@marinjursic/prc-linux-arm64 0.1.0

package/bin/schemas/plan-v0.4.schema.json

@@ -0,0 +1,48 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/plan-v0.4.schema.json",
+  "title": "Production Readiness Scan Plan v0.4",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "digest", "engine_version", "target_name", "inventory_digest", "profile_id", "profile_version", "profile_digest", "artifact_digests", "target_environments", "assertions"],
+  "properties": {
+    "schema_version": {"const": "prc.plan/v0.4"},
+    "digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "engine_version": {"const": "prc.engine/v0.1"},
+    "target_name": {"type": "string", "minLength": 1},
+    "target_commit": {"type": "string", "pattern": "^[0-9a-f]{40,64}$"},
+    "inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
+    "profile_version": {"type": "string"},
+    "profile_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
+    "artifact_digests": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^sha256:[0-9a-f]{64}$"}
+    },
+    "target_environments": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^[a-z][a-z0-9-]{0,62}$"}
+    },
+    "assertions": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["assertion_id", "assertion_revision", "definition_digest", "implementation_id", "applicability", "applicability_evaluator", "applicability_reason"],
+        "properties": {
+          "assertion_id": {"type": "string"},
+          "assertion_revision": {"type": "integer", "minimum": 1},
+          "definition_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+          "implementation_id": {"type": "string"},
+          "applicability": {"enum": ["applicable", "not_applicable", "undetermined"]},
+          "applicability_evaluator": {"const": "cel-go/v0.30.0+prc-inventory/v0.3"},
+          "applicability_reason": {"type": "string", "minLength": 1}
+        }
+      }
+    }
+  }
+}

package/bin/schemas/plan-v0.5.schema.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/plan-v0.5.schema.json",
+  "title": "Production Readiness Scan Plan v0.5",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "digest", "engine_version", "target_name", "inventory_digest", "profile_id", "profile_version", "profile_digest", "catalog_digest", "artifact_digests", "target_environments", "assertions"],
+  "properties": {
+    "schema_version": {"const": "prc.plan/v0.5"},
+    "digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "engine_version": {"const": "prc.engine/v0.1"},
+    "target_name": {"type": "string", "minLength": 1},
+    "target_commit": {"type": "string", "pattern": "^[0-9a-f]{40,64}$"},
+    "inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
+    "profile_version": {"type": "string"},
+    "profile_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "catalog_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
+    "artifact_digests": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^sha256:[0-9a-f]{64}$"}
+    },
+    "target_environments": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^[a-z][a-z0-9-]{0,62}$"}
+    },
+    "assertions": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["assertion_id", "assertion_revision", "definition_digest", "implementation_id", "applicability", "applicability_evaluator", "applicability_reason"],
+        "properties": {
+          "assertion_id": {"type": "string"},
+          "assertion_revision": {"type": "integer", "minimum": 1},
+          "definition_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+          "implementation_id": {"type": "string"},
+          "applicability": {"enum": ["applicable", "not_applicable", "undetermined"]},
+          "applicability_evaluator": {"const": "cel-go/v0.30.0+prc-inventory/v0.3"},
+          "applicability_reason": {"type": "string", "minLength": 1}
+        }
+      }
+    }
+  }
+}

package/bin/schemas/plan-v0.6.schema.json

@@ -0,0 +1,137 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/plan-v0.6.schema.json",
+  "title": "Production Readiness Scan Plan v0.6 (frozen)",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "digest", "engine_version", "target_name", "inventory_digest", "profile_id", "profile_version", "profile_digest", "catalog_digest", "artifact_digests", "target_environments", "execution_mode", "capability_policy", "implementations", "adapters", "nodes", "assertions"],
+  "properties": {
+    "schema_version": {"const": "prc.plan/v0.6"},
+    "digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "engine_version": {"const": "prc.engine/v0.1"},
+    "target_name": {"type": "string", "minLength": 1},
+    "target_commit": {"type": "string", "pattern": "^[0-9a-f]{40,64}$"},
+    "inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
+    "profile_version": {"type": "string"},
+    "profile_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "catalog_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
+    "artifact_digests": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^sha256:[0-9a-f]{64}$"}
+    },
+    "target_environments": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^[a-z][a-z0-9-]{0,62}$"}
+    },
+    "execution_mode": {"enum": ["inspect", "verify-local"]},
+    "capability_policy": {"$ref": "#/$defs/capabilities"},
+    "implementations": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"$ref": "#/$defs/implementation"}
+    },
+    "adapters": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"$ref": "#/$defs/adapter"}
+    },
+    "nodes": {
+      "type": "array",
+      "minItems": 2,
+      "uniqueItems": true,
+      "items": {"$ref": "#/$defs/node"}
+    },
+    "assertions": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["assertion_id", "assertion_revision", "definition_digest", "implementation_id", "applicability", "applicability_evaluator", "applicability_reason"],
+        "properties": {
+          "assertion_id": {"type": "string"},
+          "assertion_revision": {"type": "integer", "minimum": 1},
+          "definition_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+          "implementation_id": {"type": "string"},
+          "applicability": {"enum": ["applicable", "not_applicable", "undetermined"]},
+          "applicability_evaluator": {"const": "cel-go/v0.30.0+prc-inventory/v0.3"},
+          "applicability_reason": {"type": "string", "minLength": 1}
+        }
+      }
+    }
+  },
+  "$defs": {
+    "capabilities": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["read_workspace", "write_scratch", "process", "network", "network_hosts", "secret_handles"],
+      "properties": {
+        "read_workspace": {"type": "boolean"},
+        "write_scratch": {"type": "boolean"},
+        "process": {"enum": ["deny", "oci"]},
+        "network": {"const": "deny"},
+        "network_hosts": {"type": "array", "maxItems": 0},
+        "secret_handles": {"type": "array", "maxItems": 0}
+      }
+    },
+    "implementation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "kind", "assertion_ids", "capabilities", "status"],
+      "properties": {
+        "id": {"type": "string", "pattern": "^prc\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+        "kind": {"enum": ["built-in", "manual", "adapter-evidence", "unavailable"]},
+        "assertion_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"}},
+        "capabilities": {"$ref": "#/$defs/capabilities"},
+        "status": {"enum": ["available", "blocked"]},
+        "reason": {"type": "string", "minLength": 1}
+      },
+      "allOf": [
+        {"if": {"properties": {"status": {"const": "blocked"}}, "required": ["status"]}, "then": {"required": ["reason"]}}
+      ]
+    },
+    "adapter": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["adapter_id", "manifest_sha256", "observation_kinds", "capabilities", "status"],
+      "properties": {
+        "adapter_id": {"type": "string", "pattern": "^prc\\.adapter\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+        "manifest_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "observation_kinds": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]*$"}},
+        "capabilities": {"$ref": "#/$defs/capabilities"},
+        "status": {"enum": ["authorized", "blocked"]},
+        "reason": {"type": "string", "minLength": 1}
+      },
+      "allOf": [
+        {"if": {"properties": {"status": {"const": "blocked"}}, "required": ["status"]}, "then": {"required": ["reason"]}}
+      ]
+    },
+    "node": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "kind", "depends_on", "capabilities", "status"],
+      "properties": {
+        "id": {"type": "string", "minLength": 1},
+        "kind": {"enum": ["inventory", "adapter", "assertion", "gate"]},
+        "depends_on": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}},
+        "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+        "implementation_id": {"type": "string", "pattern": "^prc\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+        "adapter_id": {"type": "string", "pattern": "^prc\\.adapter\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+        "manifest_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "capabilities": {"$ref": "#/$defs/capabilities"},
+        "status": {"enum": ["ready", "skipped", "blocked"]},
+        "reason": {"type": "string", "minLength": 1}
+      },
+      "allOf": [
+        {"if": {"properties": {"kind": {"const": "assertion"}}, "required": ["kind"]}, "then": {"required": ["assertion_id", "implementation_id"]}},
+        {"if": {"properties": {"kind": {"const": "adapter"}}, "required": ["kind"]}, "then": {"required": ["adapter_id", "manifest_sha256"]}},
+        {"if": {"properties": {"status": {"enum": ["skipped", "blocked"]}}, "required": ["status"]}, "then": {"required": ["reason"]}}
+      ]
+    }
+  }
+}

package/bin/schemas/plan.schema.json

@@ -0,0 +1,137 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/plan.schema.json",
+  "title": "Production Readiness Scan Plan v0.6",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "digest", "engine_version", "target_name", "inventory_digest", "profile_id", "profile_version", "profile_digest", "catalog_digest", "artifact_digests", "target_environments", "execution_mode", "capability_policy", "implementations", "adapters", "nodes", "assertions"],
+  "properties": {
+    "schema_version": {"const": "prc.plan/v0.6"},
+    "digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "engine_version": {"const": "prc.engine/v0.1"},
+    "target_name": {"type": "string", "minLength": 1},
+    "target_commit": {"type": "string", "pattern": "^[0-9a-f]{40,64}$"},
+    "inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
+    "profile_version": {"type": "string"},
+    "profile_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "catalog_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
+    "artifact_digests": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^sha256:[0-9a-f]{64}$"}
+    },
+    "target_environments": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^[a-z][a-z0-9-]{0,62}$"}
+    },
+    "execution_mode": {"enum": ["inspect", "verify-local"]},
+    "capability_policy": {"$ref": "#/$defs/capabilities"},
+    "implementations": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"$ref": "#/$defs/implementation"}
+    },
+    "adapters": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {"$ref": "#/$defs/adapter"}
+    },
+    "nodes": {
+      "type": "array",
+      "minItems": 2,
+      "uniqueItems": true,
+      "items": {"$ref": "#/$defs/node"}
+    },
+    "assertions": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["assertion_id", "assertion_revision", "definition_digest", "implementation_id", "applicability", "applicability_evaluator", "applicability_reason"],
+        "properties": {
+          "assertion_id": {"type": "string"},
+          "assertion_revision": {"type": "integer", "minimum": 1},
+          "definition_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+          "implementation_id": {"type": "string"},
+          "applicability": {"enum": ["applicable", "not_applicable", "undetermined"]},
+          "applicability_evaluator": {"const": "cel-go/v0.30.0+prc-inventory/v0.3"},
+          "applicability_reason": {"type": "string", "minLength": 1}
+        }
+      }
+    }
+  },
+  "$defs": {
+    "capabilities": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["read_workspace", "write_scratch", "process", "network", "network_hosts", "secret_handles"],
+      "properties": {
+        "read_workspace": {"type": "boolean"},
+        "write_scratch": {"type": "boolean"},
+        "process": {"enum": ["deny", "oci"]},
+        "network": {"const": "deny"},
+        "network_hosts": {"type": "array", "maxItems": 0},
+        "secret_handles": {"type": "array", "maxItems": 0}
+      }
+    },
+    "implementation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "kind", "assertion_ids", "capabilities", "status"],
+      "properties": {
+        "id": {"type": "string", "pattern": "^prc\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+        "kind": {"enum": ["built-in", "manual", "adapter-evidence", "unavailable"]},
+        "assertion_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"}},
+        "capabilities": {"$ref": "#/$defs/capabilities"},
+        "status": {"enum": ["available", "blocked"]},
+        "reason": {"type": "string", "minLength": 1}
+      },
+      "allOf": [
+        {"if": {"properties": {"status": {"const": "blocked"}}, "required": ["status"]}, "then": {"required": ["reason"]}}
+      ]
+    },
+    "adapter": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["adapter_id", "manifest_sha256", "observation_kinds", "capabilities", "status"],
+      "properties": {
+        "adapter_id": {"type": "string", "pattern": "^prc\\.adapter\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+        "manifest_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "observation_kinds": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]*$"}},
+        "capabilities": {"$ref": "#/$defs/capabilities"},
+        "status": {"enum": ["authorized", "blocked"]},
+        "reason": {"type": "string", "minLength": 1}
+      },
+      "allOf": [
+        {"if": {"properties": {"status": {"const": "blocked"}}, "required": ["status"]}, "then": {"required": ["reason"]}}
+      ]
+    },
+    "node": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "kind", "depends_on", "capabilities", "status"],
+      "properties": {
+        "id": {"type": "string", "minLength": 1},
+        "kind": {"enum": ["inventory", "adapter", "assertion", "gate"]},
+        "depends_on": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}},
+        "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+        "implementation_id": {"type": "string", "pattern": "^prc\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+        "adapter_id": {"type": "string", "pattern": "^prc\\.adapter\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+        "manifest_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "capabilities": {"$ref": "#/$defs/capabilities"},
+        "status": {"enum": ["ready", "skipped", "blocked"]},
+        "reason": {"type": "string", "minLength": 1}
+      },
+      "allOf": [
+        {"if": {"properties": {"kind": {"const": "assertion"}}, "required": ["kind"]}, "then": {"required": ["assertion_id", "implementation_id"]}},
+        {"if": {"properties": {"kind": {"const": "adapter"}}, "required": ["kind"]}, "then": {"required": ["adapter_id", "manifest_sha256"]}},
+        {"if": {"properties": {"status": {"enum": ["skipped", "blocked"]}}, "required": ["status"]}, "then": {"required": ["reason"]}}
+      ]
+    }
+  }
+}

package/bin/schemas/profile.schema.json

@@ -0,0 +1,42 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/profile.schema.json",
+  "title": "Production Readiness Profile",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "id",
+    "version",
+    "title",
+    "description",
+    "assertion_ids",
+    "terminal_policy"
+  ],
+  "properties": {
+    "schema_version": {"const": "prc.profile/v0.1"},
+    "id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
+    "version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+$"},
+    "title": {"type": "string", "minLength": 1},
+    "description": {"type": "string", "minLength": 1},
+    "assertion_ids": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"}
+    },
+    "terminal_policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["block_on", "allow_manual_remaining"],
+      "properties": {
+        "block_on": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {"enum": ["critical", "high", "medium", "low", "info"]}
+        },
+        "allow_manual_remaining": {"type": "boolean"}
+      }
+    }
+  }
+}

package/bin/schemas/project-config.schema.json

@@ -0,0 +1,128 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/project-config.schema.json",
+  "title": "Production Readiness Project Configuration",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "project", "assessment", "components", "features", "data", "execution", "remediation"],
+  "properties": {
+    "schema_version": {"const": "prc.config/v0.1"},
+    "project": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "name", "risk_profile"],
+      "properties": {
+        "id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
+        "name": {"type": "string", "minLength": 1, "maxLength": 200},
+        "risk_profile": {"enum": ["low", "medium", "high", "critical"]}
+      }
+    },
+    "assessment": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["profile", "source_ref", "artifact_digests", "target_environments"],
+      "properties": {
+        "profile": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
+        "source_ref": {"type": "string", "pattern": "^(?:[0-9a-f]{40,64})?$"},
+        "artifact_digests": {
+          "type": "array",
+          "maxItems": 10000,
+          "uniqueItems": true,
+          "items": {"type": "string", "pattern": "^sha256:[0-9a-f]{64}$"}
+        },
+        "target_environments": {"$ref": "#/$defs/names"}
+      }
+    },
+    "components": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["include", "exclude"],
+      "properties": {
+        "include": {
+          "type": "array",
+          "maxItems": 1000,
+          "items": {"$ref": "#/$defs/component"}
+        },
+        "exclude": {
+          "type": "array",
+          "maxItems": 1000,
+          "items": {"$ref": "#/$defs/exclusion"}
+        }
+      }
+    },
+    "features": {
+      "type": "object",
+      "maxProperties": 1000,
+      "propertyNames": {"pattern": "^[a-z][a-z0-9-]{0,62}$"},
+      "additionalProperties": {"type": "boolean"}
+    },
+    "data": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["classifications", "regulated", "prohibited_in_evidence"],
+      "properties": {
+        "classifications": {"$ref": "#/$defs/names"},
+        "regulated": {"$ref": "#/$defs/names"},
+        "prohibited_in_evidence": {"$ref": "#/$defs/names"}
+      }
+    },
+    "execution": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["network", "allow_commands", "production_connected", "max_parallel", "max_duration_seconds"],
+      "properties": {
+        "network": {"const": "deny"},
+        "allow_commands": {"type": "array", "maxItems": 0},
+        "production_connected": {"const": false},
+        "max_parallel": {"type": "integer", "minimum": 1, "maximum": 32},
+        "max_duration_seconds": {"type": "integer", "minimum": 1, "maximum": 86400}
+      }
+    },
+    "remediation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["enabled", "max_attempts", "max_files", "max_changed_lines", "protected_paths"],
+      "properties": {
+        "enabled": {"type": "boolean"},
+        "max_attempts": {"type": "integer", "minimum": 1, "maximum": 10},
+        "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
+        "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 10000},
+        "protected_paths": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 10000,
+          "uniqueItems": true,
+          "items": {"$ref": "#/$defs/path"}
+        }
+      }
+    }
+  },
+  "$defs": {
+    "name": {"type": "string", "pattern": "^[a-z][a-z0-9-]{0,62}$"},
+    "names": {
+      "type": "array",
+      "maxItems": 10000,
+      "uniqueItems": true,
+      "items": {"$ref": "#/$defs/name"}
+    },
+    "path": {"type": "string", "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.\\.(?:/|$)).+$"},
+    "component": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "type"],
+      "properties": {
+        "path": {"$ref": "#/$defs/path"},
+        "type": {"enum": ["repository", "web-frontend", "http-api", "service", "worker", "job", "library", "cli", "infrastructure", "container"]}
+      }
+    },
+    "exclusion": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "rationale"],
+      "properties": {
+        "path": {"$ref": "#/$defs/path"},
+        "rationale": {"type": "string", "minLength": 1, "maxLength": 1000}
+      }
+    }
+  }
+}

package/bin/schemas/release-manifest-v0.1.schema.json

@@ -0,0 +1,86 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/release-manifest-v0.1.schema.json",
+  "title": "Production Readiness Scanner release manifest v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version", "product", "version", "source_commit", "built_at",
+    "go_version", "catalog", "packs", "artifacts", "sbom"
+  ],
+  "properties": {
+    "schema_version": {"const": "prc.release-manifest/v0.1"},
+    "product": {"const": "prc-scanner"},
+    "version": {"$ref": "#/$defs/version"},
+    "source_commit": {"type": "string", "pattern": "^(?:[0-9a-f]{40}|[0-9a-f]{64})$"},
+    "built_at": {"type": "string", "format": "date-time"},
+    "go_version": {"type": "string", "pattern": "^go1\\.[0-9]+(?:\\.[0-9]+)?"},
+    "catalog": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schema_version", "catalog_version", "catalog_digest", "objective_count", "assertion_count", "profile_count"],
+      "properties": {
+        "schema_version": {"const": "prc.catalog-manifest/v0.1"},
+        "catalog_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
+        "catalog_digest": {"$ref": "#/$defs/digest"},
+        "objective_count": {"type": "integer", "minimum": 1},
+        "assertion_count": {"type": "integer", "minimum": 1},
+        "profile_count": {"type": "integer", "minimum": 1}
+      }
+    },
+    "packs": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "path", "digest", "suite_digest", "benchmark_corpus_digest", "catalog_digest"],
+        "properties": {
+          "id": {"type": "string", "minLength": 1},
+          "path": {"type": "string", "pattern": "^packs/[A-Za-z0-9._-]+\\.ya?ml$"},
+          "digest": {"$ref": "#/$defs/digest"},
+          "suite_digest": {"$ref": "#/$defs/digest"},
+          "benchmark_corpus_digest": {"$ref": "#/$defs/digest"},
+          "catalog_digest": {"$ref": "#/$defs/digest"}
+        }
+      }
+    },
+    "artifacts": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["name", "goos", "goarch", "archive_format", "sha256", "size"],
+        "properties": {
+          "name": {"type": "string", "pattern": "^prc_[0-9A-Za-z.-]+_(?:linux|darwin|windows)_(?:amd64|arm64)\\.(?:tar\\.gz|zip)$"},
+          "goos": {"enum": ["linux", "darwin", "windows"]},
+          "goarch": {"enum": ["amd64", "arm64"]},
+          "archive_format": {"enum": ["tar.gz", "zip"]},
+          "sha256": {"$ref": "#/$defs/digest"},
+          "size": {"type": "integer", "minimum": 1}
+        }
+      }
+    },
+    "sbom": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "format", "spec_version", "sha256", "size"],
+      "properties": {
+        "name": {"type": "string", "pattern": "^prc_[0-9A-Za-z.-]+\\.cdx\\.json$"},
+        "format": {"const": "CycloneDX"},
+        "spec_version": {"const": "1.6"},
+        "sha256": {"$ref": "#/$defs/digest"},
+        "size": {"type": "integer", "minimum": 1}
+      }
+    }
+  },
+  "$defs": {
+    "digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "version": {
+      "type": "string",
+      "maxLength": 128,
+      "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-(?:(?:0|[1-9][0-9]*)|(?:[0-9A-Za-z-]*[A-Za-z-][0-9A-Za-z-]*))(?:\\.(?:(?:0|[1-9][0-9]*)|(?:[0-9A-Za-z-]*[A-Za-z-][0-9A-Za-z-]*)))*)?$"
+    }
+  }
+}