@openvtc/trust-tasks 0.28.8 → 0.28.9

package/src/vta/pcs/trustee/keys/0.5/payload.ts

@@ -0,0 +1,1294 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/pcs/trustee/keys/0.5/payload.schema.json
+ */
+
+import type { BoardVisibility, ChoiceQuestion, ElectionId, Ext, Key_VotingV0_1 as Key, Manifest_VotingV0_4 as Manifest, Question, QuestionOption, RankingQuestion, Revote, RollRule_VotingV0_4 as RollRule, ScoreQuestion, SecrecyLevel, SignedRequest, TextQuestion, TrusteeCeremony, TrusteeIndex, Trustees } from "../../../../../_shared/components.js";
+
+
+/**
+ * The trustee's VTA opens the shares it was dealt, checks each, keeps its share of the election key, and returns the voting/trustees/confirm request signed as the trustee.
+ */
+export interface VTAPCSTrusteeKeysPayload {
+  /**
+   * The VTA context the trustee's keys live in.
+   */
+  contextId: string;
+  /**
+   * The community's DID.
+   */
+  community: string;
+  electionId: ElectionId;
+  /**
+   * The trustee's DID: a persona this VTA holds, named in the manifest's `trustees.dids`.
+   */
+  trustee: string;
+  manifest: Manifest;
+  /**
+   * The ceremony as the board holds it: voting/trustees/status's `steps`, passed on unchanged. The VTA verifies every step as its trustee's before taking it.
+   */
+  ceremony: TrusteeCeremony;
+  ext?: Ext;
+}
+export interface VTAPCSTrusteeKeysResponsePayload {
+  /**
+   * @maxItems 64
+   */
+  complaints: TrusteeIndex[];
+  /**
+   * Whether the VTA now holds the trustee's key share, checked against the election key's verification key.
+   */
+  keyHeld: boolean;
+  document?: ConfirmDocument;
+  ext?: Ext;
+}
+/**
+ * The voting/trustees/confirm request, signed as the trustee. Absent once the key share is held.
+ */
+export interface ConfirmDocument {
+  id: string;
+  type: "https://trusttasks.org/spec/voting/trustees/confirm/0.1";
+  /**
+   * The signer.
+   */
+  issuer: string;
+  /**
+   * The ballot box.
+   */
+  recipient: string;
+  issuedAt: string;
+  expiresAt?: string;
+  /**
+   * That task's request payload.
+   */
+  payload: {};
+  /**
+   * A Data Integrity proof by an `authentication` key of `issuer`.
+   */
+  proof: {};
+}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { BoardVisibility, ChoiceQuestion, ElectionId, Ext, Key, Manifest, Question, QuestionOption, RankingQuestion, Revote, RollRule, ScoreQuestion, SecrecyLevel, SignedRequest, TextQuestion, TrusteeCeremony, TrusteeIndex, Trustees };
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/pcs/trustee/keys/0.5" as const;
+
+/**
+ * The earlier version of this specification that this one declares it
+ * extends (front matter `extends`, SPEC §5.2 "Declared extension"), or
+ * `null`. Only the direct declaration — follow the chain with
+ * `extendsChain` / `readForSpec`.
+ */
+export const EXTENDS: string | null = null;
+
+/**
+ * Why this version is deprecated, or `null` while it is current. A
+ * superseded or retired version is still supported, and is withdrawn from
+ * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
+ * Versions").
+ */
+export const DEPRECATION: string | null = null;
+
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTAPCSTrusteeKeysPayload;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/pcs/trustee/keys/0.5#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTAPCSTrusteeKeysResponsePayload;
+
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://trusttasks.org/spec/vta/pcs/trustee/keys/0.5",
+  "title": "VTA PCS — Trustee Keys — payload",
+  "description": "The trustee's VTA opens the shares it was dealt, checks each, keeps its share of the election key, and returns the voting/trustees/confirm request signed as the trustee.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "contextId",
+    "community",
+    "electionId",
+    "trustee",
+    "manifest",
+    "ceremony"
+  ],
+  "properties": {
+    "contextId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256,
+      "description": "The VTA context the trustee's keys live in."
+    },
+    "community": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 2048,
+      "description": "The community's DID."
+    },
+    "electionId": {
+      "$ref": "#/$defs/ElectionId"
+    },
+    "trustee": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 2048,
+      "description": "The trustee's DID: a persona this VTA holds, named in the manifest's `trustees.dids`."
+    },
+    "manifest": {
+      "$ref": "#/$defs/Manifest"
+    },
+    "ceremony": {
+      "$ref": "#/$defs/TrusteeCeremony",
+      "description": "The ceremony as the board holds it: voting/trustees/status's `steps`, passed on unchanged. The VTA verifies every step as its trustee's before taking it."
+    },
+    "ext": {
+      "$ref": "#/$defs/Ext"
+    }
+  },
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "VTA PCS — Trustee Keys — response payload",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "complaints",
+        "keyHeld"
+      ],
+      "properties": {
+        "complaints": {
+          "type": "array",
+          "maxItems": 64,
+          "items": {
+            "$ref": "#/$defs/TrusteeIndex"
+          }
+        },
+        "keyHeld": {
+          "type": "boolean",
+          "description": "Whether the VTA now holds the trustee's key share, checked against the election key's verification key."
+        },
+        "document": {
+          "title": "ConfirmDocument",
+          "description": "The voting/trustees/confirm request, signed as the trustee. Absent once the key share is held.",
+          "type": "object",
+          "required": [
+            "id",
+            "type",
+            "issuer",
+            "recipient",
+            "issuedAt",
+            "payload",
+            "proof"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "pattern": "^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$"
+            },
+            "type": {
+              "const": "https://trusttasks.org/spec/voting/trustees/confirm/0.1"
+            },
+            "issuer": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 2048,
+              "description": "The signer."
+            },
+            "recipient": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 2048,
+              "description": "The ballot box."
+            },
+            "issuedAt": {
+              "type": "string",
+              "format": "date-time"
+            },
+            "expiresAt": {
+              "type": "string",
+              "format": "date-time"
+            },
+            "payload": {
+              "type": "object",
+              "description": "That task's request payload."
+            },
+            "proof": {
+              "type": "object",
+              "description": "A Data Integrity proof by an `authentication` key of `issuer`."
+            }
+          }
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "TrusteeIndex": {
+      "title": "TrusteeIndex",
+      "description": "A trustee's index: its position in the manifest's `trustees.dids`, counting from 1.",
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 64
+    },
+    "TrusteeCeremony": {
+      "title": "TrusteeCeremony",
+      "description": "The trustees' ceremony as the board holds it: the `request` of every `trusteeStep` entry, in board order, each exactly as the ballot box received it (CONVENTIONS §9.6). Whoever acts on it verifies each step as its trustee's before taking it; nothing in it is believed for having been passed along.",
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 4224,
+      "items": {
+        "$ref": "#/$defs/SignedRequest"
+      }
+    },
+    "SignedRequest": {
+      "title": "SignedRequest",
+      "description": "A whole Trust Task request document — `id`, `type`, `issuer`, `payload` and every other member, `proof` included — exactly as the ballot box received it, never re-serialised: its proof is taken over its members, and a re-serialised copy does not reliably reproduce them. Typed as an open object so every member survives; CONVENTIONS §9.6 gives the checks that make it a trustee's step.",
+      "type": "object",
+      "minProperties": 1
+    },
+    "Manifest": {
+      "title": "Manifest",
+      "description": "What an election asks and how it is decided (VTI-VOT-010). Its digest (`manifestDigest`) is the SHA-256 multihash of its RFC 8785 (JCS) canonicalization, and every cast is bound to it (VTI-VOT-011).",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "electionId",
+        "community",
+        "questions",
+        "secrecy",
+        "roll",
+        "registrationOpensAt",
+        "votingOpensAt",
+        "votingClosesAt",
+        "revote",
+        "board",
+        "ballotBox",
+        "binding",
+        "allowEarlyClose",
+        "resultsBeforeClose",
+        "textReleaseThreshold"
+      ],
+      "properties": {
+        "electionId": {
+          "$ref": "#/$defs/ElectionId"
+        },
+        "community": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 2048,
+          "description": "The community's DID."
+        },
+        "title": {
+          "type": "string",
+          "maxLength": 512
+        },
+        "description": {
+          "type": "string",
+          "maxLength": 8192
+        },
+        "questions": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 128,
+          "items": {
+            "$ref": "#/$defs/Question"
+          }
+        },
+        "secrecy": {
+          "$ref": "#/$defs/SecrecyLevel"
+        },
+        "roll": {
+          "$ref": "#/$defs/RollRule"
+        },
+        "registrationOpensAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "votingOpensAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "votingClosesAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "revote": {
+          "$ref": "#/$defs/Revote"
+        },
+        "board": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "visibility",
+            "auditors"
+          ],
+          "properties": {
+            "visibility": {
+              "$ref": "#/$defs/BoardVisibility"
+            },
+            "auditors": {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 2048
+              },
+              "uniqueItems": true
+            }
+          }
+        },
+        "ballotBox": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 2048,
+          "description": "The DID of the voting service that holds the board."
+        },
+        "trustees": {
+          "$ref": "#/$defs/Trustees"
+        },
+        "binding": {
+          "type": "boolean",
+          "description": "Whether the community treats the result as deciding something; creating a binding election takes another administrator's consent (VTI-VOT-081)."
+        },
+        "allowEarlyClose": {
+          "type": "boolean"
+        },
+        "resultsBeforeClose": {
+          "type": "boolean",
+          "description": "Open elections only: whether running totals may be read while voting is open (VTI-VOT-061)."
+        },
+        "textReleaseThreshold": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "Counted ballots required before any text answer is disclosed (VTI-VOT-065). At least 1, and SHOULD be at least 10: a written answer can identify its author by what it says or how it is phrased, and the fewer the ballots released together, the easier that is. Where it is below 10, the disclosure a member is shown before they request a ticket MUST say so, and MUST say that a written answer may identify its author (VTI-VOT-090)."
+        }
+      }
+    },
+    "Trustees": {
+      "title": "Trustees",
+      "description": "The trustees of a sealed or tallied-encrypted election and the number of them decryption needs (VTI-VOT-062). Neither the community nor the ballot box may be one.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "dids",
+        "threshold"
+      ],
+      "properties": {
+        "dids": {
+          "type": "array",
+          "minItems": 2,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 2048
+          },
+          "uniqueItems": true
+        },
+        "threshold": {
+          "type": "integer",
+          "minimum": 2
+        }
+      }
+    },
+    "BoardVisibility": {
+      "title": "BoardVisibility",
+      "description": "`public`: anyone reads the board. `private`: the community, the auditors the manifest names and, for one cast's inclusion, the holder of its receipt (VTI-VOT-052).",
+      "type": "string",
+      "enum": [
+        "public",
+        "private"
+      ]
+    },
+    "Revote": {
+      "title": "Revote",
+      "description": "What a later, different ballot under one ticket does: `replace` the earlier one, or be refused (`refuse`) (VTI-VOT-041).",
+      "type": "string",
+      "enum": [
+        "replace",
+        "refuse"
+      ]
+    },
+    "RollRule": {
+      "title": "RollRule",
+      "description": "Who may be issued a ticket (VTI-VOT-021): the community's active members (`members`), its active members and the parties `listed` names (`membersAndListed`), only the parties `listed` names (`listed`), or the holders of a membership credential for the one DID `memberOf` names (`credential`), proven by presentation when the holder claims their ticket and never resolved when the election is created (VTI-VOT-025). `memberOf` is present exactly when `rule` is `credential`, and `listed` is never present with it.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "rule"
+      ],
+      "properties": {
+        "rule": {
+          "type": "string",
+          "enum": [
+            "members",
+            "membersAndListed",
+            "listed",
+            "credential"
+          ]
+        },
+        "listed": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 2048,
+            "description": "A DID enfranchised by name."
+          },
+          "uniqueItems": true
+        },
+        "memberOf": {
+          "type": "string",
+          "minLength": 8,
+          "maxLength": 2048,
+          "pattern": "^did:[a-z0-9]+:\\S+$",
+          "description": "The DID whose membership credential admits its holder, under the `credential` rule: this community, one of its groups, or a party that is itself an active member of this community — holding a membership credential this community issued it — such as another community, a group of another community, or a network (VTI-VOT-026). Always a DID, never a group's local identifier or name. A community refuses to create an election naming any other DID (vtc/elections/create:rollUntrusted)."
+        }
+      },
+      "dependentSchemas": {
+        "rule": {
+          "anyOf": [
+            {
+              "required": [
+                "memberOf"
+              ]
+            },
+            {
+              "properties": {
+                "rule": {
+                  "enum": [
+                    "members",
+                    "membersAndListed",
+                    "listed"
+                  ]
+                }
+              }
+            }
+          ]
+        },
+        "memberOf": {
+          "properties": {
+            "rule": {
+              "const": "credential"
+            }
+          },
+          "not": {
+            "required": [
+              "listed"
+            ]
+          }
+        }
+      }
+    },
+    "SecrecyLevel": {
+      "title": "SecrecyLevel",
+      "description": "`open`: ballots are recorded on the board as cast. `sealed`: ballots are encrypted to a jointly generated election key and decrypted after voting closes. `talliedEncrypted`: ballots are encrypted and only the totals are ever decrypted (VTI-VOT-060). The encrypted levels are cast with `voting/ballot/cast-encrypted/0.1`, under an election key the trustees generate with `voting/trustees/*` (CONVENTIONS §9).",
+      "type": "string",
+      "enum": [
+        "open",
+        "sealed",
+        "talliedEncrypted"
+      ]
+    },
+    "Question": {
+      "title": "Question",
+      "description": "One question. Tagged union over `type`.",
+      "oneOf": [
+        {
+          "title": "ChoiceQuestion",
+          "description": "Select between `minSelections` and `maxSelections` of `options`. A yes/no/abstain motion is a choice of exactly one of three.",
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "key",
+            "type",
+            "options",
+            "minSelections",
+            "maxSelections",
+            "optional"
+          ],
+          "properties": {
+            "key": {
+              "$ref": "#/$defs/Key"
+            },
+            "type": {
+              "const": "choice"
+            },
+            "text": {
+              "type": "string",
+              "maxLength": 2048
+            },
+            "options": {
+              "type": "array",
+              "minItems": 2,
+              "maxItems": 256,
+              "items": {
+                "$ref": "#/$defs/QuestionOption"
+              }
+            },
+            "minSelections": {
+              "type": "integer",
+              "minimum": 0
+            },
+            "maxSelections": {
+              "type": "integer",
+              "minimum": 1
+            },
+            "optional": {
+              "type": "boolean"
+            }
+          }
+        },
+        {
+          "title": "RankingQuestion",
+          "description": "Order `options`; a ballot ranks every option or, when `partial` is true, a prefix of them.",
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "key",
+            "type",
+            "options",
+            "partial",
+            "optional"
+          ],
+          "properties": {
+            "key": {
+              "$ref": "#/$defs/Key"
+            },
+            "type": {
+              "const": "ranking"
+            },
+            "text": {
+              "type": "string",
+              "maxLength": 2048
+            },
+            "options": {
+              "type": "array",
+              "minItems": 2,
+              "maxItems": 64,
+              "items": {
+                "$ref": "#/$defs/QuestionOption"
+              }
+            },
+            "partial": {
+              "type": "boolean"
+            },
+            "optional": {
+              "type": "boolean"
+            }
+          }
+        },
+        {
+          "title": "ScoreQuestion",
+          "description": "Give each option an integer score within [min, max].",
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "key",
+            "type",
+            "options",
+            "min",
+            "max",
+            "optional"
+          ],
+          "properties": {
+            "key": {
+              "$ref": "#/$defs/Key"
+            },
+            "type": {
+              "const": "score"
+            },
+            "text": {
+              "type": "string",
+              "maxLength": 2048
+            },
+            "options": {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 256,
+              "items": {
+                "$ref": "#/$defs/QuestionOption"
+              }
+            },
+            "min": {
+              "type": "integer"
+            },
+            "max": {
+              "type": "integer"
+            },
+            "optional": {
+              "type": "boolean"
+            }
+          }
+        },
+        {
+          "title": "TextQuestion",
+          "description": "Free text of at most `maxLength` characters.",
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "key",
+            "type",
+            "maxLength",
+            "optional"
+          ],
+          "properties": {
+            "key": {
+              "$ref": "#/$defs/Key"
+            },
+            "type": {
+              "const": "text"
+            },
+            "text": {
+              "type": "string",
+              "maxLength": 2048
+            },
+            "maxLength": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 4096
+            },
+            "optional": {
+              "type": "boolean"
+            }
+          }
+        }
+      ]
+    },
+    "Key": {
+      "title": "Key",
+      "description": "A question or option key, unique within its manifest or question.",
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._-]{1,64}$"
+    },
+    "QuestionOption": {
+      "title": "QuestionOption",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "key"
+      ],
+      "properties": {
+        "key": {
+          "$ref": "#/$defs/Key"
+        },
+        "label": {
+          "type": "string",
+          "maxLength": 512,
+          "description": "Display text. Absent from a manifest registered with a ballot box that holds no question text (VTI-VOT-014)."
+        }
+      }
+    },
+    "ElectionId": {
+      "title": "ElectionId",
+      "description": "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.",
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._-]{1,128}$"
+    }
+  }
+} as const;
+
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$ref": "#/$defs/Response",
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "VTA PCS — Trustee Keys — response payload",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "complaints",
+        "keyHeld"
+      ],
+      "properties": {
+        "complaints": {
+          "type": "array",
+          "maxItems": 64,
+          "items": {
+            "$ref": "#/$defs/TrusteeIndex"
+          }
+        },
+        "keyHeld": {
+          "type": "boolean",
+          "description": "Whether the VTA now holds the trustee's key share, checked against the election key's verification key."
+        },
+        "document": {
+          "title": "ConfirmDocument",
+          "description": "The voting/trustees/confirm request, signed as the trustee. Absent once the key share is held.",
+          "type": "object",
+          "required": [
+            "id",
+            "type",
+            "issuer",
+            "recipient",
+            "issuedAt",
+            "payload",
+            "proof"
+          ],
+          "properties": {
+            "id": {
+              "type": "string",
+              "pattern": "^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$"
+            },
+            "type": {
+              "const": "https://trusttasks.org/spec/voting/trustees/confirm/0.1"
+            },
+            "issuer": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 2048,
+              "description": "The signer."
+            },
+            "recipient": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 2048,
+              "description": "The ballot box."
+            },
+            "issuedAt": {
+              "type": "string",
+              "format": "date-time"
+            },
+            "expiresAt": {
+              "type": "string",
+              "format": "date-time"
+            },
+            "payload": {
+              "type": "object",
+              "description": "That task's request payload."
+            },
+            "proof": {
+              "type": "object",
+              "description": "A Data Integrity proof by an `authentication` key of `issuer`."
+            }
+          }
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "TrusteeIndex": {
+      "title": "TrusteeIndex",
+      "description": "A trustee's index: its position in the manifest's `trustees.dids`, counting from 1.",
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 64
+    },
+    "TrusteeCeremony": {
+      "title": "TrusteeCeremony",
+      "description": "The trustees' ceremony as the board holds it: the `request` of every `trusteeStep` entry, in board order, each exactly as the ballot box received it (CONVENTIONS §9.6). Whoever acts on it verifies each step as its trustee's before taking it; nothing in it is believed for having been passed along.",
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 4224,
+      "items": {
+        "$ref": "#/$defs/SignedRequest"
+      }
+    },
+    "SignedRequest": {
+      "title": "SignedRequest",
+      "description": "A whole Trust Task request document — `id`, `type`, `issuer`, `payload` and every other member, `proof` included — exactly as the ballot box received it, never re-serialised: its proof is taken over its members, and a re-serialised copy does not reliably reproduce them. Typed as an open object so every member survives; CONVENTIONS §9.6 gives the checks that make it a trustee's step.",
+      "type": "object",
+      "minProperties": 1
+    },
+    "Manifest": {
+      "title": "Manifest",
+      "description": "What an election asks and how it is decided (VTI-VOT-010). Its digest (`manifestDigest`) is the SHA-256 multihash of its RFC 8785 (JCS) canonicalization, and every cast is bound to it (VTI-VOT-011).",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "electionId",
+        "community",
+        "questions",
+        "secrecy",
+        "roll",
+        "registrationOpensAt",
+        "votingOpensAt",
+        "votingClosesAt",
+        "revote",
+        "board",
+        "ballotBox",
+        "binding",
+        "allowEarlyClose",
+        "resultsBeforeClose",
+        "textReleaseThreshold"
+      ],
+      "properties": {
+        "electionId": {
+          "$ref": "#/$defs/ElectionId"
+        },
+        "community": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 2048,
+          "description": "The community's DID."
+        },
+        "title": {
+          "type": "string",
+          "maxLength": 512
+        },
+        "description": {
+          "type": "string",
+          "maxLength": 8192
+        },
+        "questions": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 128,
+          "items": {
+            "$ref": "#/$defs/Question"
+          }
+        },
+        "secrecy": {
+          "$ref": "#/$defs/SecrecyLevel"
+        },
+        "roll": {
+          "$ref": "#/$defs/RollRule"
+        },
+        "registrationOpensAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "votingOpensAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "votingClosesAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "revote": {
+          "$ref": "#/$defs/Revote"
+        },
+        "board": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "visibility",
+            "auditors"
+          ],
+          "properties": {
+            "visibility": {
+              "$ref": "#/$defs/BoardVisibility"
+            },
+            "auditors": {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 2048
+              },
+              "uniqueItems": true
+            }
+          }
+        },
+        "ballotBox": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 2048,
+          "description": "The DID of the voting service that holds the board."
+        },
+        "trustees": {
+          "$ref": "#/$defs/Trustees"
+        },
+        "binding": {
+          "type": "boolean",
+          "description": "Whether the community treats the result as deciding something; creating a binding election takes another administrator's consent (VTI-VOT-081)."
+        },
+        "allowEarlyClose": {
+          "type": "boolean"
+        },
+        "resultsBeforeClose": {
+          "type": "boolean",
+          "description": "Open elections only: whether running totals may be read while voting is open (VTI-VOT-061)."
+        },
+        "textReleaseThreshold": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "Counted ballots required before any text answer is disclosed (VTI-VOT-065). At least 1, and SHOULD be at least 10: a written answer can identify its author by what it says or how it is phrased, and the fewer the ballots released together, the easier that is. Where it is below 10, the disclosure a member is shown before they request a ticket MUST say so, and MUST say that a written answer may identify its author (VTI-VOT-090)."
+        }
+      }
+    },
+    "Trustees": {
+      "title": "Trustees",
+      "description": "The trustees of a sealed or tallied-encrypted election and the number of them decryption needs (VTI-VOT-062). Neither the community nor the ballot box may be one.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "dids",
+        "threshold"
+      ],
+      "properties": {
+        "dids": {
+          "type": "array",
+          "minItems": 2,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 2048
+          },
+          "uniqueItems": true
+        },
+        "threshold": {
+          "type": "integer",
+          "minimum": 2
+        }
+      }
+    },
+    "BoardVisibility": {
+      "title": "BoardVisibility",
+      "description": "`public`: anyone reads the board. `private`: the community, the auditors the manifest names and, for one cast's inclusion, the holder of its receipt (VTI-VOT-052).",
+      "type": "string",
+      "enum": [
+        "public",
+        "private"
+      ]
+    },
+    "Revote": {
+      "title": "Revote",
+      "description": "What a later, different ballot under one ticket does: `replace` the earlier one, or be refused (`refuse`) (VTI-VOT-041).",
+      "type": "string",
+      "enum": [
+        "replace",
+        "refuse"
+      ]
+    },
+    "RollRule": {
+      "title": "RollRule",
+      "description": "Who may be issued a ticket (VTI-VOT-021): the community's active members (`members`), its active members and the parties `listed` names (`membersAndListed`), only the parties `listed` names (`listed`), or the holders of a membership credential for the one DID `memberOf` names (`credential`), proven by presentation when the holder claims their ticket and never resolved when the election is created (VTI-VOT-025). `memberOf` is present exactly when `rule` is `credential`, and `listed` is never present with it.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "rule"
+      ],
+      "properties": {
+        "rule": {
+          "type": "string",
+          "enum": [
+            "members",
+            "membersAndListed",
+            "listed",
+            "credential"
+          ]
+        },
+        "listed": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 2048,
+            "description": "A DID enfranchised by name."
+          },
+          "uniqueItems": true
+        },
+        "memberOf": {
+          "type": "string",
+          "minLength": 8,
+          "maxLength": 2048,
+          "pattern": "^did:[a-z0-9]+:\\S+$",
+          "description": "The DID whose membership credential admits its holder, under the `credential` rule: this community, one of its groups, or a party that is itself an active member of this community — holding a membership credential this community issued it — such as another community, a group of another community, or a network (VTI-VOT-026). Always a DID, never a group's local identifier or name. A community refuses to create an election naming any other DID (vtc/elections/create:rollUntrusted)."
+        }
+      },
+      "dependentSchemas": {
+        "rule": {
+          "anyOf": [
+            {
+              "required": [
+                "memberOf"
+              ]
+            },
+            {
+              "properties": {
+                "rule": {
+                  "enum": [
+                    "members",
+                    "membersAndListed",
+                    "listed"
+                  ]
+                }
+              }
+            }
+          ]
+        },
+        "memberOf": {
+          "properties": {
+            "rule": {
+              "const": "credential"
+            }
+          },
+          "not": {
+            "required": [
+              "listed"
+            ]
+          }
+        }
+      }
+    },
+    "SecrecyLevel": {
+      "title": "SecrecyLevel",
+      "description": "`open`: ballots are recorded on the board as cast. `sealed`: ballots are encrypted to a jointly generated election key and decrypted after voting closes. `talliedEncrypted`: ballots are encrypted and only the totals are ever decrypted (VTI-VOT-060). The encrypted levels are cast with `voting/ballot/cast-encrypted/0.1`, under an election key the trustees generate with `voting/trustees/*` (CONVENTIONS §9).",
+      "type": "string",
+      "enum": [
+        "open",
+        "sealed",
+        "talliedEncrypted"
+      ]
+    },
+    "Question": {
+      "title": "Question",
+      "description": "One question. Tagged union over `type`.",
+      "oneOf": [
+        {
+          "title": "ChoiceQuestion",
+          "description": "Select between `minSelections` and `maxSelections` of `options`. A yes/no/abstain motion is a choice of exactly one of three.",
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "key",
+            "type",
+            "options",
+            "minSelections",
+            "maxSelections",
+            "optional"
+          ],
+          "properties": {
+            "key": {
+              "$ref": "#/$defs/Key"
+            },
+            "type": {
+              "const": "choice"
+            },
+            "text": {
+              "type": "string",
+              "maxLength": 2048
+            },
+            "options": {
+              "type": "array",
+              "minItems": 2,
+              "maxItems": 256,
+              "items": {
+                "$ref": "#/$defs/QuestionOption"
+              }
+            },
+            "minSelections": {
+              "type": "integer",
+              "minimum": 0
+            },
+            "maxSelections": {
+              "type": "integer",
+              "minimum": 1
+            },
+            "optional": {
+              "type": "boolean"
+            }
+          }
+        },
+        {
+          "title": "RankingQuestion",
+          "description": "Order `options`; a ballot ranks every option or, when `partial` is true, a prefix of them.",
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "key",
+            "type",
+            "options",
+            "partial",
+            "optional"
+          ],
+          "properties": {
+            "key": {
+              "$ref": "#/$defs/Key"
+            },
+            "type": {
+              "const": "ranking"
+            },
+            "text": {
+              "type": "string",
+              "maxLength": 2048
+            },
+            "options": {
+              "type": "array",
+              "minItems": 2,
+              "maxItems": 64,
+              "items": {
+                "$ref": "#/$defs/QuestionOption"
+              }
+            },
+            "partial": {
+              "type": "boolean"
+            },
+            "optional": {
+              "type": "boolean"
+            }
+          }
+        },
+        {
+          "title": "ScoreQuestion",
+          "description": "Give each option an integer score within [min, max].",
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "key",
+            "type",
+            "options",
+            "min",
+            "max",
+            "optional"
+          ],
+          "properties": {
+            "key": {
+              "$ref": "#/$defs/Key"
+            },
+            "type": {
+              "const": "score"
+            },
+            "text": {
+              "type": "string",
+              "maxLength": 2048
+            },
+            "options": {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 256,
+              "items": {
+                "$ref": "#/$defs/QuestionOption"
+              }
+            },
+            "min": {
+              "type": "integer"
+            },
+            "max": {
+              "type": "integer"
+            },
+            "optional": {
+              "type": "boolean"
+            }
+          }
+        },
+        {
+          "title": "TextQuestion",
+          "description": "Free text of at most `maxLength` characters.",
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "key",
+            "type",
+            "maxLength",
+            "optional"
+          ],
+          "properties": {
+            "key": {
+              "$ref": "#/$defs/Key"
+            },
+            "type": {
+              "const": "text"
+            },
+            "text": {
+              "type": "string",
+              "maxLength": 2048
+            },
+            "maxLength": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 4096
+            },
+            "optional": {
+              "type": "boolean"
+            }
+          }
+        }
+      ]
+    },
+    "Key": {
+      "title": "Key",
+      "description": "A question or option key, unique within its manifest or question.",
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._-]{1,64}$"
+    },
+    "QuestionOption": {
+      "title": "QuestionOption",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "key"
+      ],
+      "properties": {
+        "key": {
+          "$ref": "#/$defs/Key"
+        },
+        "label": {
+          "type": "string",
+          "maxLength": 512,
+          "description": "Display text. Absent from a manifest registered with a ballot box that holds no question text (VTI-VOT-014)."
+        }
+      }
+    },
+    "ElectionId": {
+      "title": "ElectionId",
+      "description": "An election's identifier, unique within its community. A closed alphabet: it appears in the ticket class label `voter/<electionId>` and is framed into every hash a cast is bound to.",
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._-]{1,128}$"
+    }
+  }
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+  typeUri: TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: PAYLOAD_SCHEMA,
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+  typeUri: RESPONSE_TYPE_URI,
+  isBearer: false,
+  isProofRequired: false,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+} as const;