@marinjursic/prc-linux-arm64 0.1.9 → 0.2.0

package/bin/schemas/control-check-program-catalog.schema.json

@@ -0,0 +1,160 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/control-check-program-catalog.schema.json",
+  "title": "Authenticated exact deterministic clause programs v0.4",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version", "generator_id", "program_schema_version", "program_schema_sha256",
+    "binding_schema_version", "binding_catalog_sha256", "definition_schema_sha256",
+    "definition_corpus_sha256", "registry_version", "registry_sha256", "methodology_sha256",
+    "classification_corpus_sha256", "control_count", "template_count", "predicate_defined_count",
+    "implementation_missing_count", "provider_capability_missing_count",
+    "end_to_end_runnable_template_count", "end_to_end_runnable_control_count",
+    "blocked_control_count", "classification_error_count", "predicate_shape_counts",
+    "templates", "catalog_sha256"
+  ],
+  "properties": {
+    "schema_version": {"const": "prc.control-check-program-catalog/v0.4"},
+    "generator_id": {"const": "prc.build-control-check-programs@0.4"},
+    "program_schema_version": {"const": "prc.control-check-program/v0.1"},
+    "program_schema_sha256": {"$ref": "#/$defs/digest"},
+    "binding_schema_version": {"const": "prc.control-check-bindings/v0.1"},
+    "binding_catalog_sha256": {"$ref": "#/$defs/digest"},
+    "definition_schema_sha256": {"$ref": "#/$defs/digest"},
+    "definition_corpus_sha256": {"$ref": "#/$defs/digest"},
+    "registry_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
+    "registry_sha256": {"$ref": "#/$defs/digest"},
+    "methodology_sha256": {"$ref": "#/$defs/digest"},
+    "classification_corpus_sha256": {"$ref": "#/$defs/digest"},
+    "control_count": {"const": 686},
+    "template_count": {"const": 765},
+    "predicate_defined_count": {"const": 765},
+    "implementation_missing_count": {"const": 0},
+    "provider_capability_missing_count": {"type": "integer", "minimum": 0, "maximum": 765},
+    "end_to_end_runnable_template_count": {"type": "integer", "minimum": 0, "maximum": 765},
+    "end_to_end_runnable_control_count": {"type": "integer", "minimum": 0, "maximum": 686},
+    "blocked_control_count": {"type": "integer", "minimum": 0, "maximum": 686},
+    "classification_error_count": {"const": 0},
+    "predicate_shape_counts": {
+      "type": "object", "minProperties": 1, "maxProperties": 128,
+      "propertyNames": {"pattern": "^[a-z][a-z0-9_]*$"},
+      "additionalProperties": {"type": "integer", "minimum": 1, "maximum": 765}
+    },
+    "templates": {
+      "type": "array", "minItems": 765, "maxItems": 765,
+      "items": {"$ref": "#/$defs/template"}
+    },
+    "catalog_sha256": {"$ref": "#/$defs/digest"}
+  },
+  "$defs": {
+    "digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
+    "fact_id": {"type": "string", "minLength": 3, "maxLength": 128, "pattern": "^[A-Za-z0-9_.-]+$"},
+    "bounded_text": {"type": "string", "minLength": 20, "maxLength": 12000},
+    "fact_type": {"enum": ["identity", "schema", "digest", "state", "string", "boolean", "number", "time", "string_set", "identity_map", "schema_map", "digest_map", "state_map", "string_map", "boolean_map", "number_map", "time_map", "directed_graph"]},
+    "authority": {"enum": ["repository", "artifact", "executed", "environment", "external_registry", "structured_record"]},
+    "checker_family": {"enum": ["inventory_fact", "structured_document", "package_metadata", "ci_policy", "container_iac", "source_ast", "artifact_integrity", "analysis_adapter", "execution_evidence", "environment_evidence", "structured_record"]},
+    "raw_fact_contract": {
+      "type": "object", "additionalProperties": false,
+      "required": ["fact_id", "fact_type", "authority", "raw_value_semantics", "source_requirement", "complete_required"],
+      "properties": {
+        "fact_id": {"$ref": "#/$defs/fact_id"},
+        "fact_type": {"$ref": "#/$defs/fact_type"},
+        "authority": {"$ref": "#/$defs/authority"},
+        "raw_value_semantics": {"$ref": "#/$defs/bounded_text"},
+        "source_requirement": {"$ref": "#/$defs/bounded_text"},
+        "complete_required": {"const": true}
+      }
+    },
+    "parameter_contract": {
+      "type": "object", "additionalProperties": false,
+      "required": ["parameter_id", "parameter_type", "value_origin", "source_requirement"],
+      "properties": {
+        "parameter_id": {"$ref": "#/$defs/fact_id"},
+        "parameter_type": {"$ref": "#/$defs/fact_type"},
+        "value_origin": {"enum": ["scanner_inventory", "independently_authenticated_policy", "independently_authenticated_context"]},
+        "source_requirement": {"$ref": "#/$defs/bounded_text"}
+      }
+    },
+    "collector_contract": {
+      "type": "object", "additionalProperties": false,
+      "required": ["collector_id", "required_sources", "inventory_contract", "normalization_contract", "completeness_contract", "freshness_contract", "provider_status"],
+      "properties": {
+        "collector_id": {"type": "string", "pattern": "^prc\\.collect\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+        "required_sources": {"type": "array", "minItems": 1, "maxItems": 20, "uniqueItems": true, "items": {"$ref": "#/$defs/bounded_text"}},
+        "inventory_contract": {"$ref": "#/$defs/bounded_text"},
+        "normalization_contract": {"$ref": "#/$defs/bounded_text"},
+        "completeness_contract": {"$ref": "#/$defs/bounded_text"},
+        "freshness_contract": {"$ref": "#/$defs/bounded_text"},
+        "provider_status": {"enum": ["registered", "unregistered"]}
+      }
+    },
+    "runtime_requirements": {
+      "type": "object", "additionalProperties": false,
+      "required": [
+        "subject_id", "subjects", "inventory_sha256", "maximum_evidence_age_seconds",
+        "allow_not_applicable", "applicability_proof_contract_sha256", "sealed_parameters",
+        "sealed_parameters_bound_by", "evidence_provider_may_supply_parameters",
+        "provider_registration", "provider_claimed", "domain_evidence_collector", "missing_capability_result"
+      ],
+      "properties": {
+        "subject_id": {"const": "inject_at_runtime"},
+        "subjects": {"const": "inject_complete_bounded_inventory_at_runtime"},
+        "inventory_sha256": {"const": "inject_at_runtime"},
+        "maximum_evidence_age_seconds": {"const": "inject_approved_freshness_at_runtime"},
+        "allow_not_applicable": {"const": "inject_reviewed_applicability_at_runtime"},
+        "applicability_proof_contract_sha256": {"const": "inject_at_runtime"},
+        "sealed_parameters": {"const": "compile_from_declared_trusted_origin_before_requesting_evidence"},
+        "sealed_parameters_bound_by": {"const": "program_sha256"},
+        "evidence_provider_may_supply_parameters": {"const": false},
+        "provider_registration": {"const": "required_before_evidence"},
+        "provider_claimed": {"type": "boolean"},
+        "domain_evidence_collector": {"enum": ["not_shipped_or_registered", "shipped_and_registered"]},
+        "missing_capability_result": {"const": "blocked"}
+      }
+    },
+    "template": {
+      "type": "object", "additionalProperties": false,
+      "required": [
+        "template_id", "program_schema_version", "program_schema_sha256", "control_id",
+        "control_revision", "control_semantic_sha256", "clause_ordinal", "clause_id",
+        "clause_statement", "clause_statement_sha256", "checker_family", "required_authority",
+        "implementation_id", "implementation_contract_sha256", "review_status", "predicate_defined",
+        "end_to_end_runnable", "predicate_shape", "review_reason", "counterexample_analysis",
+        "raw_fact_contracts", "sealed_parameter_contracts", "predicate", "required_runtime_ops",
+        "collector_contract", "provider_capability_status", "runtime_requirements", "template_sha256"
+      ],
+      "properties": {
+        "template_id": {"$ref": "#/$defs/digest"},
+        "program_schema_version": {"const": "prc.control-check-program/v0.1"},
+        "program_schema_sha256": {"$ref": "#/$defs/digest"},
+        "control_id": {"$ref": "#/$defs/control_id"},
+        "control_revision": {"type": "integer", "minimum": 1},
+        "control_semantic_sha256": {"$ref": "#/$defs/digest"},
+        "clause_ordinal": {"type": "integer", "minimum": 1, "maximum": 50},
+        "clause_id": {"$ref": "#/$defs/digest"},
+        "clause_statement": {"type": "string", "minLength": 1, "maxLength": 2000},
+        "clause_statement_sha256": {"$ref": "#/$defs/digest"},
+        "checker_family": {"$ref": "#/$defs/checker_family"},
+        "required_authority": {"$ref": "#/$defs/authority"},
+        "implementation_id": {"type": "string", "pattern": "^prc\\.check\\.[a-z0-9-]+@[0-9]+\\.[0-9]+$"},
+        "implementation_contract_sha256": {"$ref": "#/$defs/digest"},
+        "review_status": {"enum": ["predicate_defined_provider_registered", "predicate_defined_provider_unregistered"]},
+        "predicate_defined": {"const": true},
+        "end_to_end_runnable": {"type": "boolean"},
+        "predicate_shape": {"type": "string", "pattern": "^[a-z][a-z0-9_]*$"},
+        "review_reason": {"$ref": "#/$defs/bounded_text"},
+        "counterexample_analysis": {"$ref": "#/$defs/bounded_text"},
+        "raw_fact_contracts": {"type": "array", "minItems": 1, "maxItems": 128, "items": {"$ref": "#/$defs/raw_fact_contract"}},
+        "sealed_parameter_contracts": {"type": "array", "maxItems": 128, "items": {"$ref": "#/$defs/parameter_contract"}},
+        "predicate": {"type": "object", "minProperties": 1},
+        "required_runtime_ops": {"type": "array", "minItems": 1, "maxItems": 64, "uniqueItems": true, "items": {"type": "string", "pattern": "^[a-z][a-z0-9_]*$"}},
+        "collector_contract": {"$ref": "#/$defs/collector_contract"},
+        "provider_capability_status": {"enum": ["registered", "unregistered"]},
+        "runtime_requirements": {"$ref": "#/$defs/runtime_requirements"},
+        "template_sha256": {"$ref": "#/$defs/digest"}
+      }
+    }
+  }
+}

package/bin/schemas/control-check-program-definitions.schema.json

@@ -0,0 +1,139 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/control-check-program-definitions.schema.json",
+  "title": "Reviewed clause-specific deterministic program definitions",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "scope", "source_binding_catalog_sha256", "definition_count", "definitions"],
+  "properties": {
+    "schema_version": {"const": "prc.control-check-program-definitions/v0.1"},
+    "scope": {"enum": ["structured_record", "non_structured"]},
+    "source_binding_catalog_sha256": {"$ref": "#/$defs/digest"},
+    "definition_count": {"type": "integer", "minimum": 1, "maximum": 765},
+    "definitions": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 765,
+      "items": {"$ref": "#/$defs/definition"}
+    }
+  },
+  "$defs": {
+    "digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
+    "fact_id": {"type": "string", "minLength": 3, "maxLength": 128, "pattern": "^[A-Za-z0-9_.-]+$"},
+    "bounded_text": {"type": "string", "minLength": 20, "maxLength": 12000},
+    "fact_type": {"enum": ["identity", "schema", "digest", "state", "string", "boolean", "number", "time", "string_set", "identity_map", "schema_map", "digest_map", "state_map", "string_map", "boolean_map", "number_map", "time_map", "directed_graph"]},
+    "authority": {"enum": ["repository", "artifact", "executed", "environment", "external_registry", "structured_record"]},
+    "checker_family": {"enum": ["inventory_fact", "structured_document", "package_metadata", "ci_policy", "container_iac", "source_ast", "artifact_integrity", "analysis_adapter", "execution_evidence", "environment_evidence", "structured_record"]},
+    "raw_fact_contract": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["fact_id", "fact_type", "authority", "raw_value_semantics", "source_requirement", "complete_required"],
+      "properties": {
+        "fact_id": {"$ref": "#/$defs/fact_id"},
+        "fact_type": {"$ref": "#/$defs/fact_type"},
+        "authority": {"$ref": "#/$defs/authority"},
+        "raw_value_semantics": {"$ref": "#/$defs/bounded_text"},
+        "source_requirement": {"$ref": "#/$defs/bounded_text"},
+        "complete_required": {"const": true}
+      }
+    },
+    "parameter_contract": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["parameter_id", "parameter_type", "value_origin", "source_requirement"],
+      "properties": {
+        "parameter_id": {"$ref": "#/$defs/fact_id"},
+        "parameter_type": {"$ref": "#/$defs/fact_type"},
+        "value_origin": {"enum": ["scanner_inventory", "independently_authenticated_policy", "independently_authenticated_context"]},
+        "source_requirement": {"$ref": "#/$defs/bounded_text"}
+      }
+    },
+    "collector_contract": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["collector_id", "required_sources", "inventory_contract", "normalization_contract", "completeness_contract", "freshness_contract", "provider_status"],
+      "properties": {
+        "collector_id": {"type": "string", "minLength": 8, "maxLength": 200, "pattern": "^prc\\.collect\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
+        "required_sources": {"type": "array", "minItems": 1, "maxItems": 20, "uniqueItems": true, "items": {"$ref": "#/$defs/bounded_text"}},
+        "inventory_contract": {"$ref": "#/$defs/bounded_text"},
+        "normalization_contract": {"$ref": "#/$defs/bounded_text"},
+        "completeness_contract": {"$ref": "#/$defs/bounded_text"},
+        "freshness_contract": {"$ref": "#/$defs/bounded_text"},
+        "provider_status": {"const": "unregistered"}
+      }
+    },
+    "fixture": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["description", "parameters", "facts", "expected_outcome"],
+      "properties": {
+        "description": {"$ref": "#/$defs/bounded_text"},
+        "parameters": {"type": "object", "maxProperties": 512, "additionalProperties": {"type": "object"}},
+        "facts": {"type": "object", "maxProperties": 512, "additionalProperties": {"type": "object"}},
+        "expected_outcome": {"enum": ["pass", "fail", "blocked"]}
+      }
+    },
+    "fixtures": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["pass", "fail", "blocked", "counterexample"],
+      "properties": {
+        "pass": {"allOf": [{"$ref": "#/$defs/fixture"}, {"properties": {"expected_outcome": {"const": "pass"}}}]},
+        "fail": {"allOf": [{"$ref": "#/$defs/fixture"}, {"properties": {"expected_outcome": {"const": "fail"}}}]},
+        "blocked": {"allOf": [{"$ref": "#/$defs/fixture"}, {"properties": {"expected_outcome": {"const": "blocked"}}}]},
+        "counterexample": {"allOf": [{"$ref": "#/$defs/fixture"}, {"properties": {"expected_outcome": {"const": "fail"}}}]}
+      }
+    },
+    "definition": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "control_id", "control_revision", "control_semantic_sha256", "clause_ordinal", "clause_id", "clause_statement",
+        "checker_family", "required_authority", "corrected_checker_family", "corrected_required_authority",
+        "classification_status", "classification_error_reason", "raw_fact_contracts", "sealed_parameter_contracts",
+        "predicate", "required_runtime_ops", "collector_contract", "fixtures", "review_reason", "counterexample_analysis"
+      ],
+      "properties": {
+        "control_id": {"$ref": "#/$defs/control_id"},
+        "control_revision": {"type": "integer", "minimum": 1},
+        "control_semantic_sha256": {"$ref": "#/$defs/digest"},
+        "clause_ordinal": {"type": "integer", "minimum": 1, "maximum": 50},
+        "clause_id": {"$ref": "#/$defs/digest"},
+        "clause_statement": {"type": "string", "minLength": 1, "maxLength": 2000},
+        "checker_family": {"$ref": "#/$defs/checker_family"},
+        "required_authority": {"$ref": "#/$defs/authority"},
+        "corrected_checker_family": {"$ref": "#/$defs/checker_family"},
+        "corrected_required_authority": {"$ref": "#/$defs/authority"},
+        "classification_status": {"enum": ["exact_predicate", "classification_error"]},
+        "classification_error_reason": {"type": ["string", "null"], "minLength": 20, "maxLength": 12000},
+        "raw_fact_contracts": {"type": "array", "maxItems": 128, "items": {"$ref": "#/$defs/raw_fact_contract"}},
+        "sealed_parameter_contracts": {"type": "array", "maxItems": 128, "items": {"$ref": "#/$defs/parameter_contract"}},
+        "predicate": {"type": ["object", "null"]},
+        "required_runtime_ops": {"type": "array", "maxItems": 32, "uniqueItems": true, "items": {"type": "string", "minLength": 2, "maxLength": 128, "pattern": "^[a-z][a-z0-9_]*$"}},
+        "collector_contract": {"$ref": "#/$defs/collector_contract"},
+        "fixtures": {"$ref": "#/$defs/fixtures"},
+        "review_reason": {"$ref": "#/$defs/bounded_text"},
+        "counterexample_analysis": {"$ref": "#/$defs/bounded_text"}
+      },
+      "allOf": [
+        {
+          "if": {"properties": {"classification_status": {"const": "exact_predicate"}}},
+          "then": {
+            "properties": {
+              "classification_error_reason": {"type": "null"},
+              "raw_fact_contracts": {"minItems": 1},
+              "predicate": {"type": "object"}
+            }
+          },
+          "else": {
+            "properties": {
+              "classification_error_reason": {"type": "string", "minLength": 20},
+              "predicate": {"type": "null"}
+            }
+          }
+        }
+      ]
+    }
+  }
+}

package/bin/schemas/control-check-program.schema.json

@@ -0,0 +1,298 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/control-check-program.schema.json",
+  "title": "Bounded deterministic control predicate program v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "control_id", "control_revision", "control_semantic_sha256", "clause_id", "clause_sha256", "implementation_contract_sha256", "subject_id", "subjects", "inventory_sha256", "required_authority", "allow_not_applicable", "applicability_proof_contract_sha256", "maximum_evidence_age_seconds", "parameters", "predicate"],
+  "properties": {
+    "schema_version": {"const": "prc.control-check-program/v0.1"},
+    "control_id": {"$ref": "#/$defs/control_id"},
+    "control_revision": {"type": "integer", "minimum": 1},
+    "control_semantic_sha256": {"$ref": "#/$defs/digest"},
+    "clause_id": {"$ref": "#/$defs/digest"},
+    "clause_sha256": {"$ref": "#/$defs/digest"},
+    "implementation_contract_sha256": {"$ref": "#/$defs/digest"},
+    "subject_id": {"$ref": "#/$defs/nonempty_string"},
+    "subjects": {"$ref": "#/$defs/nonempty_string_set"},
+    "inventory_sha256": {"$ref": "#/$defs/digest"},
+    "required_authority": {"$ref": "#/$defs/authority"},
+    "allow_not_applicable": {"type": "boolean"},
+    "applicability_proof_contract_sha256": {"$ref": "#/$defs/digest"},
+    "maximum_evidence_age_seconds": {"type": "integer", "minimum": 1, "maximum": 31536000},
+    "parameters": {
+      "type": "object",
+      "maxProperties": 512,
+      "propertyNames": {"$ref": "#/$defs/fact_id"},
+      "additionalProperties": {"$ref": "#/$defs/parameter"}
+    },
+    "predicate": {"$ref": "#/$defs/expression"}
+  },
+  "$defs": {
+    "digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
+    "fact_id": {"type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9_.-]+$"},
+    "bounded_string": {"type": "string", "maxLength": 4096},
+    "nonempty_string": {"type": "string", "minLength": 1, "maxLength": 4096},
+    "authority": {"enum": ["repository", "artifact", "executed", "environment", "external_registry", "structured_record"]},
+    "string_set": {"type": "array", "maxItems": 1024, "uniqueItems": true, "items": {"$ref": "#/$defs/nonempty_string"}},
+    "nonempty_string_set": {"type": "array", "minItems": 1, "maxItems": 1024, "uniqueItems": true, "items": {"$ref": "#/$defs/nonempty_string"}},
+    "number_map": {
+      "type": "object", "maxProperties": 1024,
+      "propertyNames": {"$ref": "#/$defs/fact_id"},
+      "additionalProperties": {"type": "number"}
+    },
+    "string_map": {
+      "type": "object", "maxProperties": 1024,
+      "propertyNames": {"$ref": "#/$defs/fact_id"},
+      "additionalProperties": {"type": "string", "maxLength": 4096}
+    },
+    "nonempty_string_map": {
+      "type": "object", "maxProperties": 1024,
+      "propertyNames": {"$ref": "#/$defs/fact_id"},
+      "additionalProperties": {"$ref": "#/$defs/nonempty_string"}
+    },
+    "digest_map": {
+      "type": "object", "maxProperties": 1024,
+      "propertyNames": {"$ref": "#/$defs/fact_id"},
+      "additionalProperties": {"$ref": "#/$defs/digest"}
+    },
+    "boolean_map": {
+      "type": "object", "maxProperties": 1024,
+      "propertyNames": {"$ref": "#/$defs/fact_id"},
+      "additionalProperties": {"type": "boolean"}
+    },
+    "directed_edge": {
+      "type": "object", "additionalProperties": false,
+      "required": ["from", "to"],
+      "properties": {
+        "from": {"$ref": "#/$defs/nonempty_string"},
+        "to": {"$ref": "#/$defs/nonempty_string"}
+      }
+    },
+    "time_map": {
+      "type": "object", "maxProperties": 1024,
+      "propertyNames": {"$ref": "#/$defs/fact_id"},
+      "additionalProperties": {"type": "string", "format": "date-time", "maxLength": 64}
+    },
+    "parameter": {
+      "oneOf": [
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "string"],
+          "properties": {"type": {"enum": ["identity", "schema", "state"]}, "string": {"$ref": "#/$defs/nonempty_string"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "string"],
+          "properties": {"type": {"const": "digest"}, "string": {"$ref": "#/$defs/digest"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "string"],
+          "properties": {"type": {"const": "string"}, "string": {"$ref": "#/$defs/bounded_string"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "boolean"],
+          "properties": {"type": {"const": "boolean"}, "boolean": {"type": "boolean"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "number"],
+          "properties": {"type": {"const": "number"}, "number": {"type": "number"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "timestamp"],
+          "properties": {"type": {"const": "time"}, "timestamp": {"type": "string", "format": "date-time", "maxLength": 64}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "strings"],
+          "properties": {"type": {"const": "string_set"}, "strings": {"$ref": "#/$defs/string_set"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "values"],
+          "properties": {"type": {"enum": ["identity_map", "schema_map", "state_map"]}, "values": {"$ref": "#/$defs/nonempty_string_map"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "values"],
+          "properties": {"type": {"const": "digest_map"}, "values": {"$ref": "#/$defs/digest_map"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "values"],
+          "properties": {"type": {"const": "string_map"}, "values": {"$ref": "#/$defs/string_map"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "booleans"],
+          "properties": {"type": {"const": "boolean_map"}, "booleans": {"$ref": "#/$defs/boolean_map"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "numbers"],
+          "properties": {"type": {"const": "number_map"}, "numbers": {"$ref": "#/$defs/number_map"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "timestamps"],
+          "properties": {"type": {"const": "time_map"}, "timestamps": {"$ref": "#/$defs/time_map"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["type", "edges"],
+          "properties": {
+            "type": {"const": "directed_graph"},
+            "edges": {"type": "array", "minItems": 1, "maxItems": 1024, "uniqueItems": true, "items": {"$ref": "#/$defs/directed_edge"}}
+          }
+        }
+      ]
+    },
+    "expression": {
+      "oneOf": [
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "args"],
+          "properties": {
+            "op": {"enum": ["all", "any"]},
+            "args": {"type": "array", "minItems": 1, "maxItems": 64, "items": {"$ref": "#/$defs/expression"}}
+          }
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "arg"],
+          "properties": {"op": {"const": "not"}, "arg": {"$ref": "#/$defs/expression"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "fact", "string"],
+          "properties": {
+            "op": {"enum": ["identity_eq", "schema_eq", "string_eq"]},
+            "fact": {"$ref": "#/$defs/fact_id"},
+            "string": {"$ref": "#/$defs/bounded_string"}
+          }
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "fact", "string"],
+          "properties": {"op": {"const": "digest_eq"}, "fact": {"$ref": "#/$defs/fact_id"}, "string": {"$ref": "#/$defs/digest"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "fact", "strings"],
+          "properties": {"op": {"const": "state_in"}, "fact": {"$ref": "#/$defs/fact_id"}, "strings": {"$ref": "#/$defs/nonempty_string_set"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "fact", "boolean"],
+          "properties": {"op": {"enum": ["boolean_eq", "boolean_map_all_eq"]}, "fact": {"$ref": "#/$defs/fact_id"}, "boolean": {"type": "boolean"}}
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "fact", "number"],
+          "properties": {
+            "op": {"enum": ["number_eq", "number_lt", "number_lte", "number_gt", "number_gte"]},
+            "fact": {"$ref": "#/$defs/fact_id"},
+            "number": {"type": "number"}
+          }
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "fact"],
+          "properties": {
+            "op": {"enum": ["directed_graph_acyclic", "string_map_all_nonempty", "identity_map_values_unique"]},
+            "fact": {"$ref": "#/$defs/fact_id"}
+          }
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "fact", "timestamp"],
+          "properties": {
+            "op": {"enum": ["time_before", "time_lte", "time_after", "time_gte"]},
+            "fact": {"$ref": "#/$defs/fact_id"},
+            "timestamp": {"type": "string", "format": "date-time", "maxLength": 64}
+          }
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "fact", "strings"],
+          "properties": {
+            "op": {"enum": ["set_eq", "set_contains_all", "set_disjoint", "map_keys_eq_set", "identity_map_values_in", "state_map_values_in", "string_map_values_in"]},
+            "fact": {"$ref": "#/$defs/fact_id"},
+            "strings": {"$ref": "#/$defs/string_set"}
+          }
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "fact", "other_fact"],
+          "properties": {
+            "op": {
+              "enum": [
+                "identity_eq_fact", "schema_eq_fact", "digest_eq_fact", "string_eq_fact",
+                "state_in_set_fact", "boolean_eq_fact",
+                "number_eq_fact", "number_lt_fact", "number_lte_fact", "number_gt_fact", "number_gte_fact",
+                "time_before_fact", "time_lte_fact", "time_after_fact", "time_gte_fact",
+                "set_eq_fact", "set_contains_all_fact", "set_disjoint_fact",
+                "identity_map_eq_fact", "identity_map_values_in_fact", "identity_map_values_not_in_fact", "identity_map_values_not_equal_fact", "schema_map_eq_fact", "digest_map_eq_fact",
+                "state_map_eq_fact", "string_map_eq_fact", "boolean_map_eq_fact", "map_keys_eq_set_fact",
+                "boolean_map_any_true_fact", "boolean_map_implies_fact", "string_map_any_nonempty_fact",
+                "number_map_eq_fact", "number_map_lt_fact", "number_map_lte_fact",
+                "number_map_gt_fact", "number_map_gte_fact",
+                "time_map_eq_fact", "time_map_before_fact", "time_map_lte_fact", "time_map_after_fact", "time_map_gte_fact"
+              ]
+            },
+            "fact": {"$ref": "#/$defs/fact_id"},
+            "other_fact": {"$ref": "#/$defs/fact_id"}
+          }
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "fact", "parameter"],
+          "properties": {
+            "op": {
+              "enum": [
+                "identity_eq_parameter", "schema_eq_parameter", "digest_eq_parameter", "string_eq_parameter",
+                "state_in_parameter", "boolean_eq_parameter",
+                "number_eq_parameter", "number_lt_parameter", "number_lte_parameter", "number_gt_parameter", "number_gte_parameter",
+                "time_before_parameter", "time_lte_parameter", "time_after_parameter", "time_gte_parameter",
+                "set_eq_parameter", "set_contains_all_parameter", "set_disjoint_parameter",
+                "identity_map_eq_parameter", "identity_map_values_differ_for_pairs_parameter", "schema_map_eq_parameter", "digest_map_eq_parameter",
+                "state_map_eq_parameter", "string_map_eq_parameter", "boolean_map_eq_parameter",
+                "map_keys_eq_set_parameter", "identity_map_values_in_parameter", "identity_map_values_biject_set_parameter", "state_map_values_in_parameter",
+                "string_map_values_in_parameter", "boolean_map_all_eq_parameter",
+                "number_map_eq_parameter", "number_map_lt_parameter", "number_map_lte_parameter", "number_map_gt_parameter", "number_map_gte_parameter",
+                "time_map_eq_parameter", "time_map_before_parameter", "time_map_lte_parameter", "time_map_after_parameter", "time_map_gte_parameter"
+              ]
+            },
+            "fact": {"$ref": "#/$defs/fact_id"},
+            "parameter": {"$ref": "#/$defs/fact_id"}
+          }
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "fact", "other_fact", "parameter"],
+          "properties": {
+            "op": {"enum": ["time_map_delta_lte_parameter", "map_key_partition_eq_set_parameter"]},
+            "fact": {"$ref": "#/$defs/fact_id"},
+            "other_fact": {"$ref": "#/$defs/fact_id"},
+            "parameter": {"$ref": "#/$defs/fact_id"}
+          }
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["op", "fact", "other_fact", "third_fact"],
+          "properties": {
+            "op": {"const": "time_map_delta_eq_number_map_fact"},
+            "fact": {"$ref": "#/$defs/fact_id"},
+            "other_fact": {"$ref": "#/$defs/fact_id"},
+            "third_fact": {"$ref": "#/$defs/fact_id"}
+          }
+        }
+      ]
+    }
+  }
+}