@marinjursic/prc-linux-arm64 0.1.0

package/bin/schemas/run-result-v0.5.schema.json

@@ -0,0 +1,60 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/run-result-v0.5.schema.json",
+  "title": "Production Readiness Run Result v0.5",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "run_id", "started_at", "completed_at", "plan", "inventory", "adapter_executions", "results", "terminal_state"],
+  "properties": {
+    "schema_version": {"const": "prc.run/v0.5"},
+    "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "started_at": {"type": "string", "format": "date-time"},
+    "completed_at": {"type": "string", "format": "date-time"},
+    "plan": {"$ref": "plan-v0.5.schema.json"},
+    "inventory": {"$ref": "inventory-v0.3.schema.json"},
+    "adapter_executions": {"type": "array", "items": {"$ref": "adapter-execution-v0.1.schema.json"}},
+    "results": {
+      "type": "array",
+      "items": {"$ref": "#/$defs/assertion_result"}
+    },
+    "terminal_state": {"$ref": "#/$defs/terminal_state"}
+  },
+  "$defs": {
+    "assertion_result": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["assertion_id", "control_ids", "applicability", "execution", "assessment", "severity", "gate", "summary", "evidence_required", "evidence_observed", "remediation_class"],
+      "properties": {
+        "assertion_id": {"type": "string"},
+        "control_ids": {"type": "array", "items": {"type": "string"}},
+        "applicability": {"enum": ["applicable", "not_applicable", "undetermined"]},
+        "execution": {"enum": ["not_run", "completed", "blocked", "error"]},
+        "assessment": {"enum": ["pass", "fail", "unknown", "manual_review", "not_applicable", "stale", "conflicting"]},
+        "severity": {"enum": ["info", "low", "medium", "high", "critical"]},
+        "gate": {"enum": ["advisory", "required", "no-go"]},
+        "summary": {"type": "string"},
+        "evidence_required": {
+          "type": "array",
+          "items": {"$ref": "#/$defs/evidence_requirement"}
+        },
+        "evidence_observed": {"type": "array", "items": {"$ref": "evidence-v0.1.schema.json"}},
+        "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]}
+      }
+    },
+    "terminal_state": {
+      "enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "no_go", "policy_stopped", "budget_exhausted", "environment_blocked"]
+    },
+    "evidence_requirement": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "minimum_authority", "description"],
+      "properties": {
+        "kind": {"type": "string", "pattern": "^[a-z0-9-]+$"},
+        "minimum_authority": {
+          "enum": ["declared", "repository", "executed", "artifact", "environment", "human"]
+        },
+        "description": {"type": "string", "minLength": 1}
+      }
+    }
+  }
+}

package/bin/schemas/run-result-v0.6.schema.json

@@ -0,0 +1,61 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/run-result-v0.6.schema.json",
+  "title": "Production Readiness Run Result v0.6",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "run_id", "started_at", "completed_at", "plan", "inventory", "adapter_executions", "results", "findings", "terminal_state"],
+  "properties": {
+    "schema_version": {"const": "prc.run/v0.6"},
+    "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "started_at": {"type": "string", "format": "date-time"},
+    "completed_at": {"type": "string", "format": "date-time"},
+    "plan": {"$ref": "plan-v0.5.schema.json"},
+    "inventory": {"$ref": "inventory-v0.3.schema.json"},
+    "adapter_executions": {"type": "array", "items": {"$ref": "adapter-execution-v0.1.schema.json"}},
+    "results": {
+      "type": "array",
+      "items": {"$ref": "#/$defs/assertion_result"}
+    },
+    "findings": {"type": "array", "items": {"$ref": "finding-v0.1.schema.json"}},
+    "terminal_state": {"$ref": "#/$defs/terminal_state"}
+  },
+  "$defs": {
+    "assertion_result": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["assertion_id", "control_ids", "applicability", "execution", "assessment", "severity", "gate", "summary", "evidence_required", "evidence_observed", "remediation_class"],
+        "properties": {
+          "assertion_id": {"type": "string"},
+          "control_ids": {"type": "array", "items": {"type": "string"}},
+          "applicability": {"enum": ["applicable", "not_applicable", "undetermined"]},
+          "execution": {"enum": ["not_run", "completed", "blocked", "error"]},
+          "assessment": {"enum": ["pass", "fail", "unknown", "manual_review", "not_applicable", "stale", "conflicting"]},
+          "severity": {"enum": ["info", "low", "medium", "high", "critical"]},
+          "gate": {"enum": ["advisory", "required", "no-go"]},
+          "summary": {"type": "string"},
+          "evidence_required": {
+            "type": "array",
+            "items": {"$ref": "#/$defs/evidence_requirement"}
+          },
+          "evidence_observed": {"type": "array", "items": {"$ref": "evidence-v0.1.schema.json"}},
+          "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]}
+        }
+    },
+    "terminal_state": {
+      "enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "no_go", "policy_stopped", "budget_exhausted", "environment_blocked"]
+    },
+    "evidence_requirement": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "minimum_authority", "description"],
+      "properties": {
+        "kind": {"type": "string", "pattern": "^[a-z0-9-]+$"},
+        "minimum_authority": {
+          "enum": ["declared", "repository", "executed", "artifact", "environment", "human"]
+        },
+        "description": {"type": "string", "minLength": 1}
+      }
+    }
+  }
+}

package/bin/schemas/run-result-v0.7.schema.json

@@ -0,0 +1,61 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/run-result-v0.7.schema.json",
+  "title": "Production Readiness Run Result v0.7 (legacy)",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "run_id", "started_at", "completed_at", "plan", "inventory", "adapter_executions", "results", "findings", "terminal_state"],
+  "properties": {
+    "schema_version": {"const": "prc.run/v0.7"},
+    "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "started_at": {"type": "string", "format": "date-time"},
+    "completed_at": {"type": "string", "format": "date-time"},
+    "plan": {"$ref": "plan-v0.6.schema.json"},
+    "inventory": {"$ref": "inventory-v0.3.schema.json"},
+    "adapter_executions": {"type": "array", "items": {"$ref": "adapter-execution-v0.1.schema.json"}},
+    "results": {
+      "type": "array",
+      "items": {"$ref": "#/$defs/assertion_result"}
+    },
+    "findings": {"type": "array", "items": {"$ref": "finding-v0.1.schema.json"}},
+    "terminal_state": {"$ref": "#/$defs/terminal_state"}
+  },
+  "$defs": {
+    "assertion_result": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["assertion_id", "control_ids", "applicability", "execution", "assessment", "severity", "gate", "summary", "evidence_required", "evidence_observed", "remediation_class"],
+      "properties": {
+        "assertion_id": {"type": "string"},
+        "control_ids": {"type": "array", "items": {"type": "string"}},
+        "applicability": {"enum": ["applicable", "not_applicable", "undetermined"]},
+        "execution": {"enum": ["not_run", "completed", "blocked", "error"]},
+        "assessment": {"enum": ["pass", "fail", "unknown", "manual_review", "not_applicable", "stale", "conflicting"]},
+        "severity": {"enum": ["info", "low", "medium", "high", "critical"]},
+        "gate": {"enum": ["advisory", "required", "no-go"]},
+        "summary": {"type": "string"},
+        "evidence_required": {
+          "type": "array",
+          "items": {"$ref": "#/$defs/evidence_requirement"}
+        },
+        "evidence_observed": {"type": "array", "items": {"$ref": "evidence-v0.1.schema.json"}},
+        "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]}
+      }
+    },
+    "terminal_state": {
+      "enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "no_go", "policy_stopped", "budget_exhausted", "environment_blocked"]
+    },
+    "evidence_requirement": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "minimum_authority", "description"],
+      "properties": {
+        "kind": {"type": "string", "pattern": "^[a-z0-9-]+$"},
+        "minimum_authority": {
+          "enum": ["declared", "repository", "executed", "artifact", "environment", "human"]
+        },
+        "description": {"type": "string", "minLength": 1}
+      }
+    }
+  }
+}

package/bin/schemas/run-result-v0.8.schema.json

@@ -0,0 +1,61 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/run-result-v0.8.schema.json",
+  "title": "Production Readiness Run Result v0.8 (legacy)",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "run_id", "started_at", "completed_at", "plan", "inventory", "adapter_executions", "results", "findings", "terminal_state"],
+  "properties": {
+    "schema_version": {"const": "prc.run/v0.8"},
+    "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "started_at": {"type": "string", "format": "date-time"},
+    "completed_at": {"type": "string", "format": "date-time"},
+    "plan": {"$ref": "plan-v0.6.schema.json"},
+    "inventory": {"$ref": "inventory-v0.3.schema.json"},
+    "adapter_executions": {"type": "array", "items": {"$ref": "adapter-execution-v0.2.schema.json"}},
+    "results": {
+      "type": "array",
+      "items": {"$ref": "#/$defs/assertion_result"}
+    },
+    "findings": {"type": "array", "items": {"$ref": "finding-v0.1.schema.json"}},
+    "terminal_state": {"$ref": "#/$defs/terminal_state"}
+  },
+  "$defs": {
+    "assertion_result": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["assertion_id", "control_ids", "applicability", "execution", "assessment", "severity", "gate", "summary", "evidence_required", "evidence_observed", "remediation_class"],
+      "properties": {
+        "assertion_id": {"type": "string"},
+        "control_ids": {"type": "array", "items": {"type": "string"}},
+        "applicability": {"enum": ["applicable", "not_applicable", "undetermined"]},
+        "execution": {"enum": ["not_run", "completed", "blocked", "error"]},
+        "assessment": {"enum": ["pass", "fail", "unknown", "manual_review", "not_applicable", "stale", "conflicting"]},
+        "severity": {"enum": ["info", "low", "medium", "high", "critical"]},
+        "gate": {"enum": ["advisory", "required", "no-go"]},
+        "summary": {"type": "string"},
+        "evidence_required": {
+          "type": "array",
+          "items": {"$ref": "#/$defs/evidence_requirement"}
+        },
+        "evidence_observed": {"type": "array", "items": {"$ref": "evidence-v0.1.schema.json"}},
+        "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]}
+      }
+    },
+    "terminal_state": {
+      "enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "no_go", "policy_stopped", "budget_exhausted", "environment_blocked"]
+    },
+    "evidence_requirement": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "minimum_authority", "description"],
+      "properties": {
+        "kind": {"type": "string", "pattern": "^[a-z0-9-]+$"},
+        "minimum_authority": {
+          "enum": ["declared", "repository", "executed", "artifact", "environment", "human"]
+        },
+        "description": {"type": "string", "minLength": 1}
+      }
+    }
+  }
+}

package/bin/schemas/run-result-v0.9.schema.json

@@ -0,0 +1,77 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/run-result-v0.9.schema.json",
+  "title": "Production Readiness Run Result v0.9 (legacy)",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "run_id", "started_at", "completed_at", "plan", "inventory", "adapter_executions", "results", "findings", "terminal_state"],
+  "properties": {
+    "schema_version": {"const": "prc.run/v0.9"},
+    "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "started_at": {"type": "string", "format": "date-time"},
+    "completed_at": {"type": "string", "format": "date-time"},
+    "plan": {"$ref": "plan-v0.6.schema.json"},
+    "inventory": {"$ref": "inventory-v0.3.schema.json"},
+    "adapter_executions": {"type": "array", "items": {"$ref": "adapter-execution-v0.2.schema.json"}},
+    "results": {
+      "type": "array",
+      "items": {"$ref": "#/$defs/assertion_result"}
+    },
+    "findings": {"type": "array", "items": {"$ref": "finding-v0.1.schema.json"}},
+    "terminal_state": {"$ref": "#/$defs/terminal_state"}
+  },
+  "$defs": {
+    "assertion_result": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["assertion_id", "control_ids", "applicability", "execution", "assessment", "severity", "gate", "summary", "evidence_required", "evidence_observed", "remediation_class"],
+      "properties": {
+        "assertion_id": {"type": "string"},
+        "control_ids": {"type": "array", "items": {"type": "string"}},
+        "applicability": {"enum": ["applicable", "not_applicable", "undetermined"]},
+        "execution": {"enum": ["not_run", "completed", "blocked", "error"]},
+        "assessment": {"enum": ["pass", "fail", "unknown", "manual_review", "not_applicable", "stale", "conflicting"]},
+        "severity": {"enum": ["info", "low", "medium", "high", "critical"]},
+        "gate": {"enum": ["advisory", "required", "no-go"]},
+        "summary": {"type": "string"},
+        "locations": {
+          "type": "array",
+          "maxItems": 4096,
+          "uniqueItems": true,
+          "items": {"$ref": "#/$defs/location"}
+        },
+        "evidence_required": {
+          "type": "array",
+          "items": {"$ref": "#/$defs/evidence_requirement"}
+        },
+        "evidence_observed": {"type": "array", "items": {"$ref": "evidence-v0.1.schema.json"}},
+        "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]}
+      }
+    },
+    "terminal_state": {
+      "enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "no_go", "policy_stopped", "budget_exhausted", "environment_blocked"]
+    },
+    "location": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path"],
+      "properties": {
+        "path": {"type": "string", "minLength": 1},
+        "line": {"type": "integer", "minimum": 0},
+        "column": {"type": "integer", "minimum": 0}
+      }
+    },
+    "evidence_requirement": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "minimum_authority", "description"],
+      "properties": {
+        "kind": {"type": "string", "pattern": "^[a-z0-9-]+$"},
+        "minimum_authority": {
+          "enum": ["declared", "repository", "executed", "artifact", "environment", "human"]
+        },
+        "description": {"type": "string", "minLength": 1}
+      }
+    }
+  }
+}

package/bin/schemas/run-result.schema.json

@@ -0,0 +1,165 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/run-result.schema.json",
+  "title": "Production Readiness Run Result v0.12",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "run_id", "started_at", "completed_at", "plan", "inventory", "adapter_executions", "results", "findings", "terminal_state"],
+  "properties": {
+    "schema_version": {"const": "prc.run/v0.12"},
+    "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "started_at": {"type": "string", "format": "date-time"},
+    "completed_at": {"type": "string", "format": "date-time"},
+    "plan": {"$ref": "plan.schema.json"},
+    "inventory": {"$ref": "inventory.schema.json"},
+    "adapter_executions": {"type": "array", "items": {"$ref": "adapter-execution.schema.json"}},
+    "results": {
+      "type": "array",
+      "items": {"$ref": "#/$defs/assertion_result"}
+    },
+    "findings": {"type": "array", "items": {"$ref": "finding.schema.json"}},
+    "control_catalog": {"$ref": "#/$defs/control_catalog"},
+    "control_results": {
+      "type": "array",
+      "maxItems": 100000,
+      "items": {"$ref": "#/$defs/control_result"}
+    },
+    "terminal_state": {"$ref": "#/$defs/terminal_state"}
+  },
+  "$defs": {
+    "control_catalog": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schema_version", "registry_version", "registry_sha256", "source_sha256", "contract_schema_version", "contract_sha256", "control_count", "active_control_count", "contract_count", "generated_contract_count", "expert_reviewed_contract_count", "profile_terminal_state"],
+      "properties": {
+        "schema_version": {"const": "prc.control-catalog-summary/v0.1"},
+        "registry_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
+        "registry_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "source_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "contract_schema_version": {"const": "prc.control-contracts/v0.1"},
+        "contract_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "control_count": {"type": "integer", "minimum": 1, "maximum": 100000},
+        "active_control_count": {"type": "integer", "minimum": 0, "maximum": 100000},
+        "contract_count": {"type": "integer", "minimum": 1, "maximum": 100000},
+        "generated_contract_count": {"type": "integer", "minimum": 0, "maximum": 100000},
+        "expert_reviewed_contract_count": {"type": "integer", "minimum": 0, "maximum": 100000},
+        "profile_terminal_state": {"$ref": "#/$defs/terminal_state"},
+        "ai_review_provider": {"enum": ["codex", "claude"]},
+        "ai_review_model": {"type": "string"},
+        "ai_review_state": {"enum": ["complete", "focused"]},
+        "ai_reviewed_count": {"type": "integer", "minimum": 0, "maximum": 100000},
+        "ai_advisory_fail_count": {"type": "integer", "minimum": 0, "maximum": 100000}
+      }
+    },
+    "control_result": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["control_id", "revision", "statement", "source", "contract_sha256", "contract_status", "canonical_control_id", "evaluation_class", "automation_class", "applicability_class", "atomicity", "complete_inventory_required", "negative_condition", "project_thresholds_required", "evidence_authorities", "not_applicable_proof", "disposition", "coverage", "authority", "assertion_ids", "executed_assertion_ids", "summary"],
+      "properties": {
+        "control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
+        "revision": {"type": "integer", "minimum": 1},
+        "statement": {"type": "string", "minLength": 1, "maxLength": 16384},
+        "source": {"$ref": "#/$defs/control_source"},
+        "contract_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "contract_status": {"enum": ["generated_unreviewed", "reviewed", "retired"]},
+        "canonical_control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
+        "evaluation_class": {"enum": ["repository", "environment", "human_external", "mixed", "unclassified"]},
+        "automation_class": {"enum": ["deterministic_candidate", "ai_advisory_candidate", "environment_evidence_required", "human_or_external_required", "mixed_evidence_required"]},
+        "applicability_class": {"enum": ["conditional", "scope_required"]},
+        "atomicity": {"enum": ["apparently_atomic", "compound_review_required"]},
+        "complete_inventory_required": {"type": "boolean"},
+        "negative_condition": {"type": "boolean"},
+        "project_thresholds_required": {"type": "boolean"},
+        "evidence_authorities": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"enum": ["declared", "repository", "artifact", "environment", "human"]}},
+        "not_applicable_proof": {"type": "string", "minLength": 1, "maxLength": 1000},
+        "disposition": {"enum": ["confirmed_failure", "blocked", "partially_verified", "needs_review", "retired"]},
+        "coverage": {"enum": ["unmapped", "not_in_selected_profile", "partial_assertions", "retired"]},
+        "authority": {"enum": ["none", "deterministic_partial"]},
+        "assertion_ids": {"type": "array", "uniqueItems": true, "items": {"type": "string"}},
+        "executed_assertion_ids": {"type": "array", "uniqueItems": true, "items": {"type": "string"}},
+        "summary": {"type": "string", "minLength": 1},
+        "ai_review": {"$ref": "#/$defs/ai_control_review"}
+      }
+    },
+    "control_source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "line"],
+      "properties": {
+        "path": {"type": "string", "pattern": "^docs/(checklists|engineering)/.+\\.md$"},
+        "line": {"type": "integer", "minimum": 1}
+      }
+    },
+    "ai_control_review": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["provider", "assessment_candidate", "applicability_candidate", "confidence", "reason", "advice", "evidence", "limitations", "task_id"],
+      "properties": {
+        "provider": {"enum": ["codex", "claude"]},
+        "model": {"type": "string"},
+        "assessment_candidate": {"enum": ["advisory_pass_candidate", "advisory_fail_candidate", "needs_evidence", "not_applicable_candidate"]},
+        "applicability_candidate": {"enum": ["applicable", "not_applicable", "undetermined"]},
+        "confidence": {"enum": ["low", "medium", "high"]},
+        "reason": {"type": "string", "minLength": 1, "maxLength": 16384},
+        "advice": {"type": "string", "maxLength": 16384},
+        "evidence": {"type": "array", "maxItems": 256, "items": {"$ref": "#/$defs/location"}},
+        "limitations": {"type": "array", "minItems": 1, "maxItems": 256, "uniqueItems": true, "items": {"type": "string", "minLength": 1, "maxLength": 16384}},
+        "citation_verification": {"enum": ["not_cited", "snapshot_location_validated"]},
+        "claim_verification": {"const": "advisory_unverified"},
+        "task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"}
+      }
+    },
+    "assertion_result": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["assertion_id", "control_ids", "applicability", "execution", "assessment", "severity", "gate", "summary", "evidence_required", "evidence_observed", "remediation_class"],
+        "properties": {
+          "assertion_id": {"type": "string"},
+          "control_ids": {"type": "array", "items": {"type": "string"}},
+          "applicability": {"enum": ["applicable", "not_applicable", "undetermined"]},
+          "execution": {"enum": ["not_run", "completed", "blocked", "error"]},
+          "assessment": {"enum": ["pass", "fail", "unknown", "manual_review", "not_applicable", "stale", "conflicting"]},
+          "severity": {"enum": ["info", "low", "medium", "high", "critical"]},
+          "gate": {"enum": ["advisory", "required", "no-go"]},
+          "summary": {"type": "string"},
+          "locations": {
+            "type": "array",
+            "maxItems": 4096,
+            "uniqueItems": true,
+            "items": {"$ref": "#/$defs/location"}
+          },
+          "evidence_required": {
+            "type": "array",
+            "items": {"$ref": "#/$defs/evidence_requirement"}
+          },
+          "evidence_observed": {"type": "array", "items": {"$ref": "evidence.schema.json"}},
+          "remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]}
+        }
+    },
+    "terminal_state": {
+      "enum": ["profile_satisfied", "machine_work_complete_manual_evidence_remaining", "assessment_incomplete", "no_go", "policy_stopped", "budget_exhausted", "environment_blocked"]
+    },
+    "location": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path"],
+      "properties": {
+        "path": {"type": "string", "minLength": 1},
+        "line": {"type": "integer", "minimum": 0},
+        "column": {"type": "integer", "minimum": 0}
+      }
+    },
+    "evidence_requirement": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "minimum_authority", "description"],
+      "properties": {
+        "kind": {"type": "string", "pattern": "^[a-z0-9-]+$"},
+        "minimum_authority": {
+          "enum": ["declared", "repository", "executed", "artifact", "environment", "human"]
+        },
+        "description": {"type": "string", "minLength": 1}
+      }
+    }
+  }
+}

package/bin/schemas/signature-verification.schema.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/signature-verification.schema.json",
+  "title": "Production Readiness Publisher Signature Verification v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "artifact_kind", "artifact_id", "sha256", "key_id", "algorithm", "issued_at", "verified_at", "trust_store_id", "trust_store_digest", "signature_digest", "verified"],
+  "properties": {
+    "schema_version": {"const": "prc.signature-verification/v0.1"},
+    "artifact_kind": {"enum": ["pack", "adapter-registry", "catalog-bundle", "risk-exception"]},
+    "artifact_id": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9./@_-]{0,255}$"},
+    "sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "key_id": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
+    "algorithm": {"const": "ed25519"},
+    "issued_at": {"type": "string", "format": "date-time"},
+    "verified_at": {"type": "string", "format": "date-time"},
+    "trust_store_id": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
+    "trust_store_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "signature_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "verified": {"const": true}
+  }
+}

package/bin/schemas/signature.schema.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/signature.schema.json",
+  "title": "Production Readiness Publisher Signature v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "artifact_kind", "artifact_id", "sha256", "key_id", "algorithm", "issued_at", "signature"],
+  "properties": {
+    "schema_version": {"const": "prc.signature/v0.1"},
+    "artifact_kind": {"enum": ["pack", "adapter-registry", "catalog-bundle", "risk-exception"]},
+    "artifact_id": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9./@_-]{0,255}$"},
+    "sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "key_id": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
+    "algorithm": {"const": "ed25519"},
+    "issued_at": {"type": "string", "format": "date-time"},
+    "signature": {"type": "string", "pattern": "^[A-Za-z0-9+/]{86}==$"}
+  }
+}

package/bin/schemas/state-check-v0.1.schema.json

@@ -0,0 +1,27 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/state-check-v0.1.schema.json",
+  "title": "Production Readiness Scanner State Check v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "checked_at", "state_path", "integrity", "counts"],
+  "properties": {
+    "schema_version": {"const": "prc.state-check/v0.1"},
+    "checked_at": {"type": "string", "format": "date-time"},
+    "state_path": {"type": "string", "minLength": 1},
+    "integrity": {"const": "ok"},
+    "counts": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["runs", "results", "evidence", "inventory_files", "inventory_facts", "audit_events"],
+      "properties": {
+        "runs": {"type": "integer", "minimum": 0},
+        "results": {"type": "integer", "minimum": 0},
+        "evidence": {"type": "integer", "minimum": 0},
+        "inventory_files": {"type": "integer", "minimum": 0},
+        "inventory_facts": {"type": "integer", "minimum": 0},
+        "audit_events": {"type": "integer", "minimum": 0}
+      }
+    }
+  }
+}

package/bin/schemas/state-check.schema.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/state-check.schema.json",
+  "title": "Production Readiness Checklist State Check v0.2",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "checked_at", "state_path", "integrity", "counts"],
+  "properties": {
+    "schema_version": {"const": "prc.state-check/v0.2"},
+    "checked_at": {"type": "string", "format": "date-time"},
+    "state_path": {"type": "string", "minLength": 1},
+    "integrity": {"const": "ok"},
+    "counts": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["runs", "results", "findings", "evidence", "inventory_files", "inventory_facts", "audit_events"],
+      "properties": {
+        "runs": {"type": "integer", "minimum": 0},
+        "results": {"type": "integer", "minimum": 0},
+        "findings": {"type": "integer", "minimum": 0},
+        "evidence": {"type": "integer", "minimum": 0},
+        "inventory_files": {"type": "integer", "minimum": 0},
+        "inventory_facts": {"type": "integer", "minimum": 0},
+        "audit_events": {"type": "integer", "minimum": 0}
+      }
+    }
+  }
+}