",
+                  "debate",
+                  "epic",
+                  "feature",
+                  "schema"
+                ]
+              },
+              "ref": {
+                "type": "string",
+                "minLength": 1
+              },
+              "path": {
+                "type": "string",
+                "minLength": 1
+              },
+              "version": {
+                "type": "string",
+                "minLength": 1
+              },
+              "update_policy": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "required": [
+              "type",
+              "ref",
+              "update_policy"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "applies_to": {
+          "type": "object",
+          "properties": {
+            "plugin": {
+              "type": "string",
+              "minLength": 1
+            },
+            "capability": {
+              "type": "string",
+              "minLength": 1
+            },
+            "project_kind": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "additionalProperties": false
+        },
+        "layers": {
+          "type": "object",
+          "propertyNames": {
+            "type": "string",
+            "minLength": 1
+          },
+          "additionalProperties": {
+            "type": "object",
+            "properties": {
+              "path_patterns": {
+                "minItems": 1,
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "allowed_file_patterns": {
+                "default": [],
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "forbidden_file_patterns": {
+                "default": [],
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "allowed_imports": {
+                "default": [],
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "forbidden_imports": {
+                "default": [],
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "required_evidence": {
+                "default": [],
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              }
+            },
+            "required": [
+              "path_patterns",
+              "allowed_file_patterns",
+              "forbidden_file_patterns",
+              "allowed_imports",
+              "forbidden_imports",
+              "required_evidence"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "exceptions": {
+          "type": "object",
+          "properties": {
+            "require_adr": {
+              "default": true,
+              "type": "boolean"
+            },
+            "require_expiration": {
+              "default": true,
+              "type": "boolean"
+            },
+            "allowed_refs": {
+              "default": [],
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          },
+          "required": [
+            "require_adr",
+            "require_expiration",
+            "allowed_refs"
+          ],
+          "additionalProperties": false
+        },
+        "update_policy": {
+          "type": "object",
+          "properties": {
+            "owner": {
+              "type": "string",
+              "minLength": 1
+            },
+            "review_trigger": {
+              "type": "string",
+              "minLength": 1
+            },
+            "stale_after_days": {
+              "type": "integer",
+              "exclusiveMinimum": 0,
+              "maximum": 9007199254740991
+            }
+          },
+          "required": [
+            "owner",
+            "review_trigger"
+          ],
+          "additionalProperties": false
+        }
+      },
+      "required": [
+        "schema_version",
+        "id",
+        "title",
+        "stack",
+        "authority",
+        "applies_to",
+        "layers",
+        "exceptions",
+        "update_policy"
+      ],
+      "additionalProperties": false
+    },
+    "artifact_manifest": {
+      "type": "object",
+      "properties": {
+        "schema_version": {
+          "type": "number",
+          "const": 1
+        },
+        "operation_id": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9-]*$"
+        },
+        "generated_at": {
+          "type": "string",
+          "format": "date-time",
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
+        },
+        "feature_ref": {
+          "type": "string",
+          "pattern": "^FEAT-\\d{4}$"
+        },
+        "plugin_ref": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string",
+              "minLength": 1
+            },
+            "version": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "id",
+            "version"
+          ],
+          "additionalProperties": false
+        },
+        "capability": {
+          "type": "string",
+          "minLength": 1
+        },
+        "mode": {
+          "type": "string",
+          "enum": [
+            "dry-run",
+            "apply",
+            "rollback"
+          ]
+        },
+        "status": {
+          "type": "string",
+          "enum": [
+            "planned",
+            "applied",
+            "rolled_back",
+            "failed"
+          ]
+        },
+        "artifacts": {
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "path": {
+                "type": "string",
+                "minLength": 1
+              },
+              "operation": {
+                "type": "string",
+                "enum": [
+                  "planned",
+                  "created",
+                  "modified",
+                  "deleted",
+                  "unchanged",
+                  "validated"
+                ]
+              },
+              "reason": {
+                "type": "string",
+                "minLength": 1
+              },
+              "checksum_before": {
+                "type": "string"
+              },
+              "checksum_after": {
+                "type": "string"
+              },
+              "content_type": {
+                "type": "string"
+              }
+            },
+            "required": [
+              "path",
+              "operation",
+              "reason"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "validation_evidence": {
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "command": {
+                "type": "string",
+                "minLength": 1
+              },
+              "status": {
+                "type": "string",
+                "enum": [
+                  "pending",
+                  "passed",
+                  "failed",
+                  "skipped"
+                ]
+              },
+              "evidence_ref": {
+                "type": "string"
+              }
+            },
+            "required": [
+              "command",
+              "status"
+            ],
+            "additionalProperties": false
+          }
+        }
+      },
+      "required": [
+        "schema_version",
+        "operation_id",
+        "generated_at",
+        "feature_ref",
+        "plugin_ref",
+        "capability",
+        "mode",
+        "status",
+        "artifacts",
+        "validation_evidence"
+      ],
+      "additionalProperties": false
+    },
+    "validation_manifest": {
+      "type": "object",
+      "properties": {
+        "schema_version": {
+          "type": "number",
+          "const": 1
+        },
+        "operation_id": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9-]*$"
+        },
+        "generated_at": {
+          "type": "string",
+          "format": "date-time",
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
+        },
+        "feature_ref": {
+          "type": "string",
+          "pattern": "^FEAT-\\d{4}$"
+        },
+        "plugin_ref": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string",
+              "minLength": 1
+            },
+            "version": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "id",
+            "version"
+          ],
+          "additionalProperties": false
+        },
+        "capability": {
+          "type": "string",
+          "minLength": 1
+        },
+        "status": {
+          "type": "string",
+          "enum": [
+            "pending",
+            "passed",
+            "failed",
+            "partial"
+          ]
+        },
+        "validations": {
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "command": {
+                "type": "string",
+                "minLength": 1
+              },
+              "status": {
+                "type": "string",
+                "enum": [
+                  "pending",
+                  "passed",
+                  "failed",
+                  "skipped"
+                ]
+              },
+              "evidence_ref": {
+                "type": "string"
+              },
+              "coverage": {
+                "type": "object",
+                "properties": {
+                  "statements": {
+                    "type": "number",
+                    "minimum": 0,
+                    "maximum": 100
+                  },
+                  "branches": {
+                    "type": "number",
+                    "minimum": 0,
+                    "maximum": 100
+                  },
+                  "functions": {
+                    "type": "number",
+                    "minimum": 0,
+                    "maximum": 100
+                  },
+                  "lines": {
+                    "type": "number",
+                    "minimum": 0,
+                    "maximum": 100
+                  }
+                },
+                "additionalProperties": false
+              }
+            },
+            "required": [
+              "command",
+              "status"
+            ],
+            "additionalProperties": false
+          }
+        }
+      },
+      "required": [
+        "schema_version",
+        "operation_id",
+        "generated_at",
+        "feature_ref",
+        "plugin_ref",
+        "capability",
+        "status",
+        "validations"
+      ],
+      "additionalProperties": false
+    },
+    "compliance_index": {
+      "type": "object",
+      "properties": {
+        "schema_version": {
+          "type": "number",
+          "const": 1
+        },
+        "generated_at": {
+          "type": "string",
+          "format": "date-time",
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
+        },
+        "feature_ref": {
+          "type": "string",
+          "pattern": "^FEAT-\\d{4}$"
+        },
+        "operation_id": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9-]*$"
+        },
+        "plugin_ref": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string",
+              "minLength": 1
+            },
+            "version": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "id",
+            "version"
+          ],
+          "additionalProperties": false
+        },
+        "capability": {
+          "type": "string",
+          "minLength": 1
+        },
+        "score": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 100
+        },
+        "decision": {
+          "type": "string",
+          "enum": [
+            "compliant",
+            "warning",
+            "non-compliant"
+          ]
+        },
+        "criteria": {
+          "minItems": 1,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string",
+                "minLength": 1
+              },
+              "label": {
+                "type": "string",
+                "minLength": 1
+              },
+              "status": {
+                "type": "string",
+                "enum": [
+                  "pass",
+                  "warn",
+                  "fail"
+                ]
+              },
+              "score": {
+                "type": "number",
+                "minimum": 0
+              },
+              "max_score": {
+                "type": "number",
+                "exclusiveMinimum": 0
+              },
+              "evidence": {
+                "type": "string",
+                "minLength": 1
+              },
+              "issues": {
+                "default": [],
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              }
+            },
+            "required": [
+              "id",
+              "label",
+              "status",
+              "score",
+              "max_score",
+              "evidence",
+              "issues"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "evidence_refs": {
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        }
+      },
+      "required": [
+        "schema_version",
+        "generated_at",
+        "feature_ref",
+        "operation_id",
+        "plugin_ref",
+        "capability",
+        "score",
+        "decision",
+        "criteria",
+        "evidence_refs"
+      ],
+      "additionalProperties": false
+    },
+    "filesystem_snapshot": {
+      "type": "object",
+      "properties": {
+        "root": {
+          "default": ".",
+          "type": "string",
+          "minLength": 1
+        },
+        "files": {
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "path": {
+                "type": "string",
+                "minLength": 1
+              },
+              "size_bytes": {
+                "type": "integer",
+                "minimum": 0,
+                "maximum": 9007199254740991
+              },
+              "sha256": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "required": [
+              "path",
+              "size_bytes"
+            ],
+            "additionalProperties": false
+          }
+        }
+      },
+      "required": [
+        "root",
+        "files"
+      ],
+      "additionalProperties": false
+    },
+    "import_graph": {
+      "type": "object",
+      "properties": {
+        "nodes": {
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "edges": {
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "from": {
+                "type": "string",
+                "minLength": 1
+              },
+              "to": {
+                "type": "string",
+                "minLength": 1
+              },
+              "kind": {
+                "default": "relative",
+                "type": "string",
+                "enum": [
+                  "relative",
+                  "package",
+                  "alias"
+                ]
+              }
+            },
+            "required": [
+              "from",
+              "to",
+              "kind"
+            ],
+            "additionalProperties": false
+          }
+        }
+      },
+      "required": [
+        "nodes",
+        "edges"
+      ],
+      "additionalProperties": false
+    },
+    "command_log_ref": {
+      "type": "string",
+      "minLength": 1
+    },
+    "exceptions": {
+      "default": [],
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "ref": {
+            "type": "string",
+            "minLength": 1
+          },
+          "reason": {
+            "type": "string",
+            "minLength": 1
+          },
+          "expires_at": {
+            "type": "string",
+            "format": "date-time",
+            "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
+          },
+          "compensating_control": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "required": [
+          "ref",
+          "reason",
+          "compensating_control"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "checksums": {
+      "default": [],
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "path": {
+            "type": "string",
+            "minLength": 1
+          },
+          "sha256": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "required": [
+          "path",
+          "sha256"
+        ],
+        "additionalProperties": false
+      }
+    }
+  },
+  "required": [
+    "schema_version",
+    "run",
+    "scenario",
+    "filesystem_snapshot",
+    "import_graph",
+    "exceptions",
+    "checksums"
+  ],
+  "additionalProperties": false,
+  "title": "CodeSDD Quality Evidence Bundle",
+  "description": "Machine-readable evidence bundle contract tying scenario, run, artifacts, checksums, findings, and exceptions together."
+}