@nebulacomponents/citable 1.12.0 → 1.13.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nebulacomponents/citable",
-  "version": "1.12.0",
+  "version": "1.13.1",
   "description": "Production-grade SEO, AEO, and GEO agent skill with auditable detection, claim governance, evidence validation, and multi-agent installation.",
   "keywords": [
     "seo",
@@ -54,6 +54,7 @@
     "build:dist": "node scripts/build-dist.js",
     "release:prepare": "node scripts/release-process.js prepare",
     "release:validate": "node scripts/release-process.js validate",
+    "release:manifest": "node scripts/release-governance.js manifest",
     "prepack": "npm run build:dist"
   },
   "bin": {
@@ -66,6 +67,8 @@
     "schemas/",
     "skill/",
     "scripts/build-dist.js",
+    "scripts/release-governance.js",
+    "release/",
     "README.md",
     "CHANGELOG.md",
     "LICENSE"

package/release/surfaces.json

@@ -0,0 +1,21 @@
+{
+  "schema_version": 1,
+  "controlled_surfaces": [
+    {
+      "surface_id": "nebula-citable-resource",
+      "url": "https://nebulacomponents.shop/resources/citable",
+      "projection_id": "resource-data",
+      "verification_method": "response_header",
+      "verification_header": "x-citable-projection-sha256",
+      "required_for_finalization": true
+    },
+    {
+      "surface_id": "nebula-llms-txt",
+      "url": "https://nebulacomponents.shop/resources/citable/llms.txt",
+      "projection_id": "llms-txt",
+      "verification_method": "exact_response_body",
+      "verification_header": null,
+      "required_for_finalization": true
+    }
+  ]
+}

package/schemas/acceptance-corpus.schema.json

@@ -0,0 +1,168 @@
+{
+  "$id": "citable://schemas/acceptance-corpus.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Real-property acceptance corpus",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "corpus_id", "version", "created_at", "evaluation_design", "properties", "detector_cases", "semantic_reviews", "executions", "remediation_verifications", "false_negative_discovery_limitations", "causal_limitations", "limitations"],
+  "properties": {
+    "schema_version": { "const": 2 },
+    "corpus_id": { "type": "string", "pattern": "^CORPUS-" },
+    "version": { "type": "string", "minLength": 1 },
+    "created_at": { "type": "string", "format": "date-time" },
+    "evaluation_design": {
+      "type": "object", "additionalProperties": false,
+      "required": ["mode", "population_definition", "selection_method", "sampling_plan_ref", "inclusion_criteria", "exclusion_criteria", "extrapolation_limits", "collection_started_at", "collection_ended_at"],
+      "properties": {
+        "mode": { "enum": ["census", "sample"] },
+        "population_definition": { "type": "string", "minLength": 1 },
+        "selection_method": { "type": "string", "minLength": 1 },
+        "sampling_plan_ref": { "type": ["string", "null"] },
+        "inclusion_criteria": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } },
+        "exclusion_criteria": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+        "extrapolation_limits": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } },
+        "collection_started_at": { "type": "string", "format": "date-time" },
+        "collection_ended_at": { "type": "string", "format": "date-time" }
+      }
+    },
+    "properties": {
+      "type": "array", "minItems": 1,
+      "items": {
+        "type": "object", "additionalProperties": false,
+        "required": ["property_id", "property_class", "architecture", "authorization", "collection_methods", "publication", "sanitization", "evidence_package_refs", "unavailable_evidence", "intentionally_incomplete", "contradiction_status", "limitations"],
+        "properties": {
+          "property_id": { "type": "string", "pattern": "^PROP-[A-Z0-9_-]+$" },
+          "property_class": { "enum": ["static", "framework_rendered", "cms", "ecommerce", "multilingual", "waf_protected", "large_sitemap", "javascript_heavy", "media_heavy", "publisher_surface", "other"] },
+          "architecture": {
+            "type": "object", "additionalProperties": false,
+            "required": ["platform", "rendering", "protections", "languages", "content_types"],
+            "properties": {
+              "platform": { "type": "string", "minLength": 1 },
+              "rendering": { "enum": ["static", "server", "client", "hybrid", "unknown"] },
+              "protections": { "type": "array", "items": { "type": "string" } },
+              "languages": { "type": "array", "minItems": 1, "items": { "type": "string" } },
+              "content_types": { "type": "array", "minItems": 1, "items": { "type": "string" } }
+            }
+          },
+          "authorization": {
+            "type": "object", "additionalProperties": false,
+            "required": ["status", "authorized_by", "authorized_at", "expires_at", "scope", "evidence_ref"],
+            "properties": {
+              "status": { "const": "owner_authorized" },
+              "authorized_by": { "type": "string", "minLength": 1 },
+              "authorized_at": { "type": "string", "format": "date-time" },
+              "expires_at": { "type": ["string", "null"], "format": "date-time" },
+              "scope": { "type": "array", "minItems": 1, "items": { "enum": ["collect", "retain", "review", "publish_aggregate", "publish_artifacts"] } },
+              "evidence_ref": { "type": "string", "minLength": 1 }
+            }
+          },
+          "collection_methods": {
+            "type": "array", "minItems": 1,
+            "items": {
+              "type": "object", "additionalProperties": false,
+              "required": ["method", "authority", "collector", "collected_at", "limitations"],
+              "properties": {
+                "method": { "type": "string", "minLength": 1 },
+                "authority": { "enum": ["owner_controlled", "provider_published", "independent", "synthetic", "external_unverified"] },
+                "collector": { "type": "string", "minLength": 1 },
+                "collected_at": { "type": "string", "format": "date-time" },
+                "limitations": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } }
+              }
+            }
+          },
+          "publication": {
+            "type": "object", "additionalProperties": false,
+            "required": ["level", "approved_by", "approved_at", "retention_days", "allowed_artifact_refs"],
+            "properties": {
+              "level": { "enum": ["private", "aggregate_only", "sanitized_artifacts", "public_artifacts"] },
+              "approved_by": { "type": ["string", "null"] },
+              "approved_at": { "type": ["string", "null"], "format": "date-time" },
+              "retention_days": { "type": "integer", "minimum": 1 },
+              "allowed_artifact_refs": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } }
+            }
+          },
+          "sanitization": {
+            "type": "object", "additionalProperties": false,
+            "required": ["reviewed_by", "reviewed_at", "pii_status", "credential_status", "source_identifiers", "evidence_ref"],
+            "properties": {
+              "reviewed_by": { "type": ["string", "null"] },
+              "reviewed_at": { "type": ["string", "null"], "format": "date-time" },
+              "pii_status": { "enum": ["not_reviewed", "none_detected", "redacted"] },
+              "credential_status": { "enum": ["not_reviewed", "none_detected", "redacted"] },
+              "source_identifiers": { "enum": ["not_reviewed", "approved", "pseudonymized"] },
+              "evidence_ref": { "type": ["string", "null"] }
+            }
+          },
+          "evidence_package_refs": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } },
+          "unavailable_evidence": { "type": "array", "items": { "type": "string" } },
+          "intentionally_incomplete": { "type": "boolean" },
+          "contradiction_status": { "enum": ["none_observed", "observed", "unresolved", "not_evaluated"] },
+          "limitations": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } }
+        }
+      }
+    },
+    "detector_cases": {
+      "type": "array",
+      "items": {
+        "type": "object", "additionalProperties": false,
+        "required": ["case_id", "property_id", "detector_id", "detector_version", "namespace", "expected", "observed", "adjudicator", "evidence_refs"],
+        "properties": {
+          "case_id": { "type": "string", "minLength": 1 }, "property_id": { "type": "string", "minLength": 1 },
+          "detector_id": { "type": "string", "minLength": 1 }, "detector_version": { "type": "string", "minLength": 1 }, "namespace": { "type": "string", "minLength": 1 },
+          "expected": { "enum": ["detection", "non_detection"] }, "observed": { "enum": ["detected", "not_detected", "incomplete"] },
+          "adjudicator": { "type": "string", "minLength": 1 },
+          "evidence_refs": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } }
+        }
+      }
+    },
+    "semantic_reviews": {
+      "type": "array",
+      "items": {
+        "type": "object", "additionalProperties": false,
+        "required": ["review_id", "property_id", "review_type", "reviewer_verdicts", "reviewer_assignment_refs", "disagreement_refs", "adjudicated", "evidence_refs"],
+        "properties": {
+          "review_id": { "type": "string", "minLength": 1 }, "property_id": { "type": "string", "minLength": 1 },
+          "review_type": { "type": "string", "minLength": 1 },
+          "reviewer_verdicts": { "type": "array", "minItems": 2, "items": { "type": "string", "minLength": 1 } },
+          "reviewer_assignment_refs": { "$ref": "#/definitions/refs" }, "disagreement_refs": { "$ref": "#/definitions/refs" },
+          "adjudicated": { "type": "boolean" }, "evidence_refs": { "$ref": "#/definitions/nonempty_refs" }
+        }
+      }
+    },
+    "executions": {
+      "type": "array",
+      "items": {
+        "type": "object", "additionalProperties": false,
+        "required": ["property_id", "run_id", "raw_artifact_refs", "deterministic_finding_refs", "heuristic_finding_refs", "reviewer_assignment_refs", "disagreement_refs", "exception_refs", "intervention_refs", "verification_refs", "reproducibility_receipt_ref", "runtime_ms", "peak_memory_bytes", "evidence_bytes", "reproducible", "incomplete"],
+        "properties": {
+          "property_id": { "type": "string" }, "run_id": { "type": "string" },
+          "raw_artifact_refs": { "$ref": "#/definitions/nonempty_refs" }, "deterministic_finding_refs": { "$ref": "#/definitions/refs" },
+          "heuristic_finding_refs": { "$ref": "#/definitions/refs" }, "reviewer_assignment_refs": { "$ref": "#/definitions/refs" },
+          "disagreement_refs": { "$ref": "#/definitions/refs" }, "exception_refs": { "$ref": "#/definitions/refs" },
+          "intervention_refs": { "$ref": "#/definitions/refs" }, "verification_refs": { "$ref": "#/definitions/refs" },
+          "reproducibility_receipt_ref": { "type": ["string", "null"] },
+          "runtime_ms": { "type": "number", "minimum": 0 }, "peak_memory_bytes": { "type": "integer", "minimum": 0 },
+          "evidence_bytes": { "type": "integer", "minimum": 0 }, "reproducible": { "type": "boolean" }, "incomplete": { "type": "boolean" }
+        }
+      }
+    },
+    "remediation_verifications": {
+      "type": "array",
+      "items": {
+        "type": "object", "additionalProperties": false,
+        "required": ["verification_id", "property_id", "status", "evidence_refs"],
+        "properties": {
+          "verification_id": { "type": "string" }, "property_id": { "type": "string" },
+          "status": { "enum": ["verified", "failed", "incomplete"] }, "evidence_refs": { "$ref": "#/definitions/nonempty_refs" }
+        }
+      }
+    },
+    "false_negative_discovery_limitations": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } },
+    "causal_limitations": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } },
+    "limitations": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } }
+  },
+  "definitions": {
+    "refs": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+    "nonempty_refs": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } }
+  }
+}

package/schemas/acceptance-run-context.schema.json

@@ -0,0 +1,17 @@
+{
+  "$id": "citable://schemas/acceptance-run-context.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Acceptance-run disclosed execution context",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "source_commit": { "type": ["string", "null"] },
+    "content_hashes": { "type": "object", "additionalProperties": { "type": "string", "pattern": "^[a-f0-9]{64}$" } },
+    "collectors": { "type": "object", "additionalProperties": { "type": "string", "minLength": 1 } },
+    "external_systems": { "type": "object", "additionalProperties": { "type": "string", "minLength": 1 } },
+    "node_version": { "type": "string", "pattern": "^v?\\d+\\.\\d+\\.\\d+" },
+    "locale": { "type": "string", "minLength": 1 },
+    "region": { "type": ["string", "null"] },
+    "unavailable_observations": { "type": "array", "items": { "type": "string", "minLength": 1 } }
+  }
+}

package/schemas/acceptance-run-receipt.schema.json

@@ -0,0 +1,88 @@
+{
+  "$id": "citable://schemas/acceptance-run-receipt.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Acceptance-run reproducibility receipt",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "receipt_id", "run_id", "property", "detectors", "configuration", "observation_method", "toolchain", "external_systems", "execution", "canonical_artifacts", "reproducibility", "limitations", "receipt_hash"],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "receipt_id": { "type": "string", "pattern": "^ACCEPTANCE-RECEIPT-[A-F0-9]{20}$" },
+    "run_id": { "type": "string", "minLength": 1 },
+    "property": {
+      "type": "object", "additionalProperties": false,
+      "required": ["target", "source_commit", "working_tree_state", "content_hashes"],
+      "properties": {
+        "target": { "type": "object" },
+        "source_commit": { "type": ["string", "null"] },
+        "working_tree_state": { "type": ["string", "null"] },
+        "content_hashes": { "type": "object", "additionalProperties": { "type": "string" } }
+      }
+    },
+    "detectors": {
+      "type": "object", "additionalProperties": false,
+      "required": ["run", "skipped"],
+      "properties": {
+        "run": { "type": "array", "items": { "type": "string" } },
+        "skipped": {
+          "type": "array",
+          "items": {
+            "type": "object", "additionalProperties": false,
+            "required": ["detector_id", "reason"],
+            "properties": { "detector_id": { "type": "string" }, "reason": { "type": "string" } }
+          }
+        }
+      }
+    },
+    "configuration": {
+      "type": "object", "additionalProperties": false,
+      "required": ["hash"], "properties": { "hash": { "type": ["string", "null"] } }
+    },
+    "observation_method": {
+      "type": "object", "additionalProperties": false,
+      "required": ["command", "arguments", "target_kind", "collectors"],
+      "properties": {
+        "command": { "type": "string" },
+        "arguments": { "type": "array", "items": { "type": "string" } },
+        "target_kind": { "type": ["string", "null"] },
+        "collectors": { "type": "object", "additionalProperties": { "type": "string" } }
+      }
+    },
+    "toolchain": {
+      "type": "object", "additionalProperties": false,
+      "required": ["citable_version", "skill_version", "node_version"],
+      "properties": {
+        "citable_version": { "type": "string" },
+        "skill_version": { "type": "string" },
+        "node_version": { "type": "string" }
+      }
+    },
+    "external_systems": { "type": "object", "additionalProperties": { "type": "string" } },
+    "execution": {
+      "type": "object", "additionalProperties": false,
+      "required": ["started_at", "receipt_created_at", "locale", "region", "status", "partial", "unavailable_observations", "errors"],
+      "properties": {
+        "started_at": { "type": "string", "format": "date-time" },
+        "receipt_created_at": { "type": "string", "format": "date-time" },
+        "locale": { "type": "string" },
+        "region": { "type": ["string", "null"] },
+        "status": { "type": "string" },
+        "partial": { "type": "boolean" },
+        "unavailable_observations": { "type": "array", "items": { "type": "string" } },
+        "errors": { "type": "array", "items": { "type": "string" } }
+      }
+    },
+    "canonical_artifacts": { "type": "object", "additionalProperties": { "type": "string", "pattern": "^[a-f0-9]{64}$" } },
+    "reproducibility": {
+      "type": "object", "additionalProperties": false,
+      "required": ["fingerprint", "included_fields", "excluded_environment_fields"],
+      "properties": {
+        "fingerprint": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+        "included_fields": { "type": "array", "minItems": 1, "items": { "type": "string" } },
+        "excluded_environment_fields": { "type": "array", "minItems": 1, "items": { "type": "string" } }
+      }
+    },
+    "limitations": { "type": "array", "minItems": 1, "items": { "type": "string" } },
+    "receipt_hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+  }
+}

package/schemas/artifact-interchange.schema.json

@@ -0,0 +1,58 @@
+{
+  "$id": "citable://schemas/artifact-interchange.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Citable artifact interchange envelope",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["contract", "contract_version", "created_at", "producer", "run", "artifacts", "package_hash", "limitations"],
+  "properties": {
+    "contract": { "const": "citable-artifact-interchange" },
+    "contract_version": { "const": 1 },
+    "created_at": { "type": "string", "format": "date-time" },
+    "producer": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["tool", "tool_version", "skill_version"],
+      "properties": {
+        "tool": { "const": "citable" },
+        "tool_version": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(?:[-+][0-9A-Za-z.-]+)?$" },
+        "skill_version": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(?:[-+][0-9A-Za-z.-]+)?$" }
+      }
+    },
+    "run": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["run_id", "command", "status", "timestamp", "tool_version", "skill_version", "manifest_sha256", "checksums_sha256"],
+      "properties": {
+        "run_id": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$" },
+        "command": { "type": "string", "minLength": 1 },
+        "status": { "type": "string", "enum": ["completed", "completed_with_warnings", "incomplete", "failed"] },
+        "timestamp": { "type": "string", "format": "date-time" },
+        "tool_version": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(?:[-+][0-9A-Za-z.-]+)?$" },
+        "skill_version": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(?:[-+][0-9A-Za-z.-]+)?$" },
+        "manifest_sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+        "checksums_sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+      }
+    },
+    "artifacts": {
+      "type": "array",
+      "minItems": 2,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["path", "sha256", "bytes"],
+        "properties": {
+          "path": { "type": "string", "minLength": 1, "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\\\).+$" },
+          "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+          "bytes": { "type": "integer", "minimum": 0 }
+        }
+      }
+    },
+    "package_hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "limitations": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "type": "string", "minLength": 1 }
+    }
+  }
+}

package/schemas/assumption.schema.json

@@ -0,0 +1,119 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "citable://schemas/assumption.schema.json",
+  "title": "Assumption Registry",
+  "type": "object",
+  "required": [
+    "version",
+    "kind",
+    "entries"
+  ],
+  "properties": {
+    "version": {
+      "type": "integer"
+    },
+    "kind": {
+      "type": "string",
+      "const": "assumptions"
+    },
+    "updated": {
+      "type": "string"
+    },
+    "entries": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": [
+          "assumption_id",
+          "statement",
+          "category",
+          "owner",
+          "importance",
+          "current_status",
+          "confidence"
+        ],
+        "properties": {
+          "assumption_id": {
+            "type": "string"
+          },
+          "statement": {
+            "type": "string"
+          },
+          "category": {
+            "type": "string",
+            "enum": [
+              "commercial",
+              "product",
+              "customer",
+              "market",
+              "technical",
+              "regulatory",
+              "operational"
+            ]
+          },
+          "owner": {
+            "type": "string"
+          },
+          "importance": {
+            "type": "string",
+            "enum": [
+              "low",
+              "medium",
+              "high",
+              "critical"
+            ]
+          },
+          "evidence_for": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "evidence_against": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "validation_method": {
+            "type": "string"
+          },
+          "current_status": {
+            "type": "string",
+            "enum": [
+              "untested",
+              "weakly_supported",
+              "partially_validated",
+              "validated_within_scope",
+              "contradicted",
+              "invalidated",
+              "no_longer_material"
+            ]
+          },
+          "confidence": {
+            "type": "string",
+            "enum": [
+              "low",
+              "medium",
+              "high"
+            ]
+          },
+          "decision_dependency": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "next_test": {
+            "type": "string"
+          },
+          "expiry": {
+            "type": "string"
+          }
+        },
+        "additionalProperties": false
+      }
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/browser-evidence-plan.schema.json

@@ -0,0 +1,76 @@
+{
+  "$id": "citable://schemas/browser-evidence-plan.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Cross-browser and interaction-journey evidence plan",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "plan_id", "target", "profiles", "limitations"],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "plan_id": { "type": "string", "pattern": "^BROWSER-PLAN-[A-Z0-9_-]+$" },
+    "target": { "type": "string", "format": "uri", "pattern": "^https?://" },
+    "profiles": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["profile_id", "browser", "device", "javascript_enabled", "locale", "consent_state", "authentication_state", "steps", "limitations"],
+        "properties": {
+          "profile_id": { "type": "string", "pattern": "^[a-z0-9][a-z0-9_-]*$" },
+          "browser": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["engine", "expected_version"],
+            "properties": {
+              "engine": { "enum": ["chromium", "firefox", "webkit"] },
+              "expected_version": { "type": ["string", "null"] }
+            }
+          },
+          "device": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["name", "viewport", "is_mobile"],
+            "properties": {
+              "name": { "type": "string", "minLength": 1 },
+              "viewport": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": ["width", "height"],
+                "properties": {
+                  "width": { "type": "integer", "minimum": 240, "maximum": 7680 },
+                  "height": { "type": "integer", "minimum": 240, "maximum": 7680 }
+                }
+              },
+              "is_mobile": { "type": "boolean" }
+            }
+          },
+          "javascript_enabled": { "type": "boolean" },
+          "locale": { "type": "string", "minLength": 2 },
+          "consent_state": { "enum": ["not_present", "denied", "granted", "unresolved", "unknown"] },
+          "authentication_state": { "enum": ["anonymous", "owner_authenticated", "unresolved", "unknown"] },
+          "steps": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["step_id", "action", "locator", "value_env", "key", "url", "required", "capture_screenshot"],
+              "properties": {
+                "step_id": { "type": "string", "pattern": "^[a-z0-9][a-z0-9_-]*$" },
+                "action": { "enum": ["navigate", "click", "fill", "select_option", "check", "press", "wait_for", "assert_visible", "scroll"] },
+                "locator": { "type": ["string", "null"] },
+                "value_env": { "type": ["string", "null"], "pattern": "^[A-Z][A-Z0-9_]*$" },
+                "key": { "type": ["string", "null"] },
+                "url": { "type": ["string", "null"], "format": "uri" },
+                "required": { "type": "boolean" },
+                "capture_screenshot": { "type": "boolean" }
+              }
+            }
+          },
+          "limitations": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } }
+        }
+      }
+    },
+    "limitations": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } }
+  }
+}

package/schemas/corpus-publication-receipt.schema.json

@@ -0,0 +1,24 @@
+{
+  "$id": "citable://schemas/corpus-publication-receipt.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Acceptance corpus publication receipt",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "receipt_id", "corpus_id", "corpus_version", "source_hash", "published_hash", "metrics_json_hash", "metrics_markdown_hash", "property_ids", "publication_levels", "generated_at", "authority", "limitations", "receipt_hash"],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "receipt_id": { "type": "string", "pattern": "^CORPUS-PUBLICATION-[A-F0-9]{20}$" },
+    "corpus_id": { "type": "string", "pattern": "^CORPUS-" },
+    "corpus_version": { "type": "string" },
+    "source_hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "published_hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "metrics_json_hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "metrics_markdown_hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "property_ids": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "type": "string" } },
+    "publication_levels": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "enum": ["sanitized_artifacts", "public_artifacts"] } },
+    "generated_at": { "type": "string", "format": "date-time" },
+    "authority": { "const": "owner_authorized_publication_projection" },
+    "limitations": { "type": "array", "minItems": 1, "items": { "type": "string" } },
+    "receipt_hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+  }
+}