@marinjursic/prc-linux-arm64 0.1.0

package/bin/schemas/finding-v0.1.schema.json

@@ -0,0 +1,70 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/finding-v0.1.schema.json",
+  "title": "Production Readiness Finding v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "id",
+    "fingerprint",
+    "assertion_id",
+    "control_ids",
+    "title",
+    "summary",
+    "severity",
+    "gate",
+    "remediation_class",
+    "subject",
+    "locations",
+    "evidence_ids"
+  ],
+  "properties": {
+    "schema_version": {"const": "prc.finding/v0.1"},
+    "id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+    "control_ids": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"}
+    },
+    "title": {"type": "string", "minLength": 1},
+    "summary": {"type": "string", "minLength": 1},
+    "severity": {"enum": ["info", "low", "medium", "high", "critical"]},
+    "gate": {"enum": ["advisory", "required", "no-go"]},
+    "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]},
+    "subject": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "id", "inventory_digest"],
+      "properties": {
+        "kind": {"enum": ["repository", "project", "component", "artifact", "environment", "endpoint"]},
+        "id": {"type": "string", "minLength": 1},
+        "inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"}
+      }
+    },
+    "locations": {
+      "type": "array",
+      "maxItems": 4096,
+      "uniqueItems": true,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["path"],
+        "properties": {
+          "path": {"type": "string", "minLength": 1},
+          "line": {"type": "integer", "minimum": 0},
+          "column": {"type": "integer", "minimum": 0}
+        }
+      }
+    },
+    "evidence_ids": {
+      "type": "array",
+      "maxItems": 4096,
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^[0-9a-f]{64}$"}
+    }
+  }
+}

package/bin/schemas/finding.schema.json

@@ -0,0 +1,70 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/finding.schema.json",
+  "title": "Production Readiness Finding v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "id",
+    "fingerprint",
+    "assertion_id",
+    "control_ids",
+    "title",
+    "summary",
+    "severity",
+    "gate",
+    "remediation_class",
+    "subject",
+    "locations",
+    "evidence_ids"
+  ],
+  "properties": {
+    "schema_version": {"const": "prc.finding/v0.1"},
+    "id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+    "control_ids": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"}
+    },
+    "title": {"type": "string", "minLength": 1},
+    "summary": {"type": "string", "minLength": 1},
+    "severity": {"enum": ["info", "low", "medium", "high", "critical"]},
+    "gate": {"enum": ["advisory", "required", "no-go"]},
+    "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]},
+    "subject": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "id", "inventory_digest"],
+      "properties": {
+        "kind": {"enum": ["repository", "project", "component", "artifact", "environment", "endpoint"]},
+        "id": {"type": "string", "minLength": 1},
+        "inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"}
+      }
+    },
+    "locations": {
+      "type": "array",
+      "maxItems": 4096,
+      "uniqueItems": true,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["path"],
+        "properties": {
+          "path": {"type": "string", "minLength": 1},
+          "line": {"type": "integer", "minimum": 0},
+          "column": {"type": "integer", "minimum": 0}
+        }
+      }
+    },
+    "evidence_ids": {
+      "type": "array",
+      "maxItems": 4096,
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^[0-9a-f]{64}$"}
+    }
+  }
+}

package/bin/schemas/fix-contract-v0.1.schema.json

@@ -0,0 +1,35 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/fix-contract-v0.1.schema.json",
+  "title": "Production Readiness Fix Contract v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "task_id", "baseline_run_id", "baseline_inventory_digest", "assertion_id", "control_ids", "goal", "fixer_id", "remediation_class", "allowed_paths", "protected_paths", "network", "max_changed_lines", "max_files", "max_attempts", "acceptance"],
+  "properties": {
+    "schema_version": {"const": "prc.fix-contract/v0.1"},
+    "task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "baseline_run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "baseline_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+    "control_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Z]+-[0-9A-F]{8}$"}},
+    "goal": {"type": "string", "minLength": 1},
+    "fixer_id": {"type": "string", "pattern": "^[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+    "remediation_class": {"enum": ["R1", "R2"]},
+    "provider": {"enum": ["codex", "claude"]},
+    "proposal_task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "proposal_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "allowed_paths": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.\\.(?:/|$)).+$"}},
+    "protected_paths": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.\\.(?:/|$)).+$"}},
+    "network": {"const": "deny"},
+    "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "max_attempts": {"const": 1},
+    "acceptance": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
+  },
+  "allOf": [
+    {
+      "if": {"properties": {"remediation_class": {"const": "R2"}}, "required": ["remediation_class"]},
+      "then": {"required": ["provider", "proposal_task_id", "proposal_sha256"]}
+    }
+  ]
+}

package/bin/schemas/fix-contract-v0.2.schema.json

@@ -0,0 +1,46 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/fix-contract-v0.2.schema.json",
+  "title": "Production Readiness Fix Contract v0.2",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "task_id", "baseline_run_id", "baseline_inventory_digest", "assertion_id", "control_ids", "goal", "fixer_id", "remediation_class", "allowed_paths", "protected_paths", "network", "max_changed_lines", "max_files", "attempt", "max_attempts", "acceptance"],
+  "properties": {
+    "schema_version": {"const": "prc.fix-contract/v0.2"},
+    "task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "baseline_run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "baseline_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
+    "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+    "control_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Z]+-[0-9A-F]{8}$"}},
+    "goal": {"type": "string", "minLength": 1},
+    "fixer_id": {"type": "string", "pattern": "^[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+    "remediation_class": {"enum": ["R1", "R2"]},
+    "provider": {"enum": ["codex", "claude"]},
+    "proposal_task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "proposal_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "allowed_paths": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.\\.(?:/|$)).+$"}},
+    "protected_paths": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.\\.(?:/|$)).+$"}},
+    "network": {"const": "deny"},
+    "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "attempt": {"type": "integer", "minimum": 1, "maximum": 10},
+    "max_attempts": {"type": "integer", "minimum": 1, "maximum": 10},
+    "acceptance": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
+  },
+  "allOf": [
+    {
+      "if": {"properties": {"remediation_class": {"const": "R2"}}, "required": ["remediation_class"]},
+      "then": {"required": ["provider", "proposal_task_id", "proposal_sha256"]}
+    },
+    {
+      "if": {"required": ["configuration_digest"]},
+      "then": {"required": ["project_id"]}
+    },
+    {
+      "if": {"required": ["project_id"]},
+      "then": {"required": ["configuration_digest"]}
+    }
+  ]
+}

package/bin/schemas/fix-contract-v0.3.schema.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/fix-contract-v0.3.schema.json",
+  "title": "Production Readiness Fix Contract v0.3",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "task_id", "baseline_run_id", "baseline_inventory_digest", "finding_id", "finding_fingerprint", "assertion_id", "control_ids", "goal", "fixer_id", "remediation_class", "allowed_paths", "protected_paths", "network", "max_changed_lines", "max_files", "attempt", "max_attempts", "acceptance"],
+  "properties": {
+    "schema_version": {"const": "prc.fix-contract/v0.3"},
+    "task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "baseline_run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "baseline_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "proposal_finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
+    "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+    "control_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Z]+-[0-9A-F]{8}$"}},
+    "goal": {"type": "string", "minLength": 1},
+    "fixer_id": {"type": "string", "pattern": "^[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+    "remediation_class": {"enum": ["R1", "R2"]},
+    "provider": {"enum": ["codex", "claude"]},
+    "proposal_task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "proposal_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "allowed_paths": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.\\.(?:/|$)).+$"}},
+    "protected_paths": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.\\.(?:/|$)).+$"}},
+    "network": {"const": "deny"},
+    "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "attempt": {"type": "integer", "minimum": 1, "maximum": 10},
+    "max_attempts": {"type": "integer", "minimum": 1, "maximum": 10},
+    "acceptance": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
+  },
+  "allOf": [
+    {
+      "if": {"properties": {"remediation_class": {"const": "R2"}}, "required": ["remediation_class"]},
+      "then": {"required": ["provider", "proposal_task_id", "proposal_sha256", "proposal_finding_id"]}
+    },
+    {
+      "if": {"required": ["configuration_digest"]},
+      "then": {"required": ["project_id"]}
+    },
+    {
+      "if": {"required": ["project_id"]},
+      "then": {"required": ["configuration_digest"]}
+    }
+  ]
+}

package/bin/schemas/fix-contract.schema.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/fix-contract.schema.json",
+  "title": "Production Readiness Fix Contract v0.3",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "task_id", "baseline_run_id", "baseline_inventory_digest", "finding_id", "finding_fingerprint", "assertion_id", "control_ids", "goal", "fixer_id", "remediation_class", "allowed_paths", "protected_paths", "network", "max_changed_lines", "max_files", "attempt", "max_attempts", "acceptance"],
+  "properties": {
+    "schema_version": {"const": "prc.fix-contract/v0.3"},
+    "task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "baseline_run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "baseline_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "proposal_finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
+    "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+    "control_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Z]+-[0-9A-F]{8}$"}},
+    "goal": {"type": "string", "minLength": 1},
+    "fixer_id": {"type": "string", "pattern": "^[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+    "remediation_class": {"enum": ["R1", "R2"]},
+    "provider": {"enum": ["codex", "claude"]},
+    "proposal_task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "proposal_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "allowed_paths": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.\\.(?:/|$)).+$"}},
+    "protected_paths": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.\\.(?:/|$)).+$"}},
+    "network": {"const": "deny"},
+    "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "attempt": {"type": "integer", "minimum": 1, "maximum": 10},
+    "max_attempts": {"type": "integer", "minimum": 1, "maximum": 10},
+    "acceptance": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
+  },
+  "allOf": [
+    {
+      "if": {"properties": {"remediation_class": {"const": "R2"}}, "required": ["remediation_class"]},
+      "then": {"required": ["provider", "proposal_task_id", "proposal_sha256", "proposal_finding_id"]}
+    },
+    {
+      "if": {"required": ["configuration_digest"]},
+      "then": {"required": ["project_id"]}
+    },
+    {
+      "if": {"required": ["project_id"]},
+      "then": {"required": ["configuration_digest"]}
+    }
+  ]
+}

package/bin/schemas/grype-vulnerability-report.schema.json

@@ -0,0 +1,88 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/grype-vulnerability-report.schema.json",
+  "title": "PRC normalized Grype vulnerability report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "tool", "database", "findings"],
+  "properties": {
+    "schema": {"const": "prc.grype-vulnerability-report/v1"},
+    "tool": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "version"],
+      "properties": {
+        "name": {"const": "grype"},
+        "version": {"const": "0.116.1"}
+      }
+    },
+    "database": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schema_version", "built", "archive_sha256", "epss_captured", "kev_captured", "nvd_captured"],
+      "properties": {
+        "schema_version": {"type": "string", "pattern": "^v6\\.[0-9]+\\.[0-9]+$"},
+        "built": {"type": "string", "format": "date-time"},
+        "archive_sha256": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+        "epss_captured": {"type": "string", "format": "date-time"},
+        "kev_captured": {"type": "string", "format": "date-time"},
+        "nvd_captured": {"type": "string", "format": "date-time"}
+      }
+    },
+    "findings": {
+      "type": "array",
+      "maxItems": 10000,
+      "items": {"$ref": "#/$defs/finding"}
+    }
+  },
+  "$defs": {
+    "boundedText": {"type": "string", "minLength": 1, "maxLength": 16384},
+    "finding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id", "aliases", "package_name", "package_version", "package_type", "package_url", "locations",
+        "severity", "cvss_score", "epss", "epss_percentile", "known_exploited", "known_ransomware_use",
+        "risk", "fix_state", "fixed_versions"
+      ],
+      "properties": {
+        "id": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{1,127}$"},
+        "aliases": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 129,
+          "uniqueItems": true,
+          "items": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{1,127}$"}
+        },
+        "package_name": {"$ref": "#/$defs/boundedText"},
+        "package_version": {"$ref": "#/$defs/boundedText"},
+        "package_type": {"type": "string", "pattern": "^[a-z][a-z0-9._-]{0,63}$"},
+        "package_url": {"type": "string", "minLength": 5, "maxLength": 16384, "pattern": "^pkg:"},
+        "locations": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 256,
+          "uniqueItems": true,
+          "items": {"type": "string", "minLength": 1, "maxLength": 16384, "pattern": "^[^/]"}
+        },
+        "severity": {"enum": ["Unknown", "Negligible", "Low", "Medium", "High", "Critical"]},
+        "cvss_score": {"type": "number", "minimum": 0, "maximum": 10},
+        "cvss_vector": {"type": "string", "minLength": 1, "maxLength": 4096},
+        "epss": {"type": "number", "minimum": 0, "maximum": 1},
+        "epss_percentile": {"type": "number", "minimum": 0, "maximum": 1},
+        "epss_date": {"type": "string", "format": "date"},
+        "known_exploited": {"type": "boolean"},
+        "known_ransomware_use": {"type": "boolean"},
+        "risk": {"type": "number", "minimum": 0},
+        "fix_state": {"enum": ["fixed", "not-fixed", "wont-fix", "unknown"]},
+        "fixed_versions": {
+          "type": "array",
+          "maxItems": 256,
+          "uniqueItems": true,
+          "items": {"type": "string", "minLength": 1, "maxLength": 4096}
+        },
+        "description": {"type": "string", "minLength": 1, "maxLength": 65536}
+      }
+    }
+  }
+}

package/bin/schemas/history.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/history.schema.json",
+  "title": "Production Readiness Checklist Run History v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "generated_at", "state_path", "runs"],
+  "properties": {
+    "schema_version": {"const": "prc.history/v0.1"},
+    "generated_at": {"type": "string", "format": "date-time"},
+    "state_path": {"type": "string", "minLength": 1},
+    "runs": {
+      "type": "array",
+      "maxItems": 1000,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["run_id", "started_at", "completed_at", "target_name", "profile_id", "profile_version", "inventory_digest", "terminal_state", "pass_count", "fail_count", "blocked_count"],
+        "properties": {
+          "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+          "started_at": {"type": "string", "format": "date-time"},
+          "completed_at": {"type": "string", "format": "date-time"},
+          "target_name": {"type": "string", "minLength": 1},
+          "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
+          "profile_version": {"type": "string", "minLength": 1},
+          "inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+          "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+          "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
+          "terminal_state": {"enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "environment_blocked", "no_go"]},
+          "pass_count": {"type": "integer", "minimum": 0},
+          "fail_count": {"type": "integer", "minimum": 0},
+          "blocked_count": {"type": "integer", "minimum": 0}
+        }
+      }
+    }
+  }
+}

package/bin/schemas/invalidation.schema.json

@@ -0,0 +1,86 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/invalidation.schema.json",
+  "title": "Production Readiness Evidence Invalidation Analysis v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "rules_version", "generated_at", "target_name", "base_run_id", "base_inventory_digest", "current_inventory_digest", "base_plan_digest", "current_plan_digest", "changed_dimensions", "changed_files", "assertions", "summary"],
+  "properties": {
+    "schema_version": {"const": "prc.invalidation/v0.1"},
+    "rules_version": {"const": "prc.invalidation-rules/v0.1"},
+    "generated_at": {"type": "string", "format": "date-time"},
+    "target_name": {"type": "string", "minLength": 1},
+    "base_run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "base_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "current_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "base_plan_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "current_plan_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "changed_dimensions": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"enum": ["inventory_schema", "git_commit", "files", "source_files", "package_ecosystems", "manifests", "lock_files", "container_files", "symlinks", "ci", "infrastructure", "components", "relations", "facts", "declared_scope", "engine", "profile"]}
+    },
+    "changed_files": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["path", "change", "content_changed", "mode_changed"],
+        "properties": {
+          "path": {"type": "string", "minLength": 1},
+          "change": {"enum": ["added", "modified", "deleted", "mode_changed"]},
+          "before_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+          "after_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+          "before_size": {"type": "integer", "minimum": 0},
+          "after_size": {"type": "integer", "minimum": 0},
+          "before_mode": {"type": "integer", "minimum": 0},
+          "after_mode": {"type": "integer", "minimum": 0},
+          "content_changed": {"type": "boolean"},
+          "mode_changed": {"type": "boolean"}
+        }
+      }
+    },
+    "assertions": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["assertion_id", "conclusion", "reuse_allowed", "fresh_evaluation_required", "relevant_changed_paths", "reasons"],
+        "properties": {
+          "assertion_id": {"type": "string", "minLength": 1},
+          "previous_assessment": {"enum": ["pass", "fail", "unknown", "manual_review", "not_applicable", "stale", "conflicting"]},
+          "previous_applicability": {"enum": ["applicable", "not_applicable", "undetermined"]},
+          "current_applicability": {"enum": ["applicable", "not_applicable", "undetermined"]},
+          "conclusion": {"enum": ["invalidated", "unchanged_inputs", "new", "removed"]},
+          "reuse_allowed": {"type": "boolean"},
+          "fresh_evaluation_required": {"type": "boolean"},
+          "relevant_changed_paths": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}},
+          "reasons": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["code", "detail"],
+              "properties": {
+                "code": {"type": "string", "pattern": "^[a-z0-9_]+$"},
+                "detail": {"type": "string", "minLength": 1}
+              }
+            }
+          }
+        }
+      }
+    },
+    "summary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["invalidated", "unchanged_inputs", "reusable", "new", "removed"],
+      "properties": {
+        "invalidated": {"type": "integer", "minimum": 0},
+        "unchanged_inputs": {"type": "integer", "minimum": 0},
+        "reusable": {"type": "integer", "minimum": 0},
+        "new": {"type": "integer", "minimum": 0},
+        "removed": {"type": "integer", "minimum": 0}
+      }
+    }
+  }
+}

package/bin/schemas/inventory-v0.1.schema.json

@@ -0,0 +1,42 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/inventory-v0.1.schema.json",
+  "title": "Production Readiness Inventory v0.1 (legacy)",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "target_name", "digest", "file_count", "source_files", "package_ecosystems", "manifests", "lock_files", "ci", "files"],
+  "properties": {
+    "schema_version": {"const": "prc.inventory/v0.1"},
+    "target_name": {"type": "string", "minLength": 1},
+    "git_commit": {"type": "string", "pattern": "^[0-9a-f]{40,64}$"},
+    "digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "file_count": {"type": "integer", "minimum": 0},
+    "source_files": {"type": "integer", "minimum": 0},
+    "package_ecosystems": {"type": "array", "uniqueItems": true, "items": {"type": "string"}},
+    "manifests": {"type": "array", "uniqueItems": true, "items": {"type": "string"}},
+    "lock_files": {"type": "array", "uniqueItems": true, "items": {"type": "string"}},
+    "ci": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["github_actions"],
+      "properties": {"github_actions": {"type": "boolean"}}
+    },
+    "files": {
+      "type": "array",
+      "items": {"$ref": "#/$defs/file"}
+    }
+  },
+  "$defs": {
+    "file": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "size", "sha256", "mode"],
+      "properties": {
+        "path": {"type": "string"},
+        "size": {"type": "integer", "minimum": 0},
+        "sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "mode": {"type": "integer", "minimum": 0, "maximum": 511}
+      }
+    }
+  }
+}