@openvtc/trust-tasks 0.26.10 → 0.26.12

package/src/vta/witness/present/0.2/payload.ts

@@ -0,0 +1,210 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/witness/present/0.2/payload.schema.json
+ */
+
+import type { CarriedDocument, Ext, SessionId } from "../../../../_shared/components.js";
+
+
+/**
+ * A client hands its VTA the witness's answer to the session it opened; the VTA verifies that the answer is the witness's own, builds the presentations bound to its challenge and domain, and returns the witness/session/submit document, signed as the relationship DID, for the client to send.
+ */
+export interface VTAWitnessPresentPayload {
+  sessionId: SessionId;
+  /**
+   * The witness/session/0.2 #response the witness returned, exactly as received, under the witness's proof.
+   */
+  response: CarriedDocument;
+  ext?: Ext;
+}
+/**
+ * The witness/session/submit document to send.
+ */
+export interface VTAWitnessPresentResponsePayload {
+  sessionId: SessionId;
+  /**
+   * The witness/session/submit/0.2 document, on the session's thread, issued and signed by relationshipDid and addressed to the witness, carrying the relationship presentation in `vp` and, under the member link, the member presentation in `memberPresentation`. For the client to send from relationshipDid unaltered.
+   */
+  document: CarriedDocument;
+  ext?: Ext;
+}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { CarriedDocument, Ext, SessionId };
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/witness/present/0.2" as const;
+
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTAWitnessPresentPayload;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/witness/present/0.2#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTAWitnessPresentResponsePayload;
+
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://trusttasks.org/spec/vta/witness/present/0.2",
+  "title": "VTA Witness — Present — payload",
+  "description": "A client hands its VTA the witness's answer to the session it opened; the VTA verifies that the answer is the witness's own, builds the presentations bound to its challenge and domain, and returns the witness/session/submit document, signed as the relationship DID, for the client to send.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "sessionId",
+    "response"
+  ],
+  "properties": {
+    "sessionId": {
+      "$ref": "#/$defs/SessionId"
+    },
+    "response": {
+      "$ref": "#/$defs/CarriedDocument",
+      "description": "The witness/session/0.2 #response the witness returned, exactly as received, under the witness's proof."
+    },
+    "ext": {
+      "$ref": "#/$defs/Ext"
+    }
+  },
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "VTA Witness — Present — response payload",
+      "description": "The witness/session/submit document to send.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "sessionId",
+        "document"
+      ],
+      "properties": {
+        "sessionId": {
+          "$ref": "#/$defs/SessionId"
+        },
+        "document": {
+          "$ref": "#/$defs/CarriedDocument",
+          "description": "The witness/session/submit/0.2 document, on the session's thread, issued and signed by relationshipDid and addressed to the witness, carrying the relationship presentation in `vp` and, under the member link, the member presentation in `memberPresentation`. For the client to send from relationshipDid unaltered."
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "CarriedDocument": {
+      "title": "CarriedDocument",
+      "description": "A whole Trust Task document — `id`, `type`, `payload` and every other member, `proof` included — carried between the VTA and the witness by the client: one the VTA built and signed for the client to send, or one the witness returned for the client to hand back. Typed as an open object so every member survives a round trip: carried exactly as built or received, never re-serialised, because its proof is over itself. Its envelope is checked by the VTA against the session record (CONVENTIONS.md §3), not by this schema.",
+      "type": "object",
+      "minProperties": 1
+    },
+    "SessionId": {
+      "title": "SessionId",
+      "description": "The id of the witness/session document the VTA built in vta/witness/open: the session's name, the thread every document of the session is on, and the value the VWC carries as taskContext. The VTA keys its state for the session by it.",
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256
+    }
+  }
+} as const;
+
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$ref": "#/$defs/Response",
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "VTA Witness — Present — response payload",
+      "description": "The witness/session/submit document to send.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "sessionId",
+        "document"
+      ],
+      "properties": {
+        "sessionId": {
+          "$ref": "#/$defs/SessionId"
+        },
+        "document": {
+          "$ref": "#/$defs/CarriedDocument",
+          "description": "The witness/session/submit/0.2 document, on the session's thread, issued and signed by relationshipDid and addressed to the witness, carrying the relationship presentation in `vp` and, under the member link, the member presentation in `memberPresentation`. For the client to send from relationshipDid unaltered."
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "CarriedDocument": {
+      "title": "CarriedDocument",
+      "description": "A whole Trust Task document — `id`, `type`, `payload` and every other member, `proof` included — carried between the VTA and the witness by the client: one the VTA built and signed for the client to send, or one the witness returned for the client to hand back. Typed as an open object so every member survives a round trip: carried exactly as built or received, never re-serialised, because its proof is over itself. Its envelope is checked by the VTA against the session record (CONVENTIONS.md §3), not by this schema.",
+      "type": "object",
+      "minProperties": 1
+    },
+    "SessionId": {
+      "title": "SessionId",
+      "description": "The id of the witness/session document the VTA built in vta/witness/open: the session's name, the thread every document of the session is on, and the value the VWC carries as taskContext. The VTA keys its state for the session by it.",
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256
+    }
+  }
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+  typeUri: TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: PAYLOAD_SCHEMA,
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+  typeUri: RESPONSE_TYPE_URI,
+  isBearer: false,
+  isProofRequired: false,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+} as const;

package/src/vtc/members/personhood/assert/0.2/payload.ts

@@ -0,0 +1,421 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/members/personhood/assert/0.2/payload.schema.json
+ */
+
+import type { EvidenceDocument, Ext, OutcomeEvidence } from "../../../../../_shared/components.js";
+
+
+export interface VTCMembersPersonhoodAssertPayload {
+  /**
+   * The member asserting personhood; MUST equal the presentation's holder.
+   */
+  did: string;
+  /**
+   * A W3C Verifiable Presentation (opaque here). Its holder MUST match did, its proof.challenge MUST be the paired challengeId, and it MUST carry at least one credential satisfying the community's active personhood policy. A Verifiable Witness Credential in it counts only with paired outcomeEvidence.
+   */
+  presentation: {};
+  /**
+   * OPTIONAL. The outcome evidence of the witnessing sessions that the Verifiable Witness Credentials in presentation cite: one entry per VWC the member wants counted, each the witness/session document the VWC's taskContext names and the witness/session/submit #response that delivered it, exactly as stored, never re-serialised. A VWC with no paired entry counts for nothing; an entry pairing with no VWC in presentation is ignored.
+   *
+   * @minItems 1
+   * @maxItems 16
+   */
+  outcomeEvidence?:
+    | [OutcomeEvidence]
+    | [OutcomeEvidence, OutcomeEvidence]
+    | [OutcomeEvidence, OutcomeEvidence, OutcomeEvidence]
+    | [OutcomeEvidence, OutcomeEvidence, OutcomeEvidence, OutcomeEvidence]
+    | [OutcomeEvidence, OutcomeEvidence, OutcomeEvidence, OutcomeEvidence, OutcomeEvidence]
+    | [OutcomeEvidence, OutcomeEvidence, OutcomeEvidence, OutcomeEvidence, OutcomeEvidence, OutcomeEvidence]
+    | [
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence
+      ]
+    | [
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence
+      ]
+    | [
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence
+      ]
+    | [
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence
+      ]
+    | [
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence
+      ]
+    | [
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence
+      ]
+    | [
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence
+      ]
+    | [
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence
+      ]
+    | [
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence
+      ]
+    | [
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence,
+        OutcomeEvidence
+      ];
+  ext?: Ext;
+}
+export interface VTCMembersPersonhoodAssertResponsePayload {
+  did: string;
+  /**
+   * Always true on success — the flag flipped or stayed asserted.
+   */
+  personhood: true;
+  /**
+   * Re-issued membership credential carrying the asserted personhood (opaque here).
+   */
+  vmc: {};
+  /**
+   * Re-issued role credential (opaque here): a Verifiable Authority Credential (`type` including `AuthorityCredential`) issued by the community with `issuerScope` `public`, whose `credentialSubject.authority` is `{ scope: <community DID>, actions: ["role:<name>"] }` — the shape vtc/vetting/vetters/grant/0.1 issues.
+   */
+  roleVac: {};
+  ext?: Ext;
+}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { EvidenceDocument, Ext, OutcomeEvidence };
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vtc/members/personhood/assert/0.2" as const;
+
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCMembersPersonhoodAssertPayload;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/members/personhood/assert/0.2#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCMembersPersonhoodAssertResponsePayload;
+
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://trusttasks.org/spec/vtc/members/personhood/assert/0.2",
+  "title": "VTC Members Personhood-Assert — payload",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "did",
+    "presentation"
+  ],
+  "properties": {
+    "did": {
+      "type": "string",
+      "minLength": 1,
+      "description": "The member asserting personhood; MUST equal the presentation's holder."
+    },
+    "presentation": {
+      "type": "object",
+      "description": "A W3C Verifiable Presentation (opaque here). Its holder MUST match did, its proof.challenge MUST be the paired challengeId, and it MUST carry at least one credential satisfying the community's active personhood policy. A Verifiable Witness Credential in it counts only with paired outcomeEvidence."
+    },
+    "outcomeEvidence": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 16,
+      "items": {
+        "$ref": "#/$defs/OutcomeEvidence"
+      },
+      "description": "OPTIONAL. The outcome evidence of the witnessing sessions that the Verifiable Witness Credentials in presentation cite: one entry per VWC the member wants counted, each the witness/session document the VWC's taskContext names and the witness/session/submit #response that delivered it, exactly as stored, never re-serialised. A VWC with no paired entry counts for nothing; an entry pairing with no VWC in presentation is ignored."
+    },
+    "ext": {
+      "$ref": "#/$defs/Ext"
+    }
+  },
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "VTC Members Personhood-Assert — response payload",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "did",
+        "personhood",
+        "vmc",
+        "roleVac"
+      ],
+      "properties": {
+        "did": {
+          "type": "string",
+          "minLength": 1
+        },
+        "personhood": {
+          "type": "boolean",
+          "const": true,
+          "description": "Always true on success — the flag flipped or stayed asserted."
+        },
+        "vmc": {
+          "type": "object",
+          "description": "Re-issued membership credential carrying the asserted personhood (opaque here)."
+        },
+        "roleVac": {
+          "type": "object",
+          "description": "Re-issued role credential (opaque here): a Verifiable Authority Credential (`type` including `AuthorityCredential`) issued by the community with `issuerScope` `public`, whose `credentialSubject.authority` is `{ scope: <community DID>, actions: [\"role:<name>\"] }` — the shape vtc/vetting/vetters/grant/0.1 issues."
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "OutcomeEvidence": {
+      "title": "OutcomeEvidence",
+      "description": "One witnessing session's outcome evidence. `session` is the initiating witness/session document; `outcome` is the terminal witness/session/submit #response that the initiating document's own specification declares as its outcome evidence, under the witness's proof, delivering the VWC and its vwcDigestMultibase. A consumer pairs them with a presented VWC by SPEC §4.9.4's four checks and the witnessing checks of witness/session/submit (This response is the outcome evidence).",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "session",
+        "outcome"
+      ],
+      "properties": {
+        "session": {
+          "$ref": "#/$defs/EvidenceDocument",
+          "description": "The witness/session document that opened the session. The VWC's taskContext is its id and its taskDigestMultibase is computed over it (SPEC §4.9.3)."
+        },
+        "outcome": {
+          "$ref": "#/$defs/EvidenceDocument",
+          "description": "The witness/session/submit #response that closed the session, under the witness's proof. It carries the VWC and its vwcDigestMultibase."
+        }
+      }
+    },
+    "EvidenceDocument": {
+      "title": "EvidenceDocument",
+      "description": "A whole Trust Task document — `id`, `type`, `payload` and every other member, `proof` included — carried exactly as it was sent or received, never re-serialised: a task digest and a proof are taken over its members, and a re-serialised copy reproduces neither reliably. Typed as an open object so every member survives; the checks that give it meaning belong to the task that reads it.",
+      "type": "object",
+      "minProperties": 1
+    }
+  }
+} as const;
+
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$ref": "#/$defs/Response",
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "VTC Members Personhood-Assert — response payload",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "did",
+        "personhood",
+        "vmc",
+        "roleVac"
+      ],
+      "properties": {
+        "did": {
+          "type": "string",
+          "minLength": 1
+        },
+        "personhood": {
+          "type": "boolean",
+          "const": true,
+          "description": "Always true on success — the flag flipped or stayed asserted."
+        },
+        "vmc": {
+          "type": "object",
+          "description": "Re-issued membership credential carrying the asserted personhood (opaque here)."
+        },
+        "roleVac": {
+          "type": "object",
+          "description": "Re-issued role credential (opaque here): a Verifiable Authority Credential (`type` including `AuthorityCredential`) issued by the community with `issuerScope` `public`, whose `credentialSubject.authority` is `{ scope: <community DID>, actions: [\"role:<name>\"] }` — the shape vtc/vetting/vetters/grant/0.1 issues."
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "OutcomeEvidence": {
+      "title": "OutcomeEvidence",
+      "description": "One witnessing session's outcome evidence. `session` is the initiating witness/session document; `outcome` is the terminal witness/session/submit #response that the initiating document's own specification declares as its outcome evidence, under the witness's proof, delivering the VWC and its vwcDigestMultibase. A consumer pairs them with a presented VWC by SPEC §4.9.4's four checks and the witnessing checks of witness/session/submit (This response is the outcome evidence).",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "session",
+        "outcome"
+      ],
+      "properties": {
+        "session": {
+          "$ref": "#/$defs/EvidenceDocument",
+          "description": "The witness/session document that opened the session. The VWC's taskContext is its id and its taskDigestMultibase is computed over it (SPEC §4.9.3)."
+        },
+        "outcome": {
+          "$ref": "#/$defs/EvidenceDocument",
+          "description": "The witness/session/submit #response that closed the session, under the witness's proof. It carries the VWC and its vwcDigestMultibase."
+        }
+      }
+    },
+    "EvidenceDocument": {
+      "title": "EvidenceDocument",
+      "description": "A whole Trust Task document — `id`, `type`, `payload` and every other member, `proof` included — carried exactly as it was sent or received, never re-serialised: a task digest and a proof are taken over its members, and a re-serialised copy reproduces neither reliably. Typed as an open object so every member survives; the checks that give it meaning belong to the task that reads it.",
+      "type": "object",
+      "minProperties": 1
+    }
+  }
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+  typeUri: TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: PAYLOAD_SCHEMA,
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+  typeUri: RESPONSE_TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+} as const;