@kungfu-tech/buildchain 4.0.1-alpha.2 → 4.0.1-alpha.21

package/contracts/fixtures/v4-publication-rehearsal-v1/offline-vectors.json

@@ -0,0 +1,27 @@
+{
+  "schema": "buildchain-v4-publication-rehearsal-offline-vectors/v1",
+  "vectors": [
+    {
+      "platform": "linux",
+      "capsuleRoot": "sha256:29a870ce850c7d6bde848fd77d7f382acf1f743d627c6265a913be51a8c05edf",
+      "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+      "stateRoot": "sha256:8e138381ff578bce96ea3934c74b927287a9d53c8b29b4a2e7b2d92cf5ab272d",
+      "evidenceRoot": "sha256:0c20fcb7aac8c420e98e63d1968ee8321b9938227e3ae77cfaf194db9588010e"
+    },
+    {
+      "platform": "macos",
+      "capsuleRoot": "sha256:29a870ce850c7d6bde848fd77d7f382acf1f743d627c6265a913be51a8c05edf",
+      "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+      "stateRoot": "sha256:8e138381ff578bce96ea3934c74b927287a9d53c8b29b4a2e7b2d92cf5ab272d",
+      "evidenceRoot": "sha256:0c20fcb7aac8c420e98e63d1968ee8321b9938227e3ae77cfaf194db9588010e"
+    },
+    {
+      "platform": "windows",
+      "capsuleRoot": "sha256:29a870ce850c7d6bde848fd77d7f382acf1f743d627c6265a913be51a8c05edf",
+      "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+      "stateRoot": "sha256:8e138381ff578bce96ea3934c74b927287a9d53c8b29b4a2e7b2d92cf5ab272d",
+      "evidenceRoot": "sha256:0c20fcb7aac8c420e98e63d1968ee8321b9938227e3ae77cfaf194db9588010e"
+    }
+  ],
+  "vectorRoot": "sha256:3e968de4060d0fea4cbff82409541f9b6fa903212e18921f2606390eb24993ed"
+}

package/contracts/fixtures/v4-tail-reseal-v1/valid.json

@@ -0,0 +1,229 @@
+{
+  "schema": "kungfu-buildchain-v4-tail-reseal-request/v1",
+  "evaluatedAt": "2026-08-15T04:00:00.000Z",
+  "repository": "kungfu-systems/product",
+  "source": {
+    "runId": 4101,
+    "runAttempt": 1,
+    "sha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "treeSha": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+    "sourceRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+    "workflowFile": "build.yml",
+    "workflowName": "Build"
+  },
+  "target": {
+    "channel": "alpha",
+    "ref": "alpha/v4/v4.0",
+    "baseSha": "cccccccccccccccccccccccccccccccccccccccc",
+    "version": "4.0.0-alpha.2"
+  },
+  "runtime": {
+    "repository": "kungfu-systems/buildchain",
+    "ref": "v4-alpha",
+    "sha": "dddddddddddddddddddddddddddddddddddddddd",
+    "contractRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+    "consumerPolicyReceiptRoot": "sha256:83e75f961e61f5a6ed3648898836076afa5561a0b25bfc07ff6d3f2d4b7405d6"
+  },
+  "warrant": {
+    "candidateId": "candidate-alpha-2",
+    "generation": 7,
+    "fencingToken": "warrant-generation-7",
+    "status": "qualified",
+    "lineageRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+    "qualificationRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
+    "stateReadbackRoot": "sha256:6666666666666666666666666666666666666666666666666666666666666666"
+  },
+  "retention": {
+    "status": "retained",
+    "retainUntil": "2026-08-18T04:00:00.000Z",
+    "policyRoot": "sha256:7777777777777777777777777777777777777777777777777777777777777777",
+    "readbackRoot": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
+  },
+  "failure": {
+    "platformId": "macos-arm64",
+    "stage": "signing-finalization",
+    "jobId": 7104,
+    "jobName": "build / Finalize signed artifact macOS ARM64",
+    "stepName": "Recompute manifest over final signed bytes",
+    "code": "macos-pax-finalization",
+    "evidenceRoot": "sha256:9999999999999999999999999999999999999999999999999999999999999999"
+  },
+  "stageResume": {
+    "planRoot": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "qualificationRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+    "zeroEffectReuse": true,
+    "decisions": [
+      {
+        "stageKey": "linux-arm64:build",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+        "evidenceRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
+      },
+      {
+        "stageKey": "linux-arm64:install",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+        "evidenceRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
+      },
+      {
+        "stageKey": "linux-arm64:package",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+        "evidenceRoot": "sha256:6666666666666666666666666666666666666666666666666666666666666666"
+      },
+      {
+        "stageKey": "linux-arm64:verify",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+        "evidenceRoot": "sha256:7777777777777777777777777777777777777777777777777777777777777777"
+      },
+      {
+        "stageKey": "linux-x64:build",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+        "evidenceRoot": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
+      },
+      {
+        "stageKey": "linux-x64:install",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+        "evidenceRoot": "sha256:9999999999999999999999999999999999999999999999999999999999999999"
+      },
+      {
+        "stageKey": "linux-x64:package",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+        "evidenceRoot": "sha256:0000000000000000000000000000000000000000000000000000000000000000"
+      },
+      {
+        "stageKey": "linux-x64:verify",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+        "evidenceRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111"
+      },
+      {
+        "stageKey": "macos-arm64:build",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+        "evidenceRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222"
+      },
+      {
+        "stageKey": "macos-arm64:install",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+        "evidenceRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
+      },
+      {
+        "stageKey": "macos-arm64:package",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+        "evidenceRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
+      },
+      {
+        "stageKey": "macos-arm64:verify",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+        "evidenceRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
+      },
+      {
+        "stageKey": "windows-x64:build",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+        "evidenceRoot": "sha256:6666666666666666666666666666666666666666666666666666666666666666"
+      },
+      {
+        "stageKey": "windows-x64:install",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+        "evidenceRoot": "sha256:7777777777777777777777777777777777777777777777777777777777777777"
+      },
+      {
+        "stageKey": "windows-x64:package",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+        "evidenceRoot": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
+      },
+      {
+        "stageKey": "windows-x64:verify",
+        "decision": "reuse",
+        "capsuleRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+        "evidenceRoot": "sha256:9999999999999999999999999999999999999999999999999999999999999999"
+      }
+    ]
+  },
+  "signing": {
+    "authorityRepository": "kungfu-systems/buildchain",
+    "authorityRunId": 5102,
+    "runtimeSha": "dddddddddddddddddddddddddddddddddddddddd",
+    "requestRoot": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+    "delegationRoot": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+    "resultArtifact": "signed-macos-result",
+    "resultArtifactRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+    "credentialAuthorityId": "macos-notary-primary",
+    "credentialScopeRoot": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+    "credentialLeaseRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+    "credentialExpiresAt": "2026-08-16T04:00:00.000Z",
+    "providerReadbackRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222"
+  },
+  "releaseTail": {
+    "declarationRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+    "transactionRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+    "operationRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
+    "idempotencyKey": "tail-reseal-alpha-2-macos",
+    "providerReadbackRoot": "sha256:6666666666666666666666666666666666666666666666666666666666666666"
+  },
+  "platforms": [
+    {
+      "id": "linux-arm64",
+      "name": "linux-arm64",
+      "runner": "[\"ubuntu-24.04-arm\"]",
+      "artifactName": "product-linux-arm64-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "artifactRoot": "sha256:7777777777777777777777777777777777777777777777777777777777777777",
+      "artifactArchiveRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+      "manifestArtifactName": "product-manifest-linux-arm64-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "manifestRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+      "manifestArchiveRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
+      "artifactPaths": [".buildchain/artifacts", "product/release/linux-arm64"],
+      "capsuleRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111"
+    },
+    {
+      "id": "linux-x64",
+      "name": "linux-x64",
+      "runner": "[\"ubuntu-24.04\"]",
+      "artifactName": "product-linux-x64-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "artifactRoot": "sha256:8888888888888888888888888888888888888888888888888888888888888888",
+      "artifactArchiveRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+      "manifestArtifactName": "product-manifest-linux-x64-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "manifestRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+      "manifestArchiveRoot": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
+      "artifactPaths": [".buildchain/artifacts", "product/release/linux-x64"],
+      "capsuleRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222"
+    },
+    {
+      "id": "macos-arm64",
+      "name": "macos-arm64",
+      "runner": "[\"macos-15\"]",
+      "artifactName": "product-macos-arm64-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "artifactRoot": "sha256:9999999999999999999999999999999999999999999999999999999999999999",
+      "artifactArchiveRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+      "manifestArtifactName": "product-manifest-macos-arm64-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "manifestRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+      "manifestArchiveRoot": "sha256:7777777777777777777777777777777777777777777777777777777777777777",
+      "artifactPaths": [".buildchain/artifacts", "product/release/macos-arm64"],
+      "capsuleRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
+    },
+    {
+      "id": "windows-x64",
+      "name": "windows-x64",
+      "runner": "[\"windows-2025\"]",
+      "artifactName": "product-windows-x64-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "artifactRoot": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "artifactArchiveRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+      "manifestArtifactName": "product-manifest-windows-x64-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "manifestRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+      "manifestArchiveRoot": "sha256:8888888888888888888888888888888888888888888888888888888888888888",
+      "artifactPaths": [".buildchain/artifacts", "product/release/windows-x64"],
+      "capsuleRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
+    }
+  ]
+}

package/contracts/next-development-request-v1.schema.json

@@ -0,0 +1,66 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://buildchain.libkungfu.dev/schemas/next-development-request-v1.schema.json",
+  "title": "Buildchain Next-development Request v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["contract", "repository", "completedAlpha", "recordedAt"],
+  "properties": {
+    "contract": {
+      "const": "kungfu-buildchain-next-development-request/v1"
+    },
+    "repository": {
+      "type": "string",
+      "pattern": "^[^/\\s]+/[^/\\s]+$"
+    },
+    "completedAlpha": { "$ref": "#/$defs/completedAlpha" },
+    "targetVersion": { "$ref": "#/$defs/semver" },
+    "anchor": { "$ref": "#/$defs/anchor" },
+    "recordedAt": { "type": "string", "format": "date-time" }
+  },
+  "$defs": {
+    "gitSha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
+    "root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "semver": {
+      "type": "string",
+      "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$"
+    },
+    "completedAlpha": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "outcome",
+        "version",
+        "exactTag",
+        "releaseSha",
+        "treeSha",
+        "publicationRoot",
+        "completedAt"
+      ],
+      "properties": {
+        "outcome": { "const": "succeeded" },
+        "version": {
+          "type": "string",
+          "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)-alpha\\.(0|[1-9][0-9]*)$"
+        },
+        "exactTag": { "type": "string", "minLength": 1 },
+        "releaseSha": { "$ref": "#/$defs/gitSha" },
+        "treeSha": { "$ref": "#/$defs/gitSha" },
+        "publicationRoot": { "$ref": "#/$defs/root" },
+        "completedAt": { "type": "string", "format": "date-time" }
+      }
+    },
+    "anchor": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["manifestPath", "manifestRoot"],
+      "properties": {
+        "manifestPath": {
+          "type": "string",
+          "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))[^\\s]+$"
+        },
+        "manifestRoot": { "$ref": "#/$defs/root" }
+      }
+    }
+  }
+}

package/contracts/next-development-transition-v1.schema.json

@@ -0,0 +1,292 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://buildchain.libkungfu.dev/schemas/next-development-transition-v1.schema.json",
+  "title": "Buildchain Next-development Transition v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "contract",
+    "idempotencyKey",
+    "repository",
+    "completedAlpha",
+    "completedAlphaRoot",
+    "alphaOutcome",
+    "model",
+    "target",
+    "declaredPaths",
+    "adapter",
+    "effectBounds",
+    "state",
+    "materialization",
+    "transitions"
+  ],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "contract": {
+      "const": "kungfu-buildchain-next-development-transition/v1"
+    },
+    "idempotencyKey": { "$ref": "#/$defs/root" },
+    "repository": {
+      "type": "string",
+      "pattern": "^[^/\\s]+/[^/\\s]+$"
+    },
+    "completedAlpha": { "$ref": "#/$defs/completedAlpha" },
+    "completedAlphaRoot": { "$ref": "#/$defs/root" },
+    "alphaOutcome": { "const": "preserved-success" },
+    "model": { "$ref": "#/$defs/model" },
+    "target": { "$ref": "#/$defs/target" },
+    "declaredPaths": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/path" }
+    },
+    "adapter": { "$ref": "#/$defs/adapter" },
+    "effectBounds": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["allowedPaths", "refUpdates", "forbiddenRefNamespaces"],
+      "properties": {
+        "allowedPaths": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/path" }
+        },
+        "refUpdates": { "type": "array", "maxItems": 0 },
+        "forbiddenRefNamespaces": {
+          "const": ["refs/heads/alpha/", "refs/tags/"]
+        }
+      }
+    },
+    "state": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "generation", "stateRoot"],
+      "properties": {
+        "status": { "$ref": "#/$defs/state" },
+        "generation": { "type": "integer", "minimum": 1 },
+        "stateRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "materialization": {
+      "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/materialization" }]
+    },
+    "transitions": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/transition" }
+    }
+  },
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "state": {
+            "properties": {
+              "status": {
+                "enum": ["materialized", "pr-pending", "merged", "verified"]
+              }
+            }
+          }
+        }
+      },
+      "then": {
+        "properties": {
+          "materialization": { "$ref": "#/$defs/materialization" }
+        }
+      }
+    }
+  ],
+  "$defs": {
+    "gitSha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
+    "root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "semver": {
+      "type": "string",
+      "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$"
+    },
+    "path": {
+      "type": "string",
+      "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))[^\\s]+$"
+    },
+    "state": {
+      "enum": [
+        "planned",
+        "waiting-anchor",
+        "materialized",
+        "pr-pending",
+        "merged",
+        "verified"
+      ]
+    },
+    "completedAlpha": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "outcome",
+        "version",
+        "exactTag",
+        "releaseSha",
+        "treeSha",
+        "publicationRoot",
+        "completedAt"
+      ],
+      "properties": {
+        "outcome": { "const": "succeeded" },
+        "version": {
+          "type": "string",
+          "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)-alpha\\.(0|[1-9][0-9]*)$"
+        },
+        "exactTag": { "type": "string", "minLength": 1 },
+        "releaseSha": { "$ref": "#/$defs/gitSha" },
+        "treeSha": { "$ref": "#/$defs/gitSha" },
+        "publicationRoot": { "$ref": "#/$defs/root" },
+        "completedAt": { "type": "string", "format": "date-time" }
+      }
+    },
+    "model": {
+      "oneOf": [
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["strategy", "next"],
+          "properties": {
+            "strategy": { "const": "semver" },
+            "next": { "const": "auto" }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["strategy", "next"],
+          "properties": {
+            "strategy": { "const": "anchored" },
+            "next": { "const": "manual" }
+          }
+        }
+      ]
+    },
+    "adapter": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "environmentVariable",
+        "sourcePaths",
+        "derivedPaths",
+        "allowedChangePaths",
+        "readOnlyPaths",
+        "derivationStage",
+        "verificationStage"
+      ],
+      "properties": {
+        "environmentVariable": { "const": "BUILDCHAIN_VERSION" },
+        "sourcePaths": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/path" }
+        },
+        "derivedPaths": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/path" }
+        },
+        "allowedChangePaths": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/path" }
+        },
+        "readOnlyPaths": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/path" }
+        },
+        "derivationStage": {
+          "oneOf": [{ "type": "null" }, { "const": "lifecycle.version-state" }]
+        },
+        "verificationStage": { "const": "lifecycle.verify" }
+      }
+    },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["version", "anchor"],
+      "properties": {
+        "version": {
+          "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/semver" }]
+        },
+        "anchor": {
+          "oneOf": [
+            { "type": "null" },
+            {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["manifestPath", "manifestRoot"],
+              "properties": {
+                "manifestPath": { "$ref": "#/$defs/path" },
+                "manifestRoot": { "$ref": "#/$defs/root" }
+              }
+            }
+          ]
+        }
+      }
+    },
+    "materialization": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "targetVersion",
+        "anchorRoot",
+        "paths",
+        "materializationRoot"
+      ],
+      "properties": {
+        "targetVersion": { "$ref": "#/$defs/semver" },
+        "anchorRoot": {
+          "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/root" }]
+        },
+        "paths": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["path", "beforeRoot", "afterRoot", "changed"],
+            "properties": {
+              "path": { "$ref": "#/$defs/path" },
+              "beforeRoot": { "$ref": "#/$defs/root" },
+              "afterRoot": { "$ref": "#/$defs/root" },
+              "changed": { "type": "boolean" }
+            }
+          }
+        },
+        "materializationRoot": { "$ref": "#/$defs/root" }
+      }
+    },
+    "transition": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "expectedStateRoot",
+        "from",
+        "to",
+        "event",
+        "evidenceRoot",
+        "recordedAt",
+        "requestRoot",
+        "transitionRoot"
+      ],
+      "properties": {
+        "expectedStateRoot": { "$ref": "#/$defs/root" },
+        "from": { "$ref": "#/$defs/state" },
+        "to": { "$ref": "#/$defs/state" },
+        "event": { "type": "string", "minLength": 1 },
+        "evidenceRoot": { "$ref": "#/$defs/root" },
+        "recordedAt": { "type": "string", "format": "date-time" },
+        "requestRoot": { "$ref": "#/$defs/root" },
+        "transitionRoot": { "$ref": "#/$defs/root" }
+      }
+    }
+  }
+}