@marinjursic/prc-linux-arm64 0.1.9 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. package/bin/catalog/assertions/core-repository.yaml +28 -28
  2. package/bin/catalog/control-check-bindings.json.gz +0 -0
  3. package/bin/catalog/control-check-programs.json.gz +0 -0
  4. package/bin/catalog/control-contracts.json.gz +0 -0
  5. package/bin/fixtures/benchmarks/core-native/suite-comprehensive.yaml +10 -1
  6. package/bin/fixtures/benchmarks/core-native/suite.yaml +13 -2
  7. package/bin/packs/core-foundation.yaml +4 -4
  8. package/bin/packs/core-native.yaml +10 -10
  9. package/bin/prc +0 -0
  10. package/bin/schemas/adapter-execution-v0.3.schema.json +145 -0
  11. package/bin/schemas/authoritative-evidence-bundle.schema.json +38 -0
  12. package/bin/schemas/authoritative-evidence-set.schema.json +38 -0
  13. package/bin/schemas/authoritative-evidence-verification.schema.json +54 -0
  14. package/bin/schemas/automatic-coverage.schema.json +49 -0
  15. package/bin/schemas/control-check-bindings.schema.json +119 -0
  16. package/bin/schemas/control-check-evidence-v0.1.schema.json +244 -0
  17. package/bin/schemas/control-check-evidence.schema.json +244 -0
  18. package/bin/schemas/control-check-program-catalog.schema.json +160 -0
  19. package/bin/schemas/control-check-program-definitions.schema.json +139 -0
  20. package/bin/schemas/control-check-program.schema.json +298 -0
  21. package/bin/schemas/control-classification-final.schema.json +64 -0
  22. package/bin/schemas/control-classification-review.schema.json +161 -0
  23. package/bin/schemas/control-classification-skeptic-review.schema.json +96 -0
  24. package/bin/schemas/control-classification-strength-review.schema.json +90 -0
  25. package/bin/schemas/control-contracts.schema.json +101 -12
  26. package/bin/schemas/control-review-output-v0.2.schema.json +66 -0
  27. package/bin/schemas/control-review-output.schema.json +22 -3
  28. package/bin/schemas/evidence-requirements.schema.json +144 -0
  29. package/bin/schemas/evidence-set-verification.schema.json +65 -0
  30. package/bin/schemas/provider-capabilities.schema.json +26 -0
  31. package/bin/schemas/run-result-v0.10.schema.json +5 -5
  32. package/bin/schemas/run-result-v0.11.schema.json +5 -5
  33. package/bin/schemas/run-result-v0.12.schema.json +270 -0
  34. package/bin/schemas/run-result.schema.json +166 -16
  35. package/bin/schemas/signature-verification.schema.json +8 -1
  36. package/bin/schemas/signature.schema.json +8 -1
  37. package/bin/schemas/trust-store.schema.json +8 -1
  38. package/manifest.json +142 -32
  39. package/package.json +1 -1
@@ -1,12 +1,12 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft/2020-12/schema",
3
3
  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/run-result.schema.json",
4
- "title": "Production Readiness Run Result v0.12",
4
+ "title": "Production Readiness Run Result v0.13",
5
5
  "type": "object",
6
6
  "additionalProperties": false,
7
- "required": ["schema_version", "run_id", "started_at", "completed_at", "plan", "inventory", "adapter_executions", "results", "findings", "terminal_state"],
7
+ "required": ["schema_version", "run_id", "started_at", "completed_at", "plan", "inventory", "adapter_executions", "results", "findings", "authoritative_evidence_bundles", "terminal_state"],
8
8
  "properties": {
9
- "schema_version": {"const": "prc.run/v0.12"},
9
+ "schema_version": {"const": "prc.run/v0.13"},
10
10
  "run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
11
11
  "started_at": {"type": "string", "format": "date-time"},
12
12
  "completed_at": {"type": "string", "format": "date-time"},
@@ -24,44 +24,112 @@
24
24
  "maxItems": 100000,
25
25
  "items": {"$ref": "#/$defs/control_result"}
26
26
  },
27
+ "deterministic_evidence": {
28
+ "type": "array",
29
+ "maxItems": 100000,
30
+ "items": {"$ref": "control-check-evidence.schema.json"}
31
+ },
32
+ "authoritative_evidence_bundles": {
33
+ "type": "array",
34
+ "maxItems": 16,
35
+ "items": {"$ref": "authoritative-evidence-verification.schema.json"}
36
+ },
37
+ "ai_improvement_plan": {"$ref": "#/$defs/ai_improvement_plan"},
27
38
  "terminal_state": {"$ref": "#/$defs/terminal_state"}
28
39
  },
29
40
  "$defs": {
30
41
  "control_catalog": {
31
42
  "type": "object",
32
43
  "additionalProperties": false,
33
- "required": ["schema_version", "registry_version", "registry_sha256", "source_sha256", "contract_schema_version", "contract_sha256", "control_count", "active_control_count", "contract_count", "generated_contract_count", "expert_reviewed_contract_count", "profile_terminal_state"],
44
+ "required": ["schema_version", "registry_version", "registry_sha256", "source_sha256", "contract_schema_version", "contract_generator_id", "contract_sha256", "classification_methodology_sha256", "classification_summary_sha256", "classification_corpus_sha256", "control_check_bindings_schema_version", "control_check_bindings_sha256", "control_check_programs_schema_version", "control_check_programs_sha256", "control_check_programs_catalog_sha256", "control_check_definition_schema_sha256", "control_check_definition_corpus_sha256", "control_count", "active_control_count", "contract_count", "generated_contract_count", "agent_reviewed_contract_count", "reviewed_deterministic_count", "reviewed_nondeterministic_count", "deterministic_binding_count", "deterministic_program_template_count", "deterministic_program_blocked_count", "profile_terminal_state"],
34
45
  "properties": {
35
46
  "schema_version": {"const": "prc.control-catalog-summary/v0.1"},
36
47
  "registry_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
37
48
  "registry_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
38
49
  "source_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
39
- "contract_schema_version": {"const": "prc.control-contracts/v0.1"},
50
+ "contract_schema_version": {"const": "prc.control-contracts/v0.2"},
51
+ "contract_generator_id": {"const": "prc.control-contracts@0.2"},
40
52
  "contract_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
53
+ "classification_methodology_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
54
+ "classification_summary_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
55
+ "classification_corpus_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
56
+ "control_check_bindings_schema_version": {"const": "prc.control-check-bindings/v0.1"},
57
+ "control_check_bindings_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
58
+ "control_check_programs_schema_version": {"const": "prc.control-check-program-catalog/v0.4"},
59
+ "control_check_programs_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
60
+ "control_check_programs_catalog_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
61
+ "control_check_definition_schema_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
62
+ "control_check_definition_corpus_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
41
63
  "control_count": {"type": "integer", "minimum": 1, "maximum": 100000},
42
64
  "active_control_count": {"type": "integer", "minimum": 0, "maximum": 100000},
43
65
  "contract_count": {"type": "integer", "minimum": 1, "maximum": 100000},
44
66
  "generated_contract_count": {"type": "integer", "minimum": 0, "maximum": 100000},
45
- "expert_reviewed_contract_count": {"type": "integer", "minimum": 0, "maximum": 100000},
67
+ "agent_reviewed_contract_count": {"type": "integer", "minimum": 0, "maximum": 100000},
68
+ "reviewed_deterministic_count": {"type": "integer", "minimum": 1, "maximum": 100000},
69
+ "reviewed_nondeterministic_count": {"type": "integer", "minimum": 1, "maximum": 100000},
70
+ "deterministic_binding_count": {"type": "integer", "minimum": 1, "maximum": 100000},
71
+ "deterministic_program_template_count": {"type": "integer", "minimum": 1, "maximum": 100000},
72
+ "deterministic_program_blocked_count": {"type": "integer", "minimum": 0, "maximum": 100000},
73
+ "deterministic_program_executed_count": {"type": "integer", "minimum": 0, "maximum": 100000},
74
+ "deterministic_program_pass_count": {"type": "integer", "minimum": 0, "maximum": 100000},
75
+ "deterministic_program_fail_count": {"type": "integer", "minimum": 0, "maximum": 100000},
76
+ "deterministic_program_not_applicable_count": {"type": "integer", "minimum": 0, "maximum": 100000},
46
77
  "profile_terminal_state": {"$ref": "#/$defs/terminal_state"},
47
78
  "ai_review_provider": {"enum": ["codex", "claude"]},
48
79
  "ai_review_model": {"type": "string"},
49
- "ai_review_state": {"enum": ["complete", "focused"]},
80
+ "ai_review_depth": {"enum": ["standard", "deep"]},
81
+ "ai_review_state": {"enum": ["complete", "focused", "partial"]},
50
82
  "ai_reviewed_count": {"type": "integer", "minimum": 0, "maximum": 100000},
51
83
  "ai_advisory_fail_count": {"type": "integer", "minimum": 0, "maximum": 100000}
52
84
  }
53
85
  },
86
+ "deterministic_clause_result": {
87
+ "type": "object",
88
+ "additionalProperties": false,
89
+ "required": ["template_id", "collector_id", "clause_id", "clause_ordinal", "implementation_id", "implementation_contract_sha256", "required_authority", "status", "evaluated_at"],
90
+ "properties": {
91
+ "template_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
92
+ "collector_id": {"type": "string", "pattern": "^prc\\.collect\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
93
+ "clause_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
94
+ "clause_ordinal": {"type": "integer", "minimum": 1, "maximum": 50},
95
+ "implementation_id": {"type": "string", "pattern": "^prc\\.check\\.[a-z0-9-]+@[0-9]+\\.[0-9]+$"},
96
+ "implementation_contract_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
97
+ "required_authority": {"enum": ["repository", "artifact", "executed", "environment", "external_registry", "structured_record"]},
98
+ "provider_id": {"type": "string", "minLength": 1, "maxLength": 4096},
99
+ "program_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
100
+ "evidence_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
101
+ "status": {"enum": ["passed", "failed", "not_applicable", "blocked_binding", "blocked_provider_unregistered", "blocked_provider_authority", "blocked_collection", "blocked_evidence", "blocked_canceled"]},
102
+ "outcome": {"enum": ["pass", "fail", "blocked", "not_applicable"]},
103
+ "reason_code": {"type": "string", "minLength": 1, "maxLength": 128},
104
+ "evaluated_at": {"type": "string", "format": "date-time"}
105
+ },
106
+ "allOf": [
107
+ {
108
+ "if": {"properties": {"status": {"enum": ["passed", "failed", "not_applicable", "blocked_evidence"]}}},
109
+ "then": {"required": ["provider_id", "program_sha256", "evidence_sha256", "outcome", "reason_code"]}
110
+ }
111
+ ]
112
+ },
54
113
  "control_result": {
55
114
  "type": "object",
56
115
  "additionalProperties": false,
57
- "required": ["control_id", "revision", "statement", "source", "contract_sha256", "contract_status", "canonical_control_id", "evaluation_class", "automation_class", "applicability_class", "atomicity", "complete_inventory_required", "negative_condition", "project_thresholds_required", "evidence_authorities", "not_applicable_proof", "disposition", "coverage", "authority", "assertion_ids", "executed_assertion_ids", "summary"],
116
+ "required": ["control_id", "revision", "statement", "source", "contract_sha256", "contract_status", "classification", "classification_route", "classification_decision_basis", "classification_row_sha256", "canonical_control_id", "evaluation_class", "automation_class", "applicability_class", "atomicity", "complete_inventory_required", "negative_condition", "project_thresholds_required", "evidence_authorities", "not_applicable_proof", "disposition", "coverage", "authority", "assertion_ids", "executed_assertion_ids", "summary"],
58
117
  "properties": {
59
118
  "control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
60
119
  "revision": {"type": "integer", "minimum": 1},
61
120
  "statement": {"type": "string", "minLength": 1, "maxLength": 16384},
62
121
  "source": {"$ref": "#/$defs/control_source"},
63
122
  "contract_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
64
- "contract_status": {"enum": ["generated_unreviewed", "reviewed", "retired"]},
123
+ "contract_status": {"const": "reviewed"},
124
+ "classification": {"enum": ["deterministic", "nondeterministic"]},
125
+ "classification_route": {"enum": ["local_static", "artifact_verification", "bounded_execution", "external_readonly_query", "structured_record_validation", "deterministic_composite", "contextual_judgment", "accountable_human_decision", "specialist_or_legal_judgment", "empirical_protocol_undefined", "contract_incomplete", "mixed", "unbounded_claim"]},
126
+ "classification_decision_basis": {"enum": ["primary_nondeterministic", "skeptically_rejected", "strength_audit_confirmed", "strength_audit_reclassified"]},
127
+ "classification_row_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
128
+ "deterministic_binding_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})@[1-9][0-9]*$"},
129
+ "deterministic_binding_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
130
+ "deterministic_program_template_count": {"type": "integer", "minimum": 1, "maximum": 50},
131
+ "deterministic_program_status": {"enum": ["blocked_provider_unregistered", "blocked_program_incomplete", "blocked_evidence", "executed_pass", "executed_fail", "executed_not_applicable"]},
132
+ "deterministic_clause_results": {"type": "array", "minItems": 1, "maxItems": 50, "items": {"$ref": "#/$defs/deterministic_clause_result"}},
65
133
  "canonical_control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
66
134
  "evaluation_class": {"enum": ["repository", "environment", "human_external", "mixed", "unclassified"]},
67
135
  "automation_class": {"enum": ["deterministic_candidate", "ai_advisory_candidate", "environment_evidence_required", "human_or_external_required", "mixed_evidence_required"]},
@@ -70,16 +138,52 @@
70
138
  "complete_inventory_required": {"type": "boolean"},
71
139
  "negative_condition": {"type": "boolean"},
72
140
  "project_thresholds_required": {"type": "boolean"},
73
- "evidence_authorities": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"enum": ["declared", "repository", "artifact", "environment", "human"]}},
141
+ "evidence_authorities": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"enum": ["declared", "repository", "artifact", "executed", "environment", "external_registry", "structured_record", "human"]}},
74
142
  "not_applicable_proof": {"type": "string", "minLength": 1, "maxLength": 1000},
75
- "disposition": {"enum": ["confirmed_failure", "blocked", "partially_verified", "needs_review", "retired"]},
76
- "coverage": {"enum": ["unmapped", "not_in_selected_profile", "partial_assertions", "retired"]},
77
- "authority": {"enum": ["none", "deterministic_partial"]},
143
+ "disposition": {"enum": ["confirmed_failure", "verified_pass", "not_applicable", "blocked", "partially_verified", "needs_review", "retired"]},
144
+ "coverage": {"enum": ["deterministic_program_provider_unregistered", "deterministic_program_partial", "deterministic_program_complete", "nondeterministic_advisory"]},
145
+ "authority": {"enum": ["none", "deterministic_partial", "deterministic_exact"]},
78
146
  "assertion_ids": {"type": "array", "uniqueItems": true, "items": {"type": "string"}},
79
147
  "executed_assertion_ids": {"type": "array", "uniqueItems": true, "items": {"type": "string"}},
80
148
  "summary": {"type": "string", "minLength": 1},
81
149
  "ai_review": {"$ref": "#/$defs/ai_control_review"}
82
- }
150
+ },
151
+ "allOf": [
152
+ {
153
+ "if": {"properties": {"classification": {"const": "deterministic"}}},
154
+ "then": {
155
+ "required": ["deterministic_binding_id", "deterministic_binding_sha256", "deterministic_program_template_count", "deterministic_program_status"],
156
+ "properties": {
157
+ "classification_route": {"enum": ["local_static", "artifact_verification", "bounded_execution", "external_readonly_query", "structured_record_validation", "deterministic_composite"]},
158
+ "classification_decision_basis": {"const": "strength_audit_confirmed"},
159
+ "disposition": {"enum": ["confirmed_failure", "verified_pass", "not_applicable", "blocked"]},
160
+ "coverage": {"enum": ["deterministic_program_provider_unregistered", "deterministic_program_partial", "deterministic_program_complete"]}
161
+ }
162
+ },
163
+ "else": {
164
+ "not": {"anyOf": [{"required": ["deterministic_binding_id"]}, {"required": ["deterministic_binding_sha256"]}, {"required": ["deterministic_program_template_count"]}, {"required": ["deterministic_program_status"]}, {"required": ["deterministic_clause_results"]}]},
165
+ "properties": {
166
+ "classification_route": {"enum": ["contextual_judgment", "accountable_human_decision", "specialist_or_legal_judgment", "empirical_protocol_undefined", "contract_incomplete", "mixed", "unbounded_claim"]},
167
+ "classification_decision_basis": {"enum": ["primary_nondeterministic", "skeptically_rejected", "strength_audit_reclassified"]},
168
+ "disposition": {"const": "needs_review"},
169
+ "coverage": {"const": "nondeterministic_advisory"},
170
+ "authority": {"const": "none"}
171
+ }
172
+ }
173
+ },
174
+ {
175
+ "if": {"properties": {"deterministic_program_status": {"const": "executed_pass"}}, "required": ["deterministic_program_status"]},
176
+ "then": {"required": ["deterministic_clause_results"], "properties": {"disposition": {"const": "verified_pass"}, "coverage": {"const": "deterministic_program_complete"}, "authority": {"const": "deterministic_exact"}}}
177
+ },
178
+ {
179
+ "if": {"properties": {"deterministic_program_status": {"const": "executed_fail"}}, "required": ["deterministic_program_status"]},
180
+ "then": {"required": ["deterministic_clause_results"], "properties": {"disposition": {"const": "confirmed_failure"}, "authority": {"const": "deterministic_exact"}}}
181
+ },
182
+ {
183
+ "if": {"properties": {"deterministic_program_status": {"const": "executed_not_applicable"}}, "required": ["deterministic_program_status"]},
184
+ "then": {"required": ["deterministic_clause_results"], "properties": {"disposition": {"const": "not_applicable"}, "coverage": {"const": "deterministic_program_complete"}, "authority": {"const": "deterministic_exact"}}}
185
+ }
186
+ ]
83
187
  },
84
188
  "control_source": {
85
189
  "type": "object",
@@ -93,15 +197,26 @@
93
197
  "ai_control_review": {
94
198
  "type": "object",
95
199
  "additionalProperties": false,
96
- "required": ["provider", "assessment_candidate", "applicability_candidate", "confidence", "reason", "advice", "evidence", "limitations", "task_id"],
200
+ "required": ["provider", "review_depth", "assessment_candidate", "applicability_candidate", "confidence", "priority", "root_cause", "root_cause_key", "effort", "blast_radius", "reason", "challenge", "risk_if_ignored", "advice", "remediation_steps", "verification_steps", "evidence_needed", "evidence", "limitations", "task_id"],
97
201
  "properties": {
98
202
  "provider": {"enum": ["codex", "claude"]},
99
203
  "model": {"type": "string"},
204
+ "review_depth": {"enum": ["standard", "deep"]},
100
205
  "assessment_candidate": {"enum": ["advisory_pass_candidate", "advisory_fail_candidate", "needs_evidence", "not_applicable_candidate"]},
101
206
  "applicability_candidate": {"enum": ["applicable", "not_applicable", "undetermined"]},
102
207
  "confidence": {"enum": ["low", "medium", "high"]},
208
+ "priority": {"enum": ["critical", "high", "medium", "low", "none"]},
209
+ "root_cause": {"type": "string", "minLength": 1, "maxLength": 4096},
210
+ "root_cause_key": {"type": "string", "pattern": "^[a-z0-9][a-z0-9-]{2,79}$"},
211
+ "effort": {"enum": ["small", "medium", "large", "unknown"]},
212
+ "blast_radius": {"enum": ["local", "component", "system", "organization", "unknown"]},
103
213
  "reason": {"type": "string", "minLength": 1, "maxLength": 16384},
104
- "advice": {"type": "string", "maxLength": 16384},
214
+ "challenge": {"type": "string", "minLength": 1, "maxLength": 16384},
215
+ "risk_if_ignored": {"type": "string", "minLength": 1, "maxLength": 16384},
216
+ "advice": {"type": "string", "minLength": 1, "maxLength": 16384},
217
+ "remediation_steps": {"type": "array", "minItems": 1, "maxItems": 12, "uniqueItems": true, "items": {"type": "string", "minLength": 1, "maxLength": 16384}},
218
+ "verification_steps": {"type": "array", "minItems": 1, "maxItems": 12, "uniqueItems": true, "items": {"type": "string", "minLength": 1, "maxLength": 16384}},
219
+ "evidence_needed": {"type": "array", "minItems": 1, "maxItems": 12, "uniqueItems": true, "items": {"type": "string", "minLength": 1, "maxLength": 16384}},
105
220
  "evidence": {"type": "array", "maxItems": 256, "items": {"$ref": "#/$defs/location"}},
106
221
  "limitations": {"type": "array", "minItems": 1, "maxItems": 256, "uniqueItems": true, "items": {"type": "string", "minLength": 1, "maxLength": 16384}},
107
222
  "citation_verification": {"enum": ["not_cited", "snapshot_location_validated"]},
@@ -109,6 +224,41 @@
109
224
  "task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"}
110
225
  }
111
226
  },
227
+ "ai_improvement_plan": {
228
+ "type": "object",
229
+ "additionalProperties": false,
230
+ "required": ["schema_version", "authority", "source_run_id", "review_provider", "review_depth", "review_state", "reviewed_control_count", "item_count", "items"],
231
+ "properties": {
232
+ "schema_version": {"const": "prc.ai-improvement-plan/v0.1"},
233
+ "authority": {"const": "advisory_only"},
234
+ "source_run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
235
+ "review_provider": {"enum": ["codex", "claude"]},
236
+ "review_model": {"type": "string"},
237
+ "review_depth": {"enum": ["standard", "deep"]},
238
+ "review_state": {"enum": ["complete", "focused", "partial"]},
239
+ "reviewed_control_count": {"type": "integer", "minimum": 0, "maximum": 100000},
240
+ "item_count": {"type": "integer", "minimum": 0, "maximum": 100000},
241
+ "items": {"type": "array", "maxItems": 100000, "items": {"$ref": "#/$defs/ai_improvement_plan_item"}}
242
+ }
243
+ },
244
+ "ai_improvement_plan_item": {
245
+ "type": "object",
246
+ "additionalProperties": false,
247
+ "required": ["item_id", "domain", "root_cause_key", "root_cause", "priority", "effort", "blast_radius", "assessment_candidates", "control_count", "control_ids", "task_ids"],
248
+ "properties": {
249
+ "item_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
250
+ "domain": {"type": "string", "pattern": "^(catalog|engineering|checklist)/[a-z0-9][a-z0-9-]*$"},
251
+ "root_cause_key": {"type": "string", "pattern": "^[a-z0-9][a-z0-9-]{2,79}$"},
252
+ "root_cause": {"type": "string", "minLength": 1, "maxLength": 4096},
253
+ "priority": {"enum": ["critical", "high", "medium", "low", "none"]},
254
+ "effort": {"enum": ["small", "medium", "large", "unknown"]},
255
+ "blast_radius": {"enum": ["local", "component", "system", "organization", "unknown"]},
256
+ "assessment_candidates": {"type": "array", "minItems": 1, "maxItems": 4, "uniqueItems": true, "items": {"enum": ["advisory_pass_candidate", "advisory_fail_candidate", "needs_evidence", "not_applicable_candidate"]}},
257
+ "control_count": {"type": "integer", "minimum": 1, "maximum": 100000},
258
+ "control_ids": {"type": "array", "minItems": 1, "maxItems": 100000, "uniqueItems": true, "items": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"}},
259
+ "task_ids": {"type": "array", "minItems": 1, "maxItems": 100000, "uniqueItems": true, "items": {"type": "string", "pattern": "^[0-9a-f]{64}$"}}
260
+ }
261
+ },
112
262
  "assertion_result": {
113
263
  "type": "object",
114
264
  "additionalProperties": false,
@@ -7,7 +7,14 @@
7
7
  "required": ["schema_version", "artifact_kind", "artifact_id", "sha256", "key_id", "algorithm", "issued_at", "verified_at", "trust_store_id", "trust_store_digest", "signature_digest", "verified"],
8
8
  "properties": {
9
9
  "schema_version": {"const": "prc.signature-verification/v0.1"},
10
- "artifact_kind": {"enum": ["pack", "adapter-registry", "catalog-bundle", "risk-exception"]},
10
+ "artifact_kind": {
11
+ "enum": [
12
+ "pack", "adapter-registry", "catalog-bundle", "risk-exception",
13
+ "control-policy-bundle", "control-evidence-repository", "control-evidence-artifact",
14
+ "control-evidence-executed", "control-evidence-environment",
15
+ "control-evidence-external-registry", "control-evidence-structured-record"
16
+ ]
17
+ },
11
18
  "artifact_id": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9./@_-]{0,255}$"},
12
19
  "sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
13
20
  "key_id": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
@@ -7,7 +7,14 @@
7
7
  "required": ["schema_version", "artifact_kind", "artifact_id", "sha256", "key_id", "algorithm", "issued_at", "signature"],
8
8
  "properties": {
9
9
  "schema_version": {"const": "prc.signature/v0.1"},
10
- "artifact_kind": {"enum": ["pack", "adapter-registry", "catalog-bundle", "risk-exception"]},
10
+ "artifact_kind": {
11
+ "enum": [
12
+ "pack", "adapter-registry", "catalog-bundle", "risk-exception",
13
+ "control-policy-bundle", "control-evidence-repository", "control-evidence-artifact",
14
+ "control-evidence-executed", "control-evidence-environment",
15
+ "control-evidence-external-registry", "control-evidence-structured-record"
16
+ ]
17
+ },
11
18
  "artifact_id": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9./@_-]{0,255}$"},
12
19
  "sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
13
20
  "key_id": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
@@ -17,7 +17,14 @@
17
17
  }
18
18
  },
19
19
  "$defs": {
20
- "scope": {"enum": ["pack", "adapter-registry", "catalog-bundle", "risk-exception"]},
20
+ "scope": {
21
+ "enum": [
22
+ "pack", "adapter-registry", "catalog-bundle", "risk-exception",
23
+ "control-policy-bundle", "control-evidence-repository", "control-evidence-artifact",
24
+ "control-evidence-executed", "control-evidence-environment",
25
+ "control-evidence-external-registry", "control-evidence-structured-record"
26
+ ]
27
+ },
21
28
  "key": {
22
29
  "type": "object",
23
30
  "additionalProperties": false,
package/manifest.json CHANGED
@@ -1,12 +1,12 @@
1
1
  {
2
2
  "binary_path": "bin/prc",
3
- "binary_sha256": "8c374862cf68bcee14704f8260191f8e50ba32f39ef20b1d76a44eea073ca194",
4
- "built_at": "2026-08-28T10:05:18Z",
3
+ "binary_sha256": "4fe61e7cc19c27b17204173151bf25c7a4ecc519f8479948de56ddb92120fd91",
4
+ "built_at": "2026-08-30T13:51:59Z",
5
5
  "package_name": "@marinjursic/prc-linux-arm64",
6
6
  "schema_version": "prc.npm-platform/v0.2",
7
- "source_commit": "c4f647c2c30f29eabd79c71b98ffec2c74a7b611",
8
- "support_bytes": 3340452,
9
- "support_file_count": 205,
7
+ "source_commit": "b881456a6e35580f3e5db586a43218dba6048580",
8
+ "support_bytes": 4854681,
9
+ "support_file_count": 227,
10
10
  "support_files": [
11
11
  {
12
12
  "path": "bin/THIRD_PARTY_NOTICES.md",
@@ -35,8 +35,8 @@
35
35
  },
36
36
  {
37
37
  "path": "bin/catalog/assertions/core-repository.yaml",
38
- "sha256": "cc39c484cdbe6de48ce3ce62ca08b4b0d3b05f88e6426d131b487fdcd7c903d6",
39
- "size": 26142
38
+ "sha256": "d12f5878b81907749cca42ee513e8b99d5ec97f16a85aa3097b285761cd24767",
39
+ "size": 26538
40
40
  },
41
41
  {
42
42
  "path": "bin/catalog/assertions/iac.yaml",
@@ -48,10 +48,20 @@
48
48
  "sha256": "036c0b4409d1ba3c36c9d7dfde48fcae0fa8c0e5ab97a761291536c79f130018",
49
49
  "size": 2058
50
50
  },
51
+ {
52
+ "path": "bin/catalog/control-check-bindings.json.gz",
53
+ "sha256": "ea2c5bf90b7402fd0d0a4f854dbca738bee76d7f0e7f26d46d7233cd6b5c755b",
54
+ "size": 169359
55
+ },
56
+ {
57
+ "path": "bin/catalog/control-check-programs.json.gz",
58
+ "sha256": "14ebbbd6e85f560f5a1d0bcb9b10ca0fa3d0cab8096186bdf4053fd088f24c73",
59
+ "size": 722121
60
+ },
51
61
  {
52
62
  "path": "bin/catalog/control-contracts.json.gz",
53
- "sha256": "d3088526adef112ebe65798e9efacc4e155456a083209f253a6659e9b0159073",
54
- "size": 548610
63
+ "sha256": "0449ae6428746dcbeb837291aee853dbb8d1840964d4667c69563821f25fb306",
64
+ "size": 1026973
55
65
  },
56
66
  {
57
67
  "path": "bin/catalog/control-id-registry.json.gz",
@@ -245,13 +255,13 @@
245
255
  },
246
256
  {
247
257
  "path": "bin/fixtures/benchmarks/core-native/suite-comprehensive.yaml",
248
- "sha256": "09c33b1294348fd7d2d37313817cb3dadac17c9ecf83b7e50054a69c354749e4",
249
- "size": 17714
258
+ "sha256": "e87876079517b41ed95ade2b00d5b8df0a34a5f7889b35ef692d5014bbe6db31",
259
+ "size": 18094
250
260
  },
251
261
  {
252
262
  "path": "bin/fixtures/benchmarks/core-native/suite.yaml",
253
- "sha256": "6f4d0e1ae0ffb8f6be8e568a0e01604103630012d67e7ea30f2b1020b24d290b",
254
- "size": 1729
263
+ "sha256": "a9b854930d4b299a126408df9cb3404377127af0763f7afcf5e3ae9abeb1711f",
264
+ "size": 2121
255
265
  },
256
266
  {
257
267
  "path": "bin/fixtures/benchmarks/core-native/targets/baseline/README.md",
@@ -540,12 +550,12 @@
540
550
  },
541
551
  {
542
552
  "path": "bin/packs/core-foundation.yaml",
543
- "sha256": "d6a3d87a1dd02e357c2210f73496b1766efa90f7f8ed18b869665f7a3c9111a4",
553
+ "sha256": "1dd29f15f4fe05f9104c617e9a5fa497b627c760075616d19c71483bb237219b",
544
554
  "size": 1098
545
555
  },
546
556
  {
547
557
  "path": "bin/packs/core-native.yaml",
548
- "sha256": "ca0a40586891b908e3e7d3c4ba0f383da2a7ac9b1a579799d92df000a41f273b",
558
+ "sha256": "5dfbcb643817e9a1bb70a595268ac8d1e0bb631f2f8e7e1b14a1b0a38c94ee15",
549
559
  "size": 6765
550
560
  },
551
561
  {
@@ -558,6 +568,11 @@
558
568
  "sha256": "22b8503642096152fcdfddbf0b9f2d42b7c29b1c34410ea099ba41063daef174",
559
569
  "size": 5733
560
570
  },
571
+ {
572
+ "path": "bin/schemas/adapter-execution-v0.3.schema.json",
573
+ "sha256": "979f4198a43a4b20a80f4fa5f25333d54ee6a40375f8cf812e6ed5fc52769310",
574
+ "size": 6401
575
+ },
561
576
  {
562
577
  "path": "bin/schemas/adapter-execution.schema.json",
563
578
  "sha256": "a0dc2f5291267f14f17c34f1e1e5bf3a013b928c7e49ee2fef20aa9051d2561a",
@@ -653,6 +668,26 @@
653
668
  "sha256": "016d782272030699d8e64ca7daa8ea4a27a680a4202411fba7ad8826ee5039f5",
654
669
  "size": 2496
655
670
  },
671
+ {
672
+ "path": "bin/schemas/authoritative-evidence-bundle.schema.json",
673
+ "sha256": "009eaf1fa096e4c1369b388c69e3acfb15d8e7c1c435734cddd137a07c59dc48",
674
+ "size": 1547
675
+ },
676
+ {
677
+ "path": "bin/schemas/authoritative-evidence-set.schema.json",
678
+ "sha256": "0181584089e7387e0c223b7270bf51e3cd071911bb45e125fdd9261e529aa1ed",
679
+ "size": 1355
680
+ },
681
+ {
682
+ "path": "bin/schemas/authoritative-evidence-verification.schema.json",
683
+ "sha256": "09f177959ee03a00da3dba00fb4cd9bf5bed7563b40f432d39da44bf533d6d3e",
684
+ "size": 2505
685
+ },
686
+ {
687
+ "path": "bin/schemas/automatic-coverage.schema.json",
688
+ "sha256": "de0e005f8901026ae4bb758a90f57eb5f7a148cf9a146df10edd38c8d3c2c280",
689
+ "size": 2145
690
+ },
656
691
  {
657
692
  "path": "bin/schemas/benchmark-report.schema.json",
658
693
  "sha256": "7986410a00b33338dd2fe15269d9df013af38c23bac7553a8ff3df3005c68a9b",
@@ -678,21 +713,86 @@
678
713
  "sha256": "5b864d6c42ac6627697ec29f8cc020379bfdd8fcbd942190736a1121bc8d16bf",
679
714
  "size": 2902
680
715
  },
716
+ {
717
+ "path": "bin/schemas/control-check-bindings.schema.json",
718
+ "sha256": "b877424d1732a558289fbeb367f41f481e051d8b370cd1415a27b2f6f1d9c040",
719
+ "size": 6551
720
+ },
721
+ {
722
+ "path": "bin/schemas/control-check-evidence-v0.1.schema.json",
723
+ "sha256": "6ca64d5a7048f3d37b08173ab330a5d53d29fec07f9835efad92b8c61930421b",
724
+ "size": 10028
725
+ },
726
+ {
727
+ "path": "bin/schemas/control-check-evidence.schema.json",
728
+ "sha256": "3fb9551243edf92cff4a62efecc28073a33bfc2016682670cb2891be156bcdfd",
729
+ "size": 10023
730
+ },
731
+ {
732
+ "path": "bin/schemas/control-check-program-catalog.schema.json",
733
+ "sha256": "dd33b917945781613b2e41f3b29bfd3e738a68b610d5ccbf2e16b87fa6a10382",
734
+ "size": 10121
735
+ },
736
+ {
737
+ "path": "bin/schemas/control-check-program-definitions.schema.json",
738
+ "sha256": "1659b9cfb833e49b3287658cd82310207ab6f2eca10f16080b060e196402b26b",
739
+ "size": 7777
740
+ },
741
+ {
742
+ "path": "bin/schemas/control-check-program.schema.json",
743
+ "sha256": "2d01043755af00911a08fc29e235e2ad4a1d483d71edb652b4ca7e9b4a58e6ce",
744
+ "size": 14421
745
+ },
746
+ {
747
+ "path": "bin/schemas/control-classification-final.schema.json",
748
+ "sha256": "40eb1b607c0bf3dde8769add7f82d5b76b457b819516460bb90bc97deeca3899",
749
+ "size": 3875
750
+ },
751
+ {
752
+ "path": "bin/schemas/control-classification-review.schema.json",
753
+ "sha256": "5190d8feec8feb17c591eff9a7191255bf3d709689eb4504dfd6abe5dfc4c3f1",
754
+ "size": 5410
755
+ },
756
+ {
757
+ "path": "bin/schemas/control-classification-skeptic-review.schema.json",
758
+ "sha256": "1308a712d90c59a8033f93ac2e07151a0bc8c3492ae02c2d6cb0980774fa33df",
759
+ "size": 3569
760
+ },
761
+ {
762
+ "path": "bin/schemas/control-classification-strength-review.schema.json",
763
+ "sha256": "39e177018cea10122903f507cea93b50ba4cd5d8f9aba55ac09323602c2b7bdc",
764
+ "size": 4885
765
+ },
681
766
  {
682
767
  "path": "bin/schemas/control-contracts.schema.json",
683
- "sha256": "457643d1c7fef99ab677d277582d449506fc96b4a19c4299be8512ad025291ab",
684
- "size": 2702
768
+ "sha256": "88ad93d50196beee9cbc97f1e59045dfeba2cbf1675baabcf5aecfe4dd4e1203",
769
+ "size": 6180
770
+ },
771
+ {
772
+ "path": "bin/schemas/control-review-output-v0.2.schema.json",
773
+ "sha256": "0749d25087747744b90b395b64343eb62b23faae0d43d5f1614d11ee54376e25",
774
+ "size": 3108
685
775
  },
686
776
  {
687
777
  "path": "bin/schemas/control-review-output.schema.json",
688
- "sha256": "e9636550b7ac34966ccf2dd4d334152f1574d526cd13ca2e72d4d2d5a517309f",
689
- "size": 2130
778
+ "sha256": "0c3e51bf92d19cf9566c13849b525ace1a34626c7ddd9a4133ef6e9a79dabc20",
779
+ "size": 3496
690
780
  },
691
781
  {
692
782
  "path": "bin/schemas/doctor.schema.json",
693
783
  "sha256": "60e851b82d9580b7e7f88b650f4017069a1f58a7ed8cf6cdf80aa9a80ce9b9a1",
694
784
  "size": 2089
695
785
  },
786
+ {
787
+ "path": "bin/schemas/evidence-requirements.schema.json",
788
+ "sha256": "35a0641e478e14e57a6325173aaaffd1f19de1360f16dec6576f800423c3f31a",
789
+ "size": 7079
790
+ },
791
+ {
792
+ "path": "bin/schemas/evidence-set-verification.schema.json",
793
+ "sha256": "6d7da261685264c45c80c94d86bc331ca57251ea30c8daab7bdcd20744718b87",
794
+ "size": 2734
795
+ },
696
796
  {
697
797
  "path": "bin/schemas/evidence-v0.1.schema.json",
698
798
  "sha256": "1ef0cff08c841afb0405c2602fe7fafdcbbc4b92d12e428e6c898b14811b8aa0",
@@ -828,6 +928,11 @@
828
928
  "sha256": "08ce232d22269a19cf8bcaea574d4568b9b8a7bc7a3f04e10a446ded10ca7523",
829
929
  "size": 4599
830
930
  },
931
+ {
932
+ "path": "bin/schemas/provider-capabilities.schema.json",
933
+ "sha256": "0d0d70598fa6c16b803a4ed8d5449a06ae41e9d22c42c746a640782233ce5d35",
934
+ "size": 1127
935
+ },
831
936
  {
832
937
  "path": "bin/schemas/release-manifest-v0.1.schema.json",
833
938
  "sha256": "c7bfd847f0f21e75e48ed8023a14c5bb3479700ce872a6fc885abf3e24659feb",
@@ -935,13 +1040,18 @@
935
1040
  },
936
1041
  {
937
1042
  "path": "bin/schemas/run-result-v0.10.schema.json",
938
- "sha256": "537fd35468cec2b69690d1de9735e61f6bf1d5386573aa539d1f5749fcfab254",
939
- "size": 3337
1043
+ "sha256": "00ccdffa2c075d5d3efe18a1402d9b45c3d52f7e33bb8c7256941b0d641ad639",
1044
+ "size": 3362
940
1045
  },
941
1046
  {
942
1047
  "path": "bin/schemas/run-result-v0.11.schema.json",
943
- "sha256": "ef03274115c9f4e79ef59e5a9ac4fc24ba24e0ed969b547c428125180912aee5",
944
- "size": 7452
1048
+ "sha256": "d56b31c1933e9a145152a1824fd2120ccf4a8a78a6eb775c2dc8a7a5bcfd4e69",
1049
+ "size": 7477
1050
+ },
1051
+ {
1052
+ "path": "bin/schemas/run-result-v0.12.schema.json",
1053
+ "sha256": "0a66f8d58e1f084462cf603a5b7391816c3e564b2be87c10319749a9ffd23ad9",
1054
+ "size": 19635
945
1055
  },
946
1056
  {
947
1057
  "path": "bin/schemas/run-result-v0.2.schema.json",
@@ -985,18 +1095,18 @@
985
1095
  },
986
1096
  {
987
1097
  "path": "bin/schemas/run-result.schema.json",
988
- "sha256": "2a606b95353252880d31d9212b4da77842e4b80e6702124a310e8f0f5ffabfee",
989
- "size": 9564
1098
+ "sha256": "bb77b24726439f4f0408f310a2e318273a29dd551a6a556a772ffdda266c1f80",
1099
+ "size": 22770
990
1100
  },
991
1101
  {
992
1102
  "path": "bin/schemas/signature-verification.schema.json",
993
- "sha256": "05c2fb176d62ba1b62b2b1789872a497fe79dabef0990a34dee493d999a9ee5c",
994
- "size": 1347
1103
+ "sha256": "6072555d9aea719a9453b37357db6f48a5c431bfe4ac9ac9f135a9762f5bd2bd",
1104
+ "size": 1621
995
1105
  },
996
1106
  {
997
1107
  "path": "bin/schemas/signature.schema.json",
998
- "sha256": "ec6be7238e58f8ff3c031eebe6710c63a54babeb1433b7d252b84674ecd77b24",
999
- "size": 980
1108
+ "sha256": "ac42d9c06ce87a727da896dcad69623db2f21da988695d9c3f403634f341b427",
1109
+ "size": 1254
1000
1110
  },
1001
1111
  {
1002
1112
  "path": "bin/schemas/state-check-v0.1.schema.json",
@@ -1010,8 +1120,8 @@
1010
1120
  },
1011
1121
  {
1012
1122
  "path": "bin/schemas/trust-store.schema.json",
1013
- "sha256": "9595e2d00c87300048fec73a16b386e3a3a9d2ad145d7d24eb260ada7292195e",
1014
- "size": 1830
1123
+ "sha256": "ad978c3642b1b29baf27ba20415e2b6245ee26ccb91c03ab8a0fe9c8683ec521",
1124
+ "size": 2104
1015
1125
  },
1016
1126
  {
1017
1127
  "path": "bin/schemas/verification-execution-v0.1.schema.json",
@@ -1034,5 +1144,5 @@
1034
1144
  "size": 1040
1035
1145
  }
1036
1146
  ],
1037
- "version": "0.1.9"
1147
+ "version": "0.2.0"
1038
1148
  }
package/package.json CHANGED
@@ -29,5 +29,5 @@
29
29
  "type": "git",
30
30
  "url": "git+https://github.com/MarinJursic/production-readiness-checklist.git"
31
31
  },
32
- "version": "0.1.9"
32
+ "version": "0.2.0"
33
33
  }