@downtrace/protocol 0.6.0 → 0.7.1

package/schema/v0/aggregates.schema.json

@@ -10,7 +10,7 @@
   "properties": {
     "protocol": {
       "type": "string",
-      "enum": ["0.1.0", "0.2.0", "0.3.0", "0.4.0", "0.5.0", "0.6.0"],
+      "enum": ["0.1.0", "0.2.0", "0.3.0", "0.4.0", "0.5.0", "0.6.0", "0.7.0"],
       "description": "Protocol version this batch conforms to. Every published minor of v0 stays acceptable."
     },
     "agent": {
@@ -24,14 +24,39 @@
     },
     "intervals": {
       "type": "array",
-      "minItems": 1,
+      "minItems": 0,
       "maxItems": 6,
       "items": {
         "$ref": "#/$defs/Interval"
-      }
+      },
+      "description": "The intervals this batch carries. May be empty when the batch carries a profile: the profile has a cadence of its own and hangs off the batch, not off an interval (ADR 0017), so tying its delivery to one meant it was lost whenever a window closed with no traffic — at shutdown, always (gh-375). A batch with neither is refused by the cloud with a reason, which the schema cannot say without making the generated types unusable."
     },
     "profile": {
       "$ref": "#/$defs/Profile"
+    },
+    "captures": {
+      "type": "array",
+      "maxItems": 16,
+      "items": {
+        "$ref": "#/$defs/CaptureProgress"
+      },
+      "description": "Progress on the captures this sender was asked for. Absent from every sender that predates it, and from every batch with nothing to report. Bounded like the answer that carries the orders."
+    },
+    "exceptions": {
+      "type": "array",
+      "maxItems": 32,
+      "items": {
+        "$ref": "#/$defs/ProcessException"
+      },
+      "description": "Distinct exception signatures this process saw outside any request. Absent from every sender that predates it and from every batch with none. Bounded: a process crashing in a loop must not become an unbounded batch."
+    },
+    "triggers": {
+      "type": "array",
+      "maxItems": 4,
+      "items": {
+        "$ref": "#/$defs/LocalTrigger"
+      },
+      "description": "Local signals that ask for a capture. `product.md:124` gives the instrumentation «disparar por señales locales»: it sees a process in trouble before any aggregate crosses the cloud, and asking in the batch costs no channel of its own — the answer already carries the orders (ADR 0071). Absent from every sender that predates it and from every batch with nothing to ask. The cloud decides: the same budget, cooldown and concurrency as any other capture (`product.md:122`), and a refusal is silence, because there is nothing the instrumentation would do differently."
     }
   },
   "$defs": {
@@ -58,6 +83,18 @@
           "type": "string",
           "minLength": 1,
           "maxLength": 64
+        },
+        "observers": {
+          "$ref": "#/$defs/Observers",
+          "description": "Absent from an instrumentation older than protocol 0.7.0. Absent is not 'nothing is observed': it is 'this one did not say', and the two must not be shown alike."
+        },
+        "withholding": {
+          "$ref": "#/$defs/Withholding",
+          "description": "Absent means **this sender did not say**, not that it withholds nothing — the same reading as `observers`, and for the same reason."
+        },
+        "resources": {
+          "$ref": "#/$defs/AgentResources",
+          "description": "What the instrumentation costs and what it has lost, measured by itself. Absent means **this sender did not say**, the same reading as `observers` and `withholding`. `product.md:239` asks for it by name: «recursos internos medidos»."
         }
       }
     },
@@ -265,10 +302,9 @@
     },
     "RuntimeHealth": {
       "title": "RuntimeHealth",
-      "description": "Health of the agent's own process during the interval. Optional: an agent that does not measure it omits it. Per interval, not per route, because it belongs to the process.",
+      "description": "What the runtime itself was doing. Every field is optional and at least one has to be there: `product.md:251` says the protocol is independent of the language, and a Go runtime has garbage collection, a heap and a resident set but no event loop. Requiring the six of them meant it could either invent an event loop or send none of the three it does have. An empty object is not a reading, hence the minimum of one (gh-285).",
       "type": "object",
       "additionalProperties": false,
-      "required": ["eventLoopDelayMs", "gcPauseMs", "gcCount", "heapUsedMb", "rssMb", "inFlightMax"],
       "properties": {
         "eventLoopDelayMs": {
           "type": "object",
@@ -318,7 +354,8 @@
           "minimum": 0,
           "description": "Peak concurrent in-flight requests during the interval."
         }
-      }
+      },
+      "minProperties": 1
     },
     "Dependency": {
       "title": "Dependency",
@@ -456,6 +493,196 @@
           "type": "integer",
           "minimum": 0,
           "description": "Only on the `(other)` bucket: how many distinct operations it merges, so a cap does not become a lie by omission."
+        },
+        "class": {
+          "enum": ["select", "insert", "update", "delete", "other"],
+          "description": "What kind of statement this is, when the sender could not normalise it safely. Its presence is the reason the text is absent: `product.md:104` says a query the normaliser does not understand travels «solo como hash y clase», and this is the class. Never sent together with `text` — they are two answers to the same question. Our word and not the service's: it is decided from the first keyword, which is all that can be told without understanding the rest (gh-344)."
+        }
+      },
+      "not": {
+        "required": ["class", "text"],
+        "properties": {
+          "class": {},
+          "text": {}
+        }
+      }
+    },
+    "ObserverState": {
+      "title": "ObserverState",
+      "enum": ["on", "off", "unavailable"],
+      "description": "Whether an observer is attached (`on`), was not asked for (`off`), or was asked for and could not attach (`unavailable`) — a driver that is not resolvable from the application's root, for instance. The third one is the point: without it, a service that is not being watched looks exactly like a service that has nothing to watch (COB-01, invariant 14)."
+    },
+    "Observers": {
+      "title": "Observers",
+      "type": "object",
+      "additionalProperties": false,
+      "description": "What the instrumentation is watching, by switch. The keys are the switches of `DOWNTRACE_INSTRUMENT`, so this says `pg` where a dependency says `postgres`: one is the switch and the other is the thing observed.",
+      "properties": {
+        "pg": {
+          "$ref": "#/$defs/ObserverState"
+        },
+        "http": {
+          "$ref": "#/$defs/ObserverState"
+        },
+        "redis": {
+          "$ref": "#/$defs/ObserverState"
+        },
+        "runtime": {
+          "$ref": "#/$defs/ObserverState"
+        }
+      }
+    },
+    "Withholding": {
+      "title": "Withholding",
+      "type": "object",
+      "additionalProperties": false,
+      "minProperties": 1,
+      "description": "What this sender is deliberately not sending, so that less arriving can be read as a choice rather than as a fault (invariant 14, COB-01). Counts and never names: the name of an excluded endpoint is exactly what the user asked not to send. The cloud cannot verify any of this and does not try — it is what the sender says, and it is shown as such.",
+      "properties": {
+        "freeText": {
+          "type": "boolean",
+          "description": "True when the sender is in minimal mode: no query text, no route templates, no dependency hosts, no error messages. Only ever true — a sender that is not in minimal mode leaves it out.",
+          "const": true
+        },
+        "endpoints": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "How many endpoints are excluded. Absent means none are."
+        },
+        "dependencies": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "How many dependencies are excluded. Absent means none are."
+        }
+      }
+    },
+    "CaptureProgress": {
+      "title": "CaptureProgress",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "startedAt"],
+      "description": "What the instrumentation has to say about a capture the cloud asked it for. The order travels in the ingest response (ADR 0071) and the answer travels here, on the same cadence and at the same cost: a path of its own would be one more call per capture, and one more thing to authenticate, for a fact that fits in the batch that is already going (gh-378).",
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64,
+          "description": "The capture's id, as the ingest response gave it. Carries nothing the service wrote."
+        },
+        "startedAt": {
+          "type": "integer",
+          "description": "Unix milliseconds when observation **really** started, which CAP-01 keeps apart from when the capture was accepted."
+        }
+      }
+    },
+    "ProcessException": {
+      "title": "ProcessException",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "hash", "count"],
+      "description": "Something thrown outside any instrumented operation: an exception nobody caught, or a promise rejected with no `catch`. `product.md:77` asks for «errores **y excepciones**», and these are the two the word «excepciones» names. They live on the batch and not in the profile because they have **no route** — they happen outside a request's life, or after it ended — and filing them under a route that is not theirs would be worse than not having them (gh-341, ADR 0102).",
+      "properties": {
+        "kind": {
+          "enum": ["uncaught", "unhandled-rejection"],
+          "description": "Which of the two. Two different failures with two different fixes: counting them together hides which one is happening."
+        },
+        "hash": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64,
+          "description": "Stable identity of the signature, the same shape a query's or an operation error's has (ADR 0017)."
+        },
+        "text": {
+          "type": "string",
+          "maxLength": 512,
+          "description": "Type, sanitised message and stack signature. Optional and for the same reason as everywhere else: when nothing recognisable survives the sanitising, only the type and the signature travel (ADR 0084). Its absence is not the absence of an exception."
+        },
+        "count": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "How many times this signature happened. An instant per occurrence would be a row per crash of a process that crashes in a loop; what a reader asks is how many."
+        }
+      }
+    },
+    "LocalTrigger": {
+      "type": "object",
+      "title": "LocalTrigger",
+      "additionalProperties": false,
+      "required": ["signal", "observedAt"],
+      "description": "One local signal, sustained past its threshold. It asks for detail; it does not claim a cause (invariant 7).",
+      "properties": {
+        "signal": {
+          "type": "string",
+          "enum": ["event-loop-delay"],
+          "description": "Which signal fired. An enum and not free text: the cloud files findings by footprint, and a trigger type nobody can compare is a footprint that never matches. `product.md:114` names the absolute-threshold signals; this is the first of them."
+        },
+        "observedAt": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Unix milliseconds when the signal was last seen over its threshold. Milliseconds and not a date string because that is how this contract writes an instant —an interval's `start`, a capture's `startedAt`— and the evidence, which writes dates, is a different payload with different readers."
+        },
+        "valueMs": {
+          "type": "number",
+          "minimum": 0,
+          "description": "What was measured: the p99 of the event loop delay over the interval that fired."
+        },
+        "thresholdMs": {
+          "type": "number",
+          "minimum": 0,
+          "description": "The threshold it passed, sent with the value because a number without its threshold cannot be read by anyone who does not have this version of the instrumentation in front of them."
+        },
+        "intervals": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "How many consecutive intervals it stayed over. More than one is what makes it sustained rather than a spike (`product.md:114`)."
+        }
+      }
+    },
+    "AgentResources": {
+      "title": "AgentResources",
+      "type": "object",
+      "additionalProperties": false,
+      "description": "The instrumentation's own resources. Every field is optional and **absent is not zero**: an older sender says nothing, and a cloud that read that as «nothing was lost» would be inventing the one answer this exists to stop it inventing (invariant 14). The counters are differences since the previous batch, like everything else here; the two that are instants say so.",
+      "properties": {
+        "droppedBatches": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Batches the instrumentation threw away because its queue was full, since the previous batch. This is telemetry that existed and is gone: the number that separates «nothing happened» from «nothing arrived»."
+        },
+        "rejectedBatches": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Batches the cloud refused as invalid, since the previous batch. Nothing broke: something was sent wrong."
+        },
+        "failedBatches": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Batches that could not be sent —network, timeout, a cloud that was not there— since the previous batch. Not the same as dropped: these are retried, and only become loss if the queue fills."
+        },
+        "internalErrors": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Errors inside the instrumentation itself, since the previous batch. It disables itself after enough of them, and a sender that has gone quiet with these climbing is not a quiet service."
+        },
+        "bufferBytes": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "What the black box's registers have allocated, right now. An instant, and arithmetic rather than a measurement: the rings are preallocated."
+        },
+        "hookMsPerRequest": {
+          "type": "number",
+          "minimum": 0,
+          "description": "Estimated milliseconds of the instrumentation's own hooks per request. **An estimate**, sampled, and named as one: it is what invariant 3 budgets, and reporting it as an exact measurement would claim a precision the sampling does not have."
+        },
+        "shed": {
+          "type": "string",
+          "enum": ["nothing", "fine", "profile"],
+          "description": "What the instrumentation has given up because it was costing too much, cheapest loss first. `product.md:241` asks for both halves —«se autolimita» and «lo registra como pérdida de cobertura»— and this is the second. An enum and not free text: it is ours, and it has to be comparable between senders."
+        },
+        "shedReason": {
+          "type": "string",
+          "enum": ["latency", "memory"],
+          "description": "Why it gave ground. Absent when nothing was given up."
         }
       }
     }

package/schema/v0/capture-evidence.schema.json

@@ -0,0 +1,200 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://downtrace.io/schema/v0/capture-evidence.schema.json",
+  "title": "CaptureEvidence",
+  "description": "What an instrumentation sends back for a capture the cloud asked for (POST /v0/captures/{id}/evidence). It is the contents of the black box's fine register, frozen: requests with their operations, in order, with starts and ends. Hashes only — the text of a query never travels here (invariant 5). Its own path and not the aggregates batch, because a batch is what goes out every ten seconds and this is a rare event several orders of magnitude larger.",
+  "x-evidence-path": "/v0/captures/{id}/evidence",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["protocol", "instance", "startedAt", "endedAt", "coverage", "requests"],
+  "properties": {
+    "protocol": {
+      "type": "string",
+      "description": "Protocol version this payload conforms to. Same enum as a batch: every published minor of v0 stays acceptable.",
+      "enum": ["0.1.0", "0.2.0", "0.3.0", "0.4.0", "0.5.0", "0.6.0", "0.7.0"]
+    },
+    "instance": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id"],
+      "description": "Which process observed this. Several instances of one deployment get the same order on purpose (ADR 0071), so the cloud has to be able to tell two answers apart.",
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "hostname": {
+          "type": "string",
+          "maxLength": 253
+        },
+        "pid": {
+          "type": "integer",
+          "minimum": 0
+        }
+      }
+    },
+    "startedAt": {
+      "type": "string",
+      "format": "date-time",
+      "description": "The **effective start of observation**, which is the instant CAP-01 insists on keeping apart from the acceptance. It travels with the evidence rather than in a call of its own: a capture that started and never finished should not cost two requests."
+    },
+    "endedAt": {
+      "type": "string",
+      "format": "date-time",
+      "description": "When the instrumentation stopped watching."
+    },
+    "coverage": {
+      "$ref": "#/$defs/Coverage"
+    },
+    "requests": {
+      "type": "array",
+      "maxItems": 4096,
+      "items": {
+        "$ref": "#/$defs/CapturedRequest"
+      },
+      "description": "The requests observed, oldest first. An empty array is a real answer and the commonest one: a route nobody called during the window. It means the capture is `empty`, and `product.md:192` is explicit that this must never read as an invitation to ask again unchanged."
+    },
+    "reference": {
+      "$ref": "#/$defs/Reference"
+    }
+  },
+  "$defs": {
+    "Coverage": {
+      "type": "object",
+      "title": "CaptureCoverage",
+      "additionalProperties": false,
+      "required": ["observedRequests", "attachedRequests", "detailLost", "truncated"],
+      "description": "`product.md:192` asks a capture to declare **both** coverages: what it attached from detail still retained, and what it observed from its effective start. Two numbers, never one — a total would hide that half of it is older than the capture.",
+      "properties": {
+        "observedRequests": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Requests seen from the effective start onwards."
+        },
+        "attachedRequests": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Requests that were already in the register when the capture started, and are attached. Zero is normal: the register may have wrapped, and nothing brings back what was not kept."
+        },
+        "detailLost": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Requests whose operations were overwritten before they could be read. Their timing is still true; what is gone is the detail. Reported rather than dropped, because a request with no operations reads as one that ran nothing (invariant 14)."
+        },
+        "truncated": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Requests that ran more operations than the register keeps per request. Their count is real and their list is not complete."
+        }
+      }
+    },
+    "CapturedRequest": {
+      "type": "object",
+      "title": "CapturedRequest",
+      "additionalProperties": false,
+      "required": ["method", "route", "status", "startedAt", "durationMs", "operations"],
+      "properties": {
+        "method": {
+          "type": "string",
+          "maxLength": 16
+        },
+        "route": {
+          "type": "string",
+          "maxLength": 512,
+          "description": "The route template, never the path with its values in it (invariant 5)."
+        },
+        "status": {
+          "type": "integer",
+          "minimum": 100,
+          "maximum": 599
+        },
+        "startedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "When this request started. Absolute, so requests from two instances can be read side by side."
+        },
+        "durationMs": {
+          "type": "number",
+          "minimum": 0
+        },
+        "operations": {
+          "type": "array",
+          "maxItems": 256,
+          "items": {
+            "$ref": "#/$defs/CapturedOperation"
+          },
+          "description": "What it ran, in the order it started them. Empty means it ran nothing — unless `detailLost` says the list was overwritten, which is why that flag is on the request and not only in the totals."
+        },
+        "truncated": {
+          "type": "boolean",
+          "description": "This request ran more operations than the register keeps per request. Absent means false."
+        },
+        "detailLost": {
+          "type": "boolean",
+          "description": "This request's operations were overwritten before they were read. Absent means false. Its timing is still true."
+        }
+      }
+    },
+    "CapturedOperation": {
+      "type": "object",
+      "title": "CapturedOperation",
+      "additionalProperties": false,
+      "required": ["hash", "startMs", "endMs"],
+      "description": "One operation inside a request. Starts and ends and not durations, because the whole reason for capturing detail is order and overlap, which a duration cannot express (ADR 0068).",
+      "properties": {
+        "hash": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64,
+          "description": "The fingerprint's hash. Never the text: the profile is where a sender chooses whether to ship the text of its queries, and this path never carries it (invariant 5, ADR 0017)."
+        },
+        "startMs": {
+          "type": "number",
+          "minimum": 0,
+          "description": "Milliseconds from the start of its own request."
+        },
+        "endMs": {
+          "type": "number",
+          "minimum": 0
+        }
+      }
+    },
+    "Reference": {
+      "type": "object",
+      "title": "ReferenceSamples",
+      "additionalProperties": false,
+      "required": ["selection", "population", "samples"],
+      "description": "A few requests of each endpoint kept as something to compare the captured ones against. `product.md:100`: «Comparar requests degradadas con requests de referencia exige conservar ambas; el detalle fino de hace una hora ya no existe». Being earlier does not certify health, which is why every field here is about how they were chosen and none of them says «healthy».",
+      "properties": {
+        "selection": {
+          "type": "string",
+          "enum": ["uniform-reservoir"],
+          "description": "How they were chosen. Travels with them because a sample whose selection is unknown cannot support an attribution (ATR-01). `uniform-reservoir`: every request observed of that endpoint had the same chance of being kept, whatever it did — which is what «the fastest N» would not be."
+        },
+        "population": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "How many requests they were drawn from, over the life of the sending process."
+        },
+        "routesDropped": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Endpoints seen that the register had no room for. Counted rather than silently absent: an endpoint with no samples is not an endpoint with no traffic (invariant 14)."
+        },
+        "renewalPaused": {
+          "type": "boolean",
+          "description": "True when requests were observed that the register deliberately did not consider. The instrumentation pauses renewal while it is watching a capture, which is the closest it can get to REF-01 from inside the process: it cannot know whether an incident is open, but it knows detail has been asked of it. Absent means false."
+        },
+        "samples": {
+          "type": "array",
+          "maxItems": 64,
+          "items": {
+            "$ref": "#/$defs/CapturedRequest"
+          },
+          "description": "The kept requests, in the same shape as the captured ones. An empty array is a real answer: a process that has just started has nothing to compare with yet."
+        }
+      }
+    }
+  }
+}

package/schema/v0/fixtures/evidence/invalid/half-a-coverage.json

@@ -0,0 +1,8 @@
+{
+  "protocol": "0.7.0",
+  "instance": { "id": "i-1" },
+  "startedAt": "2026-09-10T10:00:00.000Z",
+  "endedAt": "2026-09-10T10:01:00.000Z",
+  "coverage": { "observedRequests": 3 },
+  "requests": []
+}

package/schema/v0/fixtures/evidence/invalid/no-coverage.json

@@ -0,0 +1,7 @@
+{
+  "protocol": "0.7.0",
+  "instance": { "id": "i-1" },
+  "startedAt": "2026-09-10T10:00:00.000Z",
+  "endedAt": "2026-09-10T10:01:00.000Z",
+  "requests": []
+}

package/schema/v0/fixtures/evidence/invalid/no-instance.json

@@ -0,0 +1,7 @@
+{
+  "protocol": "0.7.0",
+  "startedAt": "2026-09-10T10:00:00.000Z",
+  "endedAt": "2026-09-10T10:01:00.000Z",
+  "coverage": { "observedRequests": 0, "attachedRequests": 0, "detailLost": 0, "truncated": 0 },
+  "requests": []
+}

package/schema/v0/fixtures/evidence/invalid/operation-with-text.json

@@ -0,0 +1,17 @@
+{
+  "protocol": "0.7.0",
+  "instance": { "id": "i-1" },
+  "startedAt": "2026-09-10T10:00:00.000Z",
+  "endedAt": "2026-09-10T10:01:00.000Z",
+  "coverage": { "observedRequests": 1, "attachedRequests": 0, "detailLost": 0, "truncated": 0 },
+  "requests": [
+    {
+      "method": "GET",
+      "route": "/checkout",
+      "status": 200,
+      "startedAt": "2026-09-10T10:00:03.000Z",
+      "durationMs": 10,
+      "operations": [{ "hash": "9f2b1c", "text": "SELECT * FROM orders", "startMs": 0, "endMs": 5 }]
+    }
+  ]
+}

package/schema/v0/fixtures/evidence/invalid/operation-without-hash.json

@@ -0,0 +1,17 @@
+{
+  "protocol": "0.7.0",
+  "instance": { "id": "i-1" },
+  "startedAt": "2026-09-10T10:00:00.000Z",
+  "endedAt": "2026-09-10T10:01:00.000Z",
+  "coverage": { "observedRequests": 1, "attachedRequests": 0, "detailLost": 0, "truncated": 0 },
+  "requests": [
+    {
+      "method": "GET",
+      "route": "/checkout",
+      "status": 200,
+      "startedAt": "2026-09-10T10:00:03.000Z",
+      "durationMs": 10,
+      "operations": [{ "startMs": 0, "endMs": 5 }]
+    }
+  ]
+}

package/schema/v0/fixtures/evidence/invalid/reference-without-selection.json

@@ -0,0 +1,49 @@
+{
+  "protocol": "0.7.0",
+  "instance": {
+    "id": "7d1e9c6a-4f2b-4c1e-9b0a-2f6d3e8a1c55",
+    "hostname": "web-1",
+    "pid": 4242
+  },
+  "startedAt": "2026-09-10T10:00:00.000Z",
+  "endedAt": "2026-09-10T10:01:00.000Z",
+  "coverage": {
+    "observedRequests": 2,
+    "attachedRequests": 0,
+    "detailLost": 0,
+    "truncated": 0
+  },
+  "requests": [
+    {
+      "method": "GET",
+      "route": "/checkout",
+      "status": 200,
+      "startedAt": "2026-09-10T10:00:03.120Z",
+      "durationMs": 412.5,
+      "operations": [
+        {
+          "hash": "9f2b1c",
+          "startMs": 1.2,
+          "endMs": 38.4
+        },
+        {
+          "hash": "9f2b1c",
+          "startMs": 38.9,
+          "endMs": 74.1
+        }
+      ]
+    },
+    {
+      "method": "GET",
+      "route": "/checkout",
+      "status": 500,
+      "startedAt": "2026-09-10T10:00:41.900Z",
+      "durationMs": 88,
+      "operations": []
+    }
+  ],
+  "reference": {
+    "population": 10,
+    "samples": []
+  }
+}

package/schema/v0/fixtures/evidence/invalid/unknown-protocol.json

@@ -0,0 +1,8 @@
+{
+  "protocol": "9.9.9",
+  "instance": { "id": "i-1" },
+  "startedAt": "2026-09-10T10:00:00.000Z",
+  "endedAt": "2026-09-10T10:01:00.000Z",
+  "coverage": { "observedRequests": 0, "attachedRequests": 0, "detailLost": 0, "truncated": 0 },
+  "requests": []
+}

package/schema/v0/fixtures/evidence/valid/complete.json

@@ -0,0 +1,28 @@
+{
+  "protocol": "0.7.0",
+  "instance": { "id": "7d1e9c6a-4f2b-4c1e-9b0a-2f6d3e8a1c55", "hostname": "web-1", "pid": 4242 },
+  "startedAt": "2026-09-10T10:00:00.000Z",
+  "endedAt": "2026-09-10T10:01:00.000Z",
+  "coverage": { "observedRequests": 2, "attachedRequests": 0, "detailLost": 0, "truncated": 0 },
+  "requests": [
+    {
+      "method": "GET",
+      "route": "/checkout",
+      "status": 200,
+      "startedAt": "2026-09-10T10:00:03.120Z",
+      "durationMs": 412.5,
+      "operations": [
+        { "hash": "9f2b1c", "startMs": 1.2, "endMs": 38.4 },
+        { "hash": "9f2b1c", "startMs": 38.9, "endMs": 74.1 }
+      ]
+    },
+    {
+      "method": "GET",
+      "route": "/checkout",
+      "status": 500,
+      "startedAt": "2026-09-10T10:00:41.900Z",
+      "durationMs": 88,
+      "operations": []
+    }
+  ]
+}

package/schema/v0/fixtures/evidence/valid/no-requests.json

@@ -0,0 +1,8 @@
+{
+  "protocol": "0.7.0",
+  "instance": { "id": "7d1e9c6a-4f2b-4c1e-9b0a-2f6d3e8a1c55" },
+  "startedAt": "2026-09-10T10:00:00.000Z",
+  "endedAt": "2026-09-10T10:01:00.000Z",
+  "coverage": { "observedRequests": 0, "attachedRequests": 0, "detailLost": 0, "truncated": 0 },
+  "requests": []
+}