@logicsrc/schemas 0.1.0

package/fixtures/opencontext/invalid/provenance-canonical-false.json

@@ -0,0 +1,4 @@
+{
+  "id": "policies.refunds",
+  "canonical_source": false
+}

package/fixtures/opencontext/invalid/provenance-no-source.json

@@ -0,0 +1,3 @@
+{
+  "id": "policies.refunds"
+}

package/fixtures/opencontext/invalid/role-bad-classification.json

@@ -0,0 +1,4 @@
+{
+  "id": "support",
+  "max_classification": "top-secret"
+}

package/fixtures/opencontext/invalid/role-bad-include.json

@@ -0,0 +1,6 @@
+{
+  "id": "support",
+  "include": [
+    "Policies.*"
+  ]
+}

package/fixtures/opencontext/invalid-manifest.json

@@ -0,0 +1,177 @@
+[
+  {
+    "fixture": "invalid/manifest-missing-version.json",
+    "kind": "opencontext-manifest",
+    "why": "manifest has no opencontext version"
+  },
+  {
+    "fixture": "invalid/manifest-bad-id.json",
+    "kind": "opencontext-manifest",
+    "why": "namespace id must be a lowercase slug"
+  },
+  {
+    "fixture": "invalid/manifest-unknown-key.json",
+    "kind": "opencontext-manifest",
+    "why": "unknown top-level key (contexts vs context)"
+  },
+  {
+    "fixture": "invalid/manifest-bad-authority.json",
+    "kind": "opencontext-manifest",
+    "why": "authority precedence contains a level that is not defined"
+  },
+  {
+    "fixture": "invalid/manifest-bad-ttl.json",
+    "kind": "opencontext-manifest",
+    "why": "duration must look like 30d"
+  },
+  {
+    "fixture": "invalid/manifest-role-bad-pattern.json",
+    "kind": "opencontext-manifest",
+    "why": "a wildcard must be a whole segment, never a substring"
+  },
+  {
+    "fixture": "invalid/manifest-bad-extension.json",
+    "kind": "opencontext-manifest",
+    "why": "extension keys must be reverse-DNS namespaced"
+  },
+  {
+    "fixture": "invalid/object-missing-type.json",
+    "kind": "opencontext-object",
+    "why": "type is required"
+  },
+  {
+    "fixture": "invalid/object-missing-id.json",
+    "kind": "opencontext-object",
+    "why": "id is required"
+  },
+  {
+    "fixture": "invalid/object-bad-id.json",
+    "kind": "opencontext-object",
+    "why": "id must be a dotted lowercase slug"
+  },
+  {
+    "fixture": "invalid/object-unknown-authority.json",
+    "kind": "opencontext-object",
+    "why": "authority must be one of the six defined levels"
+  },
+  {
+    "fixture": "invalid/object-unknown-classification.json",
+    "kind": "opencontext-object",
+    "why": "classification must be public/internal/confidential/restricted"
+  },
+  {
+    "fixture": "invalid/object-unknown-trust.json",
+    "kind": "opencontext-object",
+    "why": "trust must be trusted/verified/untrusted"
+  },
+  {
+    "fixture": "invalid/object-extra-property.json",
+    "kind": "opencontext-object",
+    "why": "unknown field must go under extensions"
+  },
+  {
+    "fixture": "invalid/object-confidence-out-of-range.json",
+    "kind": "opencontext-object",
+    "why": "confidence must be between 0 and 1"
+  },
+  {
+    "fixture": "invalid/object-bad-digest.json",
+    "kind": "opencontext-object",
+    "why": "source digest must be sha256:<64 hex>"
+  },
+  {
+    "fixture": "invalid/object-bad-layer.json",
+    "kind": "opencontext-object",
+    "why": "layer must be L0 to L5"
+  },
+  {
+    "fixture": "invalid/object-source-without-uri.json",
+    "kind": "opencontext-object",
+    "why": "every source needs a uri"
+  },
+  {
+    "fixture": "invalid/object-bad-supersedes.json",
+    "kind": "opencontext-object",
+    "why": "version pin must be @<integer>"
+  },
+  {
+    "fixture": "invalid/object-bad-redaction-mode.json",
+    "kind": "opencontext-object",
+    "why": "redaction mode must be remove/mask/hash"
+  },
+  {
+    "fixture": "invalid/decision-missing-decision.json",
+    "kind": "opencontext-decision",
+    "why": "a decision record must state the decision"
+  },
+  {
+    "fixture": "invalid/decision-wrong-type.json",
+    "kind": "opencontext-decision",
+    "why": "type must be decision"
+  },
+  {
+    "fixture": "invalid/decision-bad-status.json",
+    "kind": "opencontext-decision",
+    "why": "status must be proposed/accepted/rejected/superseded/deprecated"
+  },
+  {
+    "fixture": "invalid/bundle-missing-digest.json",
+    "kind": "opencontext-bundle",
+    "why": "a bundle must carry a digest"
+  },
+  {
+    "fixture": "invalid/bundle-bad-digest.json",
+    "kind": "opencontext-bundle",
+    "why": "digest must be sha256:<64 hex>"
+  },
+  {
+    "fixture": "invalid/bundle-bad-id.json",
+    "kind": "opencontext-bundle",
+    "why": "bundle_id must be prefixed ocb_"
+  },
+  {
+    "fixture": "invalid/bundle-unknown-exclusion-reason.json",
+    "kind": "opencontext-bundle",
+    "why": "exclusion reasons are a closed set"
+  },
+  {
+    "fixture": "invalid/role-bad-classification.json",
+    "kind": "opencontext-role",
+    "why": "max_classification must be one of the four bands"
+  },
+  {
+    "fixture": "invalid/role-bad-include.json",
+    "kind": "opencontext-role",
+    "why": "scope patterns are lowercase"
+  },
+  {
+    "fixture": "invalid/provenance-no-source.json",
+    "kind": "opencontext-provenance",
+    "why": "must declare sources or canonical_source"
+  },
+  {
+    "fixture": "invalid/provenance-canonical-false.json",
+    "kind": "opencontext-provenance",
+    "why": "canonical_source: false does not satisfy the requirement"
+  },
+  {
+    "fixture": "invalid/diagnostic-unknown-code.json",
+    "kind": "opencontext-diagnostic",
+    "why": "diagnostic codes are normative and closed"
+  },
+  {
+    "fixture": "invalid/diagnostic-missing-ok.json",
+    "kind": "opencontext-diagnostic",
+    "why": "ok is required \u2014 it is what the exit code follows"
+  },
+  {
+    "fixture": "invalid/audit-event-unknown-event.json",
+    "kind": "opencontext-audit-event",
+    "why": "event names are a closed set"
+  },
+  {
+    "fixture": "invalid/audit-event-missing-actor.json",
+    "kind": "opencontext-audit-event",
+    "why": "an audit event without an actor is not attributable"
+  }
+]

package/fixtures/opencontext/resolution/authority-conflict/context/policies/refunds-observed.md

@@ -0,0 +1,10 @@
+---
+id: policies.refunds-observed
+type: policy
+layer: L3
+authority: observed
+owner: support
+canonical_source: true
+---
+
+An agent observed staff granting refunds up to 60 days.

package/fixtures/opencontext/resolution/authority-conflict/context/policies/refunds.md

@@ -0,0 +1,12 @@
+---
+id: policies.refunds
+type: policy
+layer: L3
+authority: canonical
+owner: support
+canonical_source: true
+conflicts_with:
+  - policies.refunds-observed
+---
+
+Refunds within 30 days.

package/fixtures/opencontext/resolution/authority-conflict/expected.json

@@ -0,0 +1,21 @@
+{
+  "description": "A declared conflict that authority settles is still reported, never silently hidden. Canonical outranks observed, and the losing side is named in the warning.",
+  "resolve": {
+    "role": "everyone",
+    "at": "2026-08-09T12:00:00Z"
+  },
+  "expect": {
+    "included": [
+      "policies.refunds",
+      "policies.refunds-observed"
+    ],
+    "warnings": [
+      "conflict-declared"
+    ]
+  },
+  "validate": {
+    "expectDiagnostics": [
+      "conflict-declared"
+    ]
+  }
+}

package/fixtures/opencontext/resolution/authority-conflict/opencontext.yaml

@@ -0,0 +1,11 @@
+opencontext: "1.0"
+id: conflict-test
+name: Declared conflicts
+
+collections:
+  policies: ./context/policies/**
+
+roles:
+  everyone:
+    include:
+      - policies.*

package/fixtures/opencontext/resolution/classification-ceiling/context/docs/handbook.md

@@ -0,0 +1,11 @@
+---
+id: docs.handbook
+type: knowledge
+layer: L2
+authority: approved
+owner: ops
+classification: internal
+canonical_source: true
+---
+
+How we work.

package/fixtures/opencontext/resolution/classification-ceiling/context/docs/litigation.md

@@ -0,0 +1,11 @@
+---
+id: docs.litigation
+type: knowledge
+layer: L2
+authority: approved
+owner: legal
+classification: restricted
+canonical_source: true
+---
+
+Privileged and confidential.

package/fixtures/opencontext/resolution/classification-ceiling/expected.json

@@ -0,0 +1,32 @@
+{
+  "description": "Classification bounds a role regardless of scope: support includes docs.* and is still denied the restricted document, while legal is not.",
+  "resolve": {
+    "role": "support",
+    "at": "2026-08-09T12:00:00Z"
+  },
+  "expect": {
+    "included": [
+      "docs.handbook"
+    ],
+    "excluded": [
+      {
+        "id": "docs.litigation",
+        "reason": "classification-denied"
+      }
+    ]
+  },
+  "also": [
+    {
+      "resolve": {
+        "role": "legal",
+        "at": "2026-08-09T12:00:00Z"
+      },
+      "expect": {
+        "included": [
+          "docs.handbook",
+          "docs.litigation"
+        ]
+      }
+    }
+  ]
+}

package/fixtures/opencontext/resolution/classification-ceiling/opencontext.yaml

@@ -0,0 +1,16 @@
+opencontext: "1.0"
+id: classification-test
+name: Classification ceiling
+
+collections:
+  docs: ./context/docs/**
+
+roles:
+  support:
+    include:
+      - docs.*
+    max_classification: internal
+  legal:
+    include:
+      - docs.*
+    max_classification: restricted

package/fixtures/opencontext/resolution/deny-overrides-allow/context/mission.md

@@ -0,0 +1,10 @@
+---
+id: mission
+type: mission
+layer: L0
+authority: canonical
+owner: founders
+canonical_source: true
+---
+
+Make refunds boring.

package/fixtures/opencontext/resolution/deny-overrides-allow/context/policies/internal/margins.md

@@ -0,0 +1,10 @@
+---
+id: policies.internal.margins
+type: policy
+layer: L3
+authority: canonical
+owner: finance
+canonical_source: true
+---
+
+Gross margin floor is 62%.

package/fixtures/opencontext/resolution/deny-overrides-allow/context/policies/refunds.md

@@ -0,0 +1,10 @@
+---
+id: policies.refunds
+type: policy
+layer: L3
+authority: canonical
+owner: support
+canonical_source: true
+---
+
+Refunds within 30 days.

package/fixtures/opencontext/resolution/deny-overrides-allow/expected.json

@@ -0,0 +1,19 @@
+{
+  "description": "An exclude pattern beats an include that also matches. Deny overrides allow, unconditionally.",
+  "resolve": {
+    "role": "support",
+    "at": "2026-08-09T12:00:00Z"
+  },
+  "expect": {
+    "included": [
+      "mission",
+      "policies.refunds"
+    ],
+    "excluded": [
+      {
+        "id": "policies.internal.margins",
+        "reason": "scope-exclusion"
+      }
+    ]
+  }
+}

package/fixtures/opencontext/resolution/deny-overrides-allow/opencontext.yaml

@@ -0,0 +1,17 @@
+opencontext: "1.0"
+id: scope-test
+name: Deny overrides allow
+
+context:
+  mission: ./context/mission.md
+
+collections:
+  policies: ./context/policies/**
+
+roles:
+  support:
+    include:
+      - mission
+      - policies.*
+    exclude:
+      - policies.internal.*

package/fixtures/opencontext/resolution/duplicate-canonical/context/policies/refunds-rewrite.md

@@ -0,0 +1,12 @@
+---
+id: policies.refunds
+type: policy
+layer: L3
+version: 2
+authority: canonical
+owner: support
+canonical_source: true
+updated: 2026-08-01T00:00:00Z
+---
+
+Refunds within 60 days. Nobody added supersedes.

package/fixtures/opencontext/resolution/duplicate-canonical/context/policies/refunds.md

@@ -0,0 +1,12 @@
+---
+id: policies.refunds
+type: policy
+layer: L3
+version: 1
+authority: canonical
+owner: support
+canonical_source: true
+updated: 2026-01-01T00:00:00Z
+---
+
+Refunds within 30 days.

package/fixtures/opencontext/resolution/duplicate-canonical/expected.json

@@ -0,0 +1,10 @@
+{
+  "description": "Two active canonical objects for one id, with no supersession linking them. Canonical means exactly one source of truth, so this is an error a strict run must fail on.",
+  "validate": {
+    "expectDiagnostics": [
+      "duplicate-canonical",
+      "multiple-active-versions"
+    ],
+    "expectFailure": true
+  }
+}

package/fixtures/opencontext/resolution/duplicate-canonical/opencontext.yaml

@@ -0,0 +1,11 @@
+opencontext: "1.0"
+id: duplicate-test
+name: Duplicate canonical
+
+collections:
+  policies: ./context/policies/**
+
+roles:
+  everyone:
+    include:
+      - policies.*

package/fixtures/opencontext/resolution/lifecycle/context/notes/current.md

@@ -0,0 +1,11 @@
+---
+id: notes.current
+type: note
+layer: L2
+authority: reference
+owner: ops
+canonical_source: true
+updated: 2026-08-01T00:00:00Z
+---
+
+Fresh, inside the 30d window.

package/fixtures/opencontext/resolution/lifecycle/context/notes/expired.md

@@ -0,0 +1,12 @@
+---
+id: notes.expired
+type: note
+layer: L2
+authority: reference
+owner: ops
+canonical_source: true
+updated: 2026-08-01T00:00:00Z
+expires: 2026-08-05T00:00:00Z
+---
+
+Expired before the resolution timestamp.

package/fixtures/opencontext/resolution/lifecycle/context/notes/future.md

@@ -0,0 +1,12 @@
+---
+id: notes.future
+type: note
+layer: L2
+authority: reference
+owner: ops
+canonical_source: true
+updated: 2026-08-01T00:00:00Z
+valid_from: 2027-01-01T00:00:00Z
+---
+
+Not valid until next year.

package/fixtures/opencontext/resolution/lifecycle/context/notes/stale.md

@@ -0,0 +1,11 @@
+---
+id: notes.stale
+type: note
+layer: L2
+authority: reference
+owner: ops
+canonical_source: true
+updated: 2026-01-01T00:00:00Z
+---
+
+Outside the 30d window, so stale — resolved anyway, and reported.

package/fixtures/opencontext/resolution/lifecycle/expected.json

@@ -0,0 +1,30 @@
+{
+  "description": "Lifecycle is computed against the resolution timestamp. Expired and not-yet-valid context is excluded; stale context is still resolved, and warned about \u2014 silence would be worse than staleness.",
+  "resolve": {
+    "role": "everyone",
+    "at": "2026-08-09T12:00:00Z"
+  },
+  "expect": {
+    "included": [
+      "notes.current",
+      "notes.stale"
+    ],
+    "excluded": [
+      {
+        "id": "notes.expired",
+        "reason": "expired"
+      },
+      {
+        "id": "notes.future",
+        "reason": "not-yet-valid"
+      }
+    ],
+    "warnings": [
+      "stale"
+    ],
+    "lifecycle": {
+      "notes.current": "current",
+      "notes.stale": "stale"
+    }
+  }
+}

package/fixtures/opencontext/resolution/lifecycle/opencontext.yaml

@@ -0,0 +1,14 @@
+opencontext: "1.0"
+id: lifecycle-test
+name: Lifecycle
+
+collections:
+  notes: ./context/notes/**
+
+freshness:
+  default_ttl: 30d
+
+roles:
+  everyone:
+    include:
+      - notes.*

package/fixtures/opencontext/resolution/object-permissions/context/policies/payroll.md

@@ -0,0 +1,12 @@
+---
+id: policies.payroll
+type: policy
+layer: L3
+authority: canonical
+owner: finance
+canonical_source: true
+permissions:
+  read: [finance]
+---
+
+Payroll runs on the 25th.

package/fixtures/opencontext/resolution/object-permissions/context/policies/refunds.md

@@ -0,0 +1,10 @@
+---
+id: policies.refunds
+type: policy
+layer: L3
+authority: canonical
+owner: support
+canonical_source: true
+---
+
+Refunds within 30 days.

package/fixtures/opencontext/resolution/object-permissions/expected.json

@@ -0,0 +1,32 @@
+{
+  "description": "An object-level read grant narrows a role that would otherwise include it. Both roles include policies.*; only finance may read the payroll policy.",
+  "resolve": {
+    "role": "support",
+    "at": "2026-08-09T12:00:00Z"
+  },
+  "expect": {
+    "included": [
+      "policies.refunds"
+    ],
+    "excluded": [
+      {
+        "id": "policies.payroll",
+        "reason": "permission-denied"
+      }
+    ]
+  },
+  "also": [
+    {
+      "resolve": {
+        "role": "finance",
+        "at": "2026-08-09T12:00:00Z"
+      },
+      "expect": {
+        "included": [
+          "policies.payroll",
+          "policies.refunds"
+        ]
+      }
+    }
+  ]
+}

package/fixtures/opencontext/resolution/object-permissions/opencontext.yaml

@@ -0,0 +1,14 @@
+opencontext: "1.0"
+id: permissions-test
+name: Object-level permissions
+
+collections:
+  policies: ./context/policies/**
+
+roles:
+  support:
+    include:
+      - policies.*
+  finance:
+    include:
+      - policies.*

package/fixtures/opencontext/resolution/redaction/context/customers/acme.json

@@ -0,0 +1,21 @@
+{
+  "id": "customers.acme",
+  "type": "customer",
+  "layer": "L2",
+  "title": "ACME Inc.",
+  "authority": "reference",
+  "owner": "support",
+  "classification": "confidential",
+  "canonical_source": true,
+  "content": {
+    "name": "ACME Inc.",
+    "plan": "enterprise",
+    "ssn": "000-00-0000",
+    "contacts": [
+      {
+        "name": "Dana",
+        "email": "dana@acme.example"
+      }
+    ]
+  }
+}