@openvtc/trust-tasks 0.19.17 → 0.19.19

package/src/persona/profile/compose/1.0/payload.ts

@@ -0,0 +1,650 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/persona/profile/compose/1.0/payload.schema.json
+ */
+
+import type { ClaimType, Ext, Slot, Ulid, ValueType, Version_PersonaV0_1 as Version } from "../../../../_shared/components.js";
+
+
+/**
+ * One claim of the face being composed: a value typed now, or an attribute the holder already keeps.
+ */
+export type ComposeClaim = NewClaim | HeldClaim;
+
+/**
+ * Compose a face for one context, where it is needed, from values typed now and attributes already held — and optionally wear it there in the same act. Local by default: a value typed here stays in this context unless the holder says it should be reusable. Where the face lives follows from what it carries, so there is no scope parameter to get wrong.
+ */
+export interface PersonaProfileComposePayload {
+  /**
+   * The context the face is composed for. A face whose every claim is local lives in this context and nowhere else; a face carrying any pool claim lives above contexts, and is bound into this one when `personaDid` is given.
+   */
+  contextId: string;
+  /**
+   * The holder's name for the face. Never disclosed; what a context may call the face is `label`.
+   */
+  name: string;
+  /**
+   * Ordered; the order is display order.
+   *
+   * @minItems 1
+   * @maxItems 64
+   */
+  claims: [ComposeClaim, ...ComposeClaim[]];
+  /**
+   * Wear the new face as this persona in `contextId`, in the same act. Omit to compose without wearing it.
+   */
+  personaDid?: string;
+  /**
+   * What the context may call the face, as on persona/binding/set. Meaningful only with `personaDid`; a maintainer MUST refuse it without one rather than drop it.
+   */
+  label?: string;
+  /**
+   * When wearing the face here ends on its own, as persona/binding/set `until`: at it the binding clears and the face, if worn nowhere else, is retired — never deleted. For the face composed at the door of a conference or a listing, which is where a throwaway face is usually made. Meaningful only with `personaDid`, and refused without one or in the past (`untilNotFuture`).
+   */
+  until?: string;
+  ext?: Ext;
+}
+/**
+ * A value the holder types now. Self-asserted: a value typed at this step has no issuer behind it, and a claim that could carry a provenance here would let a typed value present as attested.
+ */
+export interface NewClaim {
+  type: ClaimType;
+  valueType: ValueType;
+  value: unknown;
+  /**
+   * The holder's note to self for this value. Never disclosed.
+   */
+  label?: string;
+  slot?: Slot;
+  /**
+   * `local` (the default) keeps the value in this face alone: it is carried inline and enters no pool, so no other face can come to present it by accident. `pool` makes it reusable — the maintainer references a self-asserted pool attribute holding exactly this type and value, creating one when none exists.
+   */
+  share?: "local" | "pool";
+}
+/**
+ * An attribute already in the holder's pool, presented live.
+ */
+export interface HeldClaim {
+  attributeId: Ulid;
+  slot?: Slot;
+}
+/**
+ * Success response to persona/profile/compose. Type https://trusttasks.org/spec/persona/profile/compose/1.0#response.
+ */
+export interface PersonaProfileComposeResponsePayload {
+  profileId: Ulid;
+  /**
+   * Where the face lives. `local`: in `contextId` only, readable through persona/local/profile/get. `pool`: above contexts, readable through persona/profile/get, and able to be worn in other contexts later.
+   */
+  scope: "local" | "pool";
+  version: Version;
+  /**
+   * For each `share: pool` claim, in request order, the pool attribute the face now references and whether this compose created it. `created: false` means the holder already kept exactly this value, and the face now shares it with whatever else presents it. Absent when no claim was pooled.
+   *
+   * @maxItems 64
+   */
+  pooled?: {
+    attributeId: Ulid;
+    created: boolean;
+  }[];
+  /**
+   * Present when `personaDid` was given: the face is now worn there.
+   */
+  binding?: {
+    personaDid: string;
+    version: Version;
+    /**
+     * How many other personas in this context wear this face. Always zero for a face this task just created; present for parity with persona/binding/set.
+     */
+    alsoBoundPersonaCount?: number;
+  };
+  /**
+   * Advisory, as on persona/profile/put: how many of the face's claims present a value another face also presents. A count; identifiers come from persona/correlation/analyze. The write has applied.
+   */
+  correlation?: {
+    severity: "none" | "low" | "high";
+    sharedAttributeCount?: number;
+  };
+  ext?: Ext;
+}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { ClaimType, Ext, Slot, Ulid, ValueType, Version };
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/persona/profile/compose/1.0" as const;
+
+/** Stable alias for this specification's request payload shape. */
+export type Payload = PersonaProfileComposePayload;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/persona/profile/compose/1.0#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = PersonaProfileComposeResponsePayload;
+
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://trusttasks.org/spec/persona/profile/compose/1.0",
+  "title": "Persona Profile Compose — payload",
+  "description": "Compose a face for one context, where it is needed, from values typed now and attributes already held — and optionally wear it there in the same act. Local by default: a value typed here stays in this context unless the holder says it should be reusable. Where the face lives follows from what it carries, so there is no scope parameter to get wrong.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "contextId",
+    "name",
+    "claims"
+  ],
+  "properties": {
+    "contextId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "The context the face is composed for. A face whose every claim is local lives in this context and nowhere else; a face carrying any pool claim lives above contexts, and is bound into this one when `personaDid` is given."
+    },
+    "name": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "description": "The holder's name for the face. Never disclosed; what a context may call the face is `label`."
+    },
+    "claims": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 64,
+      "items": {
+        "$ref": "#/$defs/ComposeClaim"
+      },
+      "description": "Ordered; the order is display order."
+    },
+    "personaDid": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 2048,
+      "description": "Wear the new face as this persona in `contextId`, in the same act. Omit to compose without wearing it."
+    },
+    "label": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "description": "What the context may call the face, as on persona/binding/set. Meaningful only with `personaDid`; a maintainer MUST refuse it without one rather than drop it."
+    },
+    "until": {
+      "type": "string",
+      "format": "date-time",
+      "description": "When wearing the face here ends on its own, as persona/binding/set `until`: at it the binding clears and the face, if worn nowhere else, is retired — never deleted. For the face composed at the door of a conference or a listing, which is where a throwaway face is usually made. Meaningful only with `personaDid`, and refused without one or in the past (`untilNotFuture`)."
+    },
+    "ext": {
+      "$ref": "#/$defs/Ext"
+    }
+  },
+  "$defs": {
+    "ComposeClaim": {
+      "title": "ComposeClaim",
+      "description": "One claim of the face being composed: a value typed now, or an attribute the holder already keeps.",
+      "oneOf": [
+        {
+          "$ref": "#/$defs/NewClaim"
+        },
+        {
+          "$ref": "#/$defs/HeldClaim"
+        }
+      ]
+    },
+    "NewClaim": {
+      "title": "NewClaim",
+      "description": "A value the holder types now. Self-asserted: a value typed at this step has no issuer behind it, and a claim that could carry a provenance here would let a typed value present as attested.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "type",
+        "valueType",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "$ref": "#/$defs/ClaimType"
+        },
+        "valueType": {
+          "$ref": "#/$defs/ValueType"
+        },
+        "value": {},
+        "label": {
+          "type": "string",
+          "maxLength": 128,
+          "description": "The holder's note to self for this value. Never disclosed."
+        },
+        "slot": {
+          "$ref": "#/$defs/Slot"
+        },
+        "share": {
+          "type": "string",
+          "enum": [
+            "local",
+            "pool"
+          ],
+          "default": "local",
+          "description": "`local` (the default) keeps the value in this face alone: it is carried inline and enters no pool, so no other face can come to present it by accident. `pool` makes it reusable — the maintainer references a self-asserted pool attribute holding exactly this type and value, creating one when none exists."
+        }
+      }
+    },
+    "HeldClaim": {
+      "title": "HeldClaim",
+      "description": "An attribute already in the holder's pool, presented live.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "attributeId"
+      ],
+      "properties": {
+        "attributeId": {
+          "$ref": "#/$defs/Ulid"
+        },
+        "slot": {
+          "$ref": "#/$defs/Slot"
+        }
+      }
+    },
+    "Response": {
+      "$anchor": "response",
+      "title": "Persona Profile Compose — response payload",
+      "description": "Success response to persona/profile/compose. Type https://trusttasks.org/spec/persona/profile/compose/1.0#response.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "profileId",
+        "scope",
+        "version"
+      ],
+      "properties": {
+        "profileId": {
+          "$ref": "#/$defs/Ulid"
+        },
+        "scope": {
+          "type": "string",
+          "enum": [
+            "local",
+            "pool"
+          ],
+          "description": "Where the face lives. `local`: in `contextId` only, readable through persona/local/profile/get. `pool`: above contexts, readable through persona/profile/get, and able to be worn in other contexts later."
+        },
+        "version": {
+          "$ref": "#/$defs/Version"
+        },
+        "pooled": {
+          "type": "array",
+          "maxItems": 64,
+          "description": "For each `share: pool` claim, in request order, the pool attribute the face now references and whether this compose created it. `created: false` means the holder already kept exactly this value, and the face now shares it with whatever else presents it. Absent when no claim was pooled.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "attributeId",
+              "created"
+            ],
+            "properties": {
+              "attributeId": {
+                "$ref": "#/$defs/Ulid"
+              },
+              "created": {
+                "type": "boolean"
+              }
+            }
+          }
+        },
+        "binding": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "personaDid",
+            "version"
+          ],
+          "description": "Present when `personaDid` was given: the face is now worn there.",
+          "properties": {
+            "personaDid": {
+              "type": "string",
+              "minLength": 1
+            },
+            "version": {
+              "$ref": "#/$defs/Version"
+            },
+            "alsoBoundPersonaCount": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "How many other personas in this context wear this face. Always zero for a face this task just created; present for parity with persona/binding/set."
+            }
+          }
+        },
+        "correlation": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "severity"
+          ],
+          "description": "Advisory, as on persona/profile/put: how many of the face's claims present a value another face also presents. A count; identifiers come from persona/correlation/analyze. The write has applied.",
+          "properties": {
+            "severity": {
+              "type": "string",
+              "enum": [
+                "none",
+                "low",
+                "high"
+              ]
+            },
+            "sharedAttributeCount": {
+              "type": "integer",
+              "minimum": 0
+            }
+          }
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "Version": {
+      "title": "Version",
+      "description": "A value of the store's monotonic write counter. Server-assigned; a producer never chooses one.",
+      "type": "integer",
+      "minimum": 1
+    },
+    "Ulid": {
+      "title": "Ulid",
+      "description": "A ULID in Crockford base32, uppercase. Used for `attributeId` and `profileId`. Chosen over a UUID because the leading 48 bits are a timestamp, so a key-ordered scan of the store is also creation-ordered and a `list` needs no secondary sort. Server-assigned on create; a producer MAY supply one to make a create idempotent, and a maintainer MUST reject a supplied value that already exists rather than silently overwriting.",
+      "type": "string",
+      "pattern": "^[0-9A-HJKMNP-TV-Z]{26}$"
+    },
+    "Slot": {
+      "title": "Slot",
+      "type": "string",
+      "pattern": "^[a-z][A-Za-z0-9]{0,31}$",
+      "description": "A role a profile entry plays within its profile, so a consumer can find it without guessing from its claim type. A profile MAY hold several entries of one type — a legal name and a display name, two phone numbers — and only a slot says which answers a given question. Unique within a profile.\n\nWell-known slots:\n\n- `displayName` — what this face calls itself. The entry a consumer renders as the face's name to anyone it is shown to. Distinct from the profile's own `name`, which is the holder's private label and never disclosed.\n- `primaryEmail`, `primaryPhone`, `primaryAddress` — the entry to use where a counterparty asks for one of a kind and the profile holds several.\n- `avatar` — the image this face presents.\n\nOther values are the holder's or the producer's own and carry no meaning a maintainer interprets."
+    },
+    "ValueType": {
+      "title": "ValueType",
+      "description": "The JSON shape of `value`, declared so that a consumer can render and compare without guessing. The maintainer validates that `value` agrees with this member and does nothing further: it does NOT validate a phone number against a phone-number grammar. That is a producer's affordance, and a store that grows opinions about the contents of its records eventually blocks its consumer's release.",
+      "type": "string",
+      "enum": [
+        "string",
+        "number",
+        "boolean",
+        "date",
+        "object"
+      ]
+    },
+    "ClaimType": {
+      "title": "ClaimType",
+      "description": "The vocabulary token naming what a value IS — `name.legal`, `phone.mobile`, `address.postal`, `person.birthDate`. Dotted, most-general segment first, so that a consumer with no knowledge of the specific token can still group by its prefix.\n\nThe token is the maintainer's own; no external vocabulary is primary. External vocabularies (vCard/jCard, OIDC standard claims, schema.org) are mappings applied at PRESENTATION by a renderer, not at rest, so that a query written in any of them can be matched without the store having to live inside any one of them.\n\nThe `x:` prefix is an open extension namespace and is not decoration. The closest prior art — Windows CardSpace's self-issued card — supported exactly fifteen predefined claim types with no extensibility, and that is the specific way it failed the requirement a holder actually has. An `x:` attribute stores, composes, binds and discloses exactly like a known one; it renders generically and matches only an explicit query.",
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "pattern": "^(x:)?[a-z][a-zA-Z0-9]*(\\.[a-z][a-zA-Z0-9]*)*$"
+    }
+  }
+} as const;
+
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$ref": "#/$defs/Response",
+  "$defs": {
+    "ComposeClaim": {
+      "title": "ComposeClaim",
+      "description": "One claim of the face being composed: a value typed now, or an attribute the holder already keeps.",
+      "oneOf": [
+        {
+          "$ref": "#/$defs/NewClaim"
+        },
+        {
+          "$ref": "#/$defs/HeldClaim"
+        }
+      ]
+    },
+    "NewClaim": {
+      "title": "NewClaim",
+      "description": "A value the holder types now. Self-asserted: a value typed at this step has no issuer behind it, and a claim that could carry a provenance here would let a typed value present as attested.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "type",
+        "valueType",
+        "value"
+      ],
+      "properties": {
+        "type": {
+          "$ref": "#/$defs/ClaimType"
+        },
+        "valueType": {
+          "$ref": "#/$defs/ValueType"
+        },
+        "value": {},
+        "label": {
+          "type": "string",
+          "maxLength": 128,
+          "description": "The holder's note to self for this value. Never disclosed."
+        },
+        "slot": {
+          "$ref": "#/$defs/Slot"
+        },
+        "share": {
+          "type": "string",
+          "enum": [
+            "local",
+            "pool"
+          ],
+          "default": "local",
+          "description": "`local` (the default) keeps the value in this face alone: it is carried inline and enters no pool, so no other face can come to present it by accident. `pool` makes it reusable — the maintainer references a self-asserted pool attribute holding exactly this type and value, creating one when none exists."
+        }
+      }
+    },
+    "HeldClaim": {
+      "title": "HeldClaim",
+      "description": "An attribute already in the holder's pool, presented live.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "attributeId"
+      ],
+      "properties": {
+        "attributeId": {
+          "$ref": "#/$defs/Ulid"
+        },
+        "slot": {
+          "$ref": "#/$defs/Slot"
+        }
+      }
+    },
+    "Response": {
+      "$anchor": "response",
+      "title": "Persona Profile Compose — response payload",
+      "description": "Success response to persona/profile/compose. Type https://trusttasks.org/spec/persona/profile/compose/1.0#response.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "profileId",
+        "scope",
+        "version"
+      ],
+      "properties": {
+        "profileId": {
+          "$ref": "#/$defs/Ulid"
+        },
+        "scope": {
+          "type": "string",
+          "enum": [
+            "local",
+            "pool"
+          ],
+          "description": "Where the face lives. `local`: in `contextId` only, readable through persona/local/profile/get. `pool`: above contexts, readable through persona/profile/get, and able to be worn in other contexts later."
+        },
+        "version": {
+          "$ref": "#/$defs/Version"
+        },
+        "pooled": {
+          "type": "array",
+          "maxItems": 64,
+          "description": "For each `share: pool` claim, in request order, the pool attribute the face now references and whether this compose created it. `created: false` means the holder already kept exactly this value, and the face now shares it with whatever else presents it. Absent when no claim was pooled.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "attributeId",
+              "created"
+            ],
+            "properties": {
+              "attributeId": {
+                "$ref": "#/$defs/Ulid"
+              },
+              "created": {
+                "type": "boolean"
+              }
+            }
+          }
+        },
+        "binding": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "personaDid",
+            "version"
+          ],
+          "description": "Present when `personaDid` was given: the face is now worn there.",
+          "properties": {
+            "personaDid": {
+              "type": "string",
+              "minLength": 1
+            },
+            "version": {
+              "$ref": "#/$defs/Version"
+            },
+            "alsoBoundPersonaCount": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "How many other personas in this context wear this face. Always zero for a face this task just created; present for parity with persona/binding/set."
+            }
+          }
+        },
+        "correlation": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "severity"
+          ],
+          "description": "Advisory, as on persona/profile/put: how many of the face's claims present a value another face also presents. A count; identifiers come from persona/correlation/analyze. The write has applied.",
+          "properties": {
+            "severity": {
+              "type": "string",
+              "enum": [
+                "none",
+                "low",
+                "high"
+              ]
+            },
+            "sharedAttributeCount": {
+              "type": "integer",
+              "minimum": 0
+            }
+          }
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "Version": {
+      "title": "Version",
+      "description": "A value of the store's monotonic write counter. Server-assigned; a producer never chooses one.",
+      "type": "integer",
+      "minimum": 1
+    },
+    "Ulid": {
+      "title": "Ulid",
+      "description": "A ULID in Crockford base32, uppercase. Used for `attributeId` and `profileId`. Chosen over a UUID because the leading 48 bits are a timestamp, so a key-ordered scan of the store is also creation-ordered and a `list` needs no secondary sort. Server-assigned on create; a producer MAY supply one to make a create idempotent, and a maintainer MUST reject a supplied value that already exists rather than silently overwriting.",
+      "type": "string",
+      "pattern": "^[0-9A-HJKMNP-TV-Z]{26}$"
+    },
+    "Slot": {
+      "title": "Slot",
+      "type": "string",
+      "pattern": "^[a-z][A-Za-z0-9]{0,31}$",
+      "description": "A role a profile entry plays within its profile, so a consumer can find it without guessing from its claim type. A profile MAY hold several entries of one type — a legal name and a display name, two phone numbers — and only a slot says which answers a given question. Unique within a profile.\n\nWell-known slots:\n\n- `displayName` — what this face calls itself. The entry a consumer renders as the face's name to anyone it is shown to. Distinct from the profile's own `name`, which is the holder's private label and never disclosed.\n- `primaryEmail`, `primaryPhone`, `primaryAddress` — the entry to use where a counterparty asks for one of a kind and the profile holds several.\n- `avatar` — the image this face presents.\n\nOther values are the holder's or the producer's own and carry no meaning a maintainer interprets."
+    },
+    "ValueType": {
+      "title": "ValueType",
+      "description": "The JSON shape of `value`, declared so that a consumer can render and compare without guessing. The maintainer validates that `value` agrees with this member and does nothing further: it does NOT validate a phone number against a phone-number grammar. That is a producer's affordance, and a store that grows opinions about the contents of its records eventually blocks its consumer's release.",
+      "type": "string",
+      "enum": [
+        "string",
+        "number",
+        "boolean",
+        "date",
+        "object"
+      ]
+    },
+    "ClaimType": {
+      "title": "ClaimType",
+      "description": "The vocabulary token naming what a value IS — `name.legal`, `phone.mobile`, `address.postal`, `person.birthDate`. Dotted, most-general segment first, so that a consumer with no knowledge of the specific token can still group by its prefix.\n\nThe token is the maintainer's own; no external vocabulary is primary. External vocabularies (vCard/jCard, OIDC standard claims, schema.org) are mappings applied at PRESENTATION by a renderer, not at rest, so that a query written in any of them can be matched without the store having to live inside any one of them.\n\nThe `x:` prefix is an open extension namespace and is not decoration. The closest prior art — Windows CardSpace's self-issued card — supported exactly fifteen predefined claim types with no extensibility, and that is the specific way it failed the requirement a holder actually has. An `x:` attribute stores, composes, binds and discloses exactly like a known one; it renders generically and matches only an explicit query.",
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "pattern": "^(x:)?[a-z][a-zA-Z0-9]*(\\.[a-z][a-zA-Z0-9]*)*$"
+    }
+  }
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+  typeUri: TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: PAYLOAD_SCHEMA,
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+  typeUri: RESPONSE_TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+} as const;