@marinjursic/prc-linux-arm64 0.1.0

package/bin/schemas/remediation-run-v0.7.schema.json

@@ -0,0 +1,160 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/remediation-run-v0.7.schema.json",
+  "title": "Production Readiness Remediation Run v0.7",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "run_id", "started_at", "completed_at", "profile_id", "source_inventory_digest", "candidate_root", "result_workspace", "final_inventory_digest", "original_unchanged", "max_attempts", "max_files", "max_changed_lines", "usage", "attempts", "candidates", "provider_executions", "provider_failures", "final_run", "gate_state", "terminal_state", "remaining", "stop_reasons"],
+  "properties": {
+    "schema_version": {"const": "prc.remediation-run/v0.7"},
+    "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "started_at": {"type": "string", "format": "date-time"},
+    "completed_at": {"type": "string", "format": "date-time"},
+    "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
+    "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
+    "source_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "candidate_root": {"type": "string", "minLength": 1},
+    "result_workspace": {"type": "string", "minLength": 1},
+    "final_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "original_unchanged": {"const": true},
+    "max_attempts": {"type": "integer", "minimum": 1, "maximum": 10},
+    "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "usage": {"$ref": "#/$defs/usage"},
+    "attempts": {"type": "array", "maxItems": 10, "uniqueItems": true, "items": {"$ref": "#/$defs/attempt"}},
+    "candidates": {"type": "array", "maxItems": 10, "items": {"$ref": "remediation-candidate-v0.4.schema.json"}},
+    "provider_executions": {"type": "array", "maxItems": 10, "items": {"$ref": "agent-execution-v0.1.schema.json"}},
+    "provider_failures": {"type": "array", "maxItems": 10, "items": {"$ref": "agent-failure-v0.1.schema.json"}},
+    "final_run": {"$ref": "run-result-v0.9.schema.json"},
+    "gate_state": {"enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "environment_blocked", "no_go"]},
+    "terminal_state": {"enum": ["profile_satisfied", "machine_work_complete", "stopped_by_policy_or_budget", "candidate_rejected", "provider_stopped", "provider_failed"]},
+    "remaining": {"type": "array", "uniqueItems": true, "items": {"$ref": "#/$defs/remaining_work"}},
+    "stop_reasons": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
+  },
+  "allOf": [
+    {
+      "if": {"required": ["configuration_digest"]},
+      "then": {"required": ["project_id"]}
+    },
+    {
+      "if": {"required": ["project_id"]},
+      "then": {"required": ["configuration_digest"]}
+    },
+    {
+      "if": {"properties": {"terminal_state": {"enum": ["profile_satisfied", "machine_work_complete"]}}, "required": ["terminal_state"]},
+      "then": {"properties": {"stop_reasons": {"maxItems": 0}}},
+      "else": {"properties": {"stop_reasons": {"minItems": 1}}}
+    }
+  ],
+  "$defs": {
+    "attempt": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["attempt", "mode", "assertion_id", "finding_id", "finding_fingerprint", "task_id", "started_at", "completed_at", "before_inventory_digest", "outcome", "reason_code", "reason"],
+      "properties": {
+        "attempt": {"type": "integer", "minimum": 1, "maximum": 10},
+        "mode": {"enum": ["deterministic", "agent"]},
+        "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+        "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "started_at": {"type": "string", "format": "date-time"},
+        "completed_at": {"type": "string", "format": "date-time"},
+        "before_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "after_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "provider_execution_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "provider_failure_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "verification_execution_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "candidate_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "outcome": {"enum": ["accepted", "rejected", "provider_stopped", "provider_failed"]},
+        "reason_code": {"enum": ["accepted", "verification_rejected", "anti_gaming_rejected", "scope_rejected", "budget_rejected", "policy_rejected", "provider_unable", "provider_needs_escalation", "provider_preflight_failed", "provider_transcript_failed", "provider_cancelled", "provider_timeout", "provider_output_limit", "provider_process_failed", "provider_workspace_changed", "provider_result_missing", "provider_protocol_rejected"]},
+        "reason": {"type": "string", "minLength": 1}
+      },
+      "allOf": [
+        {
+          "if": {"properties": {"mode": {"const": "agent"}}, "required": ["mode"]},
+          "then": {
+            "oneOf": [
+              {"required": ["provider_execution_id"], "not": {"required": ["provider_failure_id"]}},
+              {"required": ["provider_failure_id"], "not": {"required": ["provider_execution_id"]}}
+            ]
+          },
+          "else": {"not": {"anyOf": [{"required": ["provider_execution_id"]}, {"required": ["provider_failure_id"]}, {"required": ["verification_execution_id"]}]}}
+        },
+        {
+          "if": {"required": ["verification_execution_id"]},
+          "then": {"properties": {"mode": {"const": "agent"}}, "required": ["candidate_id", "after_inventory_digest"]}
+        },
+        {
+          "if": {"properties": {"reason_code": {"enum": ["accepted", "verification_rejected"]}}, "required": ["reason_code"]},
+          "then": {"required": ["candidate_id", "after_inventory_digest"]}
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "accepted"}}, "required": ["outcome"]},
+          "then": {"properties": {"reason_code": {"const": "accepted"}}, "required": ["candidate_id", "after_inventory_digest"]}
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "accepted"}, "mode": {"const": "agent"}}, "required": ["outcome", "mode"]},
+          "then": {"required": ["verification_execution_id"]}
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "provider_stopped"}}, "required": ["outcome"]},
+          "then": {
+            "properties": {"mode": {"const": "agent"}, "reason_code": {"enum": ["provider_unable", "provider_needs_escalation"]}},
+            "required": ["provider_execution_id"],
+            "not": {"anyOf": [{"required": ["candidate_id"]}, {"required": ["after_inventory_digest"]}, {"required": ["verification_execution_id"]}]}
+          }
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "provider_failed"}}, "required": ["outcome"]},
+          "then": {
+            "properties": {"mode": {"const": "agent"}, "reason_code": {"enum": ["provider_preflight_failed", "provider_transcript_failed", "provider_cancelled", "provider_timeout", "provider_output_limit", "provider_process_failed", "provider_workspace_changed", "provider_result_missing", "provider_protocol_rejected"]}},
+            "required": ["provider_failure_id"],
+            "not": {"anyOf": [{"required": ["candidate_id"]}, {"required": ["after_inventory_digest"]}, {"required": ["verification_execution_id"]}]}
+          }
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "rejected"}}, "required": ["outcome"]},
+          "then": {"properties": {"reason_code": {"enum": ["verification_rejected", "anti_gaming_rejected", "scope_rejected", "budget_rejected", "policy_rejected"]}}}
+        }
+      ]
+    },
+    "usage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["attempts", "changed_files", "changed_lines"],
+      "properties": {
+        "attempts": {"type": "integer", "minimum": 0, "maximum": 10},
+        "changed_files": {"type": "integer", "minimum": 0},
+        "changed_lines": {"type": "integer", "minimum": 0}
+      }
+    },
+    "remaining_work": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["assertion_id", "control_ids", "title", "assessment", "execution", "severity", "gate", "remediation_class", "summary", "reason_code", "reason"],
+      "properties": {
+        "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+        "control_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Z]+-[0-9A-F]{8}$"}},
+        "title": {"type": "string", "minLength": 1},
+        "assessment": {"enum": ["fail", "unknown", "manual_review", "stale", "conflicting"]},
+        "execution": {"enum": ["completed", "blocked", "error", "not_run"]},
+        "severity": {"enum": ["low", "medium", "high", "critical"]},
+        "gate": {"enum": ["advisory", "required", "no-go"]},
+        "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]},
+        "summary": {"type": "string", "minLength": 1},
+        "reason_code": {"enum": ["budget_exhausted", "candidate_rejected", "provider_stopped", "provider_failed", "human_evidence_required", "evidence_or_execution_required", "detect_explain_only", "no_registered_fixer", "agent_proposal_required", "no_safe_agent_task", "human_review_required", "specialized_approval_required", "separate_operational_workflow_required", "human_decision_required", "unsupported_remediation_class"]},
+        "reason": {"type": "string", "minLength": 1}
+      },
+      "allOf": [
+        {
+          "if": {"properties": {"assessment": {"const": "fail"}}, "required": ["assessment"]},
+          "then": {"required": ["finding_id", "finding_fingerprint"]}
+        }
+      ]
+    }
+  }
+}

package/bin/schemas/remediation-run-v0.8.schema.json

@@ -0,0 +1,161 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/remediation-run-v0.8.schema.json",
+  "title": "Production Readiness Remediation Run v0.8",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "run_id", "started_at", "completed_at", "profile_id", "source_inventory_digest", "candidate_root", "result_workspace", "final_inventory_digest", "original_unchanged", "max_attempts", "max_files", "max_changed_lines", "max_duration_seconds", "usage", "attempts", "candidates", "provider_executions", "provider_failures", "final_run", "gate_state", "terminal_state", "remaining", "stop_reasons"],
+  "properties": {
+    "schema_version": {"const": "prc.remediation-run/v0.8"},
+    "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "started_at": {"type": "string", "format": "date-time"},
+    "completed_at": {"type": "string", "format": "date-time"},
+    "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
+    "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
+    "source_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "candidate_root": {"type": "string", "minLength": 1},
+    "result_workspace": {"type": "string", "minLength": 1},
+    "final_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "original_unchanged": {"const": true},
+    "max_attempts": {"type": "integer", "minimum": 1, "maximum": 10},
+    "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "max_duration_seconds": {"type": "integer", "minimum": 1, "maximum": 86400},
+    "usage": {"$ref": "#/$defs/usage"},
+    "attempts": {"type": "array", "maxItems": 10, "uniqueItems": true, "items": {"$ref": "#/$defs/attempt"}},
+    "candidates": {"type": "array", "maxItems": 10, "items": {"$ref": "remediation-candidate-v0.4.schema.json"}},
+    "provider_executions": {"type": "array", "maxItems": 10, "items": {"$ref": "agent-execution-v0.1.schema.json"}},
+    "provider_failures": {"type": "array", "maxItems": 10, "items": {"$ref": "agent-failure-v0.1.schema.json"}},
+    "final_run": {"$ref": "run-result-v0.9.schema.json"},
+    "gate_state": {"enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "environment_blocked", "no_go"]},
+    "terminal_state": {"enum": ["profile_satisfied", "machine_work_complete", "stopped_by_policy_or_budget", "candidate_rejected", "provider_stopped", "provider_failed"]},
+    "remaining": {"type": "array", "uniqueItems": true, "items": {"$ref": "#/$defs/remaining_work"}},
+    "stop_reasons": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
+  },
+  "allOf": [
+    {
+      "if": {"required": ["configuration_digest"]},
+      "then": {"required": ["project_id"]}
+    },
+    {
+      "if": {"required": ["project_id"]},
+      "then": {"required": ["configuration_digest"]}
+    },
+    {
+      "if": {"properties": {"terminal_state": {"enum": ["profile_satisfied", "machine_work_complete"]}}, "required": ["terminal_state"]},
+      "then": {"properties": {"stop_reasons": {"maxItems": 0}}},
+      "else": {"properties": {"stop_reasons": {"minItems": 1}}}
+    }
+  ],
+  "$defs": {
+    "attempt": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["attempt", "mode", "assertion_id", "finding_id", "finding_fingerprint", "task_id", "started_at", "completed_at", "before_inventory_digest", "outcome", "reason_code", "reason"],
+      "properties": {
+        "attempt": {"type": "integer", "minimum": 1, "maximum": 10},
+        "mode": {"enum": ["deterministic", "agent"]},
+        "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+        "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "started_at": {"type": "string", "format": "date-time"},
+        "completed_at": {"type": "string", "format": "date-time"},
+        "before_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "after_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "provider_execution_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "provider_failure_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "verification_execution_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "candidate_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "outcome": {"enum": ["accepted", "rejected", "provider_stopped", "provider_failed"]},
+        "reason_code": {"enum": ["accepted", "verification_rejected", "anti_gaming_rejected", "scope_rejected", "budget_rejected", "policy_rejected", "provider_unable", "provider_needs_escalation", "provider_preflight_failed", "provider_transcript_failed", "provider_cancelled", "provider_timeout", "provider_output_limit", "provider_process_failed", "provider_workspace_changed", "provider_result_missing", "provider_protocol_rejected"]},
+        "reason": {"type": "string", "minLength": 1}
+      },
+      "allOf": [
+        {
+          "if": {"properties": {"mode": {"const": "agent"}}, "required": ["mode"]},
+          "then": {
+            "oneOf": [
+              {"required": ["provider_execution_id"], "not": {"required": ["provider_failure_id"]}},
+              {"required": ["provider_failure_id"], "not": {"required": ["provider_execution_id"]}}
+            ]
+          },
+          "else": {"not": {"anyOf": [{"required": ["provider_execution_id"]}, {"required": ["provider_failure_id"]}, {"required": ["verification_execution_id"]}]}}
+        },
+        {
+          "if": {"required": ["verification_execution_id"]},
+          "then": {"properties": {"mode": {"const": "agent"}}, "required": ["candidate_id", "after_inventory_digest"]}
+        },
+        {
+          "if": {"properties": {"reason_code": {"enum": ["accepted", "verification_rejected"]}}, "required": ["reason_code"]},
+          "then": {"required": ["candidate_id", "after_inventory_digest"]}
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "accepted"}}, "required": ["outcome"]},
+          "then": {"properties": {"reason_code": {"const": "accepted"}}, "required": ["candidate_id", "after_inventory_digest"]}
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "accepted"}, "mode": {"const": "agent"}}, "required": ["outcome", "mode"]},
+          "then": {"required": ["verification_execution_id"]}
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "provider_stopped"}}, "required": ["outcome"]},
+          "then": {
+            "properties": {"mode": {"const": "agent"}, "reason_code": {"enum": ["provider_unable", "provider_needs_escalation"]}},
+            "required": ["provider_execution_id"],
+            "not": {"anyOf": [{"required": ["candidate_id"]}, {"required": ["after_inventory_digest"]}, {"required": ["verification_execution_id"]}]}
+          }
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "provider_failed"}}, "required": ["outcome"]},
+          "then": {
+            "properties": {"mode": {"const": "agent"}, "reason_code": {"enum": ["provider_preflight_failed", "provider_transcript_failed", "provider_cancelled", "provider_timeout", "provider_output_limit", "provider_process_failed", "provider_workspace_changed", "provider_result_missing", "provider_protocol_rejected"]}},
+            "required": ["provider_failure_id"],
+            "not": {"anyOf": [{"required": ["candidate_id"]}, {"required": ["after_inventory_digest"]}, {"required": ["verification_execution_id"]}]}
+          }
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "rejected"}}, "required": ["outcome"]},
+          "then": {"properties": {"reason_code": {"enum": ["verification_rejected", "anti_gaming_rejected", "scope_rejected", "budget_rejected", "policy_rejected"]}}}
+        }
+      ]
+    },
+    "usage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["attempts", "changed_files", "changed_lines"],
+      "properties": {
+        "attempts": {"type": "integer", "minimum": 0, "maximum": 10},
+        "changed_files": {"type": "integer", "minimum": 0},
+        "changed_lines": {"type": "integer", "minimum": 0}
+      }
+    },
+    "remaining_work": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["assertion_id", "control_ids", "title", "assessment", "execution", "severity", "gate", "remediation_class", "summary", "reason_code", "reason"],
+      "properties": {
+        "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+        "control_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Z]+-[0-9A-F]{8}$"}},
+        "title": {"type": "string", "minLength": 1},
+        "assessment": {"enum": ["fail", "unknown", "manual_review", "stale", "conflicting"]},
+        "execution": {"enum": ["completed", "blocked", "error", "not_run"]},
+        "severity": {"enum": ["low", "medium", "high", "critical"]},
+        "gate": {"enum": ["advisory", "required", "no-go"]},
+        "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]},
+        "summary": {"type": "string", "minLength": 1},
+        "reason_code": {"enum": ["budget_exhausted", "time_budget_exhausted", "candidate_rejected", "provider_stopped", "provider_failed", "human_evidence_required", "evidence_or_execution_required", "detect_explain_only", "no_registered_fixer", "agent_proposal_required", "no_safe_agent_task", "human_review_required", "specialized_approval_required", "separate_operational_workflow_required", "human_decision_required", "unsupported_remediation_class"]},
+        "reason": {"type": "string", "minLength": 1}
+      },
+      "allOf": [
+        {
+          "if": {"properties": {"assessment": {"const": "fail"}}, "required": ["assessment"]},
+          "then": {"required": ["finding_id", "finding_fingerprint"]}
+        }
+      ]
+    }
+  }
+}

package/bin/schemas/remediation-run.schema.json

@@ -0,0 +1,161 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/remediation-run.schema.json",
+  "title": "Production Readiness Remediation Run v0.9",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "run_id", "started_at", "completed_at", "profile_id", "source_inventory_digest", "candidate_root", "result_workspace", "final_inventory_digest", "original_unchanged", "max_attempts", "max_files", "max_changed_lines", "max_duration_seconds", "usage", "attempts", "candidates", "provider_executions", "provider_failures", "final_run", "gate_state", "terminal_state", "remaining", "stop_reasons"],
+  "properties": {
+    "schema_version": {"const": "prc.remediation-run/v0.9"},
+    "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "started_at": {"type": "string", "format": "date-time"},
+    "completed_at": {"type": "string", "format": "date-time"},
+    "profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
+    "configuration_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "project_id": {"type": "string", "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62})$"},
+    "source_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "candidate_root": {"type": "string", "minLength": 1},
+    "result_workspace": {"type": "string", "minLength": 1},
+    "final_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "original_unchanged": {"const": true},
+    "max_attempts": {"type": "integer", "minimum": 1, "maximum": 10},
+    "max_files": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "max_changed_lines": {"type": "integer", "minimum": 1, "maximum": 1000},
+    "max_duration_seconds": {"type": "integer", "minimum": 1, "maximum": 86400},
+    "usage": {"$ref": "#/$defs/usage"},
+    "attempts": {"type": "array", "maxItems": 10, "uniqueItems": true, "items": {"$ref": "#/$defs/attempt"}},
+    "candidates": {"type": "array", "maxItems": 10, "items": {"$ref": "remediation-candidate.schema.json"}},
+    "provider_executions": {"type": "array", "maxItems": 10, "items": {"$ref": "agent-execution.schema.json"}},
+    "provider_failures": {"type": "array", "maxItems": 10, "items": {"$ref": "agent-failure.schema.json"}},
+    "final_run": {"$ref": "run-result.schema.json"},
+    "gate_state": {"enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "environment_blocked", "no_go"]},
+    "terminal_state": {"enum": ["profile_satisfied", "machine_work_complete", "stopped_by_policy_or_budget", "candidate_rejected", "provider_stopped", "provider_failed"]},
+    "remaining": {"type": "array", "uniqueItems": true, "items": {"$ref": "#/$defs/remaining_work"}},
+    "stop_reasons": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
+  },
+  "allOf": [
+    {
+      "if": {"required": ["configuration_digest"]},
+      "then": {"required": ["project_id"]}
+    },
+    {
+      "if": {"required": ["project_id"]},
+      "then": {"required": ["configuration_digest"]}
+    },
+    {
+      "if": {"properties": {"terminal_state": {"enum": ["profile_satisfied", "machine_work_complete"]}}, "required": ["terminal_state"]},
+      "then": {"properties": {"stop_reasons": {"maxItems": 0}}},
+      "else": {"properties": {"stop_reasons": {"minItems": 1}}}
+    }
+  ],
+  "$defs": {
+    "attempt": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["attempt", "mode", "assertion_id", "finding_id", "finding_fingerprint", "task_id", "started_at", "completed_at", "before_inventory_digest", "outcome", "reason_code", "reason"],
+      "properties": {
+        "attempt": {"type": "integer", "minimum": 1, "maximum": 10},
+        "mode": {"enum": ["deterministic", "agent"]},
+        "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+        "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "started_at": {"type": "string", "format": "date-time"},
+        "completed_at": {"type": "string", "format": "date-time"},
+        "before_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "after_inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "provider_execution_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "provider_failure_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "verification_execution_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "candidate_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "outcome": {"enum": ["accepted", "rejected", "provider_stopped", "provider_failed"]},
+        "reason_code": {"enum": ["accepted", "verification_rejected", "anti_gaming_rejected", "scope_rejected", "budget_rejected", "policy_rejected", "provider_unable", "provider_needs_escalation", "provider_preflight_failed", "provider_transcript_failed", "provider_cancelled", "provider_timeout", "provider_output_limit", "provider_process_failed", "provider_workspace_changed", "provider_result_missing", "provider_protocol_rejected"]},
+        "reason": {"type": "string", "minLength": 1}
+      },
+      "allOf": [
+        {
+          "if": {"properties": {"mode": {"const": "agent"}}, "required": ["mode"]},
+          "then": {
+            "oneOf": [
+              {"required": ["provider_execution_id"], "not": {"required": ["provider_failure_id"]}},
+              {"required": ["provider_failure_id"], "not": {"required": ["provider_execution_id"]}}
+            ]
+          },
+          "else": {"not": {"anyOf": [{"required": ["provider_execution_id"]}, {"required": ["provider_failure_id"]}, {"required": ["verification_execution_id"]}]}}
+        },
+        {
+          "if": {"required": ["verification_execution_id"]},
+          "then": {"properties": {"mode": {"const": "agent"}}, "required": ["candidate_id", "after_inventory_digest"]}
+        },
+        {
+          "if": {"properties": {"reason_code": {"enum": ["accepted", "verification_rejected"]}}, "required": ["reason_code"]},
+          "then": {"required": ["candidate_id", "after_inventory_digest"]}
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "accepted"}}, "required": ["outcome"]},
+          "then": {"properties": {"reason_code": {"const": "accepted"}}, "required": ["candidate_id", "after_inventory_digest"]}
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "accepted"}, "mode": {"const": "agent"}}, "required": ["outcome", "mode"]},
+          "then": {"required": ["verification_execution_id"]}
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "provider_stopped"}}, "required": ["outcome"]},
+          "then": {
+            "properties": {"mode": {"const": "agent"}, "reason_code": {"enum": ["provider_unable", "provider_needs_escalation"]}},
+            "required": ["provider_execution_id"],
+            "not": {"anyOf": [{"required": ["candidate_id"]}, {"required": ["after_inventory_digest"]}, {"required": ["verification_execution_id"]}]}
+          }
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "provider_failed"}}, "required": ["outcome"]},
+          "then": {
+            "properties": {"mode": {"const": "agent"}, "reason_code": {"enum": ["provider_preflight_failed", "provider_transcript_failed", "provider_cancelled", "provider_timeout", "provider_output_limit", "provider_process_failed", "provider_workspace_changed", "provider_result_missing", "provider_protocol_rejected"]}},
+            "required": ["provider_failure_id"],
+            "not": {"anyOf": [{"required": ["candidate_id"]}, {"required": ["after_inventory_digest"]}, {"required": ["verification_execution_id"]}]}
+          }
+        },
+        {
+          "if": {"properties": {"outcome": {"const": "rejected"}}, "required": ["outcome"]},
+          "then": {"properties": {"reason_code": {"enum": ["verification_rejected", "anti_gaming_rejected", "scope_rejected", "budget_rejected", "policy_rejected"]}}}
+        }
+      ]
+    },
+    "usage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["attempts", "changed_files", "changed_lines"],
+      "properties": {
+        "attempts": {"type": "integer", "minimum": 0, "maximum": 10},
+        "changed_files": {"type": "integer", "minimum": 0},
+        "changed_lines": {"type": "integer", "minimum": 0}
+      }
+    },
+    "remaining_work": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["assertion_id", "control_ids", "title", "assessment", "execution", "severity", "gate", "remediation_class", "summary", "reason_code", "reason"],
+      "properties": {
+        "finding_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "finding_fingerprint": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
+        "control_ids": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Z]+-[0-9A-F]{8}$"}},
+        "title": {"type": "string", "minLength": 1},
+        "assessment": {"enum": ["fail", "unknown", "manual_review", "stale", "conflicting"]},
+        "execution": {"enum": ["completed", "blocked", "error", "not_run"]},
+        "severity": {"enum": ["low", "medium", "high", "critical"]},
+        "gate": {"enum": ["advisory", "required", "no-go"]},
+        "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]},
+        "summary": {"type": "string", "minLength": 1},
+        "reason_code": {"enum": ["budget_exhausted", "time_budget_exhausted", "candidate_rejected", "provider_stopped", "provider_failed", "human_evidence_required", "evidence_or_execution_required", "detect_explain_only", "no_registered_fixer", "agent_proposal_required", "no_safe_agent_task", "human_review_required", "specialized_approval_required", "separate_operational_workflow_required", "human_decision_required", "unsupported_remediation_class"]},
+        "reason": {"type": "string", "minLength": 1}
+      },
+      "allOf": [
+        {
+          "if": {"properties": {"assessment": {"const": "fail"}}, "required": ["assessment"]},
+          "then": {"required": ["finding_id", "finding_fingerprint"]}
+        }
+      ]
+    }
+  }
+}

package/bin/schemas/risk-exception-verification.schema.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/risk-exception-verification.schema.json",
+  "title": "Production Readiness Risk Exception Verification v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "exception", "exception_digest", "verified_at", "signature", "disposition", "gate_effect"],
+  "properties": {
+    "schema_version": {"const": "prc.risk-exception-verification/v0.1"},
+    "exception": {"$ref": "risk-exception.schema.json"},
+    "exception_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "verified_at": {"type": "string", "format": "date-time"},
+    "signature": {"$ref": "signature-verification.schema.json"},
+    "disposition": {"const": "accepted_risk_exception"},
+    "gate_effect": {"const": "finding remains failed and the scanner terminal state is unchanged"}
+  }
+}