@marinjursic/prc-linux-arm64 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (264) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +3 -0
  3. package/bin/LICENSE +21 -0
  4. package/bin/README.md +335 -0
  5. package/bin/THIRD_PARTY_NOTICES.md +74 -0
  6. package/bin/adapters/checkov-v3.3.8.yaml +50 -0
  7. package/bin/adapters/gitleaks-v8.30.0.yaml +63 -0
  8. package/bin/adapters/grype-v0.116.1.yaml +58 -0
  9. package/bin/adapters/syft-v1.51.0.yaml +54 -0
  10. package/bin/catalog/assertions/core-repository.yaml +625 -0
  11. package/bin/catalog/assertions/iac.yaml +24 -0
  12. package/bin/catalog/assertions/supply-chain.yaml +45 -0
  13. package/bin/catalog/control-contracts.json +1 -0
  14. package/bin/catalog/control-id-registry.json +110470 -0
  15. package/bin/catalog/objectives/core-repository.yaml +243 -0
  16. package/bin/catalog/objectives/iac.yaml +13 -0
  17. package/bin/catalog/objectives/supply-chain.yaml +13 -0
  18. package/bin/catalog/profiles/api.yaml +12 -0
  19. package/bin/catalog/profiles/core-repository.yaml +49 -0
  20. package/bin/catalog/profiles/iac.yaml +18 -0
  21. package/bin/catalog/profiles/kubernetes.yaml +15 -0
  22. package/bin/catalog/profiles/quick.yaml +27 -0
  23. package/bin/catalog/profiles/supply-chain.yaml +20 -0
  24. package/bin/docs/architecture/adapters.md +380 -0
  25. package/bin/docs/architecture/agent-providers.md +188 -0
  26. package/bin/docs/architecture/applicability.md +80 -0
  27. package/bin/docs/architecture/catalog-integrity.md +85 -0
  28. package/bin/docs/architecture/evidence-and-results.md +154 -0
  29. package/bin/docs/architecture/execution-plans.md +61 -0
  30. package/bin/docs/architecture/product-contract.md +76 -0
  31. package/bin/docs/architecture/publisher-trust.md +68 -0
  32. package/bin/docs/architecture/remediation-contract.md +113 -0
  33. package/bin/docs/architecture/trust-model.md +95 -0
  34. package/bin/docs/assets/hero.svg +37 -0
  35. package/bin/docs/assets/logo.svg +13 -0
  36. package/bin/docs/assets/production-readiness-scan-demo-poster.png +0 -0
  37. package/bin/docs/assets/production-readiness-scan-demo.gif +0 -0
  38. package/bin/docs/assets/production-readiness-scan-demo.mp4 +0 -0
  39. package/bin/docs/assets/social-card.png +0 -0
  40. package/bin/docs/assets/social-card.svg +40 -0
  41. package/bin/docs/checklists/00-readiness-principle.md +17 -0
  42. package/bin/docs/checklists/01-release-foundations.md +91 -0
  43. package/bin/docs/checklists/02-product-risk-architecture.md +136 -0
  44. package/bin/docs/checklists/03-source-build-supply-chain.md +97 -0
  45. package/bin/docs/checklists/04-environments-quality-experience.md +226 -0
  46. package/bin/docs/checklists/05-application-security.md +320 -0
  47. package/bin/docs/checklists/06-data-privacy-performance.md +166 -0
  48. package/bin/docs/checklists/07-reliability-operations.md +355 -0
  49. package/bin/docs/checklists/08-maintenance-vendors-compliance.md +112 -0
  50. package/bin/docs/checklists/09-conditional-modules.md +229 -0
  51. package/bin/docs/checklists/10-evidence-and-decision.md +111 -0
  52. package/bin/docs/engineering/00-overview.md +51 -0
  53. package/bin/docs/engineering/01-governance-and-foundations.md +919 -0
  54. package/bin/docs/engineering/02-product-and-requirements.md +186 -0
  55. package/bin/docs/engineering/03-user-experience-web-and-content.md +1352 -0
  56. package/bin/docs/engineering/04-architecture-and-design.md +387 -0
  57. package/bin/docs/engineering/05-code-quality-and-implementation.md +1103 -0
  58. package/bin/docs/engineering/06-application-services-and-apis.md +476 -0
  59. package/bin/docs/engineering/07-data-and-information-lifecycle.md +1009 -0
  60. package/bin/docs/engineering/08-security-and-cryptography.md +1215 -0
  61. package/bin/docs/engineering/09-privacy-and-data-protection.md +205 -0
  62. package/bin/docs/engineering/10-verification-and-testing.md +841 -0
  63. package/bin/docs/engineering/11-developer-experience-platform-and-delivery.md +1013 -0
  64. package/bin/docs/engineering/12-operations-sre-and-support.md +795 -0
  65. package/bin/docs/engineering/13-documentation-and-knowledge.md +349 -0
  66. package/bin/docs/engineering/14-trust-safety-and-ecosystems.md +330 -0
  67. package/bin/docs/engineering/15-ai-ml-and-ai-assisted-development.md +785 -0
  68. package/bin/docs/engineering/16-specialized-domains-and-release-assurance.md +775 -0
  69. package/bin/docs/engineering/source-manifest.md +479 -0
  70. package/bin/docs/guides/ai-assisted-review.md +61 -0
  71. package/bin/docs/guides/getting-started.md +78 -0
  72. package/bin/docs/index.md +66 -0
  73. package/bin/docs/prompts/evidence-challenge.md +26 -0
  74. package/bin/docs/prompts/full-readiness-review.md +34 -0
  75. package/bin/docs/prompts/release-diff-review.md +31 -0
  76. package/bin/docs/records/evidence-record.md +42 -0
  77. package/bin/docs/records/go-no-go-decision.md +63 -0
  78. package/bin/docs/records/release-assessment.md +124 -0
  79. package/bin/docs/records/risk-exception.md +64 -0
  80. package/bin/docs/references.md +52 -0
  81. package/bin/docs/scanner/ai-control-review.md +208 -0
  82. package/bin/docs/scanner/benchmarks.md +122 -0
  83. package/bin/docs/scanner/cli-contract.md +130 -0
  84. package/bin/docs/scanner/configuration.md +101 -0
  85. package/bin/docs/scanner/control-contracts.md +47 -0
  86. package/bin/docs/scanner/core-repository.md +62 -0
  87. package/bin/docs/scanner/diff-and-invalidation.md +79 -0
  88. package/bin/docs/scanner/doctor.md +71 -0
  89. package/bin/docs/scanner/getting-started.md +355 -0
  90. package/bin/docs/scanner/go-http-timeouts.md +96 -0
  91. package/bin/docs/scanner/infrastructure-policy.md +64 -0
  92. package/bin/docs/scanner/kubernetes-workloads.md +63 -0
  93. package/bin/docs/scanner/mcp-agent-integration.md +138 -0
  94. package/bin/docs/scanner/openapi-contracts.md +75 -0
  95. package/bin/docs/scanner/private-key-armor.md +44 -0
  96. package/bin/docs/scanner/releases.md +160 -0
  97. package/bin/docs/scanner/remediation.md +273 -0
  98. package/bin/docs/scanner/risk-exceptions.md +52 -0
  99. package/bin/docs/scanner/security-walkthrough.md +236 -0
  100. package/bin/docs/scanner/state-and-history.md +113 -0
  101. package/bin/docs/scanner/supply-chain.md +132 -0
  102. package/bin/docs/scanner/test-discovery.md +60 -0
  103. package/bin/docs/stylesheets/extra.css +183 -0
  104. package/bin/fixtures/benchmarks/core-native/suite-comprehensive.yaml +302 -0
  105. package/bin/fixtures/benchmarks/core-native/suite.yaml +59 -0
  106. package/bin/fixtures/benchmarks/core-native/targets/baseline/README.md +3 -0
  107. package/bin/fixtures/benchmarks/core-native/targets/baseline/app.go +1 -0
  108. package/bin/fixtures/benchmarks/core-native/targets/conflict-template/app.js +5 -0
  109. package/bin/fixtures/benchmarks/core-native/targets/container-risky-template/Dockerfile +2 -0
  110. package/bin/fixtures/benchmarks/core-native/targets/container-valid/Dockerfile +2 -0
  111. package/bin/fixtures/benchmarks/core-native/targets/dependency-lock-missing/package.json +5 -0
  112. package/bin/fixtures/benchmarks/core-native/targets/dependency-lock-present/package-lock.json +6 -0
  113. package/bin/fixtures/benchmarks/core-native/targets/dependency-lock-present/package.json +5 -0
  114. package/bin/fixtures/benchmarks/core-native/targets/empty-manifest-template/package.json +1 -0
  115. package/bin/fixtures/benchmarks/core-native/targets/final-newline-template/app.py +1 -0
  116. package/bin/fixtures/benchmarks/core-native/targets/foundation-present/.github/CODEOWNERS +1 -0
  117. package/bin/fixtures/benchmarks/core-native/targets/foundation-present/.github/dependabot.yml +6 -0
  118. package/bin/fixtures/benchmarks/core-native/targets/foundation-present/.github/workflows/validate.yml +15 -0
  119. package/bin/fixtures/benchmarks/core-native/targets/foundation-present/CODE_OF_CONDUCT.md +3 -0
  120. package/bin/fixtures/benchmarks/core-native/targets/foundation-present/CONTRIBUTING.md +3 -0
  121. package/bin/fixtures/benchmarks/core-native/targets/foundation-present/LICENSE +1 -0
  122. package/bin/fixtures/benchmarks/core-native/targets/foundation-present/README.md +3 -0
  123. package/bin/fixtures/benchmarks/core-native/targets/foundation-present/SECURITY.md +3 -0
  124. package/bin/fixtures/benchmarks/core-native/targets/foundation-present/package-lock.json +6 -0
  125. package/bin/fixtures/benchmarks/core-native/targets/foundation-present/package.json +7 -0
  126. package/bin/fixtures/benchmarks/core-native/targets/foundation-present/tests/example.test.js +3 -0
  127. package/bin/fixtures/benchmarks/core-native/targets/go-http-server-timeout-risky-template/go.mod +3 -0
  128. package/bin/fixtures/benchmarks/core-native/targets/go-http-server-timeout-risky-template/server.go +18 -0
  129. package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-malformed-template/client.go +3 -0
  130. package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-malformed-template/go.mod +3 -0
  131. package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-risky-template/client.go +7 -0
  132. package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-risky-template/go.mod +3 -0
  133. package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-safe/client.go +22 -0
  134. package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-safe/go.mod +3 -0
  135. package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-safe/hazards_test.go +8 -0
  136. package/bin/fixtures/benchmarks/core-native/targets/kubernetes-risky-template/deployment.yaml +27 -0
  137. package/bin/fixtures/benchmarks/core-native/targets/kubernetes-valid/deployment.yaml +26 -0
  138. package/bin/fixtures/benchmarks/core-native/targets/openapi-operation-ids-risky-template/openapi.yaml +17 -0
  139. package/bin/fixtures/benchmarks/core-native/targets/openapi-operation-responses-risky-template/openapi.yaml +11 -0
  140. package/bin/fixtures/benchmarks/core-native/targets/openapi-root-malformed-template/openapi.yaml +5 -0
  141. package/bin/fixtures/benchmarks/core-native/targets/openapi-root-risky-template/openapi.yaml +5 -0
  142. package/bin/fixtures/benchmarks/core-native/targets/openapi-root-valid/openapi.yaml +17 -0
  143. package/bin/fixtures/benchmarks/core-native/targets/package-test-command/app.js +3 -0
  144. package/bin/fixtures/benchmarks/core-native/targets/package-test-command/package.json +7 -0
  145. package/bin/fixtures/benchmarks/core-native/targets/package-test-placeholder/app.js +3 -0
  146. package/bin/fixtures/benchmarks/core-native/targets/package-test-placeholder/package.json +7 -0
  147. package/bin/fixtures/benchmarks/core-native/targets/private-key-template/deploy.pem +3 -0
  148. package/bin/fixtures/benchmarks/core-native/targets/readme-missing/fixture.txt +1 -0
  149. package/bin/fixtures/benchmarks/core-native/targets/runtime-missing/package-lock.json +6 -0
  150. package/bin/fixtures/benchmarks/core-native/targets/runtime-missing/package.json +4 -0
  151. package/bin/fixtures/benchmarks/core-native/targets/terraform-locked/.terraform.lock.hcl +3 -0
  152. package/bin/fixtures/benchmarks/core-native/targets/terraform-locked/main.tf +7 -0
  153. package/bin/fixtures/benchmarks/core-native/targets/terraform-unlocked-template/.terraform.lock.hcl +3 -0
  154. package/bin/fixtures/benchmarks/core-native/targets/terraform-unlocked-template/main.tf +7 -0
  155. package/bin/fixtures/benchmarks/core-native/targets/test-declaration-valid/app.py +2 -0
  156. package/bin/fixtures/benchmarks/core-native/targets/test-declaration-valid/tests/test_app.py +5 -0
  157. package/bin/fixtures/benchmarks/core-native/targets/test-path-without-declaration/app.py +2 -0
  158. package/bin/fixtures/benchmarks/core-native/targets/test-path-without-declaration/tests/test_app.py +1 -0
  159. package/bin/fixtures/benchmarks/core-native/targets/workflow-malformed/.github/workflows/validate.yml +1 -0
  160. package/bin/fixtures/benchmarks/core-native/targets/workflow-no-jobs/.github/workflows/empty.yml +9 -0
  161. package/bin/fixtures/benchmarks/core-native/targets/workflow-risky/.github/workflows/risky.yml +10 -0
  162. package/bin/fixtures/benchmarks/core-native/targets/workflow-valid/.github/workflows/validate.yml +14 -0
  163. package/bin/packs/core-foundation.yaml +25 -0
  164. package/bin/packs/core-native.yaml +59 -0
  165. package/bin/prc +0 -0
  166. package/bin/schemas/adapter-execution-v0.1.schema.json +101 -0
  167. package/bin/schemas/adapter-execution-v0.2.schema.json +128 -0
  168. package/bin/schemas/adapter-execution.schema.json +145 -0
  169. package/bin/schemas/adapter-fixture-report.schema.json +59 -0
  170. package/bin/schemas/adapter-fixture-suite.schema.json +104 -0
  171. package/bin/schemas/adapter-manifest-v0.1.schema.json +55 -0
  172. package/bin/schemas/adapter-manifest-v0.2.schema.json +122 -0
  173. package/bin/schemas/adapter-manifest-v0.3.schema.json +172 -0
  174. package/bin/schemas/adapter-manifest.schema.json +299 -0
  175. package/bin/schemas/adapter-message.schema.json +136 -0
  176. package/bin/schemas/adapter-registry-report.schema.json +13 -0
  177. package/bin/schemas/adapter-registry.schema.json +47 -0
  178. package/bin/schemas/agent-execution-v0.1.schema.json +26 -0
  179. package/bin/schemas/agent-execution.schema.json +26 -0
  180. package/bin/schemas/agent-failure-v0.1.schema.json +102 -0
  181. package/bin/schemas/agent-failure.schema.json +102 -0
  182. package/bin/schemas/agent-output-v0.1.schema.json +36 -0
  183. package/bin/schemas/agent-output.schema.json +36 -0
  184. package/bin/schemas/agent-task-v0.1.schema.json +44 -0
  185. package/bin/schemas/agent-task.schema.json +46 -0
  186. package/bin/schemas/assertion-catalog.schema.json +69 -0
  187. package/bin/schemas/benchmark-report.schema.json +94 -0
  188. package/bin/schemas/benchmark-suite.schema.json +116 -0
  189. package/bin/schemas/catalog-bundle.schema.json +27 -0
  190. package/bin/schemas/catalog-manifest.schema.json +23 -0
  191. package/bin/schemas/checkov-iac-policy-report.schema.json +82 -0
  192. package/bin/schemas/control-contracts.schema.json +44 -0
  193. package/bin/schemas/control-review-output.schema.json +51 -0
  194. package/bin/schemas/doctor.schema.json +53 -0
  195. package/bin/schemas/evidence-v0.1.schema.json +21 -0
  196. package/bin/schemas/evidence.schema.json +21 -0
  197. package/bin/schemas/finding-v0.1.schema.json +70 -0
  198. package/bin/schemas/finding.schema.json +70 -0
  199. package/bin/schemas/fix-contract-v0.1.schema.json +35 -0
  200. package/bin/schemas/fix-contract-v0.2.schema.json +46 -0
  201. package/bin/schemas/fix-contract-v0.3.schema.json +49 -0
  202. package/bin/schemas/fix-contract.schema.json +49 -0
  203. package/bin/schemas/grype-vulnerability-report.schema.json +88 -0
  204. package/bin/schemas/history.schema.json +37 -0
  205. package/bin/schemas/invalidation.schema.json +86 -0
  206. package/bin/schemas/inventory-v0.1.schema.json +42 -0
  207. package/bin/schemas/inventory-v0.2.schema.json +95 -0
  208. package/bin/schemas/inventory-v0.3.schema.json +139 -0
  209. package/bin/schemas/inventory.schema.json +139 -0
  210. package/bin/schemas/objective-catalog.schema.json +62 -0
  211. package/bin/schemas/pack-report.schema.json +16 -0
  212. package/bin/schemas/pack.schema.json +53 -0
  213. package/bin/schemas/plan-v0.1.schema.json +31 -0
  214. package/bin/schemas/plan-v0.2.schema.json +32 -0
  215. package/bin/schemas/plan-v0.3.schema.json +44 -0
  216. package/bin/schemas/plan-v0.4.schema.json +48 -0
  217. package/bin/schemas/plan-v0.5.schema.json +49 -0
  218. package/bin/schemas/plan-v0.6.schema.json +137 -0
  219. package/bin/schemas/plan.schema.json +137 -0
  220. package/bin/schemas/profile.schema.json +42 -0
  221. package/bin/schemas/project-config.schema.json +128 -0
  222. package/bin/schemas/release-manifest-v0.1.schema.json +86 -0
  223. package/bin/schemas/release-manifest-v0.2.schema.json +146 -0
  224. package/bin/schemas/release-manifest-v0.3.schema.json +146 -0
  225. package/bin/schemas/release-manifest.schema.json +6 -0
  226. package/bin/schemas/remediation-candidate-v0.1.schema.json +51 -0
  227. package/bin/schemas/remediation-candidate-v0.2.schema.json +51 -0
  228. package/bin/schemas/remediation-candidate-v0.3.schema.json +51 -0
  229. package/bin/schemas/remediation-candidate-v0.4.schema.json +69 -0
  230. package/bin/schemas/remediation-candidate.schema.json +69 -0
  231. package/bin/schemas/remediation-run-v0.1.schema.json +69 -0
  232. package/bin/schemas/remediation-run-v0.2.schema.json +78 -0
  233. package/bin/schemas/remediation-run-v0.3.schema.json +86 -0
  234. package/bin/schemas/remediation-run-v0.4.schema.json +86 -0
  235. package/bin/schemas/remediation-run-v0.5.schema.json +131 -0
  236. package/bin/schemas/remediation-run-v0.6.schema.json +143 -0
  237. package/bin/schemas/remediation-run-v0.7.schema.json +160 -0
  238. package/bin/schemas/remediation-run-v0.8.schema.json +161 -0
  239. package/bin/schemas/remediation-run.schema.json +161 -0
  240. package/bin/schemas/risk-exception-verification.schema.json +17 -0
  241. package/bin/schemas/risk-exception.schema.json +137 -0
  242. package/bin/schemas/run-result-v0.1.schema.json +54 -0
  243. package/bin/schemas/run-result-v0.10.schema.json +64 -0
  244. package/bin/schemas/run-result-v0.11.schema.json +146 -0
  245. package/bin/schemas/run-result-v0.2.schema.json +60 -0
  246. package/bin/schemas/run-result-v0.3.schema.json +52 -0
  247. package/bin/schemas/run-result-v0.4.schema.json +52 -0
  248. package/bin/schemas/run-result-v0.5.schema.json +60 -0
  249. package/bin/schemas/run-result-v0.6.schema.json +61 -0
  250. package/bin/schemas/run-result-v0.7.schema.json +61 -0
  251. package/bin/schemas/run-result-v0.8.schema.json +61 -0
  252. package/bin/schemas/run-result-v0.9.schema.json +77 -0
  253. package/bin/schemas/run-result.schema.json +165 -0
  254. package/bin/schemas/signature-verification.schema.json +22 -0
  255. package/bin/schemas/signature.schema.json +18 -0
  256. package/bin/schemas/state-check-v0.1.schema.json +27 -0
  257. package/bin/schemas/state-check.schema.json +28 -0
  258. package/bin/schemas/trust-store.schema.json +50 -0
  259. package/bin/schemas/verification-execution-v0.1.schema.json +105 -0
  260. package/bin/schemas/verification-execution.schema.json +105 -0
  261. package/bin/schemas/version-v0.1.schema.json +27 -0
  262. package/bin/schemas/version.schema.json +27 -0
  263. package/manifest.json +9 -0
  264. package/package.json +28 -0
@@ -0,0 +1,69 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/remediation-run-v0.1.schema.json",
4
+ "title": "Production Readiness Remediation Run v0.1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["schema_version", "run_id", "started_at", "completed_at", "profile_id", "source_inventory_digest", "candidate_root", "result_workspace", "final_inventory_digest", "original_unchanged", "max_attempts", "max_files", "max_changed_lines", "usage", "candidates", "final_run", "gate_state", "terminal_state", "remaining", "stop_reasons"],
8
+ "properties": {
9
+ "schema_version": {"const": "prc.remediation-run/v0.1"},
10
+ "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
11
+ "started_at": {"type": "string", "format": "date-time"},
12
+ "completed_at": {"type": "string", "format": "date-time"},
13
+ "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
14
+ "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
15
+ "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
16
+ "source_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
17
+ "candidate_root": {"type": "string", "minLength": 1},
18
+ "result_workspace": {"type": "string", "minLength": 1},
19
+ "final_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
20
+ "original_unchanged": {"const": true},
21
+ "max_attempts": {"type": "integer", "minimum": 1, "maximum": 10},
22
+ "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
23
+ "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 1000},
24
+ "usage": {"$ref": "#/$defs/usage"},
25
+ "candidates": {"type": "array", "maxItems": 10, "items": {"$ref": "remediation-candidate-v0.1.schema.json"}},
26
+ "final_run": {"$ref": "run-result-v0.4.schema.json"},
27
+ "gate_state": {"enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "environment_blocked", "no_go"]},
28
+ "terminal_state": {"enum": ["profile_satisfied", "machine_work_complete", "stopped_by_policy_or_budget", "candidate_rejected"]},
29
+ "remaining": {"type": "array", "uniqueItems": true, "items": {"$ref": "#/$defs/remaining_work"}},
30
+ "stop_reasons": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
31
+ },
32
+ "allOf": [
33
+ {"if": {"required": ["configuration_digest"]}, "then": {"required": ["project_id"]}},
34
+ {"if": {"required": ["project_id"]}, "then": {"required": ["configuration_digest"]}},
35
+ {
36
+ "if": {"properties": {"terminal_state": {"enum": ["profile_satisfied", "machine_work_complete"]}}, "required": ["terminal_state"]},
37
+ "then": {"properties": {"stop_reasons": {"maxItems": 0}}},
38
+ "else": {"properties": {"stop_reasons": {"minItems": 1}}}
39
+ }
40
+ ],
41
+ "$defs": {
42
+ "usage": {
43
+ "type": "object", "additionalProperties": false,
44
+ "required": ["attempts", "changed_files", "changed_lines"],
45
+ "properties": {
46
+ "attempts": {"type": "integer", "minimum": 0, "maximum": 10},
47
+ "changed_files": {"type": "integer", "minimum": 0},
48
+ "changed_lines": {"type": "integer", "minimum": 0}
49
+ }
50
+ },
51
+ "remaining_work": {
52
+ "type": "object", "additionalProperties": false,
53
+ "required": ["assertion_id", "control_ids", "title", "assessment", "execution", "severity", "gate", "remediation_class", "summary", "reason_code", "reason"],
54
+ "properties": {
55
+ "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
56
+ "control_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Z]+-[0-9A-F]{8}$"}},
57
+ "title": {"type": "string", "minLength": 1},
58
+ "assessment": {"enum": ["fail", "unknown", "manual_review", "stale", "conflicting"]},
59
+ "execution": {"enum": ["completed", "blocked", "error", "not_run"]},
60
+ "severity": {"enum": ["low", "medium", "high", "critical"]},
61
+ "gate": {"enum": ["advisory", "required", "no-go"]},
62
+ "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]},
63
+ "summary": {"type": "string", "minLength": 1},
64
+ "reason_code": {"enum": ["budget_exhausted", "candidate_rejected", "human_evidence_required", "evidence_or_execution_required", "detect_explain_only", "no_registered_fixer", "agent_proposal_required", "human_review_required", "specialized_approval_required", "separate_operational_workflow_required", "human_decision_required", "unsupported_remediation_class"]},
65
+ "reason": {"type": "string", "minLength": 1}
66
+ }
67
+ }
68
+ }
69
+ }
@@ -0,0 +1,78 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/remediation-run-v0.2.schema.json",
4
+ "title": "Production Readiness Remediation Run v0.2",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["schema_version", "run_id", "started_at", "completed_at", "profile_id", "source_inventory_digest", "candidate_root", "result_workspace", "final_inventory_digest", "original_unchanged", "max_attempts", "max_files", "max_changed_lines", "usage", "candidates", "provider_executions", "final_run", "gate_state", "terminal_state", "remaining", "stop_reasons"],
8
+ "properties": {
9
+ "schema_version": {"const": "prc.remediation-run/v0.2"},
10
+ "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
11
+ "started_at": {"type": "string", "format": "date-time"},
12
+ "completed_at": {"type": "string", "format": "date-time"},
13
+ "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
14
+ "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
15
+ "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
16
+ "source_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
17
+ "candidate_root": {"type": "string", "minLength": 1},
18
+ "result_workspace": {"type": "string", "minLength": 1},
19
+ "final_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
20
+ "original_unchanged": {"const": true},
21
+ "max_attempts": {"type": "integer", "minimum": 1, "maximum": 10},
22
+ "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
23
+ "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 1000},
24
+ "usage": {"$ref": "#/$defs/usage"},
25
+ "candidates": {"type": "array", "maxItems": 10, "items": {"$ref": "remediation-candidate-v0.2.schema.json"}},
26
+ "provider_executions": {"type": "array", "maxItems": 10, "items": {"$ref": "agent-execution-v0.1.schema.json"}},
27
+ "final_run": {"$ref": "run-result-v0.5.schema.json"},
28
+ "gate_state": {"enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "environment_blocked", "no_go"]},
29
+ "terminal_state": {"enum": ["profile_satisfied", "machine_work_complete", "stopped_by_policy_or_budget", "candidate_rejected", "provider_stopped"]},
30
+ "remaining": {"type": "array", "uniqueItems": true, "items": {"$ref": "#/$defs/remaining_work"}},
31
+ "stop_reasons": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
32
+ },
33
+ "allOf": [
34
+ {
35
+ "if": {"required": ["configuration_digest"]},
36
+ "then": {"required": ["project_id"]}
37
+ },
38
+ {
39
+ "if": {"required": ["project_id"]},
40
+ "then": {"required": ["configuration_digest"]}
41
+ },
42
+ {
43
+ "if": {"properties": {"terminal_state": {"enum": ["profile_satisfied", "machine_work_complete"]}}, "required": ["terminal_state"]},
44
+ "then": {"properties": {"stop_reasons": {"maxItems": 0}}},
45
+ "else": {"properties": {"stop_reasons": {"minItems": 1}}}
46
+ }
47
+ ],
48
+ "$defs": {
49
+ "usage": {
50
+ "type": "object",
51
+ "additionalProperties": false,
52
+ "required": ["attempts", "changed_files", "changed_lines"],
53
+ "properties": {
54
+ "attempts": {"type": "integer", "minimum": 0, "maximum": 10},
55
+ "changed_files": {"type": "integer", "minimum": 0},
56
+ "changed_lines": {"type": "integer", "minimum": 0}
57
+ }
58
+ },
59
+ "remaining_work": {
60
+ "type": "object",
61
+ "additionalProperties": false,
62
+ "required": ["assertion_id", "control_ids", "title", "assessment", "execution", "severity", "gate", "remediation_class", "summary", "reason_code", "reason"],
63
+ "properties": {
64
+ "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
65
+ "control_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Z]+-[0-9A-F]{8}$"}},
66
+ "title": {"type": "string", "minLength": 1},
67
+ "assessment": {"enum": ["fail", "unknown", "manual_review", "stale", "conflicting"]},
68
+ "execution": {"enum": ["completed", "blocked", "error", "not_run"]},
69
+ "severity": {"enum": ["low", "medium", "high", "critical"]},
70
+ "gate": {"enum": ["advisory", "required", "no-go"]},
71
+ "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]},
72
+ "summary": {"type": "string", "minLength": 1},
73
+ "reason_code": {"enum": ["budget_exhausted", "candidate_rejected", "provider_stopped", "human_evidence_required", "evidence_or_execution_required", "detect_explain_only", "no_registered_fixer", "agent_proposal_required", "no_safe_agent_task", "human_review_required", "specialized_approval_required", "separate_operational_workflow_required", "human_decision_required", "unsupported_remediation_class"]},
74
+ "reason": {"type": "string", "minLength": 1}
75
+ }
76
+ }
77
+ }
78
+ }
@@ -0,0 +1,86 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/remediation-run-v0.3.schema.json",
4
+ "title": "Production Readiness Remediation Run v0.3 (legacy)",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["schema_version", "run_id", "started_at", "completed_at", "profile_id", "source_inventory_digest", "candidate_root", "result_workspace", "final_inventory_digest", "original_unchanged", "max_attempts", "max_files", "max_changed_lines", "usage", "candidates", "provider_executions", "final_run", "gate_state", "terminal_state", "remaining", "stop_reasons"],
8
+ "properties": {
9
+ "schema_version": {"const": "prc.remediation-run/v0.3"},
10
+ "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
11
+ "started_at": {"type": "string", "format": "date-time"},
12
+ "completed_at": {"type": "string", "format": "date-time"},
13
+ "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
14
+ "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
15
+ "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
16
+ "source_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
17
+ "candidate_root": {"type": "string", "minLength": 1},
18
+ "result_workspace": {"type": "string", "minLength": 1},
19
+ "final_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
20
+ "original_unchanged": {"const": true},
21
+ "max_attempts": {"type": "integer", "minimum": 1, "maximum": 10},
22
+ "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
23
+ "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 1000},
24
+ "usage": {"$ref": "#/$defs/usage"},
25
+ "candidates": {"type": "array", "maxItems": 10, "items": {"$ref": "remediation-candidate-v0.3.schema.json"}},
26
+ "provider_executions": {"type": "array", "maxItems": 10, "items": {"$ref": "agent-execution-v0.1.schema.json"}},
27
+ "final_run": {"$ref": "run-result-v0.7.schema.json"},
28
+ "gate_state": {"enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "environment_blocked", "no_go"]},
29
+ "terminal_state": {"enum": ["profile_satisfied", "machine_work_complete", "stopped_by_policy_or_budget", "candidate_rejected", "provider_stopped"]},
30
+ "remaining": {"type": "array", "uniqueItems": true, "items": {"$ref": "#/$defs/remaining_work"}},
31
+ "stop_reasons": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
32
+ },
33
+ "allOf": [
34
+ {
35
+ "if": {"required": ["configuration_digest"]},
36
+ "then": {"required": ["project_id"]}
37
+ },
38
+ {
39
+ "if": {"required": ["project_id"]},
40
+ "then": {"required": ["configuration_digest"]}
41
+ },
42
+ {
43
+ "if": {"properties": {"terminal_state": {"enum": ["profile_satisfied", "machine_work_complete"]}}, "required": ["terminal_state"]},
44
+ "then": {"properties": {"stop_reasons": {"maxItems": 0}}},
45
+ "else": {"properties": {"stop_reasons": {"minItems": 1}}}
46
+ }
47
+ ],
48
+ "$defs": {
49
+ "usage": {
50
+ "type": "object",
51
+ "additionalProperties": false,
52
+ "required": ["attempts", "changed_files", "changed_lines"],
53
+ "properties": {
54
+ "attempts": {"type": "integer", "minimum": 0, "maximum": 10},
55
+ "changed_files": {"type": "integer", "minimum": 0},
56
+ "changed_lines": {"type": "integer", "minimum": 0}
57
+ }
58
+ },
59
+ "remaining_work": {
60
+ "type": "object",
61
+ "additionalProperties": false,
62
+ "required": ["assertion_id", "control_ids", "title", "assessment", "execution", "severity", "gate", "remediation_class", "summary", "reason_code", "reason"],
63
+ "properties": {
64
+ "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
65
+ "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
66
+ "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
67
+ "control_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Z]+-[0-9A-F]{8}$"}},
68
+ "title": {"type": "string", "minLength": 1},
69
+ "assessment": {"enum": ["fail", "unknown", "manual_review", "stale", "conflicting"]},
70
+ "execution": {"enum": ["completed", "blocked", "error", "not_run"]},
71
+ "severity": {"enum": ["low", "medium", "high", "critical"]},
72
+ "gate": {"enum": ["advisory", "required", "no-go"]},
73
+ "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]},
74
+ "summary": {"type": "string", "minLength": 1},
75
+ "reason_code": {"enum": ["budget_exhausted", "candidate_rejected", "provider_stopped", "human_evidence_required", "evidence_or_execution_required", "detect_explain_only", "no_registered_fixer", "agent_proposal_required", "no_safe_agent_task", "human_review_required", "specialized_approval_required", "separate_operational_workflow_required", "human_decision_required", "unsupported_remediation_class"]},
76
+ "reason": {"type": "string", "minLength": 1}
77
+ },
78
+ "allOf": [
79
+ {
80
+ "if": {"properties": {"assessment": {"const": "fail"}}, "required": ["assessment"]},
81
+ "then": {"required": ["finding_id", "finding_fingerprint"]}
82
+ }
83
+ ]
84
+ }
85
+ }
86
+ }
@@ -0,0 +1,86 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/remediation-run-v0.4.schema.json",
4
+ "title": "Production Readiness Remediation Run v0.4 (legacy)",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["schema_version", "run_id", "started_at", "completed_at", "profile_id", "source_inventory_digest", "candidate_root", "result_workspace", "final_inventory_digest", "original_unchanged", "max_attempts", "max_files", "max_changed_lines", "usage", "candidates", "provider_executions", "final_run", "gate_state", "terminal_state", "remaining", "stop_reasons"],
8
+ "properties": {
9
+ "schema_version": {"const": "prc.remediation-run/v0.4"},
10
+ "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
11
+ "started_at": {"type": "string", "format": "date-time"},
12
+ "completed_at": {"type": "string", "format": "date-time"},
13
+ "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
14
+ "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
15
+ "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
16
+ "source_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
17
+ "candidate_root": {"type": "string", "minLength": 1},
18
+ "result_workspace": {"type": "string", "minLength": 1},
19
+ "final_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
20
+ "original_unchanged": {"const": true},
21
+ "max_attempts": {"type": "integer", "minimum": 1, "maximum": 10},
22
+ "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
23
+ "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 1000},
24
+ "usage": {"$ref": "#/$defs/usage"},
25
+ "candidates": {"type": "array", "maxItems": 10, "items": {"$ref": "remediation-candidate-v0.3.schema.json"}},
26
+ "provider_executions": {"type": "array", "maxItems": 10, "items": {"$ref": "agent-execution-v0.1.schema.json"}},
27
+ "final_run": {"$ref": "run-result-v0.9.schema.json"},
28
+ "gate_state": {"enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "environment_blocked", "no_go"]},
29
+ "terminal_state": {"enum": ["profile_satisfied", "machine_work_complete", "stopped_by_policy_or_budget", "candidate_rejected", "provider_stopped"]},
30
+ "remaining": {"type": "array", "uniqueItems": true, "items": {"$ref": "#/$defs/remaining_work"}},
31
+ "stop_reasons": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
32
+ },
33
+ "allOf": [
34
+ {
35
+ "if": {"required": ["configuration_digest"]},
36
+ "then": {"required": ["project_id"]}
37
+ },
38
+ {
39
+ "if": {"required": ["project_id"]},
40
+ "then": {"required": ["configuration_digest"]}
41
+ },
42
+ {
43
+ "if": {"properties": {"terminal_state": {"enum": ["profile_satisfied", "machine_work_complete"]}}, "required": ["terminal_state"]},
44
+ "then": {"properties": {"stop_reasons": {"maxItems": 0}}},
45
+ "else": {"properties": {"stop_reasons": {"minItems": 1}}}
46
+ }
47
+ ],
48
+ "$defs": {
49
+ "usage": {
50
+ "type": "object",
51
+ "additionalProperties": false,
52
+ "required": ["attempts", "changed_files", "changed_lines"],
53
+ "properties": {
54
+ "attempts": {"type": "integer", "minimum": 0, "maximum": 10},
55
+ "changed_files": {"type": "integer", "minimum": 0},
56
+ "changed_lines": {"type": "integer", "minimum": 0}
57
+ }
58
+ },
59
+ "remaining_work": {
60
+ "type": "object",
61
+ "additionalProperties": false,
62
+ "required": ["assertion_id", "control_ids", "title", "assessment", "execution", "severity", "gate", "remediation_class", "summary", "reason_code", "reason"],
63
+ "properties": {
64
+ "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
65
+ "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
66
+ "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
67
+ "control_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Z]+-[0-9A-F]{8}$"}},
68
+ "title": {"type": "string", "minLength": 1},
69
+ "assessment": {"enum": ["fail", "unknown", "manual_review", "stale", "conflicting"]},
70
+ "execution": {"enum": ["completed", "blocked", "error", "not_run"]},
71
+ "severity": {"enum": ["low", "medium", "high", "critical"]},
72
+ "gate": {"enum": ["advisory", "required", "no-go"]},
73
+ "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]},
74
+ "summary": {"type": "string", "minLength": 1},
75
+ "reason_code": {"enum": ["budget_exhausted", "candidate_rejected", "provider_stopped", "human_evidence_required", "evidence_or_execution_required", "detect_explain_only", "no_registered_fixer", "agent_proposal_required", "no_safe_agent_task", "human_review_required", "specialized_approval_required", "separate_operational_workflow_required", "human_decision_required", "unsupported_remediation_class"]},
76
+ "reason": {"type": "string", "minLength": 1}
77
+ },
78
+ "allOf": [
79
+ {
80
+ "if": {"properties": {"assessment": {"const": "fail"}}, "required": ["assessment"]},
81
+ "then": {"required": ["finding_id", "finding_fingerprint"]}
82
+ }
83
+ ]
84
+ }
85
+ }
86
+ }
@@ -0,0 +1,131 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/remediation-run-v0.5.schema.json",
4
+ "title": "Production Readiness Remediation Run v0.5 (legacy)",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["schema_version", "run_id", "started_at", "completed_at", "profile_id", "source_inventory_digest", "candidate_root", "result_workspace", "final_inventory_digest", "original_unchanged", "max_attempts", "max_files", "max_changed_lines", "usage", "attempts", "candidates", "provider_executions", "final_run", "gate_state", "terminal_state", "remaining", "stop_reasons"],
8
+ "properties": {
9
+ "schema_version": {"const": "prc.remediation-run/v0.5"},
10
+ "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
11
+ "started_at": {"type": "string", "format": "date-time"},
12
+ "completed_at": {"type": "string", "format": "date-time"},
13
+ "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
14
+ "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
15
+ "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
16
+ "source_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
17
+ "candidate_root": {"type": "string", "minLength": 1},
18
+ "result_workspace": {"type": "string", "minLength": 1},
19
+ "final_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
20
+ "original_unchanged": {"const": true},
21
+ "max_attempts": {"type": "integer", "minimum": 1, "maximum": 10},
22
+ "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
23
+ "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 1000},
24
+ "usage": {"$ref": "#/$defs/usage"},
25
+ "attempts": {"type": "array", "maxItems": 10, "uniqueItems": true, "items": {"$ref": "#/$defs/attempt"}},
26
+ "candidates": {"type": "array", "maxItems": 10, "items": {"$ref": "remediation-candidate-v0.3.schema.json"}},
27
+ "provider_executions": {"type": "array", "maxItems": 10, "items": {"$ref": "agent-execution-v0.1.schema.json"}},
28
+ "final_run": {"$ref": "run-result-v0.9.schema.json"},
29
+ "gate_state": {"enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "environment_blocked", "no_go"]},
30
+ "terminal_state": {"enum": ["profile_satisfied", "machine_work_complete", "stopped_by_policy_or_budget", "candidate_rejected", "provider_stopped"]},
31
+ "remaining": {"type": "array", "uniqueItems": true, "items": {"$ref": "#/$defs/remaining_work"}},
32
+ "stop_reasons": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
33
+ },
34
+ "allOf": [
35
+ {
36
+ "if": {"required": ["configuration_digest"]},
37
+ "then": {"required": ["project_id"]}
38
+ },
39
+ {
40
+ "if": {"required": ["project_id"]},
41
+ "then": {"required": ["configuration_digest"]}
42
+ },
43
+ {
44
+ "if": {"properties": {"terminal_state": {"enum": ["profile_satisfied", "machine_work_complete"]}}, "required": ["terminal_state"]},
45
+ "then": {"properties": {"stop_reasons": {"maxItems": 0}}},
46
+ "else": {"properties": {"stop_reasons": {"minItems": 1}}}
47
+ }
48
+ ],
49
+ "$defs": {
50
+ "attempt": {
51
+ "type": "object",
52
+ "additionalProperties": false,
53
+ "required": ["attempt", "mode", "assertion_id", "finding_id", "finding_fingerprint", "task_id", "started_at", "completed_at", "before_inventory_digest", "outcome", "reason_code", "reason"],
54
+ "properties": {
55
+ "attempt": {"type": "integer", "minimum": 1, "maximum": 10},
56
+ "mode": {"enum": ["deterministic", "agent"]},
57
+ "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
58
+ "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
59
+ "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
60
+ "task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
61
+ "started_at": {"type": "string", "format": "date-time"},
62
+ "completed_at": {"type": "string", "format": "date-time"},
63
+ "before_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
64
+ "after_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
65
+ "provider_execution_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
66
+ "candidate_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
67
+ "outcome": {"enum": ["accepted", "rejected", "provider_stopped"]},
68
+ "reason_code": {"enum": ["accepted", "verification_rejected", "anti_gaming_rejected", "scope_rejected", "budget_rejected", "policy_rejected", "provider_unable", "provider_needs_escalation"]},
69
+ "reason": {"type": "string", "minLength": 1}
70
+ },
71
+ "allOf": [
72
+ {
73
+ "if": {"properties": {"mode": {"const": "agent"}}, "required": ["mode"]},
74
+ "then": {"required": ["provider_execution_id"]}
75
+ },
76
+ {
77
+ "if": {"properties": {"reason_code": {"enum": ["accepted", "verification_rejected"]}}, "required": ["reason_code"]},
78
+ "then": {"required": ["candidate_id", "after_inventory_digest"]}
79
+ },
80
+ {
81
+ "if": {"properties": {"outcome": {"const": "accepted"}}, "required": ["outcome"]},
82
+ "then": {"properties": {"reason_code": {"const": "accepted"}}, "required": ["candidate_id", "after_inventory_digest"]}
83
+ },
84
+ {
85
+ "if": {"properties": {"outcome": {"const": "provider_stopped"}}, "required": ["outcome"]},
86
+ "then": {"properties": {"mode": {"const": "agent"}, "reason_code": {"enum": ["provider_unable", "provider_needs_escalation"]}}}
87
+ },
88
+ {
89
+ "if": {"properties": {"outcome": {"const": "rejected"}}, "required": ["outcome"]},
90
+ "then": {"properties": {"reason_code": {"enum": ["verification_rejected", "anti_gaming_rejected", "scope_rejected", "budget_rejected", "policy_rejected"]}}}
91
+ }
92
+ ]
93
+ },
94
+ "usage": {
95
+ "type": "object",
96
+ "additionalProperties": false,
97
+ "required": ["attempts", "changed_files", "changed_lines"],
98
+ "properties": {
99
+ "attempts": {"type": "integer", "minimum": 0, "maximum": 10},
100
+ "changed_files": {"type": "integer", "minimum": 0},
101
+ "changed_lines": {"type": "integer", "minimum": 0}
102
+ }
103
+ },
104
+ "remaining_work": {
105
+ "type": "object",
106
+ "additionalProperties": false,
107
+ "required": ["assertion_id", "control_ids", "title", "assessment", "execution", "severity", "gate", "remediation_class", "summary", "reason_code", "reason"],
108
+ "properties": {
109
+ "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
110
+ "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
111
+ "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
112
+ "control_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Z]+-[0-9A-F]{8}$"}},
113
+ "title": {"type": "string", "minLength": 1},
114
+ "assessment": {"enum": ["fail", "unknown", "manual_review", "stale", "conflicting"]},
115
+ "execution": {"enum": ["completed", "blocked", "error", "not_run"]},
116
+ "severity": {"enum": ["low", "medium", "high", "critical"]},
117
+ "gate": {"enum": ["advisory", "required", "no-go"]},
118
+ "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]},
119
+ "summary": {"type": "string", "minLength": 1},
120
+ "reason_code": {"enum": ["budget_exhausted", "candidate_rejected", "provider_stopped", "human_evidence_required", "evidence_or_execution_required", "detect_explain_only", "no_registered_fixer", "agent_proposal_required", "no_safe_agent_task", "human_review_required", "specialized_approval_required", "separate_operational_workflow_required", "human_decision_required", "unsupported_remediation_class"]},
121
+ "reason": {"type": "string", "minLength": 1}
122
+ },
123
+ "allOf": [
124
+ {
125
+ "if": {"properties": {"assessment": {"const": "fail"}}, "required": ["assessment"]},
126
+ "then": {"required": ["finding_id", "finding_fingerprint"]}
127
+ }
128
+ ]
129
+ }
130
+ }
131
+ }
@@ -0,0 +1,143 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/remediation-run-v0.6.schema.json",
4
+ "title": "Production Readiness Remediation Run v0.6",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["schema_version", "run_id", "started_at", "completed_at", "profile_id", "source_inventory_digest", "candidate_root", "result_workspace", "final_inventory_digest", "original_unchanged", "max_attempts", "max_files", "max_changed_lines", "usage", "attempts", "candidates", "provider_executions", "provider_failures", "final_run", "gate_state", "terminal_state", "remaining", "stop_reasons"],
8
+ "properties": {
9
+ "schema_version": {"const": "prc.remediation-run/v0.6"},
10
+ "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
11
+ "started_at": {"type": "string", "format": "date-time"},
12
+ "completed_at": {"type": "string", "format": "date-time"},
13
+ "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
14
+ "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
15
+ "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
16
+ "source_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
17
+ "candidate_root": {"type": "string", "minLength": 1},
18
+ "result_workspace": {"type": "string", "minLength": 1},
19
+ "final_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
20
+ "original_unchanged": {"const": true},
21
+ "max_attempts": {"type": "integer", "minimum": 1, "maximum": 10},
22
+ "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
23
+ "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 1000},
24
+ "usage": {"$ref": "#/$defs/usage"},
25
+ "attempts": {"type": "array", "maxItems": 10, "uniqueItems": true, "items": {"$ref": "#/$defs/attempt"}},
26
+ "candidates": {"type": "array", "maxItems": 10, "items": {"$ref": "remediation-candidate-v0.3.schema.json"}},
27
+ "provider_executions": {"type": "array", "maxItems": 10, "items": {"$ref": "agent-execution-v0.1.schema.json"}},
28
+ "provider_failures": {"type": "array", "maxItems": 10, "items": {"$ref": "agent-failure-v0.1.schema.json"}},
29
+ "final_run": {"$ref": "run-result-v0.9.schema.json"},
30
+ "gate_state": {"enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "environment_blocked", "no_go"]},
31
+ "terminal_state": {"enum": ["profile_satisfied", "machine_work_complete", "stopped_by_policy_or_budget", "candidate_rejected", "provider_stopped", "provider_failed"]},
32
+ "remaining": {"type": "array", "uniqueItems": true, "items": {"$ref": "#/$defs/remaining_work"}},
33
+ "stop_reasons": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
34
+ },
35
+ "allOf": [
36
+ {
37
+ "if": {"required": ["configuration_digest"]},
38
+ "then": {"required": ["project_id"]}
39
+ },
40
+ {
41
+ "if": {"required": ["project_id"]},
42
+ "then": {"required": ["configuration_digest"]}
43
+ },
44
+ {
45
+ "if": {"properties": {"terminal_state": {"enum": ["profile_satisfied", "machine_work_complete"]}}, "required": ["terminal_state"]},
46
+ "then": {"properties": {"stop_reasons": {"maxItems": 0}}},
47
+ "else": {"properties": {"stop_reasons": {"minItems": 1}}}
48
+ }
49
+ ],
50
+ "$defs": {
51
+ "attempt": {
52
+ "type": "object",
53
+ "additionalProperties": false,
54
+ "required": ["attempt", "mode", "assertion_id", "finding_id", "finding_fingerprint", "task_id", "started_at", "completed_at", "before_inventory_digest", "outcome", "reason_code", "reason"],
55
+ "properties": {
56
+ "attempt": {"type": "integer", "minimum": 1, "maximum": 10},
57
+ "mode": {"enum": ["deterministic", "agent"]},
58
+ "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
59
+ "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
60
+ "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
61
+ "task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
62
+ "started_at": {"type": "string", "format": "date-time"},
63
+ "completed_at": {"type": "string", "format": "date-time"},
64
+ "before_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
65
+ "after_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
66
+ "provider_execution_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
67
+ "provider_failure_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
68
+ "candidate_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
69
+ "outcome": {"enum": ["accepted", "rejected", "provider_stopped", "provider_failed"]},
70
+ "reason_code": {"enum": ["accepted", "verification_rejected", "anti_gaming_rejected", "scope_rejected", "budget_rejected", "policy_rejected", "provider_unable", "provider_needs_escalation", "provider_preflight_failed", "provider_transcript_failed", "provider_cancelled", "provider_timeout", "provider_output_limit", "provider_process_failed", "provider_workspace_changed", "provider_result_missing", "provider_protocol_rejected"]},
71
+ "reason": {"type": "string", "minLength": 1}
72
+ },
73
+ "allOf": [
74
+ {
75
+ "if": {"properties": {"mode": {"const": "agent"}}, "required": ["mode"]},
76
+ "then": {
77
+ "oneOf": [
78
+ {"required": ["provider_execution_id"], "not": {"required": ["provider_failure_id"]}},
79
+ {"required": ["provider_failure_id"], "not": {"required": ["provider_execution_id"]}}
80
+ ]
81
+ },
82
+ "else": {"not": {"anyOf": [{"required": ["provider_execution_id"]}, {"required": ["provider_failure_id"]}]}}
83
+ },
84
+ {
85
+ "if": {"properties": {"reason_code": {"enum": ["accepted", "verification_rejected"]}}, "required": ["reason_code"]},
86
+ "then": {"required": ["candidate_id", "after_inventory_digest"]}
87
+ },
88
+ {
89
+ "if": {"properties": {"outcome": {"const": "accepted"}}, "required": ["outcome"]},
90
+ "then": {"properties": {"reason_code": {"const": "accepted"}}, "required": ["candidate_id", "after_inventory_digest"]}
91
+ },
92
+ {
93
+ "if": {"properties": {"outcome": {"const": "provider_stopped"}}, "required": ["outcome"]},
94
+ "then": {"properties": {"mode": {"const": "agent"}, "reason_code": {"enum": ["provider_unable", "provider_needs_escalation"]}}, "required": ["provider_execution_id"]}
95
+ },
96
+ {
97
+ "if": {"properties": {"outcome": {"const": "provider_failed"}}, "required": ["outcome"]},
98
+ "then": {"properties": {"mode": {"const": "agent"}, "reason_code": {"enum": ["provider_preflight_failed", "provider_transcript_failed", "provider_cancelled", "provider_timeout", "provider_output_limit", "provider_process_failed", "provider_workspace_changed", "provider_result_missing", "provider_protocol_rejected"]}}, "required": ["provider_failure_id"]}
99
+ },
100
+ {
101
+ "if": {"properties": {"outcome": {"const": "rejected"}}, "required": ["outcome"]},
102
+ "then": {"properties": {"reason_code": {"enum": ["verification_rejected", "anti_gaming_rejected", "scope_rejected", "budget_rejected", "policy_rejected"]}}}
103
+ }
104
+ ]
105
+ },
106
+ "usage": {
107
+ "type": "object",
108
+ "additionalProperties": false,
109
+ "required": ["attempts", "changed_files", "changed_lines"],
110
+ "properties": {
111
+ "attempts": {"type": "integer", "minimum": 0, "maximum": 10},
112
+ "changed_files": {"type": "integer", "minimum": 0},
113
+ "changed_lines": {"type": "integer", "minimum": 0}
114
+ }
115
+ },
116
+ "remaining_work": {
117
+ "type": "object",
118
+ "additionalProperties": false,
119
+ "required": ["assertion_id", "control_ids", "title", "assessment", "execution", "severity", "gate", "remediation_class", "summary", "reason_code", "reason"],
120
+ "properties": {
121
+ "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
122
+ "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
123
+ "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
124
+ "control_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Z]+-[0-9A-F]{8}$"}},
125
+ "title": {"type": "string", "minLength": 1},
126
+ "assessment": {"enum": ["fail", "unknown", "manual_review", "stale", "conflicting"]},
127
+ "execution": {"enum": ["completed", "blocked", "error", "not_run"]},
128
+ "severity": {"enum": ["low", "medium", "high", "critical"]},
129
+ "gate": {"enum": ["advisory", "required", "no-go"]},
130
+ "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]},
131
+ "summary": {"type": "string", "minLength": 1},
132
+ "reason_code": {"enum": ["budget_exhausted", "candidate_rejected", "provider_stopped", "provider_failed", "human_evidence_required", "evidence_or_execution_required", "detect_explain_only", "no_registered_fixer", "agent_proposal_required", "no_safe_agent_task", "human_review_required", "specialized_approval_required", "separate_operational_workflow_required", "human_decision_required", "unsupported_remediation_class"]},
133
+ "reason": {"type": "string", "minLength": 1}
134
+ },
135
+ "allOf": [
136
+ {
137
+ "if": {"properties": {"assessment": {"const": "fail"}}, "required": ["assessment"]},
138
+ "then": {"required": ["finding_id", "finding_fingerprint"]}
139
+ }
140
+ ]
141
+ }
142
+ }
143
+ }