@fourier-labs/harbour-contracts 0.68.0 → 0.69.0

package/contract-release.json

@@ -1,12 +1,12 @@
 {
   "schema": "harbour.contract-release/1.0",
-  "repositoryVersion": "0.68.0.0",
-  "publishVersion": "0.68.0",
-  "publishTag": "v0.68.0",
-  "schemasDigest": "sha256:3860585b4a4a55334e788faca34018dfaa21bf7ee5fa42bb50b0a454a77047b3",
+  "repositoryVersion": "0.69.0.0",
+  "publishVersion": "0.69.0",
+  "publishTag": "v0.69.0",
+  "schemasDigest": "sha256:e21f310517adb289db8b8233fd3c742a711fed8226892591f6581afb8510e30c",
   "aiFixturesDigest": "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6",
-  "generatedGoDigest": "sha256:0c97fd145737bf8fba6de780187033f04e52fe524284cd95c084fcda38e31a28",
-  "generatedTypeScriptDigest": "sha256:bd9927f250e96a91958f078ea29d1420ca3d6545ce93b2b2901033ac09e52827",
+  "generatedGoDigest": "sha256:1f793a0d039976e5a9b65a72753928ab68de66d6878c96a6ea242e48a16ca24e",
+  "generatedTypeScriptDigest": "sha256:6bdb0271dae8bf7df75f72e61addda29ebb778a054b59c8538d05112000ac0e4",
   "generatedExclusions": {
     "gen-go/contract_release.go": "contains the generated aggregate digests (self-reference)",
     "gen-ts/contract-release.ts": "contains the generated aggregate digests (self-reference)"
@@ -66,8 +66,8 @@
     "schema/saas-connection.schema.json": "sha256:82ed8018201800a95aa792bde1d22568e86b55b3be926aa094a260c8c78a58d7",
     "schema/sanitized-binding-evidence.schema.json": "sha256:1191ab88e2764df927e5f17837674cebebe068d480da2b2fdb390e589f96b51f",
     "schema/secret-reference.schema.json": "sha256:db4e3c2c6a2dbd72d7ea0f9c91cb3b2343a7e67b601996c6818b2ef08e440895",
-    "schema/security-scan-input-v2.schema.json": "sha256:adf90e7e158e2a29145fa9696219dad82d294cac14614bcd10910a251ebe6940",
-    "schema/security-verdict.schema.json": "sha256:6650c327b58431c6a567bbbf1e59bb9d4a8dc2f0ff2efc92ca4c2fd5b2cf28b6",
+    "schema/security-scan-input-v2.schema.json": "sha256:0d418342078c9b5046ea6f4bef3c2c57539285dfee99cc0850d4f0d03739ee13",
+    "schema/security-verdict.schema.json": "sha256:f4a1c109ed27779374c52daccb0a96589613db4f3cf030a8b0e4713bf1b3dbff",
     "schema/transform-parked-result.schema.json": "sha256:11729980d4c89d4a9e18f5f213232cd3359739c85626b36c20c2a37ba794c9af",
     "schema/transform-report.schema.json": "sha256:b9b4b09f88714b49d855f01ab9b611f34fb856447c0d063be409bb12a6c2700a",
     "schema/version-state.schema.json": "sha256:3b190007e2f8e3821c41ef11c6f5b226da7d5a18d34d4077f4618004846fd444",
@@ -112,7 +112,7 @@
     "gen-go/integration_execute_input_rules.go": "sha256:52a405aa7a97f7b4e2ed3c314a7bd28b7698cc7883ee72ad4c027637be602ab9",
     "gen-go/integration_execute_input_rules_test.go": "sha256:c437a8406a2f062a0173b9419e4cb176fc6eb54e569506225d5162323f55b40b",
     "gen-go/schema_documents.go": "sha256:c19c0d540f602ee997a84b90e20702d9bc63ed7d27aec267e76c04655fc182e0",
-    "gen-go/types.go": "sha256:e700fb22b4e2eb59f8531da4bdac154ac22991f9fd39e72b2f4483e1fa2e0264",
+    "gen-go/types.go": "sha256:9e3c05f1fcdd06a0eebfc56fe7ddf4b37c9ddc367822c2d3ec753770a09ee1ae",
     "gen-go/version_state.go": "sha256:4ef8abb126414c0025cf2c59bc9c79a74ef4a2ff89e8f316cbf05acc872371c1"
   },
   "generatedTypeScript": {
@@ -177,8 +177,8 @@
     "gen-ts/sanitized-binding-digest-helper.ts": "sha256:c47d7fdc20500e2e72c23fe39ecdd610fc397c47fcba51335ebec3c380fe6872",
     "gen-ts/sanitized-binding-evidence.ts": "sha256:f3fb7b1d7d2e0929eb0ea981eaf32db3104010647185f6ae59f67167d42538a9",
     "gen-ts/secret-reference.ts": "sha256:731fbcde7315cb4128d5b01bdbe6e6f248f13c7ad8dea04a3a4e927ac4890198",
-    "gen-ts/security-scan-input-v2.ts": "sha256:ec703b8fe1734a623ce138adc54dc7acbe3b0880e469c70e8bf8f94d7ddb85c2",
-    "gen-ts/security-verdict.ts": "sha256:c7c4c82183e7996941cee93a9cdb4dcaa8a4dab2d607ce29aab8683ee5ced8eb",
+    "gen-ts/security-scan-input-v2.ts": "sha256:cccbfc5dae0ea5a328e6b15525ac190a0aae522e3220dffe7e6c80c445d54610",
+    "gen-ts/security-verdict.ts": "sha256:beef7e4e23b385f3b18579f43bb4eb92b19aeef9e5089f3e9a149bf0067be4e8",
     "gen-ts/transform-parked-result.ts": "sha256:6279e27cee8d75c29f3ede45580fef1daa0ca300867a78e43ead8a7689ec613f",
     "gen-ts/transform-report.ts": "sha256:d83f1c34c4a082bd80bf9588b08e2fba3b7e25cd1855375ca3073ab9fafddfec",
     "gen-ts/version-state-machine.ts": "sha256:c67af3e86ac306743345b850dfd3ae5201c19d10c40e2c149cf8c38258320d5f",

package/dist/gen-ts/contract-release.d.ts

@@ -1,7 +1,7 @@
-export declare const ContractRepositoryVersion: "0.68.0.0";
-export declare const ContractPublishVersion: "0.68.0";
-export declare const ContractPublishTag: "v0.68.0";
-export declare const ContractSchemasDigest: "sha256:3860585b4a4a55334e788faca34018dfaa21bf7ee5fa42bb50b0a454a77047b3";
+export declare const ContractRepositoryVersion: "0.69.0.0";
+export declare const ContractPublishVersion: "0.69.0";
+export declare const ContractPublishTag: "v0.69.0";
+export declare const ContractSchemasDigest: "sha256:e21f310517adb289db8b8233fd3c742a711fed8226892591f6581afb8510e30c";
 export declare const ContractAiFixturesDigest: "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export declare const ContractGeneratedGoDigest: "sha256:0c97fd145737bf8fba6de780187033f04e52fe524284cd95c084fcda38e31a28";
-export declare const ContractGeneratedTypeScriptDigest: "sha256:bd9927f250e96a91958f078ea29d1420ca3d6545ce93b2b2901033ac09e52827";
+export declare const ContractGeneratedGoDigest: "sha256:1f793a0d039976e5a9b65a72753928ab68de66d6878c96a6ea242e48a16ca24e";
+export declare const ContractGeneratedTypeScriptDigest: "sha256:6bdb0271dae8bf7df75f72e61addda29ebb778a054b59c8538d05112000ac0e4";

package/dist/gen-ts/contract-release.js

@@ -1,9 +1,9 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
-export const ContractRepositoryVersion = "0.68.0.0";
-export const ContractPublishVersion = "0.68.0";
-export const ContractPublishTag = "v0.68.0";
-export const ContractSchemasDigest = "sha256:3860585b4a4a55334e788faca34018dfaa21bf7ee5fa42bb50b0a454a77047b3";
+export const ContractRepositoryVersion = "0.69.0.0";
+export const ContractPublishVersion = "0.69.0";
+export const ContractPublishTag = "v0.69.0";
+export const ContractSchemasDigest = "sha256:e21f310517adb289db8b8233fd3c742a711fed8226892591f6581afb8510e30c";
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export const ContractGeneratedGoDigest = "sha256:0c97fd145737bf8fba6de780187033f04e52fe524284cd95c084fcda38e31a28";
-export const ContractGeneratedTypeScriptDigest = "sha256:bd9927f250e96a91958f078ea29d1420ca3d6545ce93b2b2901033ac09e52827";
+export const ContractGeneratedGoDigest = "sha256:1f793a0d039976e5a9b65a72753928ab68de66d6878c96a6ea242e48a16ca24e";
+export const ContractGeneratedTypeScriptDigest = "sha256:6bdb0271dae8bf7df75f72e61addda29ebb778a054b59c8538d05112000ac0e4";

package/dist/gen-ts/security-scan-input-v2.d.ts

@@ -1,5 +1,5 @@
 /**
- * Input to the Security Assurance machine, second shape, replacing security-scan-input.schema.json. V1 scanned a deployed commit located through the deployment state; v2 scans exactly one thing: an uploaded package that governance validated at source intake, identified by the zip sha256 the stager verifies before extraction and by the tree digest governance computed from the unzipped bytes (`sourceDigestOf`, `sha256:`-prefixed), which keys the governance scan record and the check report on the laptop. Commit-mode and ARTIFACT-phase inputs are deliberately absent: the console's later on-demand scan uses this same package path against the deploy upload, and the Transform lane runs the scanner in-process; an image scan, if it returns, is an additive v3. The policy profile is named by the caller when it knows better than the data classification (the kit lane names BASELINE); `profile` and `classification` are mutually exclusive, and both absent still defaults to STANDARD with `classificationDefaulted: true`. Nothing here carries a scanner version: the scanner stamps its own into verdict provenance, and governance decides validity by comparing that against its MINIMUM_SCANNER_VERSION. `org`/`app` are the tenant and app ids for kit apps; `env` stays required because the evidence key carries it (governance passes `preview` for a package scan; promotion never re-scans). The `execution` block names the tenant's execution-account scanner, invoke role and artifacts bucket, resolved by governance the way admission resolves them for the deploy machine.
+ * Input to the Security Assurance machine, second shape, replacing security-scan-input.schema.json. V1 scanned a deployed commit located through the deployment state; v2 scans exactly one thing: an uploaded package that governance validated at source intake, identified by the zip sha256 the stager verifies before extraction and by the tree digest governance computed from the unzipped bytes (`sourceDigestOf`, `sha256:`-prefixed), which keys the governance scan record and the check report on the laptop. Commit-mode and ARTIFACT-phase inputs are deliberately absent: the console's later on-demand scan uses this same package path against the deploy upload, and the Transform lane runs the scanner in-process; an image scan, if it returns, is an additive v3. The caller always names the policy profile (governance names BASELINE for the kit lane); there is no classification input and no default profile. Nothing here carries a scanner version: the scanner stamps its own into verdict provenance, and governance decides validity by comparing that against its MINIMUM_SCANNER_VERSION. `org`/`app` are the tenant and app ids for kit apps; `env` stays required because the evidence key carries it (governance passes `preview` for a package scan; promotion never re-scans). The `execution` block names the tenant's execution-account scanner, invoke role and artifacts bucket, resolved by governance the way admission resolves them for the deploy machine.
  */
 export interface SecurityScanInputV2 {
     schema: 'harbour.security-scan-input/2.0';
@@ -18,13 +18,9 @@ export interface SecurityScanInputV2 {
     package: PackageSource;
     execution: Execution;
     /**
-     * Policy profile named by the caller. Takes the place of deriving one from `classification`; the verdict echoes the profile evaluated and stamps `classificationDefaulted: false`. Governance names BASELINE for kit-lane scans; the default when nothing is named is STANDARD.
+     * Policy profile the machine evaluates the evidence against; the verdict echoes it. Governance names BASELINE for kit-lane scans.
      */
-    profile?: 'BASELINE' | 'STANDARD' | 'HIGH' | 'CRITICAL';
-    /**
-     * Data classification, mapped to a profile as in v1 (GREEN → BASELINE, YELLOW → STANDARD, ORANGE → HIGH, RED → CRITICAL). Not allowed beside `profile`. Absent with no `profile` means STANDARD and `classificationDefaulted: true`; an invalid value fails closed.
-     */
-    classification?: 'GREEN' | 'YELLOW' | 'ORANGE' | 'RED';
+    profile: 'BASELINE' | 'STANDARD' | 'HIGH' | 'CRITICAL';
 }
 /**
  * The bytes `isomorph secure` (or a later console re-run against a deploy upload) put through source intake.

package/dist/gen-ts/security-verdict.d.ts

@@ -7,7 +7,7 @@ export interface SecurityVerdict {
      */
     outcome: 'PASS' | 'BLOCKED';
     /**
-     * Policy profile the evidence was evaluated against: the input's `profile` when the caller named one, else derived from the input classification, else STANDARD.
+     * Policy profile the evidence was evaluated against, echoed from the input's `profile`.
      */
     profile: 'BASELINE' | 'STANDARD' | 'HIGH' | 'CRITICAL';
     /**
@@ -62,22 +62,28 @@ export interface Finding {
      * Suggested fix, when the tool provides one.
      */
     remediation?: string;
+    dependency?: Dependency;
     /**
-     * Dependency name, for a dependency-sca finding.
+     * Set by policy on every finding it evaluated: true when the finding on its own fires a block rule under the evaluated profile, false when it is reported only.
      */
-    package?: string;
+    blocking?: boolean;
+}
+/**
+ * The dependency a dependency-sca finding is about. Absent on findings that are not about one installed package (secrets, code, a missing lockfile).
+ */
+export interface Dependency {
     /**
-     * Installed version of `package` the vulnerability applies to.
+     * Package name as the lockfile names it.
      */
-    installedVersion?: string;
+    name: string;
     /**
-     * First version of `package` that fixes the vulnerability, when the tool knows one.
+     * Version of the package the app installs, which the vulnerability applies to.
      */
-    fixedVersion?: string;
+    installedVersion: string;
     /**
-     * Set by policy on every finding it evaluated: true when the finding on its own fires a block rule under the evaluated profile, false when it is reported only.
+     * The one version to upgrade to: the lowest fixed release on the installed version's major line, else the lowest fixed release above the installed version. Absent when no fix above the installed version exists.
      */
-    blocking?: boolean;
+    fixedVersion?: string;
 }
 export interface EvidenceRef {
     /**
@@ -113,8 +119,4 @@ export interface Provenance {
      * Orderable release version of the runner image that produced the evidence. Governance compares its numeric core with MINIMUM_SCANNER_VERSION to decide whether a PASS still counts.
      */
     scannerVersion: string;
-    /**
-     * True iff the input named neither a profile nor a classification and the machine assumed STANDARD (decision 2026-08-27). An invalid classification fails closed and never reaches a verdict.
-     */
-    classificationDefaulted: boolean;
 }

package/gen-ts/contract-release.ts

@@ -1,10 +1,10 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
-export const ContractRepositoryVersion = "0.68.0.0" as const;
-export const ContractPublishVersion = "0.68.0" as const;
-export const ContractPublishTag = "v0.68.0" as const;
-export const ContractSchemasDigest = "sha256:3860585b4a4a55334e788faca34018dfaa21bf7ee5fa42bb50b0a454a77047b3" as const;
+export const ContractRepositoryVersion = "0.69.0.0" as const;
+export const ContractPublishVersion = "0.69.0" as const;
+export const ContractPublishTag = "v0.69.0" as const;
+export const ContractSchemasDigest = "sha256:e21f310517adb289db8b8233fd3c742a711fed8226892591f6581afb8510e30c" as const;
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6" as const;
-export const ContractGeneratedGoDigest = "sha256:0c97fd145737bf8fba6de780187033f04e52fe524284cd95c084fcda38e31a28" as const;
-export const ContractGeneratedTypeScriptDigest = "sha256:bd9927f250e96a91958f078ea29d1420ca3d6545ce93b2b2901033ac09e52827" as const;
+export const ContractGeneratedGoDigest = "sha256:1f793a0d039976e5a9b65a72753928ab68de66d6878c96a6ea242e48a16ca24e" as const;
+export const ContractGeneratedTypeScriptDigest = "sha256:6bdb0271dae8bf7df75f72e61addda29ebb778a054b59c8538d05112000ac0e4" as const;

package/gen-ts/security-scan-input-v2.ts

@@ -2,7 +2,7 @@
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
 /**
- * Input to the Security Assurance machine, second shape, replacing security-scan-input.schema.json. V1 scanned a deployed commit located through the deployment state; v2 scans exactly one thing: an uploaded package that governance validated at source intake, identified by the zip sha256 the stager verifies before extraction and by the tree digest governance computed from the unzipped bytes (`sourceDigestOf`, `sha256:`-prefixed), which keys the governance scan record and the check report on the laptop. Commit-mode and ARTIFACT-phase inputs are deliberately absent: the console's later on-demand scan uses this same package path against the deploy upload, and the Transform lane runs the scanner in-process; an image scan, if it returns, is an additive v3. The policy profile is named by the caller when it knows better than the data classification (the kit lane names BASELINE); `profile` and `classification` are mutually exclusive, and both absent still defaults to STANDARD with `classificationDefaulted: true`. Nothing here carries a scanner version: the scanner stamps its own into verdict provenance, and governance decides validity by comparing that against its MINIMUM_SCANNER_VERSION. `org`/`app` are the tenant and app ids for kit apps; `env` stays required because the evidence key carries it (governance passes `preview` for a package scan; promotion never re-scans). The `execution` block names the tenant's execution-account scanner, invoke role and artifacts bucket, resolved by governance the way admission resolves them for the deploy machine.
+ * Input to the Security Assurance machine, second shape, replacing security-scan-input.schema.json. V1 scanned a deployed commit located through the deployment state; v2 scans exactly one thing: an uploaded package that governance validated at source intake, identified by the zip sha256 the stager verifies before extraction and by the tree digest governance computed from the unzipped bytes (`sourceDigestOf`, `sha256:`-prefixed), which keys the governance scan record and the check report on the laptop. Commit-mode and ARTIFACT-phase inputs are deliberately absent: the console's later on-demand scan uses this same package path against the deploy upload, and the Transform lane runs the scanner in-process; an image scan, if it returns, is an additive v3. The caller always names the policy profile (governance names BASELINE for the kit lane); there is no classification input and no default profile. Nothing here carries a scanner version: the scanner stamps its own into verdict provenance, and governance decides validity by comparing that against its MINIMUM_SCANNER_VERSION. `org`/`app` are the tenant and app ids for kit apps; `env` stays required because the evidence key carries it (governance passes `preview` for a package scan; promotion never re-scans). The `execution` block names the tenant's execution-account scanner, invoke role and artifacts bucket, resolved by governance the way admission resolves them for the deploy machine.
  */
 export interface SecurityScanInputV2 {
   schema: 'harbour.security-scan-input/2.0';
@@ -21,13 +21,9 @@ export interface SecurityScanInputV2 {
   package: PackageSource;
   execution: Execution;
   /**
-   * Policy profile named by the caller. Takes the place of deriving one from `classification`; the verdict echoes the profile evaluated and stamps `classificationDefaulted: false`. Governance names BASELINE for kit-lane scans; the default when nothing is named is STANDARD.
+   * Policy profile the machine evaluates the evidence against; the verdict echoes it. Governance names BASELINE for kit-lane scans.
    */
-  profile?: 'BASELINE' | 'STANDARD' | 'HIGH' | 'CRITICAL';
-  /**
-   * Data classification, mapped to a profile as in v1 (GREEN → BASELINE, YELLOW → STANDARD, ORANGE → HIGH, RED → CRITICAL). Not allowed beside `profile`. Absent with no `profile` means STANDARD and `classificationDefaulted: true`; an invalid value fails closed.
-   */
-  classification?: 'GREEN' | 'YELLOW' | 'ORANGE' | 'RED';
+  profile: 'BASELINE' | 'STANDARD' | 'HIGH' | 'CRITICAL';
 }
 /**
  * The bytes `isomorph secure` (or a later console re-run against a deploy upload) put through source intake.

package/gen-ts/security-verdict.ts

@@ -10,7 +10,7 @@ export interface SecurityVerdict {
    */
   outcome: 'PASS' | 'BLOCKED';
   /**
-   * Policy profile the evidence was evaluated against: the input's `profile` when the caller named one, else derived from the input classification, else STANDARD.
+   * Policy profile the evidence was evaluated against, echoed from the input's `profile`.
    */
   profile: 'BASELINE' | 'STANDARD' | 'HIGH' | 'CRITICAL';
   /**
@@ -65,22 +65,28 @@ export interface Finding {
    * Suggested fix, when the tool provides one.
    */
   remediation?: string;
+  dependency?: Dependency;
   /**
-   * Dependency name, for a dependency-sca finding.
+   * Set by policy on every finding it evaluated: true when the finding on its own fires a block rule under the evaluated profile, false when it is reported only.
    */
-  package?: string;
+  blocking?: boolean;
+}
+/**
+ * The dependency a dependency-sca finding is about. Absent on findings that are not about one installed package (secrets, code, a missing lockfile).
+ */
+export interface Dependency {
   /**
-   * Installed version of `package` the vulnerability applies to.
+   * Package name as the lockfile names it.
    */
-  installedVersion?: string;
+  name: string;
   /**
-   * First version of `package` that fixes the vulnerability, when the tool knows one.
+   * Version of the package the app installs, which the vulnerability applies to.
    */
-  fixedVersion?: string;
+  installedVersion: string;
   /**
-   * Set by policy on every finding it evaluated: true when the finding on its own fires a block rule under the evaluated profile, false when it is reported only.
+   * The one version to upgrade to: the lowest fixed release on the installed version's major line, else the lowest fixed release above the installed version. Absent when no fix above the installed version exists.
    */
-  blocking?: boolean;
+  fixedVersion?: string;
 }
 export interface EvidenceRef {
   /**
@@ -116,8 +122,4 @@ export interface Provenance {
    * Orderable release version of the runner image that produced the evidence. Governance compares its numeric core with MINIMUM_SCANNER_VERSION to decide whether a PASS still counts.
    */
   scannerVersion: string;
-  /**
-   * True iff the input named neither a profile nor a classification and the machine assumed STANDARD (decision 2026-08-27). An invalid classification fails closed and never reaches a verdict.
-   */
-  classificationDefaulted: boolean;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour-contracts",
-  "version": "0.68.0",
+  "version": "0.69.0",
   "description": "Single source of truth for every data shape that crosses a boundary between Isomorph components.",
   "license": "UNLICENSED",
   "private": false,

package/schema/security-scan-input-v2.schema.json

@@ -2,10 +2,10 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://schemas.harbour.dev/security-scan-input-v2.schema.json",
   "title": "SecurityScanInputV2",
-  "description": "Input to the Security Assurance machine, second shape, replacing security-scan-input.schema.json. V1 scanned a deployed commit located through the deployment state; v2 scans exactly one thing: an uploaded package that governance validated at source intake, identified by the zip sha256 the stager verifies before extraction and by the tree digest governance computed from the unzipped bytes (`sourceDigestOf`, `sha256:`-prefixed), which keys the governance scan record and the check report on the laptop. Commit-mode and ARTIFACT-phase inputs are deliberately absent: the console's later on-demand scan uses this same package path against the deploy upload, and the Transform lane runs the scanner in-process; an image scan, if it returns, is an additive v3. The policy profile is named by the caller when it knows better than the data classification (the kit lane names BASELINE); `profile` and `classification` are mutually exclusive, and both absent still defaults to STANDARD with `classificationDefaulted: true`. Nothing here carries a scanner version: the scanner stamps its own into verdict provenance, and governance decides validity by comparing that against its MINIMUM_SCANNER_VERSION. `org`/`app` are the tenant and app ids for kit apps; `env` stays required because the evidence key carries it (governance passes `preview` for a package scan; promotion never re-scans). The `execution` block names the tenant's execution-account scanner, invoke role and artifacts bucket, resolved by governance the way admission resolves them for the deploy machine.",
+  "description": "Input to the Security Assurance machine, second shape, replacing security-scan-input.schema.json. V1 scanned a deployed commit located through the deployment state; v2 scans exactly one thing: an uploaded package that governance validated at source intake, identified by the zip sha256 the stager verifies before extraction and by the tree digest governance computed from the unzipped bytes (`sourceDigestOf`, `sha256:`-prefixed), which keys the governance scan record and the check report on the laptop. Commit-mode and ARTIFACT-phase inputs are deliberately absent: the console's later on-demand scan uses this same package path against the deploy upload, and the Transform lane runs the scanner in-process; an image scan, if it returns, is an additive v3. The caller always names the policy profile (governance names BASELINE for the kit lane); there is no classification input and no default profile. Nothing here carries a scanner version: the scanner stamps its own into verdict provenance, and governance decides validity by comparing that against its MINIMUM_SCANNER_VERSION. `org`/`app` are the tenant and app ids for kit apps; `env` stays required because the evidence key carries it (governance passes `preview` for a package scan; promotion never re-scans). The `execution` block names the tenant's execution-account scanner, invoke role and artifacts bucket, resolved by governance the way admission resolves them for the deploy machine.",
   "type": "object",
   "additionalProperties": false,
-  "required": ["schema", "org", "app", "env", "package", "execution"],
+  "required": ["schema", "org", "app", "env", "package", "execution", "profile"],
   "properties": {
     "schema": { "type": "string", "const": "harbour.security-scan-input/2.0" },
     "org": { "type": "string", "minLength": 1, "description": "Isomorph organization id (the governance tenant id for kit apps), e.g. fourier." },
@@ -20,15 +20,9 @@
     "profile": {
       "type": "string",
       "enum": ["BASELINE", "STANDARD", "HIGH", "CRITICAL"],
-      "description": "Policy profile named by the caller. Takes the place of deriving one from `classification`; the verdict echoes the profile evaluated and stamps `classificationDefaulted: false`. Governance names BASELINE for kit-lane scans; the default when nothing is named is STANDARD."
-    },
-    "classification": {
-      "type": "string",
-      "enum": ["GREEN", "YELLOW", "ORANGE", "RED"],
-      "description": "Data classification, mapped to a profile as in v1 (GREEN → BASELINE, YELLOW → STANDARD, ORANGE → HIGH, RED → CRITICAL). Not allowed beside `profile`. Absent with no `profile` means STANDARD and `classificationDefaulted: true`; an invalid value fails closed."
+      "description": "Policy profile the machine evaluates the evidence against; the verdict echoes it. Governance names BASELINE for kit-lane scans."
     }
   },
-  "not": { "required": ["profile", "classification"] },
   "definitions": {
     "PackageSource": {
       "type": "object",

package/schema/security-verdict.schema.json

@@ -15,7 +15,7 @@
     "profile": {
       "type": "string",
       "enum": ["BASELINE", "STANDARD", "HIGH", "CRITICAL"],
-      "description": "Policy profile the evidence was evaluated against: the input's `profile` when the caller named one, else derived from the input classification, else STANDARD."
+      "description": "Policy profile the evidence was evaluated against, echoed from the input's `profile`."
     },
     "reason": {
       "type": "string",
@@ -60,12 +60,21 @@
         "line": { "type": "integer", "minimum": 1, "description": "1-based line number, when the finding is line-anchored." },
         "message": { "type": "string", "minLength": 1, "description": "Human-readable finding description. Secret values are never included — only locations." },
         "remediation": { "type": "string", "description": "Suggested fix, when the tool provides one." },
-        "package": { "type": "string", "minLength": 1, "description": "Dependency name, for a dependency-sca finding." },
-        "installedVersion": { "type": "string", "minLength": 1, "description": "Installed version of `package` the vulnerability applies to." },
-        "fixedVersion": { "type": "string", "minLength": 1, "description": "First version of `package` that fixes the vulnerability, when the tool knows one." },
+        "dependency": { "$ref": "#/definitions/Dependency" },
         "blocking": { "type": "boolean", "description": "Set by policy on every finding it evaluated: true when the finding on its own fires a block rule under the evaluated profile, false when it is reported only." }
       }
     },
+    "Dependency": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "installedVersion"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1, "description": "Package name as the lockfile names it." },
+        "installedVersion": { "type": "string", "minLength": 1, "description": "Version of the package the app installs, which the vulnerability applies to." },
+        "fixedVersion": { "type": "string", "minLength": 1, "description": "The one version to upgrade to: the lowest fixed release on the installed version's major line, else the lowest fixed release above the installed version. Absent when no fix above the installed version exists." }
+      },
+      "description": "The dependency a dependency-sca finding is about. Absent on findings that are not about one installed package (secrets, code, a missing lockfile)."
+    },
     "EvidenceRef": {
       "type": "object",
       "additionalProperties": false,
@@ -78,7 +87,7 @@
     "Provenance": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["org", "app", "env", "snapshotSha256", "scannedAt", "toolManifestDigest", "scannerVersion", "classificationDefaulted"],
+      "required": ["org", "app", "env", "snapshotSha256", "scannedAt", "toolManifestDigest", "scannerVersion"],
       "properties": {
         "org": { "type": "string", "minLength": 1 },
         "app": { "type": "string", "minLength": 1 },
@@ -102,10 +111,6 @@
           "type": "string",
           "pattern": "^v?\\d+\\.\\d+\\.\\d+(?:[-+].*)?$",
           "description": "Orderable release version of the runner image that produced the evidence. Governance compares its numeric core with MINIMUM_SCANNER_VERSION to decide whether a PASS still counts."
-        },
-        "classificationDefaulted": {
-          "type": "boolean",
-          "description": "True iff the input named neither a profile nor a classification and the machine assumed STANDARD (decision 2026-08-27). An invalid classification fails closed and never reaches a verdict."
         }
       }
     }