@rathnasgala2/schemas 2.11.0 → 2.13.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (408) hide show
  1. package/README.md +192 -84
  2. package/THIRD_PARTY_LICENSES.json +79 -106
  3. package/diagnostics/diagnostic-map.json +443 -405
  4. package/diagnostics/diagnostic-map.public-runtime-origins.json +5 -0
  5. package/docs/catalogs/app-routes.json +2 -1
  6. package/docs/catalogs/schema-inventory.json +33 -54
  7. package/examples/valid/adapter-capability/rules.json +11 -0
  8. package/examples/valid/artifact-manifest/rules.json +156 -177
  9. package/examples/valid/build-input/rules.json +67 -63
  10. package/examples/valid/build-provenance/rules.json +151 -172
  11. package/examples/valid/deployment-intent/rules.json +152 -148
  12. package/examples/valid/deployment-observation/rules.json +24 -20
  13. package/examples/valid/deployment-receipt/rules.json +152 -148
  14. package/examples/valid/navigation/rules.json +2 -4
  15. package/examples/valid/theme-contract/rules.json +4 -1
  16. package/fixtures/boundary/adapter-capability/rules.json +16 -0
  17. package/fixtures/boundary/artifact-manifest/rules.json +195 -202
  18. package/fixtures/boundary/build-input/rules.json +99 -86
  19. package/fixtures/boundary/build-provenance/rules.json +193 -202
  20. package/fixtures/boundary/deployment-intent/rules.json +186 -140
  21. package/fixtures/boundary/deployment-observation/rules.json +68 -18
  22. package/fixtures/boundary/deployment-receipt/rules.json +186 -140
  23. package/fixtures/boundary/navigation/rules.json +2 -17
  24. package/fixtures/boundary/theme-contract/rules.json +34 -0
  25. package/fixtures/invalid/adapter-capability/SCHEMA_STRING_TOO_LONG/cases.json +11 -0
  26. package/fixtures/invalid/adapter-capability/UTF8_BYTE_LENGTH_INVALID/cases.json +11 -0
  27. package/fixtures/invalid/artifact-manifest/ASCII_BYTE_LENGTH_INVALID/cases.json +13 -0
  28. package/fixtures/invalid/artifact-manifest/INTEGER_RANGE_INVALID/cases.json +24 -0
  29. package/fixtures/invalid/artifact-manifest/REQUEST_FIELD_UNKNOWN/cases.json +19 -19
  30. package/fixtures/invalid/artifact-manifest/SCHEMA_CONSTANT_INVALID/cases.json +48 -48
  31. package/fixtures/invalid/artifact-manifest/SCHEMA_ENUM_INVALID/cases.json +11 -11
  32. package/fixtures/invalid/artifact-manifest/SCHEMA_FORMAT_INVALID/cases.json +0 -9
  33. package/fixtures/invalid/artifact-manifest/SCHEMA_NEGATED_RULE_MATCHED/cases.json +0 -11
  34. package/fixtures/invalid/artifact-manifest/SCHEMA_PATTERN_INVALID/cases.json +0 -22
  35. package/fixtures/invalid/artifact-manifest/SCHEMA_REQUIRED_FIELD_MISSING/cases.json +1105 -1105
  36. package/fixtures/invalid/artifact-manifest/SCHEMA_STRING_TOO_LONG/cases.json +4 -6
  37. package/fixtures/invalid/artifact-manifest/SCHEMA_STRING_TOO_SHORT/cases.json +9 -11
  38. package/fixtures/invalid/artifact-manifest/SCHEMA_TYPE_INVALID/cases.json +22 -31
  39. package/fixtures/invalid/artifact-manifest/UTF8_BYTE_LENGTH_INVALID/cases.json +0 -11
  40. package/fixtures/invalid/build-input/INTEGER_RANGE_INVALID/cases.json +13 -0
  41. package/fixtures/invalid/build-input/REQUEST_FIELD_UNKNOWN/cases.json +32 -32
  42. package/fixtures/invalid/build-input/SCHEMA_CONSTANT_INVALID/cases.json +11 -11
  43. package/fixtures/invalid/build-input/SCHEMA_ENUM_INVALID/cases.json +11 -11
  44. package/fixtures/invalid/build-input/SCHEMA_REQUIRED_FIELD_MISSING/cases.json +78 -78
  45. package/fixtures/invalid/build-input/SCHEMA_TYPE_INVALID/cases.json +51 -18
  46. package/fixtures/invalid/build-provenance/ASCII_BYTE_LENGTH_INVALID/cases.json +13 -0
  47. package/fixtures/invalid/build-provenance/INTEGER_RANGE_INVALID/cases.json +22 -0
  48. package/fixtures/invalid/build-provenance/REQUEST_FIELD_UNKNOWN/cases.json +56 -56
  49. package/fixtures/invalid/build-provenance/SCHEMA_CONSTANT_INVALID/cases.json +37 -37
  50. package/fixtures/invalid/build-provenance/SCHEMA_ENUM_INVALID/cases.json +11 -11
  51. package/fixtures/invalid/build-provenance/SCHEMA_FORMAT_INVALID/cases.json +0 -9
  52. package/fixtures/invalid/build-provenance/SCHEMA_NEGATED_RULE_MATCHED/cases.json +0 -11
  53. package/fixtures/invalid/build-provenance/SCHEMA_PATTERN_INVALID/cases.json +0 -22
  54. package/fixtures/invalid/build-provenance/SCHEMA_REQUIRED_FIELD_MISSING/cases.json +927 -927
  55. package/fixtures/invalid/build-provenance/SCHEMA_STRING_TOO_LONG/cases.json +9 -11
  56. package/fixtures/invalid/build-provenance/SCHEMA_STRING_TOO_SHORT/cases.json +8 -10
  57. package/fixtures/invalid/build-provenance/SCHEMA_TYPE_INVALID/cases.json +20 -25
  58. package/fixtures/invalid/build-provenance/UTF8_BYTE_LENGTH_INVALID/cases.json +0 -11
  59. package/fixtures/invalid/deployment-intent/INTEGER_RANGE_INVALID/cases.json +24 -0
  60. package/fixtures/invalid/deployment-intent/REQUEST_FIELD_UNKNOWN/cases.json +30 -30
  61. package/fixtures/invalid/deployment-intent/SCHEMA_CONSTANT_INVALID/cases.json +41 -41
  62. package/fixtures/invalid/deployment-intent/SCHEMA_ENUM_INVALID/cases.json +11 -11
  63. package/fixtures/invalid/deployment-intent/SCHEMA_FORMAT_INVALID/cases.json +0 -9
  64. package/fixtures/invalid/deployment-intent/SCHEMA_REQUIRED_FIELD_MISSING/cases.json +1209 -1209
  65. package/fixtures/invalid/deployment-intent/SCHEMA_STRING_TOO_LONG/cases.json +9 -0
  66. package/fixtures/invalid/deployment-intent/SCHEMA_STRING_TOO_SHORT/cases.json +9 -0
  67. package/fixtures/invalid/deployment-intent/SCHEMA_TYPE_INVALID/cases.json +22 -20
  68. package/fixtures/invalid/deployment-observation/INTEGER_RANGE_INVALID/cases.json +24 -0
  69. package/fixtures/invalid/deployment-observation/REQUEST_FIELD_UNKNOWN/cases.json +16 -16
  70. package/fixtures/invalid/deployment-observation/SCHEMA_FORMAT_INVALID/cases.json +0 -9
  71. package/fixtures/invalid/deployment-observation/SCHEMA_REQUIRED_FIELD_MISSING/cases.json +39 -39
  72. package/fixtures/invalid/deployment-observation/SCHEMA_STRING_TOO_LONG/cases.json +11 -0
  73. package/fixtures/invalid/deployment-observation/SCHEMA_STRING_TOO_SHORT/cases.json +11 -0
  74. package/fixtures/invalid/deployment-observation/SCHEMA_TYPE_INVALID/cases.json +11 -11
  75. package/fixtures/invalid/deployment-receipt/INTEGER_RANGE_INVALID/cases.json +24 -0
  76. package/fixtures/invalid/deployment-receipt/REQUEST_FIELD_UNKNOWN/cases.json +70 -70
  77. package/fixtures/invalid/deployment-receipt/SCHEMA_CONSTANT_INVALID/cases.json +36 -36
  78. package/fixtures/invalid/deployment-receipt/SCHEMA_ENUM_INVALID/cases.json +11 -11
  79. package/fixtures/invalid/deployment-receipt/SCHEMA_FORMAT_INVALID/cases.json +0 -9
  80. package/fixtures/invalid/deployment-receipt/SCHEMA_REQUIRED_FIELD_MISSING/cases.json +1304 -1304
  81. package/fixtures/invalid/deployment-receipt/SCHEMA_STRING_TOO_LONG/cases.json +9 -0
  82. package/fixtures/invalid/deployment-receipt/SCHEMA_STRING_TOO_SHORT/cases.json +9 -0
  83. package/fixtures/invalid/deployment-receipt/SCHEMA_TYPE_INVALID/cases.json +22 -20
  84. package/fixtures/invalid/navigation/SCHEMA_ARRAY_TOO_LONG/cases.json +0 -15
  85. package/fixtures/invalid/navigation/SCHEMA_CONSTANT_INVALID/cases.json +11 -0
  86. package/fixtures/invalid/navigation/SCHEMA_TYPE_INVALID/cases.json +0 -11
  87. package/fixtures/invalid/theme-contract/INTEGER_RANGE_INVALID/cases.json +11 -0
  88. package/fixtures/invalid/theme-contract/SCHEMA_FORMAT_INVALID/cases.json +0 -9
  89. package/fixtures/invalid/theme-contract/SCHEMA_STRING_TOO_LONG/cases.json +9 -0
  90. package/fixtures/invalid/theme-contract/SCHEMA_STRING_TOO_SHORT/cases.json +9 -0
  91. package/fixtures/manifest.json +3217 -2930
  92. package/fixtures/unknown-field/adapter-capability/rules.json +2 -0
  93. package/fixtures/unknown-field/artifact-manifest/rules.json +111 -114
  94. package/fixtures/unknown-field/build-input/rules.json +36 -32
  95. package/fixtures/unknown-field/build-provenance/rules.json +111 -114
  96. package/fixtures/unknown-field/deployment-intent/rules.json +109 -105
  97. package/fixtures/unknown-field/deployment-observation/rules.json +24 -20
  98. package/fixtures/unknown-field/deployment-receipt/rules.json +109 -105
  99. package/fixtures/unknown-field/navigation/rules.json +1 -3
  100. package/fixtures/unknown-field/theme-contract/rules.json +3 -0
  101. package/generated/browser/runtime-origins-validator-core.d.mts +10 -0
  102. package/generated/browser/runtime-origins-validator-core.mjs +35 -0
  103. package/generated/browser/validator-core.d.mts +10 -0
  104. package/generated/browser/validator-core.mjs +80 -0
  105. package/generated/typescript/contracts/artifact-manifest.d.ts +49 -48
  106. package/generated/typescript/contracts/build-input.d.ts +15 -15
  107. package/generated/typescript/contracts/build-provenance.d.ts +51 -50
  108. package/generated/typescript/contracts/deployment-intent.d.ts +6 -6
  109. package/generated/typescript/contracts/deployment-observation.d.ts +1 -1
  110. package/generated/typescript/contracts/deployment-receipt.d.ts +5 -5
  111. package/generated/typescript/contracts/navigation.d.ts +1 -1
  112. package/generated/typescript/index.js +11 -37
  113. package/openapi/http-catalog.json +14 -2
  114. package/openapi/openapi.yaml +527 -13
  115. package/package.json +19 -16
  116. package/sbom.cdx.json +23 -23
  117. package/schemas/adapter-capability.schema.json +5 -1
  118. package/schemas/appearance.schema.json +1 -1
  119. package/schemas/artifact-manifest.schema.json +15 -18
  120. package/schemas/build-input.schema.json +18 -11
  121. package/schemas/build-provenance.schema.json +15 -18
  122. package/schemas/deployment-intent.schema.json +13 -8
  123. package/schemas/deployment-observation.schema.json +10 -5
  124. package/schemas/deployment-receipt.schema.json +12 -7
  125. package/schemas/navigation.schema.json +5 -26
  126. package/schemas/theme-contract.schema.json +4 -2
  127. package/src/index.js +2 -2
  128. package/src/internal/browser-schema-validator.js +43 -0
  129. package/src/internal/format-validators.js +1 -1
  130. package/src/internal/gala-keywords.js +148 -0
  131. package/src/internal/validator-core.js +244 -108
  132. package/src/runtime-origins.js +18 -18
  133. package/types/index.d.ts +2 -2
  134. package/types/internal/browser-schema-validator.d.ts +16 -0
  135. package/types/internal/format-validators.d.ts +1 -1
  136. package/types/internal/gala-keywords.d.ts +68 -0
  137. package/types/internal/validator-core.d.ts +80 -1
  138. package/compatibility/compatibility.json +0 -594
  139. package/generated/java/src/main/java/io/gala/schema/generated/GalaSchemaRegistry.java +0 -67
  140. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityAdapterConfigurationCapabilities.java +0 -24
  141. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityAdapterIdentity.java +0 -20
  142. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityCapabilityDecision.java +0 -62
  143. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityCredentialEgressProfile.java +0 -35
  144. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityDestinationIdentity.java +0 -25
  145. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityDestinationProviderCoordinates.java +0 -19
  146. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityDocument.java +0 -52
  147. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityFilesystemProviderLimits.java +0 -32
  148. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityGithubActionsOidcOriginCatalog.java +0 -25
  149. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityHttpProviderLimits.java +0 -72
  150. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemAllowlist.java +0 -21
  151. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemAllowlistEntry.java +0 -28
  152. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemCapabilityEvidence.java +0 -42
  153. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemControlPublication.java +0 -26
  154. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemControlRow.java +0 -44
  155. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemFailureEvidence.java +0 -40
  156. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemObservationEvidence.java +0 -40
  157. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemPlatform.java +0 -25
  158. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemProbeSummary.java +0 -32
  159. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemProbeTranscript.java +0 -25
  160. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemReplacement.java +0 -22
  161. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemSurfaceIdentity.java +0 -20
  162. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityManagedExecutionBudget.java +0 -26
  163. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityPagesOidcCredentialEgress.java +0 -30
  164. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityProviderCallClassBinding.java +0 -22
  165. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityProviderCredentialEgress.java +0 -26
  166. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityProviderCredentialHeader.java +0 -24
  167. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityProviderDerivedHeader.java +0 -18
  168. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityProviderFixedHeader.java +0 -18
  169. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityProviderRequestTemplate.java +0 -39
  170. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilitySpacesControlPlaneBinding.java +0 -32
  171. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilitySpacesControlPlaneRequest.java +0 -26
  172. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilitySpacesControlPlaneRequestCatalog.java +0 -31
  173. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilitySpacesControlPlaneResponseCatalog.java +0 -20
  174. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilitySpacesWebsiteConfiguration.java +0 -24
  175. package/generated/java/src/main/java/io/gala/schema/generated/model/AppearanceColorMode.java +0 -19
  176. package/generated/java/src/main/java/io/gala/schema/generated/model/AppearanceDocument.java +0 -37
  177. package/generated/java/src/main/java/io/gala/schema/generated/model/AppearanceExtensionMap.java +0 -15
  178. package/generated/java/src/main/java/io/gala/schema/generated/model/AppearanceSemanticTokens.java +0 -15
  179. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestActionPinEvidence.java +0 -20
  180. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestArtifactLicenseConclusion.java +0 -21
  181. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestAssertedWorkload.java +0 -44
  182. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestBuildSandboxEvidence.java +0 -38
  183. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestDocument.java +0 -73
  184. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestFinding.java +0 -22
  185. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestAsset.java +0 -24
  186. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestCompositionIdentity.java +0 -25
  187. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestExcludedInput.java +0 -22
  188. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestIncludedSource.java +0 -22
  189. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestRedirect.java +0 -24
  190. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestRoute.java +0 -28
  191. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestSourceIdentity.java +0 -26
  192. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestValidationEvidence.java +0 -22
  193. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestMeasurement.java +0 -20
  194. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestPackageIdentity.java +0 -22
  195. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestRenderPolicyIdentity.java +0 -20
  196. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestReproducibleBuildRecord.java +0 -56
  197. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestWorkflowCarrierEvidence.java +0 -26
  198. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestWorkflowFileEvidence.java +0 -26
  199. package/generated/java/src/main/java/io/gala/schema/generated/model/AuthorDocument.java +0 -33
  200. package/generated/java/src/main/java/io/gala/schema/generated/model/AuthorExtensionMap.java +0 -15
  201. package/generated/java/src/main/java/io/gala/schema/generated/model/AuthorLocalizedAuthor.java +0 -20
  202. package/generated/java/src/main/java/io/gala/schema/generated/model/AuthorSocialLink.java +0 -19
  203. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputAdapterIdentity.java +0 -20
  204. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputAppearanceNormalized.java +0 -33
  205. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputAuthorNormalized.java +0 -31
  206. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputBuildPackages.java +0 -25
  207. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputColorMode.java +0 -19
  208. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputContentBuildRecord.java +0 -33
  209. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputContentFrontmatterNormalized.java +0 -44
  210. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputDestinationCapabilityProfile.java +0 -20
  211. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputDocument.java +0 -51
  212. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputLocalizedAuthor.java +0 -20
  213. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputModuleBuildSelection.java +0 -15
  214. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputNavigationItem.java +0 -23
  215. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputNavigationLeaf.java +0 -22
  216. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputNavigationNormalized.java +0 -21
  217. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputPackageIdentity.java +0 -22
  218. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputPublicationNormalized.java +0 -39
  219. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputRenderPolicyIdentity.java +0 -20
  220. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputRenderableBody.java +0 -26
  221. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputRepositorySnapshot.java +0 -22
  222. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputResolvedFile.java +0 -18
  223. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputResolvedMedia.java +0 -20
  224. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputSemanticTokens.java +0 -15
  225. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputSocialLink.java +0 -19
  226. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceActionPinEvidence.java +0 -20
  227. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceArtifactLicenseConclusion.java +0 -21
  228. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceAssertedWorkload.java +0 -44
  229. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceBuildSandboxEvidence.java +0 -38
  230. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceDocument.java +0 -69
  231. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceFinding.java +0 -22
  232. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestAsset.java +0 -24
  233. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestCompositionIdentity.java +0 -25
  234. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestExcludedInput.java +0 -22
  235. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestIncludedSource.java +0 -22
  236. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestRedirect.java +0 -24
  237. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestRoute.java +0 -28
  238. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestSourceIdentity.java +0 -26
  239. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestValidationEvidence.java +0 -22
  240. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceMeasurement.java +0 -20
  241. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenancePackageIdentity.java +0 -22
  242. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceRenderPolicyIdentity.java +0 -20
  243. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceReproducibleBuildRecord.java +0 -56
  244. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceWorkflowCarrierEvidence.java +0 -26
  245. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceWorkflowFileEvidence.java +0 -26
  246. package/generated/java/src/main/java/io/gala/schema/generated/model/ContentFrontmatterDocument.java +0 -50
  247. package/generated/java/src/main/java/io/gala/schema/generated/model/ContentFrontmatterExtensionMap.java +0 -15
  248. package/generated/java/src/main/java/io/gala/schema/generated/model/ContentFrontmatterMediaRef.java +0 -20
  249. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentActivationBasis.java +0 -20
  250. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentActivationDetectionObservation.java +0 -33
  251. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentActivationDetectionPlan.java +0 -44
  252. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentActivationDetectionProbe.java +0 -52
  253. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentAdapterIdentity.java +0 -20
  254. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentCancellationFinalizationEvidence.java +0 -41
  255. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDeadlineFinalizationEvidence.java +0 -39
  256. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDeadlineFinalizationStream.java +0 -22
  257. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDeploymentPolicyDecision.java +0 -75
  258. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDestinationIdentity.java +0 -25
  259. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDestinationMutationAuthority.java +0 -36
  260. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDestinationProviderCoordinates.java +0 -19
  261. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDocument.java +0 -136
  262. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentExpectedRedirectHop.java +0 -23
  263. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentObservedVerificationHeader.java +0 -19
  264. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPackageIdentity.java +0 -22
  265. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPagesInterveningRunAttempt.java +0 -20
  266. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPagesReconciliationCommand.java +0 -48
  267. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPagesReconciliationRecovery.java +0 -41
  268. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPagesRunAttemptGapProof.java +0 -27
  269. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPublicGenerationMarkerPayload.java +0 -24
  270. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPublicProbeObservation.java +0 -54
  271. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentRecognizedPriorRouteContract.java +0 -30
  272. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentRenderPolicyIdentity.java +0 -20
  273. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentReproducibleBuildRecord.java +0 -56
  274. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentSupersessionFinalizationEvidence.java +0 -45
  275. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentVerificationHeaderExpectation.java +0 -18
  276. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentVerificationPlanTarget.java +0 -52
  277. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationActivationDetectionObservation.java +0 -33
  278. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationActivationDetectionProbe.java +0 -52
  279. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationAdapterIdentity.java +0 -20
  280. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationCancellationFinalizationEvidence.java +0 -41
  281. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationDeadlineFinalizationEvidence.java +0 -39
  282. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationDeadlineFinalizationStream.java +0 -22
  283. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationDestinationIdentity.java +0 -25
  284. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationDestinationProviderCoordinates.java +0 -19
  285. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationDocument.java +0 -57
  286. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationExpectedRedirectHop.java +0 -23
  287. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationObservedVerificationHeader.java +0 -19
  288. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationPackageIdentity.java +0 -22
  289. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationPublicProbeObservation.java +0 -54
  290. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationRecognizedPriorRouteContract.java +0 -30
  291. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationRenderPolicyIdentity.java +0 -20
  292. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationSupersessionFinalizationEvidence.java +0 -45
  293. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationVerificationHeaderExpectation.java +0 -18
  294. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationVerificationPlanTarget.java +0 -52
  295. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptActivationBasis.java +0 -20
  296. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptActivationDetectionObservation.java +0 -33
  297. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptActivationDetectionPlan.java +0 -44
  298. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptActivationDetectionProbe.java +0 -52
  299. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptAdapterIdentity.java +0 -20
  300. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptCancellationFinalizationEvidence.java +0 -41
  301. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeadlineFinalizationEvidence.java +0 -39
  302. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeadlineFinalizationStream.java +0 -22
  303. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentAttempt.java +0 -38
  304. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentFailure.java +0 -24
  305. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentObservation.java +0 -53
  306. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentPolicyDecision.java +0 -75
  307. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentStageEvidence.java +0 -36
  308. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentStageInput.java +0 -26
  309. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentStageObservationEvidenceReference.java +0 -18
  310. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentStageResult.java +0 -31
  311. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDestinationIdentity.java +0 -25
  312. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDestinationMutationAuthority.java +0 -36
  313. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDestinationProviderCoordinates.java +0 -19
  314. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDocument.java +0 -105
  315. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptExpectedRedirectHop.java +0 -23
  316. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptFinding.java +0 -22
  317. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptObservedVerificationHeader.java +0 -19
  318. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPackageIdentity.java +0 -22
  319. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPagesInterveningRunAttempt.java +0 -20
  320. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPagesReconciliationCommand.java +0 -48
  321. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPagesReconciliationRecovery.java +0 -41
  322. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPagesRunAttemptGapProof.java +0 -27
  323. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPublicGenerationMarkerPayload.java +0 -24
  324. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPublicProbeObservation.java +0 -54
  325. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptRecognizedPriorRouteContract.java +0 -30
  326. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptRenderPolicyIdentity.java +0 -20
  327. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptReproducibleBuildRecord.java +0 -56
  328. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptSupersessionFinalizationEvidence.java +0 -45
  329. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptVerificationHeaderExpectation.java +0 -18
  330. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptVerificationPlanTarget.java +0 -52
  331. package/generated/java/src/main/java/io/gala/schema/generated/model/EventEnvelopeDocument.java +0 -46
  332. package/generated/java/src/main/java/io/gala/schema/generated/model/EventEnvelopeRegisteredEventPayload.java +0 -26
  333. package/generated/java/src/main/java/io/gala/schema/generated/model/LockDependencyEdge.java +0 -18
  334. package/generated/java/src/main/java/io/gala/schema/generated/model/LockDocument.java +0 -39
  335. package/generated/java/src/main/java/io/gala/schema/generated/model/LockLockedPackage.java +0 -26
  336. package/generated/java/src/main/java/io/gala/schema/generated/model/LockLockedTemplate.java +0 -28
  337. package/generated/java/src/main/java/io/gala/schema/generated/model/LockPackageIdentity.java +0 -22
  338. package/generated/java/src/main/java/io/gala/schema/generated/model/NavigationDocument.java +0 -25
  339. package/generated/java/src/main/java/io/gala/schema/generated/model/NavigationExtensionMap.java +0 -15
  340. package/generated/java/src/main/java/io/gala/schema/generated/model/NavigationNavigationItem.java +0 -23
  341. package/generated/java/src/main/java/io/gala/schema/generated/model/NavigationNavigationLeaf.java +0 -23
  342. package/generated/java/src/main/java/io/gala/schema/generated/model/ProblemDocument.java +0 -37
  343. package/generated/java/src/main/java/io/gala/schema/generated/model/ProblemFieldError.java +0 -18
  344. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicGenerationMarkerDocument.java +0 -24
  345. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicRuntimeOriginsDocument.java +0 -44
  346. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicationDocument.java +0 -41
  347. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicationExtensionMap.java +0 -15
  348. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicationFooterCard.java +0 -23
  349. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicationPublicationProfile.java +0 -18
  350. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicationSocialLink.java +0 -19
  351. package/generated/java/src/main/java/io/gala/schema/generated/model/RepositoryAssetRoot.java +0 -16
  352. package/generated/java/src/main/java/io/gala/schema/generated/model/RepositoryContentRoot.java +0 -23
  353. package/generated/java/src/main/java/io/gala/schema/generated/model/RepositoryDocument.java +0 -41
  354. package/generated/java/src/main/java/io/gala/schema/generated/model/RepositoryExtensionMap.java +0 -15
  355. package/generated/java/src/main/java/io/gala/schema/generated/model/RepositoryGeneratedRoot.java +0 -20
  356. package/generated/java/src/main/java/io/gala/schema/generated/model/TemplateCompositionDocument.java +0 -18
  357. package/generated/java/src/main/java/io/gala/schema/generated/model/ThemeContractDocument.java +0 -53
  358. package/generated/java/src/main/java/io/gala/schema/generated/model/ThemeContractPassiveAsset.java +0 -24
  359. package/generated/java/src/main/java/io/gala/schema/generated/model/ThemeContractThemeBudgets.java +0 -20
  360. package/generated/java/src/main/java/io/gala/schema/generated/model/ThemeContractThemeToken.java +0 -22
  361. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/adapter-capability.schema.json +0 -2689
  362. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/appearance.schema.json +0 -226
  363. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/artifact-manifest.schema.json +0 -1063
  364. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/author.schema.json +0 -231
  365. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/build-input.schema.json +0 -866
  366. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/build-provenance.schema.json +0 -937
  367. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/content-frontmatter.schema.json +0 -241
  368. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/deployment-intent.schema.json +0 -2067
  369. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/deployment-observation.schema.json +0 -1654
  370. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/deployment-receipt.schema.json +0 -5546
  371. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/event-envelope.schema.json +0 -195
  372. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/lock.schema.json +0 -326
  373. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/navigation.schema.json +0 -229
  374. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/problem.schema.json +0 -194
  375. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/public-generation-marker.schema.json +0 -142
  376. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/public-runtime-origins.schema.json +0 -183
  377. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/publication.schema.json +0 -248
  378. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/repository.schema.json +0 -219
  379. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/template-composition.schema.json +0 -133
  380. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/theme-contract.schema.json +0 -850
  381. package/generated/typescript/validator-core.cjs +0 -17
  382. package/openapi/generator/spring.json +0 -22
  383. package/openapi/generator/typescript-fetch.json +0 -19
  384. package/openapi/source/authentication.yaml +0 -557
  385. package/openapi/source/callbacks.yaml +0 -332
  386. package/openapi/source/components.yaml +0 -5670
  387. package/openapi/source/github.yaml +0 -351
  388. package/openapi/source/internal.yaml +0 -71
  389. package/openapi/source/membership-invitations.yaml +0 -203
  390. package/openapi/source/organizations.yaml +0 -11144
  391. package/openapi/source/root.yaml +0 -20
  392. package/openapi/source/self.yaml +0 -1940
  393. package/openapi/source/session.yaml +0 -308
  394. package/openapi/source/workloads.yaml +0 -744
  395. package/src/internal/build-artifact-semantics.js +0 -4391
  396. package/src/internal/deployment-record-semantics.js +0 -7567
  397. package/src/internal/deployment-stage-semantics.js +0 -1207
  398. package/src/internal/http-problem-contract.js +0 -35
  399. package/src/internal/managed-evidence-journal.js +0 -160
  400. package/src/internal/public-runtime-origins.js +0 -143
  401. package/src/internal/theme-composition-semantics.js +0 -2441
  402. package/types/internal/build-artifact-semantics.d.ts +0 -77
  403. package/types/internal/deployment-record-semantics.d.ts +0 -313
  404. package/types/internal/deployment-stage-semantics.d.ts +0 -108
  405. package/types/internal/http-problem-contract.d.ts +0 -4
  406. package/types/internal/managed-evidence-journal.d.ts +0 -26
  407. package/types/internal/public-runtime-origins.d.ts +0 -22
  408. package/types/internal/theme-composition-semantics.d.ts +0 -143
package/fixtures/invalid/artifact-manifest/SCHEMA_REQUIRED_FIELD_MISSING/cases.json CHANGED
@@ -488,6 +488,113 @@
488
488
  },
489
489
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
490
490
  },
491
+ {
492
+ "caseId": "artifact-manifest-invalid-06782115b3605d7b",
493
+ "coveredRuleIds": [
494
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:basePath"
495
+ ],
496
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
497
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
498
+ "keyword": "required",
499
+ "instance": {
500
+ "repositoryId": "1",
501
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
502
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
503
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
504
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
505
+ "contractVersion": "2.0.0",
506
+ "builder": {
507
+ "package": "@rathnasgala2/publish-action",
508
+ "version": "2.0.0",
509
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
510
+ "registry": "https://fixture-1.example.com/"
511
+ },
512
+ "schemas": {
513
+ "package": "@rathnasgala2/schemas",
514
+ "version": "2.0.0",
515
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
516
+ "registry": "https://fixture-1.example.com/"
517
+ },
518
+ "template": {
519
+ "package": "@rathnasgala2/template",
520
+ "version": "2.0.0",
521
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
522
+ "registry": "https://fixture-1.example.com/"
523
+ },
524
+ "theme": {
525
+ "package": "@rathnasgala2/theme-default",
526
+ "version": "2.0.0",
527
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
528
+ "registry": "https://fixture-1.example.com/"
529
+ },
530
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
531
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
532
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
533
+ "baseUrl": "https://fixture-1.example.com/",
534
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
535
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
536
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
537
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
538
+ "renderPolicy": {
539
+ "name": "gala-render-policy",
540
+ "version": "2.0.0",
541
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
542
+ },
543
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
544
+ },
545
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
546
+ },
547
+ {
548
+ "caseId": "artifact-manifest-invalid-072c805a0153e9ec",
549
+ "coveredRuleIds": [
550
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:builder"
551
+ ],
552
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
553
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
554
+ "keyword": "required",
555
+ "instance": {
556
+ "repositoryId": "1",
557
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
558
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
559
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
560
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
561
+ "contractVersion": "2.0.0",
562
+ "schemas": {
563
+ "package": "@rathnasgala2/schemas",
564
+ "version": "2.0.0",
565
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
566
+ "registry": "https://fixture-1.example.com/"
567
+ },
568
+ "template": {
569
+ "package": "@rathnasgala2/template",
570
+ "version": "2.0.0",
571
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
572
+ "registry": "https://fixture-1.example.com/"
573
+ },
574
+ "theme": {
575
+ "package": "@rathnasgala2/theme-default",
576
+ "version": "2.0.0",
577
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
578
+ "registry": "https://fixture-1.example.com/"
579
+ },
580
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
581
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
582
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
583
+ "baseUrl": "https://fixture-1.example.com/",
584
+ "basePath": "/fixture-1",
585
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
586
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
587
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
588
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
589
+ "renderPolicy": {
590
+ "name": "gala-render-policy",
591
+ "version": "2.0.0",
592
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
593
+ },
594
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
595
+ },
596
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
597
+ },
491
598
  {
492
599
  "caseId": "artifact-manifest-invalid-075615ffb6db376c",
493
600
  "coveredRuleIds": [
@@ -735,12 +842,54 @@
735
842
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
736
843
  },
737
844
  {
738
- "caseId": "artifact-manifest-invalid-0bfb49f89247ed3c",
845
+ "caseId": "artifact-manifest-invalid-0e1a5e1b5757a9f3",
846
+ "coveredRuleIds": [
847
+ "artifact-manifest:#/$defs/assertedWorkload:required:workflowTriggerCommit"
848
+ ],
849
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
850
+ "schemaPointer": "#/$defs/assertedWorkload",
851
+ "keyword": "required",
852
+ "instance": {
853
+ "repository": "fixture-owner/fixture-repository",
854
+ "repositoryId": "1",
855
+ "repositoryOwner": "fixture-1",
856
+ "repositoryOwnerId": "1",
857
+ "ref": "fixture-1",
858
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
859
+ "runId": "1",
860
+ "runNumber": "1",
861
+ "runAttempt": 1,
862
+ "eventName": "create",
863
+ "actor": "fixture-1",
864
+ "actorId": "1",
865
+ "callerPath": ".github/workflows/gala-publish-v2.yml",
866
+ "verificationState": "pending-authorize-oidc"
867
+ },
868
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
869
+ },
870
+ {
871
+ "caseId": "artifact-manifest-invalid-0fc634cf7816c6c9",
872
+ "coveredRuleIds": [
873
+ "artifact-manifest:#/$defs/manifestAsset:required:byteLength"
874
+ ],
875
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
876
+ "schemaPointer": "#/$defs/manifestAsset",
877
+ "keyword": "required",
878
+ "instance": {
879
+ "path": "content/fixture-1.md",
880
+ "mediaType": "text/html; charset=utf-8",
881
+ "sha256": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
882
+ "immutable": false
883
+ },
884
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
885
+ },
886
+ {
887
+ "caseId": "artifact-manifest-invalid-104d11871cdfea53",
739
888
  "coveredRuleIds": [
740
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:policyReleaseId"
889
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:baseUrl"
741
890
  ],
742
891
  "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
743
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
892
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
744
893
  "keyword": "required",
745
894
  "instance": {
746
895
  "repositoryId": "1",
@@ -776,9 +925,9 @@
776
925
  "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
777
926
  "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
778
927
  "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
779
- "baseUrl": "https://fixture-1.example.com/",
780
928
  "basePath": "/fixture-1",
781
929
  "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
930
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
782
931
  "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
783
932
  "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
784
933
  "renderPolicy": {
@@ -791,44 +940,16 @@
791
940
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
792
941
  },
793
942
  {
794
- "caseId": "artifact-manifest-invalid-0e1a5e1b5757a9f3",
795
- "coveredRuleIds": [
796
- "artifact-manifest:#/$defs/assertedWorkload:required:workflowTriggerCommit"
797
- ],
798
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
799
- "schemaPointer": "#/$defs/assertedWorkload",
800
- "keyword": "required",
801
- "instance": {
802
- "repository": "fixture-owner/fixture-repository",
803
- "repositoryId": "1",
804
- "repositoryOwner": "fixture-1",
805
- "repositoryOwnerId": "1",
806
- "ref": "fixture-1",
807
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
808
- "runId": "1",
809
- "runNumber": "1",
810
- "runAttempt": 1,
811
- "eventName": "create",
812
- "actor": "fixture-1",
813
- "actorId": "1",
814
- "callerPath": ".github/workflows/gala-publish-v2.yml",
815
- "verificationState": "pending-authorize-oidc"
816
- },
817
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
818
- },
819
- {
820
- "caseId": "artifact-manifest-invalid-0fc634cf7816c6c9",
943
+ "caseId": "artifact-manifest-invalid-106ee9e15319c9b0",
821
944
  "coveredRuleIds": [
822
- "artifact-manifest:#/$defs/manifestAsset:required:byteLength"
945
+ "artifact-manifest:#/$defs/manifestRenderPolicyIdentity:required:name"
823
946
  ],
824
947
  "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
825
- "schemaPointer": "#/$defs/manifestAsset",
948
+ "schemaPointer": "#/$defs/manifestRenderPolicyIdentity",
826
949
  "keyword": "required",
827
950
  "instance": {
828
- "path": "content/fixture-1.md",
829
- "mediaType": "text/html; charset=utf-8",
830
- "sha256": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
831
- "immutable": false
951
+ "version": "2.0.0",
952
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
832
953
  },
833
954
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
834
955
  },
@@ -1580,6 +1701,20 @@
1580
1701
  },
1581
1702
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
1582
1703
  },
1704
+ {
1705
+ "caseId": "artifact-manifest-invalid-1ff86d665fb62d33",
1706
+ "coveredRuleIds": [
1707
+ "artifact-manifest:#/$defs/manifestRenderPolicyIdentity:required:version"
1708
+ ],
1709
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
1710
+ "schemaPointer": "#/$defs/manifestRenderPolicyIdentity",
1711
+ "keyword": "required",
1712
+ "instance": {
1713
+ "name": "gala-render-policy",
1714
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
1715
+ },
1716
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
1717
+ },
1583
1718
  {
1584
1719
  "caseId": "artifact-manifest-invalid-20b89ba839344b33",
1585
1720
  "coveredRuleIds": ["artifact-manifest:#/$defs/finding:required:messageKey"],
@@ -1610,6 +1745,62 @@
1610
1745
  },
1611
1746
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
1612
1747
  },
1748
+ {
1749
+ "caseId": "artifact-manifest-invalid-21839838719cd4ea",
1750
+ "coveredRuleIds": [
1751
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:buildEpoch"
1752
+ ],
1753
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
1754
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
1755
+ "keyword": "required",
1756
+ "instance": {
1757
+ "repositoryId": "1",
1758
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
1759
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
1760
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1761
+ "contractVersion": "2.0.0",
1762
+ "builder": {
1763
+ "package": "@rathnasgala2/publish-action",
1764
+ "version": "2.0.0",
1765
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1766
+ "registry": "https://fixture-1.example.com/"
1767
+ },
1768
+ "schemas": {
1769
+ "package": "@rathnasgala2/schemas",
1770
+ "version": "2.0.0",
1771
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1772
+ "registry": "https://fixture-1.example.com/"
1773
+ },
1774
+ "template": {
1775
+ "package": "@rathnasgala2/template",
1776
+ "version": "2.0.0",
1777
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1778
+ "registry": "https://fixture-1.example.com/"
1779
+ },
1780
+ "theme": {
1781
+ "package": "@rathnasgala2/theme-default",
1782
+ "version": "2.0.0",
1783
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1784
+ "registry": "https://fixture-1.example.com/"
1785
+ },
1786
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1787
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1788
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1789
+ "baseUrl": "https://fixture-1.example.com/",
1790
+ "basePath": "/fixture-1",
1791
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1792
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
1793
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1794
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1795
+ "renderPolicy": {
1796
+ "name": "gala-render-policy",
1797
+ "version": "2.0.0",
1798
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
1799
+ },
1800
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
1801
+ },
1802
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
1803
+ },
1613
1804
  {
1614
1805
  "caseId": "artifact-manifest-invalid-21d29b62a06ef3ef",
1615
1806
  "coveredRuleIds": [
@@ -2027,20 +2218,6 @@
2027
2218
  },
2028
2219
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
2029
2220
  },
2030
- {
2031
- "caseId": "artifact-manifest-invalid-24c3eb0c26ff4377",
2032
- "coveredRuleIds": [
2033
- "artifact-manifest:#/$defs/renderPolicyIdentity:required:name"
2034
- ],
2035
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
2036
- "schemaPointer": "#/$defs/renderPolicyIdentity",
2037
- "keyword": "required",
2038
- "instance": {
2039
- "version": "2.0.0",
2040
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
2041
- },
2042
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
2043
- },
2044
2221
  {
2045
2222
  "caseId": "artifact-manifest-invalid-25a30226d0c071b9",
2046
2223
  "coveredRuleIds": [
@@ -2260,59 +2437,14 @@
2260
2437
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
2261
2438
  },
2262
2439
  {
2263
- "caseId": "artifact-manifest-invalid-29609b6c9889096c",
2440
+ "caseId": "artifact-manifest-invalid-25fc36e6cd6d9be0",
2264
2441
  "coveredRuleIds": [
2265
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:sourceCommit"
2442
+ "artifact-manifest:#/$defs/manifestRenderPolicyIdentity:required:digest"
2266
2443
  ],
2267
2444
  "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
2268
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
2445
+ "schemaPointer": "#/$defs/manifestRenderPolicyIdentity",
2269
2446
  "keyword": "required",
2270
- "instance": {
2271
- "repositoryId": "1",
2272
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
2273
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2274
- "buildEpoch": "2026-09-13T12:00:00.000Z",
2275
- "contractVersion": "2.0.0",
2276
- "builder": {
2277
- "package": "@rathnasgala2/publish-action",
2278
- "version": "2.0.0",
2279
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2280
- "registry": "https://fixture-1.example.com/"
2281
- },
2282
- "schemas": {
2283
- "package": "@rathnasgala2/schemas",
2284
- "version": "2.0.0",
2285
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2286
- "registry": "https://fixture-1.example.com/"
2287
- },
2288
- "template": {
2289
- "package": "@rathnasgala2/template",
2290
- "version": "2.0.0",
2291
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2292
- "registry": "https://fixture-1.example.com/"
2293
- },
2294
- "theme": {
2295
- "package": "@rathnasgala2/theme-default",
2296
- "version": "2.0.0",
2297
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2298
- "registry": "https://fixture-1.example.com/"
2299
- },
2300
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2301
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2302
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2303
- "baseUrl": "https://fixture-1.example.com/",
2304
- "basePath": "/fixture-1",
2305
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2306
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
2307
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2308
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2309
- "renderPolicy": {
2310
- "name": "gala-render-policy",
2311
- "version": "2.0.0",
2312
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
2313
- },
2314
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
2315
- },
2447
+ "instance": { "name": "gala-render-policy", "version": "2.0.0" },
2316
2448
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
2317
2449
  },
2318
2450
  {
@@ -3114,17 +3246,6 @@
3114
3246
  },
3115
3247
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3116
3248
  },
3117
- {
3118
- "caseId": "artifact-manifest-invalid-3247a6c298cd4063",
3119
- "coveredRuleIds": [
3120
- "artifact-manifest:#/$defs/renderPolicyIdentity:required:digest"
3121
- ],
3122
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
3123
- "schemaPointer": "#/$defs/renderPolicyIdentity",
3124
- "keyword": "required",
3125
- "instance": { "name": "gala-render-policy", "version": "2.0.0" },
3126
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3127
- },
3128
3249
  {
3129
3250
  "caseId": "artifact-manifest-invalid-34e8107e68bfc3ef",
3130
3251
  "coveredRuleIds": ["artifact-manifest:#:required:artifactId"],
@@ -3329,62 +3450,6 @@
3329
3450
  },
3330
3451
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3331
3452
  },
3332
- {
3333
- "caseId": "artifact-manifest-invalid-37f29f62f7a8ba4d",
3334
- "coveredRuleIds": [
3335
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:workflowIdentity"
3336
- ],
3337
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
3338
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
3339
- "keyword": "required",
3340
- "instance": {
3341
- "repositoryId": "1",
3342
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
3343
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
3344
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3345
- "buildEpoch": "2026-09-13T12:00:00.000Z",
3346
- "contractVersion": "2.0.0",
3347
- "builder": {
3348
- "package": "@rathnasgala2/publish-action",
3349
- "version": "2.0.0",
3350
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3351
- "registry": "https://fixture-1.example.com/"
3352
- },
3353
- "schemas": {
3354
- "package": "@rathnasgala2/schemas",
3355
- "version": "2.0.0",
3356
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3357
- "registry": "https://fixture-1.example.com/"
3358
- },
3359
- "template": {
3360
- "package": "@rathnasgala2/template",
3361
- "version": "2.0.0",
3362
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3363
- "registry": "https://fixture-1.example.com/"
3364
- },
3365
- "theme": {
3366
- "package": "@rathnasgala2/theme-default",
3367
- "version": "2.0.0",
3368
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3369
- "registry": "https://fixture-1.example.com/"
3370
- },
3371
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3372
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3373
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3374
- "baseUrl": "https://fixture-1.example.com/",
3375
- "basePath": "/fixture-1",
3376
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3377
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
3378
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3379
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3380
- "renderPolicy": {
3381
- "name": "gala-render-policy",
3382
- "version": "2.0.0",
3383
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
3384
- }
3385
- },
3386
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3387
- },
3388
3453
  {
3389
3454
  "caseId": "artifact-manifest-invalid-3804a6fbfc30684a",
3390
3455
  "coveredRuleIds": ["artifact-manifest:#/$defs/measurement:required:value"],
@@ -3806,62 +3871,6 @@
3806
3871
  },
3807
3872
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3808
3873
  },
3809
- {
3810
- "caseId": "artifact-manifest-invalid-3b20bddd8ce50bfa",
3811
- "coveredRuleIds": [
3812
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:packageReleaseCatalogDigest"
3813
- ],
3814
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
3815
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
3816
- "keyword": "required",
3817
- "instance": {
3818
- "repositoryId": "1",
3819
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
3820
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
3821
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3822
- "buildEpoch": "2026-09-13T12:00:00.000Z",
3823
- "contractVersion": "2.0.0",
3824
- "builder": {
3825
- "package": "@rathnasgala2/publish-action",
3826
- "version": "2.0.0",
3827
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3828
- "registry": "https://fixture-1.example.com/"
3829
- },
3830
- "schemas": {
3831
- "package": "@rathnasgala2/schemas",
3832
- "version": "2.0.0",
3833
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3834
- "registry": "https://fixture-1.example.com/"
3835
- },
3836
- "template": {
3837
- "package": "@rathnasgala2/template",
3838
- "version": "2.0.0",
3839
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3840
- "registry": "https://fixture-1.example.com/"
3841
- },
3842
- "theme": {
3843
- "package": "@rathnasgala2/theme-default",
3844
- "version": "2.0.0",
3845
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3846
- "registry": "https://fixture-1.example.com/"
3847
- },
3848
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3849
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3850
- "baseUrl": "https://fixture-1.example.com/",
3851
- "basePath": "/fixture-1",
3852
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3853
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
3854
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3855
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3856
- "renderPolicy": {
3857
- "name": "gala-render-policy",
3858
- "version": "2.0.0",
3859
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
3860
- },
3861
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
3862
- },
3863
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3864
- },
3865
3874
  {
3866
3875
  "caseId": "artifact-manifest-invalid-3da28a355852e657",
3867
3876
  "coveredRuleIds": [
@@ -4083,62 +4092,6 @@
4083
4092
  },
4084
4093
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4085
4094
  },
4086
- {
4087
- "caseId": "artifact-manifest-invalid-3ed0107163efc670",
4088
- "coveredRuleIds": [
4089
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:basePath"
4090
- ],
4091
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
4092
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
4093
- "keyword": "required",
4094
- "instance": {
4095
- "repositoryId": "1",
4096
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
4097
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
4098
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4099
- "buildEpoch": "2026-09-13T12:00:00.000Z",
4100
- "contractVersion": "2.0.0",
4101
- "builder": {
4102
- "package": "@rathnasgala2/publish-action",
4103
- "version": "2.0.0",
4104
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4105
- "registry": "https://fixture-1.example.com/"
4106
- },
4107
- "schemas": {
4108
- "package": "@rathnasgala2/schemas",
4109
- "version": "2.0.0",
4110
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4111
- "registry": "https://fixture-1.example.com/"
4112
- },
4113
- "template": {
4114
- "package": "@rathnasgala2/template",
4115
- "version": "2.0.0",
4116
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4117
- "registry": "https://fixture-1.example.com/"
4118
- },
4119
- "theme": {
4120
- "package": "@rathnasgala2/theme-default",
4121
- "version": "2.0.0",
4122
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4123
- "registry": "https://fixture-1.example.com/"
4124
- },
4125
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4126
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4127
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4128
- "baseUrl": "https://fixture-1.example.com/",
4129
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4130
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
4131
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4132
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4133
- "renderPolicy": {
4134
- "name": "gala-render-policy",
4135
- "version": "2.0.0",
4136
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
4137
- },
4138
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
4139
- },
4140
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4141
- },
4142
4095
  {
4143
4096
  "caseId": "artifact-manifest-invalid-402678170006dd16",
4144
4097
  "coveredRuleIds": ["artifact-manifest:#:required:manifestDigest"],
@@ -4550,54 +4503,110 @@
4550
4503
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4551
4504
  },
4552
4505
  {
4553
- "caseId": "artifact-manifest-invalid-4732d9a0630f465e",
4554
- "coveredRuleIds": ["artifact-manifest:#/$defs/finding:required:pointer"],
4555
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
4556
- "schemaPointer": "#/$defs/finding",
4557
- "keyword": "required",
4558
- "instance": {
4559
- "code": "fixture-1",
4560
- "severity": "error",
4561
- "messageKey": "fixture-1"
4562
- },
4563
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4564
- },
4565
- {
4566
- "caseId": "artifact-manifest-invalid-477c27d397ef1015",
4506
+ "caseId": "artifact-manifest-invalid-4494d39fa0f3a668",
4567
4507
  "coveredRuleIds": [
4568
- "artifact-manifest:#/$defs/buildProvenance:required:capabilityDecisionDigest"
4508
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:dependencyLockDigest"
4569
4509
  ],
4570
4510
  "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
4571
- "schemaPointer": "#/$defs/buildProvenance",
4511
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
4572
4512
  "keyword": "required",
4573
4513
  "instance": {
4574
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
4575
- "schemaVersion": "2.0.0",
4576
- "assertedWorkload": {
4577
- "repository": "fixture-owner/fixture-repository",
4578
- "repositoryId": "1",
4579
- "repositoryOwner": "fixture-1",
4580
- "repositoryOwnerId": "1",
4581
- "ref": "fixture-1",
4582
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
4583
- "workflowTriggerCommit": "sha1:0000000000000000000000000000000000000001",
4584
- "runId": "1",
4585
- "runNumber": "1",
4586
- "runAttempt": 1,
4587
- "eventName": "create",
4588
- "actor": "fixture-1",
4589
- "actorId": "1",
4590
- "callerPath": ".github/workflows/gala-publish-v2.yml",
4591
- "verificationState": "pending-authorize-oidc"
4592
- },
4593
- "requiredOidcClaims": [
4594
- "actor",
4595
- "actor_id",
4596
- "aud",
4597
- "event_name",
4598
- "iss",
4599
- "job_workflow_ref",
4600
- "job_workflow_sha",
4514
+ "repositoryId": "1",
4515
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
4516
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
4517
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4518
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
4519
+ "contractVersion": "2.0.0",
4520
+ "builder": {
4521
+ "package": "@rathnasgala2/publish-action",
4522
+ "version": "2.0.0",
4523
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4524
+ "registry": "https://fixture-1.example.com/"
4525
+ },
4526
+ "schemas": {
4527
+ "package": "@rathnasgala2/schemas",
4528
+ "version": "2.0.0",
4529
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4530
+ "registry": "https://fixture-1.example.com/"
4531
+ },
4532
+ "template": {
4533
+ "package": "@rathnasgala2/template",
4534
+ "version": "2.0.0",
4535
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4536
+ "registry": "https://fixture-1.example.com/"
4537
+ },
4538
+ "theme": {
4539
+ "package": "@rathnasgala2/theme-default",
4540
+ "version": "2.0.0",
4541
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4542
+ "registry": "https://fixture-1.example.com/"
4543
+ },
4544
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4545
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4546
+ "baseUrl": "https://fixture-1.example.com/",
4547
+ "basePath": "/fixture-1",
4548
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4549
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
4550
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4551
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4552
+ "renderPolicy": {
4553
+ "name": "gala-render-policy",
4554
+ "version": "2.0.0",
4555
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
4556
+ },
4557
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
4558
+ },
4559
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4560
+ },
4561
+ {
4562
+ "caseId": "artifact-manifest-invalid-4732d9a0630f465e",
4563
+ "coveredRuleIds": ["artifact-manifest:#/$defs/finding:required:pointer"],
4564
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
4565
+ "schemaPointer": "#/$defs/finding",
4566
+ "keyword": "required",
4567
+ "instance": {
4568
+ "code": "fixture-1",
4569
+ "severity": "error",
4570
+ "messageKey": "fixture-1"
4571
+ },
4572
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4573
+ },
4574
+ {
4575
+ "caseId": "artifact-manifest-invalid-477c27d397ef1015",
4576
+ "coveredRuleIds": [
4577
+ "artifact-manifest:#/$defs/buildProvenance:required:capabilityDecisionDigest"
4578
+ ],
4579
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
4580
+ "schemaPointer": "#/$defs/buildProvenance",
4581
+ "keyword": "required",
4582
+ "instance": {
4583
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
4584
+ "schemaVersion": "2.0.0",
4585
+ "assertedWorkload": {
4586
+ "repository": "fixture-owner/fixture-repository",
4587
+ "repositoryId": "1",
4588
+ "repositoryOwner": "fixture-1",
4589
+ "repositoryOwnerId": "1",
4590
+ "ref": "fixture-1",
4591
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
4592
+ "workflowTriggerCommit": "sha1:0000000000000000000000000000000000000001",
4593
+ "runId": "1",
4594
+ "runNumber": "1",
4595
+ "runAttempt": 1,
4596
+ "eventName": "create",
4597
+ "actor": "fixture-1",
4598
+ "actorId": "1",
4599
+ "callerPath": ".github/workflows/gala-publish-v2.yml",
4600
+ "verificationState": "pending-authorize-oidc"
4601
+ },
4602
+ "requiredOidcClaims": [
4603
+ "actor",
4604
+ "actor_id",
4605
+ "aud",
4606
+ "event_name",
4607
+ "iss",
4608
+ "job_workflow_ref",
4609
+ "job_workflow_sha",
4601
4610
  "jti",
4602
4611
  "ref",
4603
4612
  "repository",
@@ -5023,17 +5032,18 @@
5023
5032
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5024
5033
  },
5025
5034
  {
5026
- "caseId": "artifact-manifest-invalid-4ba25148e18a34f6",
5035
+ "caseId": "artifact-manifest-invalid-4b71cffec3614478",
5027
5036
  "coveredRuleIds": [
5028
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:repositoryRootDigest"
5037
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:policyReleaseId"
5029
5038
  ],
5030
5039
  "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
5031
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
5040
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
5032
5041
  "keyword": "required",
5033
5042
  "instance": {
5034
5043
  "repositoryId": "1",
5035
5044
  "sourceCommit": "sha1:0000000000000000000000000000000000000001",
5036
5045
  "sourceTree": "sha1:0000000000000000000000000000000000000001",
5046
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5037
5047
  "buildEpoch": "2026-09-13T12:00:00.000Z",
5038
5048
  "contractVersion": "2.0.0",
5039
5049
  "builder": {
@@ -5066,7 +5076,6 @@
5066
5076
  "baseUrl": "https://fixture-1.example.com/",
5067
5077
  "basePath": "/fixture-1",
5068
5078
  "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5069
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
5070
5079
  "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5071
5080
  "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5072
5081
  "renderPolicy": {
@@ -5369,62 +5378,6 @@
5369
5378
  },
5370
5379
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5371
5380
  },
5372
- {
5373
- "caseId": "artifact-manifest-invalid-5227c604aa7feb0e",
5374
- "coveredRuleIds": [
5375
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:buildInputDigest"
5376
- ],
5377
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
5378
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
5379
- "keyword": "required",
5380
- "instance": {
5381
- "repositoryId": "1",
5382
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
5383
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
5384
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5385
- "buildEpoch": "2026-09-13T12:00:00.000Z",
5386
- "contractVersion": "2.0.0",
5387
- "builder": {
5388
- "package": "@rathnasgala2/publish-action",
5389
- "version": "2.0.0",
5390
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5391
- "registry": "https://fixture-1.example.com/"
5392
- },
5393
- "schemas": {
5394
- "package": "@rathnasgala2/schemas",
5395
- "version": "2.0.0",
5396
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5397
- "registry": "https://fixture-1.example.com/"
5398
- },
5399
- "template": {
5400
- "package": "@rathnasgala2/template",
5401
- "version": "2.0.0",
5402
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5403
- "registry": "https://fixture-1.example.com/"
5404
- },
5405
- "theme": {
5406
- "package": "@rathnasgala2/theme-default",
5407
- "version": "2.0.0",
5408
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5409
- "registry": "https://fixture-1.example.com/"
5410
- },
5411
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5412
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5413
- "baseUrl": "https://fixture-1.example.com/",
5414
- "basePath": "/fixture-1",
5415
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5416
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
5417
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5418
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5419
- "renderPolicy": {
5420
- "name": "gala-render-policy",
5421
- "version": "2.0.0",
5422
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
5423
- },
5424
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
5425
- },
5426
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5427
- },
5428
5381
  {
5429
5382
  "caseId": "artifact-manifest-invalid-52b3276517640255",
5430
5383
  "coveredRuleIds": [
@@ -5722,20 +5675,6 @@
5722
5675
  },
5723
5676
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5724
5677
  },
5725
- {
5726
- "caseId": "artifact-manifest-invalid-5777061d93b1ab61",
5727
- "coveredRuleIds": [
5728
- "artifact-manifest:#/$defs/renderPolicyIdentity:required:version"
5729
- ],
5730
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
5731
- "schemaPointer": "#/$defs/renderPolicyIdentity",
5732
- "keyword": "required",
5733
- "instance": {
5734
- "name": "gala-render-policy",
5735
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
5736
- },
5737
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5738
- },
5739
5678
  {
5740
5679
  "caseId": "artifact-manifest-invalid-57f7dbf48f4d3b09",
5741
5680
  "coveredRuleIds": ["artifact-manifest:#:required:repositoryNodeId"],
@@ -5940,6 +5879,62 @@
5940
5879
  },
5941
5880
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5942
5881
  },
5882
+ {
5883
+ "caseId": "artifact-manifest-invalid-59b1ac49cc659b52",
5884
+ "coveredRuleIds": [
5885
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:buildInputDigest"
5886
+ ],
5887
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
5888
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
5889
+ "keyword": "required",
5890
+ "instance": {
5891
+ "repositoryId": "1",
5892
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
5893
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
5894
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5895
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
5896
+ "contractVersion": "2.0.0",
5897
+ "builder": {
5898
+ "package": "@rathnasgala2/publish-action",
5899
+ "version": "2.0.0",
5900
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5901
+ "registry": "https://fixture-1.example.com/"
5902
+ },
5903
+ "schemas": {
5904
+ "package": "@rathnasgala2/schemas",
5905
+ "version": "2.0.0",
5906
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5907
+ "registry": "https://fixture-1.example.com/"
5908
+ },
5909
+ "template": {
5910
+ "package": "@rathnasgala2/template",
5911
+ "version": "2.0.0",
5912
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5913
+ "registry": "https://fixture-1.example.com/"
5914
+ },
5915
+ "theme": {
5916
+ "package": "@rathnasgala2/theme-default",
5917
+ "version": "2.0.0",
5918
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5919
+ "registry": "https://fixture-1.example.com/"
5920
+ },
5921
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5922
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5923
+ "baseUrl": "https://fixture-1.example.com/",
5924
+ "basePath": "/fixture-1",
5925
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5926
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
5927
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5928
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5929
+ "renderPolicy": {
5930
+ "name": "gala-render-policy",
5931
+ "version": "2.0.0",
5932
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
5933
+ },
5934
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
5935
+ },
5936
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5937
+ },
5943
5938
  {
5944
5939
  "caseId": "artifact-manifest-invalid-59ca4641454dd193",
5945
5940
  "coveredRuleIds": ["artifact-manifest:#:required:redirects"],
@@ -6160,121 +6155,12 @@
6160
6155
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6161
6156
  },
6162
6157
  {
6163
- "caseId": "artifact-manifest-invalid-5f6c5bc9d76d039d",
6158
+ "caseId": "artifact-manifest-invalid-5b8f94a27289f7ec",
6164
6159
  "coveredRuleIds": [
6165
- "artifact-manifest:#/$defs/assertedWorkload:required:repositoryOwner"
6160
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:buildPolicyDecisionDigest"
6166
6161
  ],
6167
6162
  "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6168
- "schemaPointer": "#/$defs/assertedWorkload",
6169
- "keyword": "required",
6170
- "instance": {
6171
- "repository": "fixture-owner/fixture-repository",
6172
- "repositoryId": "1",
6173
- "repositoryOwnerId": "1",
6174
- "ref": "fixture-1",
6175
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
6176
- "workflowTriggerCommit": "sha1:0000000000000000000000000000000000000001",
6177
- "runId": "1",
6178
- "runNumber": "1",
6179
- "runAttempt": 1,
6180
- "eventName": "create",
6181
- "actor": "fixture-1",
6182
- "actorId": "1",
6183
- "callerPath": ".github/workflows/gala-publish-v2.yml",
6184
- "verificationState": "pending-authorize-oidc"
6185
- },
6186
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6187
- },
6188
- {
6189
- "caseId": "artifact-manifest-invalid-5f7899e616ad88f9",
6190
- "coveredRuleIds": [
6191
- "artifact-manifest:#/$defs/artifactLicenseConclusion:required:sourceKind"
6192
- ],
6193
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6194
- "schemaPointer": "#/$defs/artifactLicenseConclusion",
6195
- "keyword": "required",
6196
- "instance": {
6197
- "artifactPath": "content/fixture-1.md",
6198
- "licenseConcluded": "NOASSERTION"
6199
- },
6200
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6201
- },
6202
- {
6203
- "caseId": "artifact-manifest-invalid-5fff38e2a1441c30",
6204
- "coveredRuleIds": [
6205
- "artifact-manifest:#/$defs/artifactLicenseConclusion:required:artifactPath"
6206
- ],
6207
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6208
- "schemaPointer": "#/$defs/artifactLicenseConclusion",
6209
- "keyword": "required",
6210
- "instance": {
6211
- "licenseConcluded": "NOASSERTION",
6212
- "sourceKind": "generated"
6213
- },
6214
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6215
- },
6216
- {
6217
- "caseId": "artifact-manifest-invalid-60af752ef1fd4f57",
6218
- "coveredRuleIds": [
6219
- "artifact-manifest:#/$defs/assertedWorkload:required:sourceCommit"
6220
- ],
6221
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6222
- "schemaPointer": "#/$defs/assertedWorkload",
6223
- "keyword": "required",
6224
- "instance": {
6225
- "repository": "fixture-owner/fixture-repository",
6226
- "repositoryId": "1",
6227
- "repositoryOwner": "fixture-1",
6228
- "repositoryOwnerId": "1",
6229
- "ref": "fixture-1",
6230
- "workflowTriggerCommit": "sha1:0000000000000000000000000000000000000001",
6231
- "runId": "1",
6232
- "runNumber": "1",
6233
- "runAttempt": 1,
6234
- "eventName": "create",
6235
- "actor": "fixture-1",
6236
- "actorId": "1",
6237
- "callerPath": ".github/workflows/gala-publish-v2.yml",
6238
- "verificationState": "pending-authorize-oidc"
6239
- },
6240
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6241
- },
6242
- {
6243
- "caseId": "artifact-manifest-invalid-60d1af3cf4caf4ee",
6244
- "coveredRuleIds": ["artifact-manifest:#/$defs/finding:required:severity"],
6245
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6246
- "schemaPointer": "#/$defs/finding",
6247
- "keyword": "required",
6248
- "instance": {
6249
- "code": "fixture-1",
6250
- "pointer": "fixture-1",
6251
- "messageKey": "fixture-1"
6252
- },
6253
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6254
- },
6255
- {
6256
- "caseId": "artifact-manifest-invalid-63378a22e36b5ab2",
6257
- "coveredRuleIds": [
6258
- "artifact-manifest:#/$defs/manifestRedirect:required:targetRoute"
6259
- ],
6260
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6261
- "schemaPointer": "#/$defs/manifestRedirect",
6262
- "keyword": "required",
6263
- "instance": {
6264
- "sourceRoute": "/fixture-1",
6265
- "status": 200,
6266
- "backingPath": "content/fixture-1.md",
6267
- "sha256": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
6268
- },
6269
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6270
- },
6271
- {
6272
- "caseId": "artifact-manifest-invalid-636f78f0387afcd6",
6273
- "coveredRuleIds": [
6274
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:buildPolicyDecisionDigest"
6275
- ],
6276
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6277
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
6163
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
6278
6164
  "keyword": "required",
6279
6165
  "instance": {
6280
6166
  "repositoryId": "1",
@@ -6325,44 +6211,12 @@
6325
6211
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6326
6212
  },
6327
6213
  {
6328
- "caseId": "artifact-manifest-invalid-6732f869fcad962d",
6214
+ "caseId": "artifact-manifest-invalid-5c4c46207a7e3ec1",
6329
6215
  "coveredRuleIds": [
6330
- "artifact-manifest:#/$defs/packageIdentity:required:registry"
6331
- ],
6332
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6333
- "schemaPointer": "#/$defs/packageIdentity",
6334
- "keyword": "required",
6335
- "instance": {
6336
- "package": "fixture-1",
6337
- "version": "2.0.0",
6338
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
6339
- },
6340
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6341
- },
6342
- {
6343
- "caseId": "artifact-manifest-invalid-698ecef81cf03fe4",
6344
- "coveredRuleIds": [
6345
- "artifact-manifest:#/$defs/manifestRoute:required:sha256"
6346
- ],
6347
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6348
- "schemaPointer": "#/$defs/manifestRoute",
6349
- "keyword": "required",
6350
- "instance": {
6351
- "path": "content/fixture-1.md",
6352
- "mediaType": "text/html; charset=utf-8",
6353
- "byteLength": "1",
6354
- "routeClass": "html",
6355
- "interactionBearing": false
6356
- },
6357
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6358
- },
6359
- {
6360
- "caseId": "artifact-manifest-invalid-6afadcf39483f86d",
6361
- "coveredRuleIds": [
6362
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:theme"
6216
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:contractVersion"
6363
6217
  ],
6364
6218
  "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6365
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
6219
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
6366
6220
  "keyword": "required",
6367
6221
  "instance": {
6368
6222
  "repositoryId": "1",
@@ -6370,7 +6224,6 @@
6370
6224
  "sourceTree": "sha1:0000000000000000000000000000000000000001",
6371
6225
  "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6372
6226
  "buildEpoch": "2026-09-13T12:00:00.000Z",
6373
- "contractVersion": "2.0.0",
6374
6227
  "builder": {
6375
6228
  "package": "@rathnasgala2/publish-action",
6376
6229
  "version": "2.0.0",
@@ -6389,6 +6242,12 @@
6389
6242
  "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6390
6243
  "registry": "https://fixture-1.example.com/"
6391
6244
  },
6245
+ "theme": {
6246
+ "package": "@rathnasgala2/theme-default",
6247
+ "version": "2.0.0",
6248
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6249
+ "registry": "https://fixture-1.example.com/"
6250
+ },
6392
6251
  "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6393
6252
  "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6394
6253
  "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
@@ -6408,29 +6267,12 @@
6408
6267
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6409
6268
  },
6410
6269
  {
6411
- "caseId": "artifact-manifest-invalid-6b756cb3ebc2804d",
6412
- "coveredRuleIds": [
6413
- "artifact-manifest:#/$defs/manifestRoute:required:routeClass"
6414
- ],
6415
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6416
- "schemaPointer": "#/$defs/manifestRoute",
6417
- "keyword": "required",
6418
- "instance": {
6419
- "path": "content/fixture-1.md",
6420
- "mediaType": "text/html; charset=utf-8",
6421
- "byteLength": "1",
6422
- "sha256": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6423
- "interactionBearing": false
6424
- },
6425
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6426
- },
6427
- {
6428
- "caseId": "artifact-manifest-invalid-6e5443558059945e",
6270
+ "caseId": "artifact-manifest-invalid-5c9511b601bf8a45",
6429
6271
  "coveredRuleIds": [
6430
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:stylingContractDigest"
6272
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:stylingContractDigest"
6431
6273
  ],
6432
6274
  "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6433
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
6275
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
6434
6276
  "keyword": "required",
6435
6277
  "instance": {
6436
6278
  "repositoryId": "1",
@@ -6480,6 +6322,164 @@
6480
6322
  },
6481
6323
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6482
6324
  },
6325
+ {
6326
+ "caseId": "artifact-manifest-invalid-5f6c5bc9d76d039d",
6327
+ "coveredRuleIds": [
6328
+ "artifact-manifest:#/$defs/assertedWorkload:required:repositoryOwner"
6329
+ ],
6330
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6331
+ "schemaPointer": "#/$defs/assertedWorkload",
6332
+ "keyword": "required",
6333
+ "instance": {
6334
+ "repository": "fixture-owner/fixture-repository",
6335
+ "repositoryId": "1",
6336
+ "repositoryOwnerId": "1",
6337
+ "ref": "fixture-1",
6338
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
6339
+ "workflowTriggerCommit": "sha1:0000000000000000000000000000000000000001",
6340
+ "runId": "1",
6341
+ "runNumber": "1",
6342
+ "runAttempt": 1,
6343
+ "eventName": "create",
6344
+ "actor": "fixture-1",
6345
+ "actorId": "1",
6346
+ "callerPath": ".github/workflows/gala-publish-v2.yml",
6347
+ "verificationState": "pending-authorize-oidc"
6348
+ },
6349
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6350
+ },
6351
+ {
6352
+ "caseId": "artifact-manifest-invalid-5f7899e616ad88f9",
6353
+ "coveredRuleIds": [
6354
+ "artifact-manifest:#/$defs/artifactLicenseConclusion:required:sourceKind"
6355
+ ],
6356
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6357
+ "schemaPointer": "#/$defs/artifactLicenseConclusion",
6358
+ "keyword": "required",
6359
+ "instance": {
6360
+ "artifactPath": "content/fixture-1.md",
6361
+ "licenseConcluded": "NOASSERTION"
6362
+ },
6363
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6364
+ },
6365
+ {
6366
+ "caseId": "artifact-manifest-invalid-5fff38e2a1441c30",
6367
+ "coveredRuleIds": [
6368
+ "artifact-manifest:#/$defs/artifactLicenseConclusion:required:artifactPath"
6369
+ ],
6370
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6371
+ "schemaPointer": "#/$defs/artifactLicenseConclusion",
6372
+ "keyword": "required",
6373
+ "instance": {
6374
+ "licenseConcluded": "NOASSERTION",
6375
+ "sourceKind": "generated"
6376
+ },
6377
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6378
+ },
6379
+ {
6380
+ "caseId": "artifact-manifest-invalid-60af752ef1fd4f57",
6381
+ "coveredRuleIds": [
6382
+ "artifact-manifest:#/$defs/assertedWorkload:required:sourceCommit"
6383
+ ],
6384
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6385
+ "schemaPointer": "#/$defs/assertedWorkload",
6386
+ "keyword": "required",
6387
+ "instance": {
6388
+ "repository": "fixture-owner/fixture-repository",
6389
+ "repositoryId": "1",
6390
+ "repositoryOwner": "fixture-1",
6391
+ "repositoryOwnerId": "1",
6392
+ "ref": "fixture-1",
6393
+ "workflowTriggerCommit": "sha1:0000000000000000000000000000000000000001",
6394
+ "runId": "1",
6395
+ "runNumber": "1",
6396
+ "runAttempt": 1,
6397
+ "eventName": "create",
6398
+ "actor": "fixture-1",
6399
+ "actorId": "1",
6400
+ "callerPath": ".github/workflows/gala-publish-v2.yml",
6401
+ "verificationState": "pending-authorize-oidc"
6402
+ },
6403
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6404
+ },
6405
+ {
6406
+ "caseId": "artifact-manifest-invalid-60d1af3cf4caf4ee",
6407
+ "coveredRuleIds": ["artifact-manifest:#/$defs/finding:required:severity"],
6408
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6409
+ "schemaPointer": "#/$defs/finding",
6410
+ "keyword": "required",
6411
+ "instance": {
6412
+ "code": "fixture-1",
6413
+ "pointer": "fixture-1",
6414
+ "messageKey": "fixture-1"
6415
+ },
6416
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6417
+ },
6418
+ {
6419
+ "caseId": "artifact-manifest-invalid-63378a22e36b5ab2",
6420
+ "coveredRuleIds": [
6421
+ "artifact-manifest:#/$defs/manifestRedirect:required:targetRoute"
6422
+ ],
6423
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6424
+ "schemaPointer": "#/$defs/manifestRedirect",
6425
+ "keyword": "required",
6426
+ "instance": {
6427
+ "sourceRoute": "/fixture-1",
6428
+ "status": 200,
6429
+ "backingPath": "content/fixture-1.md",
6430
+ "sha256": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
6431
+ },
6432
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6433
+ },
6434
+ {
6435
+ "caseId": "artifact-manifest-invalid-6732f869fcad962d",
6436
+ "coveredRuleIds": [
6437
+ "artifact-manifest:#/$defs/packageIdentity:required:registry"
6438
+ ],
6439
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6440
+ "schemaPointer": "#/$defs/packageIdentity",
6441
+ "keyword": "required",
6442
+ "instance": {
6443
+ "package": "fixture-1",
6444
+ "version": "2.0.0",
6445
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
6446
+ },
6447
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6448
+ },
6449
+ {
6450
+ "caseId": "artifact-manifest-invalid-698ecef81cf03fe4",
6451
+ "coveredRuleIds": [
6452
+ "artifact-manifest:#/$defs/manifestRoute:required:sha256"
6453
+ ],
6454
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6455
+ "schemaPointer": "#/$defs/manifestRoute",
6456
+ "keyword": "required",
6457
+ "instance": {
6458
+ "path": "content/fixture-1.md",
6459
+ "mediaType": "text/html; charset=utf-8",
6460
+ "byteLength": "1",
6461
+ "routeClass": "html",
6462
+ "interactionBearing": false
6463
+ },
6464
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6465
+ },
6466
+ {
6467
+ "caseId": "artifact-manifest-invalid-6b756cb3ebc2804d",
6468
+ "coveredRuleIds": [
6469
+ "artifact-manifest:#/$defs/manifestRoute:required:routeClass"
6470
+ ],
6471
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
6472
+ "schemaPointer": "#/$defs/manifestRoute",
6473
+ "keyword": "required",
6474
+ "instance": {
6475
+ "path": "content/fixture-1.md",
6476
+ "mediaType": "text/html; charset=utf-8",
6477
+ "byteLength": "1",
6478
+ "sha256": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6479
+ "interactionBearing": false
6480
+ },
6481
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6482
+ },
6483
6483
  {
6484
6484
  "caseId": "artifact-manifest-invalid-6edff73c92f99e07",
6485
6485
  "coveredRuleIds": [
@@ -7115,6 +7115,57 @@
7115
7115
  },
7116
7116
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7117
7117
  },
7118
+ {
7119
+ "caseId": "artifact-manifest-invalid-79552a24facd2b54",
7120
+ "coveredRuleIds": [
7121
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:theme"
7122
+ ],
7123
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
7124
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
7125
+ "keyword": "required",
7126
+ "instance": {
7127
+ "repositoryId": "1",
7128
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
7129
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
7130
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7131
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
7132
+ "contractVersion": "2.0.0",
7133
+ "builder": {
7134
+ "package": "@rathnasgala2/publish-action",
7135
+ "version": "2.0.0",
7136
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7137
+ "registry": "https://fixture-1.example.com/"
7138
+ },
7139
+ "schemas": {
7140
+ "package": "@rathnasgala2/schemas",
7141
+ "version": "2.0.0",
7142
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7143
+ "registry": "https://fixture-1.example.com/"
7144
+ },
7145
+ "template": {
7146
+ "package": "@rathnasgala2/template",
7147
+ "version": "2.0.0",
7148
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7149
+ "registry": "https://fixture-1.example.com/"
7150
+ },
7151
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7152
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7153
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7154
+ "baseUrl": "https://fixture-1.example.com/",
7155
+ "basePath": "/fixture-1",
7156
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7157
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
7158
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7159
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7160
+ "renderPolicy": {
7161
+ "name": "gala-render-policy",
7162
+ "version": "2.0.0",
7163
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7164
+ },
7165
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7166
+ },
7167
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7168
+ },
7118
7169
  {
7119
7170
  "caseId": "artifact-manifest-invalid-7a67fe3c3cf302ea",
7120
7171
  "coveredRuleIds": ["artifact-manifest:#:required:sourceCommit"],
@@ -7319,62 +7370,6 @@
7319
7370
  },
7320
7371
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7321
7372
  },
7322
- {
7323
- "caseId": "artifact-manifest-invalid-7aa36d1207f9857c",
7324
- "coveredRuleIds": [
7325
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:destinationCapabilityDigest"
7326
- ],
7327
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
7328
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
7329
- "keyword": "required",
7330
- "instance": {
7331
- "repositoryId": "1",
7332
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
7333
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
7334
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7335
- "buildEpoch": "2026-09-13T12:00:00.000Z",
7336
- "contractVersion": "2.0.0",
7337
- "builder": {
7338
- "package": "@rathnasgala2/publish-action",
7339
- "version": "2.0.0",
7340
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7341
- "registry": "https://fixture-1.example.com/"
7342
- },
7343
- "schemas": {
7344
- "package": "@rathnasgala2/schemas",
7345
- "version": "2.0.0",
7346
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7347
- "registry": "https://fixture-1.example.com/"
7348
- },
7349
- "template": {
7350
- "package": "@rathnasgala2/template",
7351
- "version": "2.0.0",
7352
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7353
- "registry": "https://fixture-1.example.com/"
7354
- },
7355
- "theme": {
7356
- "package": "@rathnasgala2/theme-default",
7357
- "version": "2.0.0",
7358
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7359
- "registry": "https://fixture-1.example.com/"
7360
- },
7361
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7362
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7363
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7364
- "baseUrl": "https://fixture-1.example.com/",
7365
- "basePath": "/fixture-1",
7366
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
7367
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7368
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7369
- "renderPolicy": {
7370
- "name": "gala-render-policy",
7371
- "version": "2.0.0",
7372
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7373
- },
7374
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7375
- },
7376
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7377
- },
7378
7373
  {
7379
7374
  "caseId": "artifact-manifest-invalid-7b36af1019933039",
7380
7375
  "coveredRuleIds": [
@@ -7786,6 +7781,118 @@
7786
7781
  },
7787
7782
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7788
7783
  },
7784
+ {
7785
+ "caseId": "artifact-manifest-invalid-81063dee403110b9",
7786
+ "coveredRuleIds": [
7787
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:packageReleaseCatalogDigest"
7788
+ ],
7789
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
7790
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
7791
+ "keyword": "required",
7792
+ "instance": {
7793
+ "repositoryId": "1",
7794
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
7795
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
7796
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7797
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
7798
+ "contractVersion": "2.0.0",
7799
+ "builder": {
7800
+ "package": "@rathnasgala2/publish-action",
7801
+ "version": "2.0.0",
7802
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7803
+ "registry": "https://fixture-1.example.com/"
7804
+ },
7805
+ "schemas": {
7806
+ "package": "@rathnasgala2/schemas",
7807
+ "version": "2.0.0",
7808
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7809
+ "registry": "https://fixture-1.example.com/"
7810
+ },
7811
+ "template": {
7812
+ "package": "@rathnasgala2/template",
7813
+ "version": "2.0.0",
7814
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7815
+ "registry": "https://fixture-1.example.com/"
7816
+ },
7817
+ "theme": {
7818
+ "package": "@rathnasgala2/theme-default",
7819
+ "version": "2.0.0",
7820
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7821
+ "registry": "https://fixture-1.example.com/"
7822
+ },
7823
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7824
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7825
+ "baseUrl": "https://fixture-1.example.com/",
7826
+ "basePath": "/fixture-1",
7827
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7828
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
7829
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7830
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7831
+ "renderPolicy": {
7832
+ "name": "gala-render-policy",
7833
+ "version": "2.0.0",
7834
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7835
+ },
7836
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7837
+ },
7838
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7839
+ },
7840
+ {
7841
+ "caseId": "artifact-manifest-invalid-8266de102eb85c7c",
7842
+ "coveredRuleIds": [
7843
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:repositoryId"
7844
+ ],
7845
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
7846
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
7847
+ "keyword": "required",
7848
+ "instance": {
7849
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
7850
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
7851
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7852
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
7853
+ "contractVersion": "2.0.0",
7854
+ "builder": {
7855
+ "package": "@rathnasgala2/publish-action",
7856
+ "version": "2.0.0",
7857
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7858
+ "registry": "https://fixture-1.example.com/"
7859
+ },
7860
+ "schemas": {
7861
+ "package": "@rathnasgala2/schemas",
7862
+ "version": "2.0.0",
7863
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7864
+ "registry": "https://fixture-1.example.com/"
7865
+ },
7866
+ "template": {
7867
+ "package": "@rathnasgala2/template",
7868
+ "version": "2.0.0",
7869
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7870
+ "registry": "https://fixture-1.example.com/"
7871
+ },
7872
+ "theme": {
7873
+ "package": "@rathnasgala2/theme-default",
7874
+ "version": "2.0.0",
7875
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7876
+ "registry": "https://fixture-1.example.com/"
7877
+ },
7878
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7879
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7880
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7881
+ "baseUrl": "https://fixture-1.example.com/",
7882
+ "basePath": "/fixture-1",
7883
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7884
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
7885
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7886
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7887
+ "renderPolicy": {
7888
+ "name": "gala-render-policy",
7889
+ "version": "2.0.0",
7890
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7891
+ },
7892
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7893
+ },
7894
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7895
+ },
7789
7896
  {
7790
7897
  "caseId": "artifact-manifest-invalid-833b38283df72980",
7791
7898
  "coveredRuleIds": [
@@ -7809,6 +7916,62 @@
7809
7916
  },
7810
7917
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7811
7918
  },
7919
+ {
7920
+ "caseId": "artifact-manifest-invalid-8578efc42516cc60",
7921
+ "coveredRuleIds": [
7922
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:destinationCapabilityDigest"
7923
+ ],
7924
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
7925
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
7926
+ "keyword": "required",
7927
+ "instance": {
7928
+ "repositoryId": "1",
7929
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
7930
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
7931
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7932
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
7933
+ "contractVersion": "2.0.0",
7934
+ "builder": {
7935
+ "package": "@rathnasgala2/publish-action",
7936
+ "version": "2.0.0",
7937
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7938
+ "registry": "https://fixture-1.example.com/"
7939
+ },
7940
+ "schemas": {
7941
+ "package": "@rathnasgala2/schemas",
7942
+ "version": "2.0.0",
7943
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7944
+ "registry": "https://fixture-1.example.com/"
7945
+ },
7946
+ "template": {
7947
+ "package": "@rathnasgala2/template",
7948
+ "version": "2.0.0",
7949
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7950
+ "registry": "https://fixture-1.example.com/"
7951
+ },
7952
+ "theme": {
7953
+ "package": "@rathnasgala2/theme-default",
7954
+ "version": "2.0.0",
7955
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7956
+ "registry": "https://fixture-1.example.com/"
7957
+ },
7958
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7959
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7960
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7961
+ "baseUrl": "https://fixture-1.example.com/",
7962
+ "basePath": "/fixture-1",
7963
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
7964
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7965
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7966
+ "renderPolicy": {
7967
+ "name": "gala-render-policy",
7968
+ "version": "2.0.0",
7969
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7970
+ },
7971
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7972
+ },
7973
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7974
+ },
7812
7975
  {
7813
7976
  "caseId": "artifact-manifest-invalid-85e0c50b49700ba3",
7814
7977
  "coveredRuleIds": [
@@ -8007,6 +8170,58 @@
8007
8170
  },
8008
8171
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
8009
8172
  },
8173
+ {
8174
+ "caseId": "artifact-manifest-invalid-861a22bd394ecaf9",
8175
+ "coveredRuleIds": [
8176
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:renderPolicy"
8177
+ ],
8178
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
8179
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
8180
+ "keyword": "required",
8181
+ "instance": {
8182
+ "repositoryId": "1",
8183
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
8184
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
8185
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8186
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
8187
+ "contractVersion": "2.0.0",
8188
+ "builder": {
8189
+ "package": "@rathnasgala2/publish-action",
8190
+ "version": "2.0.0",
8191
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8192
+ "registry": "https://fixture-1.example.com/"
8193
+ },
8194
+ "schemas": {
8195
+ "package": "@rathnasgala2/schemas",
8196
+ "version": "2.0.0",
8197
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8198
+ "registry": "https://fixture-1.example.com/"
8199
+ },
8200
+ "template": {
8201
+ "package": "@rathnasgala2/template",
8202
+ "version": "2.0.0",
8203
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8204
+ "registry": "https://fixture-1.example.com/"
8205
+ },
8206
+ "theme": {
8207
+ "package": "@rathnasgala2/theme-default",
8208
+ "version": "2.0.0",
8209
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8210
+ "registry": "https://fixture-1.example.com/"
8211
+ },
8212
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8213
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8214
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8215
+ "baseUrl": "https://fixture-1.example.com/",
8216
+ "basePath": "/fixture-1",
8217
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8218
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
8219
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8220
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8221
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
8222
+ },
8223
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
8224
+ },
8010
8225
  {
8011
8226
  "caseId": "artifact-manifest-invalid-878fa3aeec68e9e8",
8012
8227
  "coveredRuleIds": ["artifact-manifest:#:required:schemaVersion"],
@@ -8313,62 +8528,6 @@
8313
8528
  },
8314
8529
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
8315
8530
  },
8316
- {
8317
- "caseId": "artifact-manifest-invalid-8dac66a1dcef3385",
8318
- "coveredRuleIds": [
8319
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:sourceTree"
8320
- ],
8321
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
8322
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
8323
- "keyword": "required",
8324
- "instance": {
8325
- "repositoryId": "1",
8326
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
8327
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8328
- "buildEpoch": "2026-09-13T12:00:00.000Z",
8329
- "contractVersion": "2.0.0",
8330
- "builder": {
8331
- "package": "@rathnasgala2/publish-action",
8332
- "version": "2.0.0",
8333
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8334
- "registry": "https://fixture-1.example.com/"
8335
- },
8336
- "schemas": {
8337
- "package": "@rathnasgala2/schemas",
8338
- "version": "2.0.0",
8339
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8340
- "registry": "https://fixture-1.example.com/"
8341
- },
8342
- "template": {
8343
- "package": "@rathnasgala2/template",
8344
- "version": "2.0.0",
8345
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8346
- "registry": "https://fixture-1.example.com/"
8347
- },
8348
- "theme": {
8349
- "package": "@rathnasgala2/theme-default",
8350
- "version": "2.0.0",
8351
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8352
- "registry": "https://fixture-1.example.com/"
8353
- },
8354
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8355
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8356
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8357
- "baseUrl": "https://fixture-1.example.com/",
8358
- "basePath": "/fixture-1",
8359
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8360
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
8361
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8362
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8363
- "renderPolicy": {
8364
- "name": "gala-render-policy",
8365
- "version": "2.0.0",
8366
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
8367
- },
8368
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
8369
- },
8370
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
8371
- },
8372
8531
  {
8373
8532
  "caseId": "artifact-manifest-invalid-8e4fb706af8606ab",
8374
8533
  "coveredRuleIds": [
@@ -8593,6 +8752,57 @@
8593
8752
  },
8594
8753
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
8595
8754
  },
8755
+ {
8756
+ "caseId": "artifact-manifest-invalid-922baf4387f486ce",
8757
+ "coveredRuleIds": [
8758
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:schemas"
8759
+ ],
8760
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
8761
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
8762
+ "keyword": "required",
8763
+ "instance": {
8764
+ "repositoryId": "1",
8765
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
8766
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
8767
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8768
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
8769
+ "contractVersion": "2.0.0",
8770
+ "builder": {
8771
+ "package": "@rathnasgala2/publish-action",
8772
+ "version": "2.0.0",
8773
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8774
+ "registry": "https://fixture-1.example.com/"
8775
+ },
8776
+ "template": {
8777
+ "package": "@rathnasgala2/template",
8778
+ "version": "2.0.0",
8779
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8780
+ "registry": "https://fixture-1.example.com/"
8781
+ },
8782
+ "theme": {
8783
+ "package": "@rathnasgala2/theme-default",
8784
+ "version": "2.0.0",
8785
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8786
+ "registry": "https://fixture-1.example.com/"
8787
+ },
8788
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8789
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8790
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8791
+ "baseUrl": "https://fixture-1.example.com/",
8792
+ "basePath": "/fixture-1",
8793
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8794
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
8795
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8796
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8797
+ "renderPolicy": {
8798
+ "name": "gala-render-policy",
8799
+ "version": "2.0.0",
8800
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
8801
+ },
8802
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
8803
+ },
8804
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
8805
+ },
8596
8806
  {
8597
8807
  "caseId": "artifact-manifest-invalid-930ec3e22ddbc6c8",
8598
8808
  "coveredRuleIds": [
@@ -8791,6 +9001,62 @@
8791
9001
  },
8792
9002
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
8793
9003
  },
9004
+ {
9005
+ "caseId": "artifact-manifest-invalid-94bcfb6777e475dc",
9006
+ "coveredRuleIds": [
9007
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:repositoryRootDigest"
9008
+ ],
9009
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
9010
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
9011
+ "keyword": "required",
9012
+ "instance": {
9013
+ "repositoryId": "1",
9014
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
9015
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
9016
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
9017
+ "contractVersion": "2.0.0",
9018
+ "builder": {
9019
+ "package": "@rathnasgala2/publish-action",
9020
+ "version": "2.0.0",
9021
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
9022
+ "registry": "https://fixture-1.example.com/"
9023
+ },
9024
+ "schemas": {
9025
+ "package": "@rathnasgala2/schemas",
9026
+ "version": "2.0.0",
9027
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
9028
+ "registry": "https://fixture-1.example.com/"
9029
+ },
9030
+ "template": {
9031
+ "package": "@rathnasgala2/template",
9032
+ "version": "2.0.0",
9033
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
9034
+ "registry": "https://fixture-1.example.com/"
9035
+ },
9036
+ "theme": {
9037
+ "package": "@rathnasgala2/theme-default",
9038
+ "version": "2.0.0",
9039
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
9040
+ "registry": "https://fixture-1.example.com/"
9041
+ },
9042
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
9043
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
9044
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
9045
+ "baseUrl": "https://fixture-1.example.com/",
9046
+ "basePath": "/fixture-1",
9047
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
9048
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
9049
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
9050
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
9051
+ "renderPolicy": {
9052
+ "name": "gala-render-policy",
9053
+ "version": "2.0.0",
9054
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
9055
+ },
9056
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
9057
+ },
9058
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
9059
+ },
8794
9060
  {
8795
9061
  "caseId": "artifact-manifest-invalid-96433abacd29373a",
8796
9062
  "coveredRuleIds": [
@@ -9939,6 +10205,62 @@
9939
10205
  },
9940
10206
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
9941
10207
  },
10208
+ {
10209
+ "caseId": "artifact-manifest-invalid-b3bf5b10bcf950e2",
10210
+ "coveredRuleIds": [
10211
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:workflowIdentity"
10212
+ ],
10213
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
10214
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
10215
+ "keyword": "required",
10216
+ "instance": {
10217
+ "repositoryId": "1",
10218
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
10219
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
10220
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10221
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
10222
+ "contractVersion": "2.0.0",
10223
+ "builder": {
10224
+ "package": "@rathnasgala2/publish-action",
10225
+ "version": "2.0.0",
10226
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10227
+ "registry": "https://fixture-1.example.com/"
10228
+ },
10229
+ "schemas": {
10230
+ "package": "@rathnasgala2/schemas",
10231
+ "version": "2.0.0",
10232
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10233
+ "registry": "https://fixture-1.example.com/"
10234
+ },
10235
+ "template": {
10236
+ "package": "@rathnasgala2/template",
10237
+ "version": "2.0.0",
10238
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10239
+ "registry": "https://fixture-1.example.com/"
10240
+ },
10241
+ "theme": {
10242
+ "package": "@rathnasgala2/theme-default",
10243
+ "version": "2.0.0",
10244
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10245
+ "registry": "https://fixture-1.example.com/"
10246
+ },
10247
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10248
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10249
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10250
+ "baseUrl": "https://fixture-1.example.com/",
10251
+ "basePath": "/fixture-1",
10252
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10253
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
10254
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10255
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10256
+ "renderPolicy": {
10257
+ "name": "gala-render-policy",
10258
+ "version": "2.0.0",
10259
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
10260
+ }
10261
+ },
10262
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
10263
+ },
9942
10264
  {
9943
10265
  "caseId": "artifact-manifest-invalid-b438551f433a54b1",
9944
10266
  "coveredRuleIds": ["artifact-manifest:#:required:reproducibilityClass"],
@@ -10201,57 +10523,6 @@
10201
10523
  },
10202
10524
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
10203
10525
  },
10204
- {
10205
- "caseId": "artifact-manifest-invalid-b72843f0c9210646",
10206
- "coveredRuleIds": [
10207
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:template"
10208
- ],
10209
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
10210
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
10211
- "keyword": "required",
10212
- "instance": {
10213
- "repositoryId": "1",
10214
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
10215
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
10216
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10217
- "buildEpoch": "2026-09-13T12:00:00.000Z",
10218
- "contractVersion": "2.0.0",
10219
- "builder": {
10220
- "package": "@rathnasgala2/publish-action",
10221
- "version": "2.0.0",
10222
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10223
- "registry": "https://fixture-1.example.com/"
10224
- },
10225
- "schemas": {
10226
- "package": "@rathnasgala2/schemas",
10227
- "version": "2.0.0",
10228
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10229
- "registry": "https://fixture-1.example.com/"
10230
- },
10231
- "theme": {
10232
- "package": "@rathnasgala2/theme-default",
10233
- "version": "2.0.0",
10234
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10235
- "registry": "https://fixture-1.example.com/"
10236
- },
10237
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10238
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10239
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10240
- "baseUrl": "https://fixture-1.example.com/",
10241
- "basePath": "/fixture-1",
10242
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10243
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
10244
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10245
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10246
- "renderPolicy": {
10247
- "name": "gala-render-policy",
10248
- "version": "2.0.0",
10249
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
10250
- },
10251
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
10252
- },
10253
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
10254
- },
10255
10526
  {
10256
10527
  "caseId": "artifact-manifest-invalid-ba1ff1487f4dd652",
10257
10528
  "coveredRuleIds": [
@@ -10648,6 +10919,62 @@
10648
10919
  },
10649
10920
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
10650
10921
  },
10922
+ {
10923
+ "caseId": "artifact-manifest-invalid-bf27d6b6e61497d0",
10924
+ "coveredRuleIds": [
10925
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:sourceTree"
10926
+ ],
10927
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
10928
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
10929
+ "keyword": "required",
10930
+ "instance": {
10931
+ "repositoryId": "1",
10932
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
10933
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10934
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
10935
+ "contractVersion": "2.0.0",
10936
+ "builder": {
10937
+ "package": "@rathnasgala2/publish-action",
10938
+ "version": "2.0.0",
10939
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10940
+ "registry": "https://fixture-1.example.com/"
10941
+ },
10942
+ "schemas": {
10943
+ "package": "@rathnasgala2/schemas",
10944
+ "version": "2.0.0",
10945
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10946
+ "registry": "https://fixture-1.example.com/"
10947
+ },
10948
+ "template": {
10949
+ "package": "@rathnasgala2/template",
10950
+ "version": "2.0.0",
10951
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10952
+ "registry": "https://fixture-1.example.com/"
10953
+ },
10954
+ "theme": {
10955
+ "package": "@rathnasgala2/theme-default",
10956
+ "version": "2.0.0",
10957
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10958
+ "registry": "https://fixture-1.example.com/"
10959
+ },
10960
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10961
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10962
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10963
+ "baseUrl": "https://fixture-1.example.com/",
10964
+ "basePath": "/fixture-1",
10965
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10966
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
10967
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10968
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10969
+ "renderPolicy": {
10970
+ "name": "gala-render-policy",
10971
+ "version": "2.0.0",
10972
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
10973
+ },
10974
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
10975
+ },
10976
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
10977
+ },
10651
10978
  {
10652
10979
  "caseId": "artifact-manifest-invalid-c23051dc70bc2a1b",
10653
10980
  "coveredRuleIds": ["artifact-manifest:#:required:excludedInputs"],
@@ -10871,62 +11198,6 @@
10871
11198
  },
10872
11199
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
10873
11200
  },
10874
- {
10875
- "caseId": "artifact-manifest-invalid-c56d9cc17f47f076",
10876
- "coveredRuleIds": [
10877
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:baseUrl"
10878
- ],
10879
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
10880
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
10881
- "keyword": "required",
10882
- "instance": {
10883
- "repositoryId": "1",
10884
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
10885
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
10886
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10887
- "buildEpoch": "2026-09-13T12:00:00.000Z",
10888
- "contractVersion": "2.0.0",
10889
- "builder": {
10890
- "package": "@rathnasgala2/publish-action",
10891
- "version": "2.0.0",
10892
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10893
- "registry": "https://fixture-1.example.com/"
10894
- },
10895
- "schemas": {
10896
- "package": "@rathnasgala2/schemas",
10897
- "version": "2.0.0",
10898
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10899
- "registry": "https://fixture-1.example.com/"
10900
- },
10901
- "template": {
10902
- "package": "@rathnasgala2/template",
10903
- "version": "2.0.0",
10904
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10905
- "registry": "https://fixture-1.example.com/"
10906
- },
10907
- "theme": {
10908
- "package": "@rathnasgala2/theme-default",
10909
- "version": "2.0.0",
10910
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10911
- "registry": "https://fixture-1.example.com/"
10912
- },
10913
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10914
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10915
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10916
- "basePath": "/fixture-1",
10917
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10918
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
10919
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10920
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
10921
- "renderPolicy": {
10922
- "name": "gala-render-policy",
10923
- "version": "2.0.0",
10924
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
10925
- },
10926
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
10927
- },
10928
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
10929
- },
10930
11201
  {
10931
11202
  "caseId": "artifact-manifest-invalid-c5f3907c5316d3a5",
10932
11203
  "coveredRuleIds": ["artifact-manifest:#:required:artifactDigest"],
@@ -11345,108 +11616,57 @@
11345
11616
  "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11346
11617
  "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11347
11618
  "artifactId": "019c0000-0000-7000-8000-000000000001",
11348
- "artifactDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11349
- "manifestDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11350
- "sbomDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11351
- "spdxLicenseListVersion": "2.0.0",
11352
- "spdxLicenseListDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11353
- "spdx23JsonSchemaDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11354
- "artifactLicenseConclusions": [
11355
- {
11356
- "artifactPath": "content/fixture-1.md",
11357
- "licenseConcluded": "NOASSERTION",
11358
- "sourceKind": "generated"
11359
- }
11360
- ],
11361
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
11362
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11363
- "capabilityDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11364
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11365
- "renderPolicy": {
11366
- "name": "gala-render-policy",
11367
- "version": "2.0.0",
11368
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
11369
- },
11370
- "sandbox": {
11371
- "runnerEnvironment": "github-hosted",
11372
- "runnerImageRelease": "fixture-1",
11373
- "runnerImageReleaseDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11374
- "nodeVersion": "24.18.0",
11375
- "nodeExecutableDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11376
- "npmVersion": "11.16.0",
11377
- "npmExecutableDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11378
- "locale": "C.UTF-8",
11379
- "timezone": "UTC",
11380
- "sourceDateEpoch": "2026-09-13T12:00:00.000Z",
11381
- "networkPolicyDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11382
- "filesystemPolicyDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
11383
- }
11384
- },
11385
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
11386
- },
11387
- {
11388
- "caseId": "artifact-manifest-invalid-cb19c868614b9a1b",
11389
- "coveredRuleIds": [
11390
- "artifact-manifest:#/$defs/manifestIncludedSource:required:path"
11391
- ],
11392
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
11393
- "schemaPointer": "#/$defs/manifestIncludedSource",
11394
- "keyword": "required",
11395
- "instance": {
11396
- "sha256": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11397
- "sourceRevision": "sha1:0000000000000000000000000000000000000001",
11398
- "role": "publication"
11399
- },
11400
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
11401
- },
11402
- {
11403
- "caseId": "artifact-manifest-invalid-cbdd36d86adeeb58",
11404
- "coveredRuleIds": [
11405
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:schemas"
11406
- ],
11407
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
11408
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
11409
- "keyword": "required",
11410
- "instance": {
11411
- "repositoryId": "1",
11412
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
11413
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
11414
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11415
- "buildEpoch": "2026-09-13T12:00:00.000Z",
11416
- "contractVersion": "2.0.0",
11417
- "builder": {
11418
- "package": "@rathnasgala2/publish-action",
11419
- "version": "2.0.0",
11420
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11421
- "registry": "https://fixture-1.example.com/"
11422
- },
11423
- "template": {
11424
- "package": "@rathnasgala2/template",
11425
- "version": "2.0.0",
11426
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11427
- "registry": "https://fixture-1.example.com/"
11428
- },
11429
- "theme": {
11430
- "package": "@rathnasgala2/theme-default",
11431
- "version": "2.0.0",
11432
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11433
- "registry": "https://fixture-1.example.com/"
11434
- },
11435
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11436
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11437
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11438
- "baseUrl": "https://fixture-1.example.com/",
11439
- "basePath": "/fixture-1",
11440
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11619
+ "artifactDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11620
+ "manifestDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11621
+ "sbomDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11622
+ "spdxLicenseListVersion": "2.0.0",
11623
+ "spdxLicenseListDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11624
+ "spdx23JsonSchemaDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11625
+ "artifactLicenseConclusions": [
11626
+ {
11627
+ "artifactPath": "content/fixture-1.md",
11628
+ "licenseConcluded": "NOASSERTION",
11629
+ "sourceKind": "generated"
11630
+ }
11631
+ ],
11441
11632
  "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
11442
11633
  "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11634
+ "capabilityDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11443
11635
  "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11444
11636
  "renderPolicy": {
11445
11637
  "name": "gala-render-policy",
11446
11638
  "version": "2.0.0",
11447
11639
  "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
11448
11640
  },
11449
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
11641
+ "sandbox": {
11642
+ "runnerEnvironment": "github-hosted",
11643
+ "runnerImageRelease": "fixture-1",
11644
+ "runnerImageReleaseDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11645
+ "nodeVersion": "24.18.0",
11646
+ "nodeExecutableDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11647
+ "npmVersion": "11.16.0",
11648
+ "npmExecutableDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11649
+ "locale": "C.UTF-8",
11650
+ "timezone": "UTC",
11651
+ "sourceDateEpoch": "2026-09-13T12:00:00.000Z",
11652
+ "networkPolicyDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11653
+ "filesystemPolicyDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
11654
+ }
11655
+ },
11656
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
11657
+ },
11658
+ {
11659
+ "caseId": "artifact-manifest-invalid-cb19c868614b9a1b",
11660
+ "coveredRuleIds": [
11661
+ "artifact-manifest:#/$defs/manifestIncludedSource:required:path"
11662
+ ],
11663
+ "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
11664
+ "schemaPointer": "#/$defs/manifestIncludedSource",
11665
+ "keyword": "required",
11666
+ "instance": {
11667
+ "sha256": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11668
+ "sourceRevision": "sha1:0000000000000000000000000000000000000001",
11669
+ "role": "publication"
11450
11670
  },
11451
11671
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
11452
11672
  },
@@ -11491,57 +11711,6 @@
11491
11711
  },
11492
11712
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
11493
11713
  },
11494
- {
11495
- "caseId": "artifact-manifest-invalid-d0b78e71d14af7c0",
11496
- "coveredRuleIds": [
11497
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:builder"
11498
- ],
11499
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
11500
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
11501
- "keyword": "required",
11502
- "instance": {
11503
- "repositoryId": "1",
11504
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
11505
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
11506
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11507
- "buildEpoch": "2026-09-13T12:00:00.000Z",
11508
- "contractVersion": "2.0.0",
11509
- "schemas": {
11510
- "package": "@rathnasgala2/schemas",
11511
- "version": "2.0.0",
11512
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11513
- "registry": "https://fixture-1.example.com/"
11514
- },
11515
- "template": {
11516
- "package": "@rathnasgala2/template",
11517
- "version": "2.0.0",
11518
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11519
- "registry": "https://fixture-1.example.com/"
11520
- },
11521
- "theme": {
11522
- "package": "@rathnasgala2/theme-default",
11523
- "version": "2.0.0",
11524
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11525
- "registry": "https://fixture-1.example.com/"
11526
- },
11527
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11528
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11529
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11530
- "baseUrl": "https://fixture-1.example.com/",
11531
- "basePath": "/fixture-1",
11532
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11533
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
11534
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11535
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11536
- "renderPolicy": {
11537
- "name": "gala-render-policy",
11538
- "version": "2.0.0",
11539
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
11540
- },
11541
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
11542
- },
11543
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
11544
- },
11545
11714
  {
11546
11715
  "caseId": "artifact-manifest-invalid-d153650dde8878c6",
11547
11716
  "coveredRuleIds": [
@@ -11621,18 +11790,19 @@
11621
11790
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
11622
11791
  },
11623
11792
  {
11624
- "caseId": "artifact-manifest-invalid-d84e8ba4222b4a82",
11793
+ "caseId": "artifact-manifest-invalid-d7527301bceb7b0f",
11625
11794
  "coveredRuleIds": [
11626
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:buildEpoch"
11795
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:template"
11627
11796
  ],
11628
11797
  "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
11629
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
11798
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
11630
11799
  "keyword": "required",
11631
11800
  "instance": {
11632
11801
  "repositoryId": "1",
11633
11802
  "sourceCommit": "sha1:0000000000000000000000000000000000000001",
11634
11803
  "sourceTree": "sha1:0000000000000000000000000000000000000001",
11635
11804
  "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11805
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
11636
11806
  "contractVersion": "2.0.0",
11637
11807
  "builder": {
11638
11808
  "package": "@rathnasgala2/publish-action",
@@ -11646,12 +11816,6 @@
11646
11816
  "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11647
11817
  "registry": "https://fixture-1.example.com/"
11648
11818
  },
11649
- "template": {
11650
- "package": "@rathnasgala2/template",
11651
- "version": "2.0.0",
11652
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11653
- "registry": "https://fixture-1.example.com/"
11654
- },
11655
11819
  "theme": {
11656
11820
  "package": "@rathnasgala2/theme-default",
11657
11821
  "version": "2.0.0",
@@ -11882,62 +12046,6 @@
11882
12046
  },
11883
12047
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
11884
12048
  },
11885
- {
11886
- "caseId": "artifact-manifest-invalid-da809d136a0743be",
11887
- "coveredRuleIds": [
11888
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:dependencyLockDigest"
11889
- ],
11890
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
11891
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
11892
- "keyword": "required",
11893
- "instance": {
11894
- "repositoryId": "1",
11895
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
11896
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
11897
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11898
- "buildEpoch": "2026-09-13T12:00:00.000Z",
11899
- "contractVersion": "2.0.0",
11900
- "builder": {
11901
- "package": "@rathnasgala2/publish-action",
11902
- "version": "2.0.0",
11903
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11904
- "registry": "https://fixture-1.example.com/"
11905
- },
11906
- "schemas": {
11907
- "package": "@rathnasgala2/schemas",
11908
- "version": "2.0.0",
11909
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11910
- "registry": "https://fixture-1.example.com/"
11911
- },
11912
- "template": {
11913
- "package": "@rathnasgala2/template",
11914
- "version": "2.0.0",
11915
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11916
- "registry": "https://fixture-1.example.com/"
11917
- },
11918
- "theme": {
11919
- "package": "@rathnasgala2/theme-default",
11920
- "version": "2.0.0",
11921
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11922
- "registry": "https://fixture-1.example.com/"
11923
- },
11924
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11925
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11926
- "baseUrl": "https://fixture-1.example.com/",
11927
- "basePath": "/fixture-1",
11928
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11929
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
11930
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11931
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
11932
- "renderPolicy": {
11933
- "name": "gala-render-policy",
11934
- "version": "2.0.0",
11935
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
11936
- },
11937
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
11938
- },
11939
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
11940
- },
11941
12049
  {
11942
12050
  "caseId": "artifact-manifest-invalid-db95e265a8b7e3b7",
11943
12051
  "coveredRuleIds": [
@@ -12429,58 +12537,6 @@
12429
12537
  },
12430
12538
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
12431
12539
  },
12432
- {
12433
- "caseId": "artifact-manifest-invalid-e211e2f2cb183a26",
12434
- "coveredRuleIds": [
12435
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:renderPolicy"
12436
- ],
12437
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
12438
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
12439
- "keyword": "required",
12440
- "instance": {
12441
- "repositoryId": "1",
12442
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
12443
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
12444
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
12445
- "buildEpoch": "2026-09-13T12:00:00.000Z",
12446
- "contractVersion": "2.0.0",
12447
- "builder": {
12448
- "package": "@rathnasgala2/publish-action",
12449
- "version": "2.0.0",
12450
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
12451
- "registry": "https://fixture-1.example.com/"
12452
- },
12453
- "schemas": {
12454
- "package": "@rathnasgala2/schemas",
12455
- "version": "2.0.0",
12456
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
12457
- "registry": "https://fixture-1.example.com/"
12458
- },
12459
- "template": {
12460
- "package": "@rathnasgala2/template",
12461
- "version": "2.0.0",
12462
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
12463
- "registry": "https://fixture-1.example.com/"
12464
- },
12465
- "theme": {
12466
- "package": "@rathnasgala2/theme-default",
12467
- "version": "2.0.0",
12468
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
12469
- "registry": "https://fixture-1.example.com/"
12470
- },
12471
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
12472
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
12473
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
12474
- "baseUrl": "https://fixture-1.example.com/",
12475
- "basePath": "/fixture-1",
12476
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
12477
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
12478
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
12479
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
12480
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
12481
- },
12482
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
12483
- },
12484
12540
  {
12485
12541
  "caseId": "artifact-manifest-invalid-e224b2189168c02b",
12486
12542
  "coveredRuleIds": ["artifact-manifest:#:required:buildToolVersions"],
@@ -12902,19 +12958,19 @@
12902
12958
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
12903
12959
  },
12904
12960
  {
12905
- "caseId": "artifact-manifest-invalid-e91b9c068c8da0f0",
12961
+ "caseId": "artifact-manifest-invalid-e62525a41d04e238",
12906
12962
  "coveredRuleIds": [
12907
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:contractVersion"
12963
+ "artifact-manifest:#/$defs/manifestReproducibleBuildRecord:required:sourceCommit"
12908
12964
  ],
12909
12965
  "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
12910
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
12966
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
12911
12967
  "keyword": "required",
12912
12968
  "instance": {
12913
12969
  "repositoryId": "1",
12914
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
12915
12970
  "sourceTree": "sha1:0000000000000000000000000000000000000001",
12916
12971
  "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
12917
12972
  "buildEpoch": "2026-09-13T12:00:00.000Z",
12973
+ "contractVersion": "2.0.0",
12918
12974
  "builder": {
12919
12975
  "package": "@rathnasgala2/publish-action",
12920
12976
  "version": "2.0.0",
@@ -14093,61 +14149,5 @@
14093
14149
  "interactionBearing": false
14094
14150
  },
14095
14151
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
14096
- },
14097
- {
14098
- "caseId": "artifact-manifest-invalid-fd73efd9ef070dd3",
14099
- "coveredRuleIds": [
14100
- "artifact-manifest:#/$defs/reproducibleBuildRecord:required:repositoryId"
14101
- ],
14102
- "schemaId": "urn:gala:schema:artifact-manifest:2.0.0",
14103
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
14104
- "keyword": "required",
14105
- "instance": {
14106
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
14107
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
14108
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
14109
- "buildEpoch": "2026-09-13T12:00:00.000Z",
14110
- "contractVersion": "2.0.0",
14111
- "builder": {
14112
- "package": "@rathnasgala2/publish-action",
14113
- "version": "2.0.0",
14114
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
14115
- "registry": "https://fixture-1.example.com/"
14116
- },
14117
- "schemas": {
14118
- "package": "@rathnasgala2/schemas",
14119
- "version": "2.0.0",
14120
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
14121
- "registry": "https://fixture-1.example.com/"
14122
- },
14123
- "template": {
14124
- "package": "@rathnasgala2/template",
14125
- "version": "2.0.0",
14126
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
14127
- "registry": "https://fixture-1.example.com/"
14128
- },
14129
- "theme": {
14130
- "package": "@rathnasgala2/theme-default",
14131
- "version": "2.0.0",
14132
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
14133
- "registry": "https://fixture-1.example.com/"
14134
- },
14135
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
14136
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
14137
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
14138
- "baseUrl": "https://fixture-1.example.com/",
14139
- "basePath": "/fixture-1",
14140
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
14141
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
14142
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
14143
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
14144
- "renderPolicy": {
14145
- "name": "gala-render-policy",
14146
- "version": "2.0.0",
14147
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
14148
- },
14149
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
14150
- },
14151
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
14152
14152
  }
14153
14153
  ]