@rathnasgala2/schemas 2.11.0 → 2.13.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (408) hide show
  1. package/README.md +192 -84
  2. package/THIRD_PARTY_LICENSES.json +79 -106
  3. package/diagnostics/diagnostic-map.json +443 -405
  4. package/diagnostics/diagnostic-map.public-runtime-origins.json +5 -0
  5. package/docs/catalogs/app-routes.json +2 -1
  6. package/docs/catalogs/schema-inventory.json +33 -54
  7. package/examples/valid/adapter-capability/rules.json +11 -0
  8. package/examples/valid/artifact-manifest/rules.json +156 -177
  9. package/examples/valid/build-input/rules.json +67 -63
  10. package/examples/valid/build-provenance/rules.json +151 -172
  11. package/examples/valid/deployment-intent/rules.json +152 -148
  12. package/examples/valid/deployment-observation/rules.json +24 -20
  13. package/examples/valid/deployment-receipt/rules.json +152 -148
  14. package/examples/valid/navigation/rules.json +2 -4
  15. package/examples/valid/theme-contract/rules.json +4 -1
  16. package/fixtures/boundary/adapter-capability/rules.json +16 -0
  17. package/fixtures/boundary/artifact-manifest/rules.json +195 -202
  18. package/fixtures/boundary/build-input/rules.json +99 -86
  19. package/fixtures/boundary/build-provenance/rules.json +193 -202
  20. package/fixtures/boundary/deployment-intent/rules.json +186 -140
  21. package/fixtures/boundary/deployment-observation/rules.json +68 -18
  22. package/fixtures/boundary/deployment-receipt/rules.json +186 -140
  23. package/fixtures/boundary/navigation/rules.json +2 -17
  24. package/fixtures/boundary/theme-contract/rules.json +34 -0
  25. package/fixtures/invalid/adapter-capability/SCHEMA_STRING_TOO_LONG/cases.json +11 -0
  26. package/fixtures/invalid/adapter-capability/UTF8_BYTE_LENGTH_INVALID/cases.json +11 -0
  27. package/fixtures/invalid/artifact-manifest/ASCII_BYTE_LENGTH_INVALID/cases.json +13 -0
  28. package/fixtures/invalid/artifact-manifest/INTEGER_RANGE_INVALID/cases.json +24 -0
  29. package/fixtures/invalid/artifact-manifest/REQUEST_FIELD_UNKNOWN/cases.json +19 -19
  30. package/fixtures/invalid/artifact-manifest/SCHEMA_CONSTANT_INVALID/cases.json +48 -48
  31. package/fixtures/invalid/artifact-manifest/SCHEMA_ENUM_INVALID/cases.json +11 -11
  32. package/fixtures/invalid/artifact-manifest/SCHEMA_FORMAT_INVALID/cases.json +0 -9
  33. package/fixtures/invalid/artifact-manifest/SCHEMA_NEGATED_RULE_MATCHED/cases.json +0 -11
  34. package/fixtures/invalid/artifact-manifest/SCHEMA_PATTERN_INVALID/cases.json +0 -22
  35. package/fixtures/invalid/artifact-manifest/SCHEMA_REQUIRED_FIELD_MISSING/cases.json +1105 -1105
  36. package/fixtures/invalid/artifact-manifest/SCHEMA_STRING_TOO_LONG/cases.json +4 -6
  37. package/fixtures/invalid/artifact-manifest/SCHEMA_STRING_TOO_SHORT/cases.json +9 -11
  38. package/fixtures/invalid/artifact-manifest/SCHEMA_TYPE_INVALID/cases.json +22 -31
  39. package/fixtures/invalid/artifact-manifest/UTF8_BYTE_LENGTH_INVALID/cases.json +0 -11
  40. package/fixtures/invalid/build-input/INTEGER_RANGE_INVALID/cases.json +13 -0
  41. package/fixtures/invalid/build-input/REQUEST_FIELD_UNKNOWN/cases.json +32 -32
  42. package/fixtures/invalid/build-input/SCHEMA_CONSTANT_INVALID/cases.json +11 -11
  43. package/fixtures/invalid/build-input/SCHEMA_ENUM_INVALID/cases.json +11 -11
  44. package/fixtures/invalid/build-input/SCHEMA_REQUIRED_FIELD_MISSING/cases.json +78 -78
  45. package/fixtures/invalid/build-input/SCHEMA_TYPE_INVALID/cases.json +51 -18
  46. package/fixtures/invalid/build-provenance/ASCII_BYTE_LENGTH_INVALID/cases.json +13 -0
  47. package/fixtures/invalid/build-provenance/INTEGER_RANGE_INVALID/cases.json +22 -0
  48. package/fixtures/invalid/build-provenance/REQUEST_FIELD_UNKNOWN/cases.json +56 -56
  49. package/fixtures/invalid/build-provenance/SCHEMA_CONSTANT_INVALID/cases.json +37 -37
  50. package/fixtures/invalid/build-provenance/SCHEMA_ENUM_INVALID/cases.json +11 -11
  51. package/fixtures/invalid/build-provenance/SCHEMA_FORMAT_INVALID/cases.json +0 -9
  52. package/fixtures/invalid/build-provenance/SCHEMA_NEGATED_RULE_MATCHED/cases.json +0 -11
  53. package/fixtures/invalid/build-provenance/SCHEMA_PATTERN_INVALID/cases.json +0 -22
  54. package/fixtures/invalid/build-provenance/SCHEMA_REQUIRED_FIELD_MISSING/cases.json +927 -927
  55. package/fixtures/invalid/build-provenance/SCHEMA_STRING_TOO_LONG/cases.json +9 -11
  56. package/fixtures/invalid/build-provenance/SCHEMA_STRING_TOO_SHORT/cases.json +8 -10
  57. package/fixtures/invalid/build-provenance/SCHEMA_TYPE_INVALID/cases.json +20 -25
  58. package/fixtures/invalid/build-provenance/UTF8_BYTE_LENGTH_INVALID/cases.json +0 -11
  59. package/fixtures/invalid/deployment-intent/INTEGER_RANGE_INVALID/cases.json +24 -0
  60. package/fixtures/invalid/deployment-intent/REQUEST_FIELD_UNKNOWN/cases.json +30 -30
  61. package/fixtures/invalid/deployment-intent/SCHEMA_CONSTANT_INVALID/cases.json +41 -41
  62. package/fixtures/invalid/deployment-intent/SCHEMA_ENUM_INVALID/cases.json +11 -11
  63. package/fixtures/invalid/deployment-intent/SCHEMA_FORMAT_INVALID/cases.json +0 -9
  64. package/fixtures/invalid/deployment-intent/SCHEMA_REQUIRED_FIELD_MISSING/cases.json +1209 -1209
  65. package/fixtures/invalid/deployment-intent/SCHEMA_STRING_TOO_LONG/cases.json +9 -0
  66. package/fixtures/invalid/deployment-intent/SCHEMA_STRING_TOO_SHORT/cases.json +9 -0
  67. package/fixtures/invalid/deployment-intent/SCHEMA_TYPE_INVALID/cases.json +22 -20
  68. package/fixtures/invalid/deployment-observation/INTEGER_RANGE_INVALID/cases.json +24 -0
  69. package/fixtures/invalid/deployment-observation/REQUEST_FIELD_UNKNOWN/cases.json +16 -16
  70. package/fixtures/invalid/deployment-observation/SCHEMA_FORMAT_INVALID/cases.json +0 -9
  71. package/fixtures/invalid/deployment-observation/SCHEMA_REQUIRED_FIELD_MISSING/cases.json +39 -39
  72. package/fixtures/invalid/deployment-observation/SCHEMA_STRING_TOO_LONG/cases.json +11 -0
  73. package/fixtures/invalid/deployment-observation/SCHEMA_STRING_TOO_SHORT/cases.json +11 -0
  74. package/fixtures/invalid/deployment-observation/SCHEMA_TYPE_INVALID/cases.json +11 -11
  75. package/fixtures/invalid/deployment-receipt/INTEGER_RANGE_INVALID/cases.json +24 -0
  76. package/fixtures/invalid/deployment-receipt/REQUEST_FIELD_UNKNOWN/cases.json +70 -70
  77. package/fixtures/invalid/deployment-receipt/SCHEMA_CONSTANT_INVALID/cases.json +36 -36
  78. package/fixtures/invalid/deployment-receipt/SCHEMA_ENUM_INVALID/cases.json +11 -11
  79. package/fixtures/invalid/deployment-receipt/SCHEMA_FORMAT_INVALID/cases.json +0 -9
  80. package/fixtures/invalid/deployment-receipt/SCHEMA_REQUIRED_FIELD_MISSING/cases.json +1304 -1304
  81. package/fixtures/invalid/deployment-receipt/SCHEMA_STRING_TOO_LONG/cases.json +9 -0
  82. package/fixtures/invalid/deployment-receipt/SCHEMA_STRING_TOO_SHORT/cases.json +9 -0
  83. package/fixtures/invalid/deployment-receipt/SCHEMA_TYPE_INVALID/cases.json +22 -20
  84. package/fixtures/invalid/navigation/SCHEMA_ARRAY_TOO_LONG/cases.json +0 -15
  85. package/fixtures/invalid/navigation/SCHEMA_CONSTANT_INVALID/cases.json +11 -0
  86. package/fixtures/invalid/navigation/SCHEMA_TYPE_INVALID/cases.json +0 -11
  87. package/fixtures/invalid/theme-contract/INTEGER_RANGE_INVALID/cases.json +11 -0
  88. package/fixtures/invalid/theme-contract/SCHEMA_FORMAT_INVALID/cases.json +0 -9
  89. package/fixtures/invalid/theme-contract/SCHEMA_STRING_TOO_LONG/cases.json +9 -0
  90. package/fixtures/invalid/theme-contract/SCHEMA_STRING_TOO_SHORT/cases.json +9 -0
  91. package/fixtures/manifest.json +3217 -2930
  92. package/fixtures/unknown-field/adapter-capability/rules.json +2 -0
  93. package/fixtures/unknown-field/artifact-manifest/rules.json +111 -114
  94. package/fixtures/unknown-field/build-input/rules.json +36 -32
  95. package/fixtures/unknown-field/build-provenance/rules.json +111 -114
  96. package/fixtures/unknown-field/deployment-intent/rules.json +109 -105
  97. package/fixtures/unknown-field/deployment-observation/rules.json +24 -20
  98. package/fixtures/unknown-field/deployment-receipt/rules.json +109 -105
  99. package/fixtures/unknown-field/navigation/rules.json +1 -3
  100. package/fixtures/unknown-field/theme-contract/rules.json +3 -0
  101. package/generated/browser/runtime-origins-validator-core.d.mts +10 -0
  102. package/generated/browser/runtime-origins-validator-core.mjs +35 -0
  103. package/generated/browser/validator-core.d.mts +10 -0
  104. package/generated/browser/validator-core.mjs +80 -0
  105. package/generated/typescript/contracts/artifact-manifest.d.ts +49 -48
  106. package/generated/typescript/contracts/build-input.d.ts +15 -15
  107. package/generated/typescript/contracts/build-provenance.d.ts +51 -50
  108. package/generated/typescript/contracts/deployment-intent.d.ts +6 -6
  109. package/generated/typescript/contracts/deployment-observation.d.ts +1 -1
  110. package/generated/typescript/contracts/deployment-receipt.d.ts +5 -5
  111. package/generated/typescript/contracts/navigation.d.ts +1 -1
  112. package/generated/typescript/index.js +11 -37
  113. package/openapi/http-catalog.json +14 -2
  114. package/openapi/openapi.yaml +527 -13
  115. package/package.json +19 -16
  116. package/sbom.cdx.json +23 -23
  117. package/schemas/adapter-capability.schema.json +5 -1
  118. package/schemas/appearance.schema.json +1 -1
  119. package/schemas/artifact-manifest.schema.json +15 -18
  120. package/schemas/build-input.schema.json +18 -11
  121. package/schemas/build-provenance.schema.json +15 -18
  122. package/schemas/deployment-intent.schema.json +13 -8
  123. package/schemas/deployment-observation.schema.json +10 -5
  124. package/schemas/deployment-receipt.schema.json +12 -7
  125. package/schemas/navigation.schema.json +5 -26
  126. package/schemas/theme-contract.schema.json +4 -2
  127. package/src/index.js +2 -2
  128. package/src/internal/browser-schema-validator.js +43 -0
  129. package/src/internal/format-validators.js +1 -1
  130. package/src/internal/gala-keywords.js +148 -0
  131. package/src/internal/validator-core.js +244 -108
  132. package/src/runtime-origins.js +18 -18
  133. package/types/index.d.ts +2 -2
  134. package/types/internal/browser-schema-validator.d.ts +16 -0
  135. package/types/internal/format-validators.d.ts +1 -1
  136. package/types/internal/gala-keywords.d.ts +68 -0
  137. package/types/internal/validator-core.d.ts +80 -1
  138. package/compatibility/compatibility.json +0 -594
  139. package/generated/java/src/main/java/io/gala/schema/generated/GalaSchemaRegistry.java +0 -67
  140. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityAdapterConfigurationCapabilities.java +0 -24
  141. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityAdapterIdentity.java +0 -20
  142. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityCapabilityDecision.java +0 -62
  143. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityCredentialEgressProfile.java +0 -35
  144. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityDestinationIdentity.java +0 -25
  145. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityDestinationProviderCoordinates.java +0 -19
  146. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityDocument.java +0 -52
  147. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityFilesystemProviderLimits.java +0 -32
  148. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityGithubActionsOidcOriginCatalog.java +0 -25
  149. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityHttpProviderLimits.java +0 -72
  150. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemAllowlist.java +0 -21
  151. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemAllowlistEntry.java +0 -28
  152. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemCapabilityEvidence.java +0 -42
  153. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemControlPublication.java +0 -26
  154. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemControlRow.java +0 -44
  155. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemFailureEvidence.java +0 -40
  156. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemObservationEvidence.java +0 -40
  157. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemPlatform.java +0 -25
  158. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemProbeSummary.java +0 -32
  159. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemProbeTranscript.java +0 -25
  160. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemReplacement.java +0 -22
  161. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityLocalFilesystemSurfaceIdentity.java +0 -20
  162. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityManagedExecutionBudget.java +0 -26
  163. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityPagesOidcCredentialEgress.java +0 -30
  164. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityProviderCallClassBinding.java +0 -22
  165. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityProviderCredentialEgress.java +0 -26
  166. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityProviderCredentialHeader.java +0 -24
  167. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityProviderDerivedHeader.java +0 -18
  168. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityProviderFixedHeader.java +0 -18
  169. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilityProviderRequestTemplate.java +0 -39
  170. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilitySpacesControlPlaneBinding.java +0 -32
  171. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilitySpacesControlPlaneRequest.java +0 -26
  172. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilitySpacesControlPlaneRequestCatalog.java +0 -31
  173. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilitySpacesControlPlaneResponseCatalog.java +0 -20
  174. package/generated/java/src/main/java/io/gala/schema/generated/model/AdapterCapabilitySpacesWebsiteConfiguration.java +0 -24
  175. package/generated/java/src/main/java/io/gala/schema/generated/model/AppearanceColorMode.java +0 -19
  176. package/generated/java/src/main/java/io/gala/schema/generated/model/AppearanceDocument.java +0 -37
  177. package/generated/java/src/main/java/io/gala/schema/generated/model/AppearanceExtensionMap.java +0 -15
  178. package/generated/java/src/main/java/io/gala/schema/generated/model/AppearanceSemanticTokens.java +0 -15
  179. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestActionPinEvidence.java +0 -20
  180. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestArtifactLicenseConclusion.java +0 -21
  181. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestAssertedWorkload.java +0 -44
  182. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestBuildSandboxEvidence.java +0 -38
  183. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestDocument.java +0 -73
  184. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestFinding.java +0 -22
  185. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestAsset.java +0 -24
  186. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestCompositionIdentity.java +0 -25
  187. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestExcludedInput.java +0 -22
  188. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestIncludedSource.java +0 -22
  189. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestRedirect.java +0 -24
  190. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestRoute.java +0 -28
  191. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestSourceIdentity.java +0 -26
  192. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestManifestValidationEvidence.java +0 -22
  193. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestMeasurement.java +0 -20
  194. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestPackageIdentity.java +0 -22
  195. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestRenderPolicyIdentity.java +0 -20
  196. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestReproducibleBuildRecord.java +0 -56
  197. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestWorkflowCarrierEvidence.java +0 -26
  198. package/generated/java/src/main/java/io/gala/schema/generated/model/ArtifactManifestWorkflowFileEvidence.java +0 -26
  199. package/generated/java/src/main/java/io/gala/schema/generated/model/AuthorDocument.java +0 -33
  200. package/generated/java/src/main/java/io/gala/schema/generated/model/AuthorExtensionMap.java +0 -15
  201. package/generated/java/src/main/java/io/gala/schema/generated/model/AuthorLocalizedAuthor.java +0 -20
  202. package/generated/java/src/main/java/io/gala/schema/generated/model/AuthorSocialLink.java +0 -19
  203. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputAdapterIdentity.java +0 -20
  204. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputAppearanceNormalized.java +0 -33
  205. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputAuthorNormalized.java +0 -31
  206. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputBuildPackages.java +0 -25
  207. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputColorMode.java +0 -19
  208. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputContentBuildRecord.java +0 -33
  209. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputContentFrontmatterNormalized.java +0 -44
  210. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputDestinationCapabilityProfile.java +0 -20
  211. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputDocument.java +0 -51
  212. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputLocalizedAuthor.java +0 -20
  213. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputModuleBuildSelection.java +0 -15
  214. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputNavigationItem.java +0 -23
  215. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputNavigationLeaf.java +0 -22
  216. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputNavigationNormalized.java +0 -21
  217. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputPackageIdentity.java +0 -22
  218. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputPublicationNormalized.java +0 -39
  219. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputRenderPolicyIdentity.java +0 -20
  220. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputRenderableBody.java +0 -26
  221. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputRepositorySnapshot.java +0 -22
  222. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputResolvedFile.java +0 -18
  223. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputResolvedMedia.java +0 -20
  224. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputSemanticTokens.java +0 -15
  225. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildInputSocialLink.java +0 -19
  226. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceActionPinEvidence.java +0 -20
  227. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceArtifactLicenseConclusion.java +0 -21
  228. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceAssertedWorkload.java +0 -44
  229. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceBuildSandboxEvidence.java +0 -38
  230. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceDocument.java +0 -69
  231. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceFinding.java +0 -22
  232. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestAsset.java +0 -24
  233. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestCompositionIdentity.java +0 -25
  234. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestExcludedInput.java +0 -22
  235. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestIncludedSource.java +0 -22
  236. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestRedirect.java +0 -24
  237. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestRoute.java +0 -28
  238. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestSourceIdentity.java +0 -26
  239. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceManifestValidationEvidence.java +0 -22
  240. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceMeasurement.java +0 -20
  241. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenancePackageIdentity.java +0 -22
  242. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceRenderPolicyIdentity.java +0 -20
  243. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceReproducibleBuildRecord.java +0 -56
  244. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceWorkflowCarrierEvidence.java +0 -26
  245. package/generated/java/src/main/java/io/gala/schema/generated/model/BuildProvenanceWorkflowFileEvidence.java +0 -26
  246. package/generated/java/src/main/java/io/gala/schema/generated/model/ContentFrontmatterDocument.java +0 -50
  247. package/generated/java/src/main/java/io/gala/schema/generated/model/ContentFrontmatterExtensionMap.java +0 -15
  248. package/generated/java/src/main/java/io/gala/schema/generated/model/ContentFrontmatterMediaRef.java +0 -20
  249. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentActivationBasis.java +0 -20
  250. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentActivationDetectionObservation.java +0 -33
  251. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentActivationDetectionPlan.java +0 -44
  252. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentActivationDetectionProbe.java +0 -52
  253. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentAdapterIdentity.java +0 -20
  254. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentCancellationFinalizationEvidence.java +0 -41
  255. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDeadlineFinalizationEvidence.java +0 -39
  256. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDeadlineFinalizationStream.java +0 -22
  257. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDeploymentPolicyDecision.java +0 -75
  258. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDestinationIdentity.java +0 -25
  259. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDestinationMutationAuthority.java +0 -36
  260. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDestinationProviderCoordinates.java +0 -19
  261. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentDocument.java +0 -136
  262. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentExpectedRedirectHop.java +0 -23
  263. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentObservedVerificationHeader.java +0 -19
  264. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPackageIdentity.java +0 -22
  265. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPagesInterveningRunAttempt.java +0 -20
  266. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPagesReconciliationCommand.java +0 -48
  267. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPagesReconciliationRecovery.java +0 -41
  268. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPagesRunAttemptGapProof.java +0 -27
  269. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPublicGenerationMarkerPayload.java +0 -24
  270. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentPublicProbeObservation.java +0 -54
  271. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentRecognizedPriorRouteContract.java +0 -30
  272. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentRenderPolicyIdentity.java +0 -20
  273. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentReproducibleBuildRecord.java +0 -56
  274. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentSupersessionFinalizationEvidence.java +0 -45
  275. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentVerificationHeaderExpectation.java +0 -18
  276. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentIntentVerificationPlanTarget.java +0 -52
  277. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationActivationDetectionObservation.java +0 -33
  278. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationActivationDetectionProbe.java +0 -52
  279. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationAdapterIdentity.java +0 -20
  280. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationCancellationFinalizationEvidence.java +0 -41
  281. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationDeadlineFinalizationEvidence.java +0 -39
  282. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationDeadlineFinalizationStream.java +0 -22
  283. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationDestinationIdentity.java +0 -25
  284. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationDestinationProviderCoordinates.java +0 -19
  285. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationDocument.java +0 -57
  286. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationExpectedRedirectHop.java +0 -23
  287. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationObservedVerificationHeader.java +0 -19
  288. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationPackageIdentity.java +0 -22
  289. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationPublicProbeObservation.java +0 -54
  290. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationRecognizedPriorRouteContract.java +0 -30
  291. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationRenderPolicyIdentity.java +0 -20
  292. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationSupersessionFinalizationEvidence.java +0 -45
  293. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationVerificationHeaderExpectation.java +0 -18
  294. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentObservationVerificationPlanTarget.java +0 -52
  295. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptActivationBasis.java +0 -20
  296. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptActivationDetectionObservation.java +0 -33
  297. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptActivationDetectionPlan.java +0 -44
  298. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptActivationDetectionProbe.java +0 -52
  299. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptAdapterIdentity.java +0 -20
  300. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptCancellationFinalizationEvidence.java +0 -41
  301. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeadlineFinalizationEvidence.java +0 -39
  302. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeadlineFinalizationStream.java +0 -22
  303. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentAttempt.java +0 -38
  304. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentFailure.java +0 -24
  305. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentObservation.java +0 -53
  306. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentPolicyDecision.java +0 -75
  307. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentStageEvidence.java +0 -36
  308. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentStageInput.java +0 -26
  309. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentStageObservationEvidenceReference.java +0 -18
  310. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDeploymentStageResult.java +0 -31
  311. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDestinationIdentity.java +0 -25
  312. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDestinationMutationAuthority.java +0 -36
  313. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDestinationProviderCoordinates.java +0 -19
  314. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptDocument.java +0 -105
  315. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptExpectedRedirectHop.java +0 -23
  316. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptFinding.java +0 -22
  317. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptObservedVerificationHeader.java +0 -19
  318. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPackageIdentity.java +0 -22
  319. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPagesInterveningRunAttempt.java +0 -20
  320. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPagesReconciliationCommand.java +0 -48
  321. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPagesReconciliationRecovery.java +0 -41
  322. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPagesRunAttemptGapProof.java +0 -27
  323. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPublicGenerationMarkerPayload.java +0 -24
  324. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptPublicProbeObservation.java +0 -54
  325. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptRecognizedPriorRouteContract.java +0 -30
  326. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptRenderPolicyIdentity.java +0 -20
  327. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptReproducibleBuildRecord.java +0 -56
  328. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptSupersessionFinalizationEvidence.java +0 -45
  329. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptVerificationHeaderExpectation.java +0 -18
  330. package/generated/java/src/main/java/io/gala/schema/generated/model/DeploymentReceiptVerificationPlanTarget.java +0 -52
  331. package/generated/java/src/main/java/io/gala/schema/generated/model/EventEnvelopeDocument.java +0 -46
  332. package/generated/java/src/main/java/io/gala/schema/generated/model/EventEnvelopeRegisteredEventPayload.java +0 -26
  333. package/generated/java/src/main/java/io/gala/schema/generated/model/LockDependencyEdge.java +0 -18
  334. package/generated/java/src/main/java/io/gala/schema/generated/model/LockDocument.java +0 -39
  335. package/generated/java/src/main/java/io/gala/schema/generated/model/LockLockedPackage.java +0 -26
  336. package/generated/java/src/main/java/io/gala/schema/generated/model/LockLockedTemplate.java +0 -28
  337. package/generated/java/src/main/java/io/gala/schema/generated/model/LockPackageIdentity.java +0 -22
  338. package/generated/java/src/main/java/io/gala/schema/generated/model/NavigationDocument.java +0 -25
  339. package/generated/java/src/main/java/io/gala/schema/generated/model/NavigationExtensionMap.java +0 -15
  340. package/generated/java/src/main/java/io/gala/schema/generated/model/NavigationNavigationItem.java +0 -23
  341. package/generated/java/src/main/java/io/gala/schema/generated/model/NavigationNavigationLeaf.java +0 -23
  342. package/generated/java/src/main/java/io/gala/schema/generated/model/ProblemDocument.java +0 -37
  343. package/generated/java/src/main/java/io/gala/schema/generated/model/ProblemFieldError.java +0 -18
  344. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicGenerationMarkerDocument.java +0 -24
  345. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicRuntimeOriginsDocument.java +0 -44
  346. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicationDocument.java +0 -41
  347. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicationExtensionMap.java +0 -15
  348. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicationFooterCard.java +0 -23
  349. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicationPublicationProfile.java +0 -18
  350. package/generated/java/src/main/java/io/gala/schema/generated/model/PublicationSocialLink.java +0 -19
  351. package/generated/java/src/main/java/io/gala/schema/generated/model/RepositoryAssetRoot.java +0 -16
  352. package/generated/java/src/main/java/io/gala/schema/generated/model/RepositoryContentRoot.java +0 -23
  353. package/generated/java/src/main/java/io/gala/schema/generated/model/RepositoryDocument.java +0 -41
  354. package/generated/java/src/main/java/io/gala/schema/generated/model/RepositoryExtensionMap.java +0 -15
  355. package/generated/java/src/main/java/io/gala/schema/generated/model/RepositoryGeneratedRoot.java +0 -20
  356. package/generated/java/src/main/java/io/gala/schema/generated/model/TemplateCompositionDocument.java +0 -18
  357. package/generated/java/src/main/java/io/gala/schema/generated/model/ThemeContractDocument.java +0 -53
  358. package/generated/java/src/main/java/io/gala/schema/generated/model/ThemeContractPassiveAsset.java +0 -24
  359. package/generated/java/src/main/java/io/gala/schema/generated/model/ThemeContractThemeBudgets.java +0 -20
  360. package/generated/java/src/main/java/io/gala/schema/generated/model/ThemeContractThemeToken.java +0 -22
  361. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/adapter-capability.schema.json +0 -2689
  362. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/appearance.schema.json +0 -226
  363. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/artifact-manifest.schema.json +0 -1063
  364. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/author.schema.json +0 -231
  365. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/build-input.schema.json +0 -866
  366. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/build-provenance.schema.json +0 -937
  367. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/content-frontmatter.schema.json +0 -241
  368. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/deployment-intent.schema.json +0 -2067
  369. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/deployment-observation.schema.json +0 -1654
  370. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/deployment-receipt.schema.json +0 -5546
  371. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/event-envelope.schema.json +0 -195
  372. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/lock.schema.json +0 -326
  373. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/navigation.schema.json +0 -229
  374. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/problem.schema.json +0 -194
  375. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/public-generation-marker.schema.json +0 -142
  376. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/public-runtime-origins.schema.json +0 -183
  377. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/publication.schema.json +0 -248
  378. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/repository.schema.json +0 -219
  379. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/template-composition.schema.json +0 -133
  380. package/generated/java/src/main/resources/io/gala/schema/generated/schemas/theme-contract.schema.json +0 -850
  381. package/generated/typescript/validator-core.cjs +0 -17
  382. package/openapi/generator/spring.json +0 -22
  383. package/openapi/generator/typescript-fetch.json +0 -19
  384. package/openapi/source/authentication.yaml +0 -557
  385. package/openapi/source/callbacks.yaml +0 -332
  386. package/openapi/source/components.yaml +0 -5670
  387. package/openapi/source/github.yaml +0 -351
  388. package/openapi/source/internal.yaml +0 -71
  389. package/openapi/source/membership-invitations.yaml +0 -203
  390. package/openapi/source/organizations.yaml +0 -11144
  391. package/openapi/source/root.yaml +0 -20
  392. package/openapi/source/self.yaml +0 -1940
  393. package/openapi/source/session.yaml +0 -308
  394. package/openapi/source/workloads.yaml +0 -744
  395. package/src/internal/build-artifact-semantics.js +0 -4391
  396. package/src/internal/deployment-record-semantics.js +0 -7567
  397. package/src/internal/deployment-stage-semantics.js +0 -1207
  398. package/src/internal/http-problem-contract.js +0 -35
  399. package/src/internal/managed-evidence-journal.js +0 -160
  400. package/src/internal/public-runtime-origins.js +0 -143
  401. package/src/internal/theme-composition-semantics.js +0 -2441
  402. package/types/internal/build-artifact-semantics.d.ts +0 -77
  403. package/types/internal/deployment-record-semantics.d.ts +0 -313
  404. package/types/internal/deployment-stage-semantics.d.ts +0 -108
  405. package/types/internal/http-problem-contract.d.ts +0 -4
  406. package/types/internal/managed-evidence-journal.d.ts +0 -26
  407. package/types/internal/public-runtime-origins.d.ts +0 -22
  408. package/types/internal/theme-composition-semantics.d.ts +0 -143
package/fixtures/invalid/build-provenance/SCHEMA_REQUIRED_FIELD_MISSING/cases.json CHANGED
@@ -16,62 +16,6 @@
16
16
  },
17
17
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
18
18
  },
19
- {
20
- "caseId": "build-provenance-invalid-0191a1f256b810ca",
21
- "coveredRuleIds": [
22
- "build-provenance:#/$defs/reproducibleBuildRecord:required:sourceTree"
23
- ],
24
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
25
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
26
- "keyword": "required",
27
- "instance": {
28
- "repositoryId": "1",
29
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
30
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
31
- "buildEpoch": "2026-09-13T12:00:00.000Z",
32
- "contractVersion": "2.0.0",
33
- "builder": {
34
- "package": "@rathnasgala2/publish-action",
35
- "version": "2.0.0",
36
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
37
- "registry": "https://fixture-1.example.com/"
38
- },
39
- "schemas": {
40
- "package": "@rathnasgala2/schemas",
41
- "version": "2.0.0",
42
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
43
- "registry": "https://fixture-1.example.com/"
44
- },
45
- "template": {
46
- "package": "@rathnasgala2/template",
47
- "version": "2.0.0",
48
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
49
- "registry": "https://fixture-1.example.com/"
50
- },
51
- "theme": {
52
- "package": "@rathnasgala2/theme-default",
53
- "version": "2.0.0",
54
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
55
- "registry": "https://fixture-1.example.com/"
56
- },
57
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
58
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
59
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
60
- "baseUrl": "https://fixture-1.example.com/",
61
- "basePath": "/fixture-1",
62
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
63
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
64
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
65
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
66
- "renderPolicy": {
67
- "name": "gala-render-policy",
68
- "version": "2.0.0",
69
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
70
- },
71
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
72
- },
73
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
74
- },
75
19
  {
76
20
  "caseId": "build-provenance-invalid-040ecfe40aa53c00",
77
21
  "coveredRuleIds": [
@@ -337,62 +281,6 @@
337
281
  },
338
282
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
339
283
  },
340
- {
341
- "caseId": "build-provenance-invalid-0d7a6f634220f98f",
342
- "coveredRuleIds": [
343
- "build-provenance:#/$defs/reproducibleBuildRecord:required:contractVersion"
344
- ],
345
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
346
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
347
- "keyword": "required",
348
- "instance": {
349
- "repositoryId": "1",
350
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
351
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
352
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
353
- "buildEpoch": "2026-09-13T12:00:00.000Z",
354
- "builder": {
355
- "package": "@rathnasgala2/publish-action",
356
- "version": "2.0.0",
357
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
358
- "registry": "https://fixture-1.example.com/"
359
- },
360
- "schemas": {
361
- "package": "@rathnasgala2/schemas",
362
- "version": "2.0.0",
363
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
364
- "registry": "https://fixture-1.example.com/"
365
- },
366
- "template": {
367
- "package": "@rathnasgala2/template",
368
- "version": "2.0.0",
369
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
370
- "registry": "https://fixture-1.example.com/"
371
- },
372
- "theme": {
373
- "package": "@rathnasgala2/theme-default",
374
- "version": "2.0.0",
375
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
376
- "registry": "https://fixture-1.example.com/"
377
- },
378
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
379
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
380
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
381
- "baseUrl": "https://fixture-1.example.com/",
382
- "basePath": "/fixture-1",
383
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
384
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
385
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
386
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
387
- "renderPolicy": {
388
- "name": "gala-render-policy",
389
- "version": "2.0.0",
390
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
391
- },
392
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
393
- },
394
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
395
- },
396
284
  {
397
285
  "caseId": "build-provenance-invalid-0dacc513e7f41c98",
398
286
  "coveredRuleIds": [
@@ -423,57 +311,6 @@
423
311
  },
424
312
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
425
313
  },
426
- {
427
- "caseId": "build-provenance-invalid-0f85ea2f0df417e6",
428
- "coveredRuleIds": [
429
- "build-provenance:#/$defs/reproducibleBuildRecord:required:template"
430
- ],
431
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
432
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
433
- "keyword": "required",
434
- "instance": {
435
- "repositoryId": "1",
436
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
437
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
438
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
439
- "buildEpoch": "2026-09-13T12:00:00.000Z",
440
- "contractVersion": "2.0.0",
441
- "builder": {
442
- "package": "@rathnasgala2/publish-action",
443
- "version": "2.0.0",
444
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
445
- "registry": "https://fixture-1.example.com/"
446
- },
447
- "schemas": {
448
- "package": "@rathnasgala2/schemas",
449
- "version": "2.0.0",
450
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
451
- "registry": "https://fixture-1.example.com/"
452
- },
453
- "theme": {
454
- "package": "@rathnasgala2/theme-default",
455
- "version": "2.0.0",
456
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
457
- "registry": "https://fixture-1.example.com/"
458
- },
459
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
460
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
461
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
462
- "baseUrl": "https://fixture-1.example.com/",
463
- "basePath": "/fixture-1",
464
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
465
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
466
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
467
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
468
- "renderPolicy": {
469
- "name": "gala-render-policy",
470
- "version": "2.0.0",
471
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
472
- },
473
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
474
- },
475
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
476
- },
477
314
  {
478
315
  "caseId": "build-provenance-invalid-10769bbc901b7604",
479
316
  "coveredRuleIds": [
@@ -497,57 +334,6 @@
497
334
  },
498
335
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
499
336
  },
500
- {
501
- "caseId": "build-provenance-invalid-10ad452272ed2356",
502
- "coveredRuleIds": [
503
- "build-provenance:#/$defs/reproducibleBuildRecord:required:builder"
504
- ],
505
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
506
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
507
- "keyword": "required",
508
- "instance": {
509
- "repositoryId": "1",
510
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
511
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
512
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
513
- "buildEpoch": "2026-09-13T12:00:00.000Z",
514
- "contractVersion": "2.0.0",
515
- "schemas": {
516
- "package": "@rathnasgala2/schemas",
517
- "version": "2.0.0",
518
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
519
- "registry": "https://fixture-1.example.com/"
520
- },
521
- "template": {
522
- "package": "@rathnasgala2/template",
523
- "version": "2.0.0",
524
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
525
- "registry": "https://fixture-1.example.com/"
526
- },
527
- "theme": {
528
- "package": "@rathnasgala2/theme-default",
529
- "version": "2.0.0",
530
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
531
- "registry": "https://fixture-1.example.com/"
532
- },
533
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
534
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
535
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
536
- "baseUrl": "https://fixture-1.example.com/",
537
- "basePath": "/fixture-1",
538
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
539
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
540
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
541
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
542
- "renderPolicy": {
543
- "name": "gala-render-policy",
544
- "version": "2.0.0",
545
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
546
- },
547
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
548
- },
549
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
550
- },
551
337
  {
552
338
  "caseId": "build-provenance-invalid-11a53b28351d303c",
553
339
  "coveredRuleIds": [
@@ -581,12 +367,12 @@
581
367
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
582
368
  },
583
369
  {
584
- "caseId": "build-provenance-invalid-17ccf0b7a97b329a",
370
+ "caseId": "build-provenance-invalid-15b1bbfa0ff7853e",
585
371
  "coveredRuleIds": [
586
- "build-provenance:#/$defs/reproducibleBuildRecord:required:workflowIdentity"
372
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:dependencyLockDigest"
587
373
  ],
588
374
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
589
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
375
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
590
376
  "keyword": "required",
591
377
  "instance": {
592
378
  "repositoryId": "1",
@@ -619,7 +405,6 @@
619
405
  "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
620
406
  "registry": "https://fixture-1.example.com/"
621
407
  },
622
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
623
408
  "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
624
409
  "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
625
410
  "baseUrl": "https://fixture-1.example.com/",
@@ -632,7 +417,8 @@
632
417
  "name": "gala-render-policy",
633
418
  "version": "2.0.0",
634
419
  "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
635
- }
420
+ },
421
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
636
422
  },
637
423
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
638
424
  },
@@ -846,14 +632,15 @@
846
632
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
847
633
  },
848
634
  {
849
- "caseId": "build-provenance-invalid-192c0c96dc269104",
635
+ "caseId": "build-provenance-invalid-1970bca91f2486e9",
850
636
  "coveredRuleIds": [
851
- "build-provenance:#/$defs/reproducibleBuildRecord:required:repositoryId"
637
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:schemas"
852
638
  ],
853
639
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
854
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
640
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
855
641
  "keyword": "required",
856
642
  "instance": {
643
+ "repositoryId": "1",
857
644
  "sourceCommit": "sha1:0000000000000000000000000000000000000001",
858
645
  "sourceTree": "sha1:0000000000000000000000000000000000000001",
859
646
  "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
@@ -865,12 +652,6 @@
865
652
  "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
866
653
  "registry": "https://fixture-1.example.com/"
867
654
  },
868
- "schemas": {
869
- "package": "@rathnasgala2/schemas",
870
- "version": "2.0.0",
871
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
872
- "registry": "https://fixture-1.example.com/"
873
- },
874
655
  "template": {
875
656
  "package": "@rathnasgala2/template",
876
657
  "version": "2.0.0",
@@ -917,81 +698,30 @@
917
698
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
918
699
  },
919
700
  {
920
- "caseId": "build-provenance-invalid-1b3ab4bc0b73ee52",
921
- "coveredRuleIds": [
922
- "build-provenance:#/$defs/reproducibleBuildRecord:required:schemas"
923
- ],
701
+ "caseId": "build-provenance-invalid-1e187bacbe301749",
702
+ "coveredRuleIds": ["build-provenance:#:required:requiredOidcClaims"],
924
703
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
925
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
704
+ "schemaPointer": "#",
926
705
  "keyword": "required",
927
706
  "instance": {
928
- "repositoryId": "1",
929
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
930
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
931
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
932
- "buildEpoch": "2026-09-13T12:00:00.000Z",
933
- "contractVersion": "2.0.0",
934
- "builder": {
935
- "package": "@rathnasgala2/publish-action",
936
- "version": "2.0.0",
937
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
938
- "registry": "https://fixture-1.example.com/"
939
- },
940
- "template": {
941
- "package": "@rathnasgala2/template",
942
- "version": "2.0.0",
943
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
944
- "registry": "https://fixture-1.example.com/"
945
- },
946
- "theme": {
947
- "package": "@rathnasgala2/theme-default",
948
- "version": "2.0.0",
949
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
950
- "registry": "https://fixture-1.example.com/"
951
- },
952
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
953
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
954
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
955
- "baseUrl": "https://fixture-1.example.com/",
956
- "basePath": "/fixture-1",
957
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
958
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
959
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
960
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
961
- "renderPolicy": {
962
- "name": "gala-render-policy",
963
- "version": "2.0.0",
964
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
965
- },
966
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
967
- },
968
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
969
- },
970
- {
971
- "caseId": "build-provenance-invalid-1e187bacbe301749",
972
- "coveredRuleIds": ["build-provenance:#:required:requiredOidcClaims"],
973
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
974
- "schemaPointer": "#",
975
- "keyword": "required",
976
- "instance": {
977
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
978
- "schemaVersion": "2.0.0",
979
- "assertedWorkload": {
980
- "repository": "fixture-owner/fixture-repository",
981
- "repositoryId": "1",
982
- "repositoryOwner": "fixture-1",
983
- "repositoryOwnerId": "1",
984
- "ref": "fixture-1",
985
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
986
- "workflowTriggerCommit": "sha1:0000000000000000000000000000000000000001",
987
- "runId": "1",
988
- "runNumber": "1",
989
- "runAttempt": 1,
990
- "eventName": "create",
991
- "actor": "fixture-1",
992
- "actorId": "1",
993
- "callerPath": ".github/workflows/gala-publish-v2.yml",
994
- "verificationState": "pending-authorize-oidc"
707
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
708
+ "schemaVersion": "2.0.0",
709
+ "assertedWorkload": {
710
+ "repository": "fixture-owner/fixture-repository",
711
+ "repositoryId": "1",
712
+ "repositoryOwner": "fixture-1",
713
+ "repositoryOwnerId": "1",
714
+ "ref": "fixture-1",
715
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
716
+ "workflowTriggerCommit": "sha1:0000000000000000000000000000000000000001",
717
+ "runId": "1",
718
+ "runNumber": "1",
719
+ "runAttempt": 1,
720
+ "eventName": "create",
721
+ "actor": "fixture-1",
722
+ "actorId": "1",
723
+ "callerPath": ".github/workflows/gala-publish-v2.yml",
724
+ "verificationState": "pending-authorize-oidc"
995
725
  },
996
726
  "workflowFiles": [
997
727
  {
@@ -1640,6 +1370,57 @@
1640
1370
  },
1641
1371
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
1642
1372
  },
1373
+ {
1374
+ "caseId": "build-provenance-invalid-274af6042ef52fca",
1375
+ "coveredRuleIds": [
1376
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:builder"
1377
+ ],
1378
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
1379
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
1380
+ "keyword": "required",
1381
+ "instance": {
1382
+ "repositoryId": "1",
1383
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
1384
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
1385
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1386
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
1387
+ "contractVersion": "2.0.0",
1388
+ "schemas": {
1389
+ "package": "@rathnasgala2/schemas",
1390
+ "version": "2.0.0",
1391
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1392
+ "registry": "https://fixture-1.example.com/"
1393
+ },
1394
+ "template": {
1395
+ "package": "@rathnasgala2/template",
1396
+ "version": "2.0.0",
1397
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1398
+ "registry": "https://fixture-1.example.com/"
1399
+ },
1400
+ "theme": {
1401
+ "package": "@rathnasgala2/theme-default",
1402
+ "version": "2.0.0",
1403
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1404
+ "registry": "https://fixture-1.example.com/"
1405
+ },
1406
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1407
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1408
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1409
+ "baseUrl": "https://fixture-1.example.com/",
1410
+ "basePath": "/fixture-1",
1411
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1412
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
1413
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1414
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1415
+ "renderPolicy": {
1416
+ "name": "gala-render-policy",
1417
+ "version": "2.0.0",
1418
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
1419
+ },
1420
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
1421
+ },
1422
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
1423
+ },
1643
1424
  {
1644
1425
  "caseId": "build-provenance-invalid-2b28f3125e027d2d",
1645
1426
  "coveredRuleIds": [
@@ -1716,6 +1497,118 @@
1716
1497
  },
1717
1498
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
1718
1499
  },
1500
+ {
1501
+ "caseId": "build-provenance-invalid-304c4decaa759755",
1502
+ "coveredRuleIds": [
1503
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:repositoryId"
1504
+ ],
1505
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
1506
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
1507
+ "keyword": "required",
1508
+ "instance": {
1509
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
1510
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
1511
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1512
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
1513
+ "contractVersion": "2.0.0",
1514
+ "builder": {
1515
+ "package": "@rathnasgala2/publish-action",
1516
+ "version": "2.0.0",
1517
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1518
+ "registry": "https://fixture-1.example.com/"
1519
+ },
1520
+ "schemas": {
1521
+ "package": "@rathnasgala2/schemas",
1522
+ "version": "2.0.0",
1523
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1524
+ "registry": "https://fixture-1.example.com/"
1525
+ },
1526
+ "template": {
1527
+ "package": "@rathnasgala2/template",
1528
+ "version": "2.0.0",
1529
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1530
+ "registry": "https://fixture-1.example.com/"
1531
+ },
1532
+ "theme": {
1533
+ "package": "@rathnasgala2/theme-default",
1534
+ "version": "2.0.0",
1535
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1536
+ "registry": "https://fixture-1.example.com/"
1537
+ },
1538
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1539
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1540
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1541
+ "baseUrl": "https://fixture-1.example.com/",
1542
+ "basePath": "/fixture-1",
1543
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1544
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
1545
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1546
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1547
+ "renderPolicy": {
1548
+ "name": "gala-render-policy",
1549
+ "version": "2.0.0",
1550
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
1551
+ },
1552
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
1553
+ },
1554
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
1555
+ },
1556
+ {
1557
+ "caseId": "build-provenance-invalid-34f522ccf175480d",
1558
+ "coveredRuleIds": [
1559
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:contractVersion"
1560
+ ],
1561
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
1562
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
1563
+ "keyword": "required",
1564
+ "instance": {
1565
+ "repositoryId": "1",
1566
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
1567
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
1568
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1569
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
1570
+ "builder": {
1571
+ "package": "@rathnasgala2/publish-action",
1572
+ "version": "2.0.0",
1573
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1574
+ "registry": "https://fixture-1.example.com/"
1575
+ },
1576
+ "schemas": {
1577
+ "package": "@rathnasgala2/schemas",
1578
+ "version": "2.0.0",
1579
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1580
+ "registry": "https://fixture-1.example.com/"
1581
+ },
1582
+ "template": {
1583
+ "package": "@rathnasgala2/template",
1584
+ "version": "2.0.0",
1585
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1586
+ "registry": "https://fixture-1.example.com/"
1587
+ },
1588
+ "theme": {
1589
+ "package": "@rathnasgala2/theme-default",
1590
+ "version": "2.0.0",
1591
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1592
+ "registry": "https://fixture-1.example.com/"
1593
+ },
1594
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1595
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1596
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1597
+ "baseUrl": "https://fixture-1.example.com/",
1598
+ "basePath": "/fixture-1",
1599
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1600
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
1601
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1602
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
1603
+ "renderPolicy": {
1604
+ "name": "gala-render-policy",
1605
+ "version": "2.0.0",
1606
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
1607
+ },
1608
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
1609
+ },
1610
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
1611
+ },
1719
1612
  {
1720
1613
  "caseId": "build-provenance-invalid-35103967aa38310e",
1721
1614
  "coveredRuleIds": ["build-provenance:#/$defs/finding:required:severity"],
@@ -2484,6 +2377,62 @@
2484
2377
  },
2485
2378
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
2486
2379
  },
2380
+ {
2381
+ "caseId": "build-provenance-invalid-4a4b9add620d8a41",
2382
+ "coveredRuleIds": [
2383
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:baseUrl"
2384
+ ],
2385
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
2386
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
2387
+ "keyword": "required",
2388
+ "instance": {
2389
+ "repositoryId": "1",
2390
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
2391
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
2392
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2393
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
2394
+ "contractVersion": "2.0.0",
2395
+ "builder": {
2396
+ "package": "@rathnasgala2/publish-action",
2397
+ "version": "2.0.0",
2398
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2399
+ "registry": "https://fixture-1.example.com/"
2400
+ },
2401
+ "schemas": {
2402
+ "package": "@rathnasgala2/schemas",
2403
+ "version": "2.0.0",
2404
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2405
+ "registry": "https://fixture-1.example.com/"
2406
+ },
2407
+ "template": {
2408
+ "package": "@rathnasgala2/template",
2409
+ "version": "2.0.0",
2410
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2411
+ "registry": "https://fixture-1.example.com/"
2412
+ },
2413
+ "theme": {
2414
+ "package": "@rathnasgala2/theme-default",
2415
+ "version": "2.0.0",
2416
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2417
+ "registry": "https://fixture-1.example.com/"
2418
+ },
2419
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2420
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2421
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2422
+ "basePath": "/fixture-1",
2423
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2424
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
2425
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2426
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2427
+ "renderPolicy": {
2428
+ "name": "gala-render-policy",
2429
+ "version": "2.0.0",
2430
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
2431
+ },
2432
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
2433
+ },
2434
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
2435
+ },
2487
2436
  {
2488
2437
  "caseId": "build-provenance-invalid-4a6f404f28f51af5",
2489
2438
  "coveredRuleIds": [
@@ -2928,8 +2877,64 @@
2928
2877
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
2929
2878
  },
2930
2879
  {
2931
- "caseId": "build-provenance-invalid-58d5867b2c6c0776",
2932
- "coveredRuleIds": ["build-provenance:#:required:actionPins"],
2880
+ "caseId": "build-provenance-invalid-57c6c55362304814",
2881
+ "coveredRuleIds": [
2882
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:sourceCommit"
2883
+ ],
2884
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
2885
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
2886
+ "keyword": "required",
2887
+ "instance": {
2888
+ "repositoryId": "1",
2889
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
2890
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2891
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
2892
+ "contractVersion": "2.0.0",
2893
+ "builder": {
2894
+ "package": "@rathnasgala2/publish-action",
2895
+ "version": "2.0.0",
2896
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2897
+ "registry": "https://fixture-1.example.com/"
2898
+ },
2899
+ "schemas": {
2900
+ "package": "@rathnasgala2/schemas",
2901
+ "version": "2.0.0",
2902
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2903
+ "registry": "https://fixture-1.example.com/"
2904
+ },
2905
+ "template": {
2906
+ "package": "@rathnasgala2/template",
2907
+ "version": "2.0.0",
2908
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2909
+ "registry": "https://fixture-1.example.com/"
2910
+ },
2911
+ "theme": {
2912
+ "package": "@rathnasgala2/theme-default",
2913
+ "version": "2.0.0",
2914
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2915
+ "registry": "https://fixture-1.example.com/"
2916
+ },
2917
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2918
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2919
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2920
+ "baseUrl": "https://fixture-1.example.com/",
2921
+ "basePath": "/fixture-1",
2922
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2923
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
2924
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2925
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
2926
+ "renderPolicy": {
2927
+ "name": "gala-render-policy",
2928
+ "version": "2.0.0",
2929
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
2930
+ },
2931
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
2932
+ },
2933
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
2934
+ },
2935
+ {
2936
+ "caseId": "build-provenance-invalid-58d5867b2c6c0776",
2937
+ "coveredRuleIds": ["build-provenance:#:required:actionPins"],
2933
2938
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
2934
2939
  "schemaPointer": "#",
2935
2940
  "keyword": "required",
@@ -3118,52 +3123,17 @@
3118
3123
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3119
3124
  },
3120
3125
  {
3121
- "caseId": "build-provenance-invalid-5b60a34d7fa5c3c3",
3122
- "coveredRuleIds": [
3123
- "build-provenance:#/$defs/workflowCarrierEvidence:required:expiresAt"
3124
- ],
3125
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
3126
- "schemaPointer": "#/$defs/workflowCarrierEvidence",
3127
- "keyword": "required",
3128
- "instance": {
3129
- "purpose": "verified-inputs",
3130
- "artifactId": "1",
3131
- "name": "fixture-1",
3132
- "byteCount": "1",
3133
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
3134
- },
3135
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3136
- },
3137
- {
3138
- "caseId": "build-provenance-invalid-5cdeff475ea9b058",
3139
- "coveredRuleIds": [
3140
- "build-provenance:#/$defs/workflowCarrierEvidence:required:purpose"
3141
- ],
3142
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
3143
- "schemaPointer": "#/$defs/workflowCarrierEvidence",
3144
- "keyword": "required",
3145
- "instance": {
3146
- "artifactId": "1",
3147
- "name": "fixture-1",
3148
- "byteCount": "1",
3149
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3150
- "expiresAt": "2026-09-13T12:00:00.000Z"
3151
- },
3152
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3153
- },
3154
- {
3155
- "caseId": "build-provenance-invalid-5ce576b5863f96dd",
3126
+ "caseId": "build-provenance-invalid-5b3654934b68e97e",
3156
3127
  "coveredRuleIds": [
3157
- "build-provenance:#/$defs/reproducibleBuildRecord:required:destinationCapabilityDigest"
3128
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:repositoryRootDigest"
3158
3129
  ],
3159
3130
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
3160
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
3131
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
3161
3132
  "keyword": "required",
3162
3133
  "instance": {
3163
3134
  "repositoryId": "1",
3164
3135
  "sourceCommit": "sha1:0000000000000000000000000000000000000001",
3165
3136
  "sourceTree": "sha1:0000000000000000000000000000000000000001",
3166
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3167
3137
  "buildEpoch": "2026-09-13T12:00:00.000Z",
3168
3138
  "contractVersion": "2.0.0",
3169
3139
  "builder": {
@@ -3195,6 +3165,7 @@
3195
3165
  "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3196
3166
  "baseUrl": "https://fixture-1.example.com/",
3197
3167
  "basePath": "/fixture-1",
3168
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3198
3169
  "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
3199
3170
  "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3200
3171
  "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
@@ -3208,58 +3179,36 @@
3208
3179
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3209
3180
  },
3210
3181
  {
3211
- "caseId": "build-provenance-invalid-5ea3ea275f72d92b",
3182
+ "caseId": "build-provenance-invalid-5b60a34d7fa5c3c3",
3212
3183
  "coveredRuleIds": [
3213
- "build-provenance:#/$defs/reproducibleBuildRecord:required:repositoryRootDigest"
3184
+ "build-provenance:#/$defs/workflowCarrierEvidence:required:expiresAt"
3214
3185
  ],
3215
3186
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
3216
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
3187
+ "schemaPointer": "#/$defs/workflowCarrierEvidence",
3217
3188
  "keyword": "required",
3218
3189
  "instance": {
3219
- "repositoryId": "1",
3220
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
3221
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
3222
- "buildEpoch": "2026-09-13T12:00:00.000Z",
3223
- "contractVersion": "2.0.0",
3224
- "builder": {
3225
- "package": "@rathnasgala2/publish-action",
3226
- "version": "2.0.0",
3227
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3228
- "registry": "https://fixture-1.example.com/"
3229
- },
3230
- "schemas": {
3231
- "package": "@rathnasgala2/schemas",
3232
- "version": "2.0.0",
3233
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3234
- "registry": "https://fixture-1.example.com/"
3235
- },
3236
- "template": {
3237
- "package": "@rathnasgala2/template",
3238
- "version": "2.0.0",
3239
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3240
- "registry": "https://fixture-1.example.com/"
3241
- },
3242
- "theme": {
3243
- "package": "@rathnasgala2/theme-default",
3244
- "version": "2.0.0",
3245
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3246
- "registry": "https://fixture-1.example.com/"
3247
- },
3248
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3249
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3250
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3251
- "baseUrl": "https://fixture-1.example.com/",
3252
- "basePath": "/fixture-1",
3253
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3254
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
3255
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3256
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3257
- "renderPolicy": {
3258
- "name": "gala-render-policy",
3259
- "version": "2.0.0",
3260
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
3261
- },
3262
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
3190
+ "purpose": "verified-inputs",
3191
+ "artifactId": "1",
3192
+ "name": "fixture-1",
3193
+ "byteCount": "1",
3194
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
3195
+ },
3196
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3197
+ },
3198
+ {
3199
+ "caseId": "build-provenance-invalid-5cdeff475ea9b058",
3200
+ "coveredRuleIds": [
3201
+ "build-provenance:#/$defs/workflowCarrierEvidence:required:purpose"
3202
+ ],
3203
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
3204
+ "schemaPointer": "#/$defs/workflowCarrierEvidence",
3205
+ "keyword": "required",
3206
+ "instance": {
3207
+ "artifactId": "1",
3208
+ "name": "fixture-1",
3209
+ "byteCount": "1",
3210
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3211
+ "expiresAt": "2026-09-13T12:00:00.000Z"
3263
3212
  },
3264
3213
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3265
3214
  },
@@ -3491,62 +3440,6 @@
3491
3440
  },
3492
3441
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3493
3442
  },
3494
- {
3495
- "caseId": "build-provenance-invalid-63a4a07f4adf0409",
3496
- "coveredRuleIds": [
3497
- "build-provenance:#/$defs/reproducibleBuildRecord:required:dependencyLockDigest"
3498
- ],
3499
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
3500
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
3501
- "keyword": "required",
3502
- "instance": {
3503
- "repositoryId": "1",
3504
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
3505
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
3506
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3507
- "buildEpoch": "2026-09-13T12:00:00.000Z",
3508
- "contractVersion": "2.0.0",
3509
- "builder": {
3510
- "package": "@rathnasgala2/publish-action",
3511
- "version": "2.0.0",
3512
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3513
- "registry": "https://fixture-1.example.com/"
3514
- },
3515
- "schemas": {
3516
- "package": "@rathnasgala2/schemas",
3517
- "version": "2.0.0",
3518
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3519
- "registry": "https://fixture-1.example.com/"
3520
- },
3521
- "template": {
3522
- "package": "@rathnasgala2/template",
3523
- "version": "2.0.0",
3524
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3525
- "registry": "https://fixture-1.example.com/"
3526
- },
3527
- "theme": {
3528
- "package": "@rathnasgala2/theme-default",
3529
- "version": "2.0.0",
3530
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3531
- "registry": "https://fixture-1.example.com/"
3532
- },
3533
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3534
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3535
- "baseUrl": "https://fixture-1.example.com/",
3536
- "basePath": "/fixture-1",
3537
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3538
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
3539
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3540
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3541
- "renderPolicy": {
3542
- "name": "gala-render-policy",
3543
- "version": "2.0.0",
3544
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
3545
- },
3546
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
3547
- },
3548
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3549
- },
3550
3443
  {
3551
3444
  "caseId": "build-provenance-invalid-6459d8272e94aea3",
3552
3445
  "coveredRuleIds": [
@@ -3754,26 +3647,12 @@
3754
3647
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3755
3648
  },
3756
3649
  {
3757
- "caseId": "build-provenance-invalid-68e4ffbb0256a75c",
3758
- "coveredRuleIds": [
3759
- "build-provenance:#/$defs/actionPinEvidence:required:actionDefinitionDigest"
3760
- ],
3761
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
3762
- "schemaPointer": "#/$defs/actionPinEvidence",
3763
- "keyword": "required",
3764
- "instance": {
3765
- "use": "fixture/actions/test@0101010101010101010101010101010101010101",
3766
- "commit": "sha1:0000000000000000000000000000000000000001"
3767
- },
3768
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3769
- },
3770
- {
3771
- "caseId": "build-provenance-invalid-6e1c6a12b6385d31",
3650
+ "caseId": "build-provenance-invalid-68b6cb44f2b915e8",
3772
3651
  "coveredRuleIds": [
3773
- "build-provenance:#/$defs/reproducibleBuildRecord:required:buildInputDigest"
3652
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:destinationCapabilityDigest"
3774
3653
  ],
3775
3654
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
3776
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
3655
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
3777
3656
  "keyword": "required",
3778
3657
  "instance": {
3779
3658
  "repositoryId": "1",
@@ -3808,9 +3687,9 @@
3808
3687
  },
3809
3688
  "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3810
3689
  "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3690
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3811
3691
  "baseUrl": "https://fixture-1.example.com/",
3812
3692
  "basePath": "/fixture-1",
3813
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3814
3693
  "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
3815
3694
  "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3816
3695
  "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
@@ -3823,6 +3702,20 @@
3823
3702
  },
3824
3703
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3825
3704
  },
3705
+ {
3706
+ "caseId": "build-provenance-invalid-68e4ffbb0256a75c",
3707
+ "coveredRuleIds": [
3708
+ "build-provenance:#/$defs/actionPinEvidence:required:actionDefinitionDigest"
3709
+ ],
3710
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
3711
+ "schemaPointer": "#/$defs/actionPinEvidence",
3712
+ "keyword": "required",
3713
+ "instance": {
3714
+ "use": "fixture/actions/test@0101010101010101010101010101010101010101",
3715
+ "commit": "sha1:0000000000000000000000000000000000000001"
3716
+ },
3717
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3718
+ },
3826
3719
  {
3827
3720
  "caseId": "build-provenance-invalid-6e3cd49af6045816",
3828
3721
  "coveredRuleIds": [
@@ -3854,68 +3747,12 @@
3854
3747
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3855
3748
  },
3856
3749
  {
3857
- "caseId": "build-provenance-invalid-6e5417e035bf4c37",
3750
+ "caseId": "build-provenance-invalid-6ef50f8bf8fb95dd",
3858
3751
  "coveredRuleIds": [
3859
- "build-provenance:#/$defs/reproducibleBuildRecord:required:sourceCommit"
3752
+ "build-provenance:#/$defs/manifestExcludedInput:required:path"
3860
3753
  ],
3861
3754
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
3862
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
3863
- "keyword": "required",
3864
- "instance": {
3865
- "repositoryId": "1",
3866
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
3867
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3868
- "buildEpoch": "2026-09-13T12:00:00.000Z",
3869
- "contractVersion": "2.0.0",
3870
- "builder": {
3871
- "package": "@rathnasgala2/publish-action",
3872
- "version": "2.0.0",
3873
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3874
- "registry": "https://fixture-1.example.com/"
3875
- },
3876
- "schemas": {
3877
- "package": "@rathnasgala2/schemas",
3878
- "version": "2.0.0",
3879
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3880
- "registry": "https://fixture-1.example.com/"
3881
- },
3882
- "template": {
3883
- "package": "@rathnasgala2/template",
3884
- "version": "2.0.0",
3885
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3886
- "registry": "https://fixture-1.example.com/"
3887
- },
3888
- "theme": {
3889
- "package": "@rathnasgala2/theme-default",
3890
- "version": "2.0.0",
3891
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3892
- "registry": "https://fixture-1.example.com/"
3893
- },
3894
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3895
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3896
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3897
- "baseUrl": "https://fixture-1.example.com/",
3898
- "basePath": "/fixture-1",
3899
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3900
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
3901
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3902
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
3903
- "renderPolicy": {
3904
- "name": "gala-render-policy",
3905
- "version": "2.0.0",
3906
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
3907
- },
3908
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
3909
- },
3910
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
3911
- },
3912
- {
3913
- "caseId": "build-provenance-invalid-6ef50f8bf8fb95dd",
3914
- "coveredRuleIds": [
3915
- "build-provenance:#/$defs/manifestExcludedInput:required:path"
3916
- ],
3917
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
3918
- "schemaPointer": "#/$defs/manifestExcludedInput",
3755
+ "schemaPointer": "#/$defs/manifestExcludedInput",
3919
3756
  "keyword": "required",
3920
3757
  "instance": {
3921
3758
  "sha256": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
@@ -4171,6 +4008,62 @@
4171
4008
  },
4172
4009
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4173
4010
  },
4011
+ {
4012
+ "caseId": "build-provenance-invalid-77c154123ccd916c",
4013
+ "coveredRuleIds": [
4014
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:packageReleaseCatalogDigest"
4015
+ ],
4016
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
4017
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
4018
+ "keyword": "required",
4019
+ "instance": {
4020
+ "repositoryId": "1",
4021
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
4022
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
4023
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4024
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
4025
+ "contractVersion": "2.0.0",
4026
+ "builder": {
4027
+ "package": "@rathnasgala2/publish-action",
4028
+ "version": "2.0.0",
4029
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4030
+ "registry": "https://fixture-1.example.com/"
4031
+ },
4032
+ "schemas": {
4033
+ "package": "@rathnasgala2/schemas",
4034
+ "version": "2.0.0",
4035
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4036
+ "registry": "https://fixture-1.example.com/"
4037
+ },
4038
+ "template": {
4039
+ "package": "@rathnasgala2/template",
4040
+ "version": "2.0.0",
4041
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4042
+ "registry": "https://fixture-1.example.com/"
4043
+ },
4044
+ "theme": {
4045
+ "package": "@rathnasgala2/theme-default",
4046
+ "version": "2.0.0",
4047
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4048
+ "registry": "https://fixture-1.example.com/"
4049
+ },
4050
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4051
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4052
+ "baseUrl": "https://fixture-1.example.com/",
4053
+ "basePath": "/fixture-1",
4054
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4055
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
4056
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4057
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4058
+ "renderPolicy": {
4059
+ "name": "gala-render-policy",
4060
+ "version": "2.0.0",
4061
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
4062
+ },
4063
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
4064
+ },
4065
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4066
+ },
4174
4067
  {
4175
4068
  "caseId": "build-provenance-invalid-7827b68324396770",
4176
4069
  "coveredRuleIds": [
@@ -4204,12 +4097,29 @@
4204
4097
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4205
4098
  },
4206
4099
  {
4207
- "caseId": "build-provenance-invalid-7ae80221a0bfdbac",
4100
+ "caseId": "build-provenance-invalid-7b077bfcad67d0a4",
4101
+ "coveredRuleIds": [
4102
+ "build-provenance:#/$defs/workflowCarrierEvidence:required:byteCount"
4103
+ ],
4104
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
4105
+ "schemaPointer": "#/$defs/workflowCarrierEvidence",
4106
+ "keyword": "required",
4107
+ "instance": {
4108
+ "purpose": "verified-inputs",
4109
+ "artifactId": "1",
4110
+ "name": "fixture-1",
4111
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4112
+ "expiresAt": "2026-09-13T12:00:00.000Z"
4113
+ },
4114
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4115
+ },
4116
+ {
4117
+ "caseId": "build-provenance-invalid-7d0e2ab27636d8b9",
4208
4118
  "coveredRuleIds": [
4209
- "build-provenance:#/$defs/reproducibleBuildRecord:required:packageReleaseCatalogDigest"
4119
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:policyReleaseId"
4210
4120
  ],
4211
4121
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
4212
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
4122
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
4213
4123
  "keyword": "required",
4214
4124
  "instance": {
4215
4125
  "repositoryId": "1",
@@ -4243,11 +4153,11 @@
4243
4153
  "registry": "https://fixture-1.example.com/"
4244
4154
  },
4245
4155
  "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4156
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4246
4157
  "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4247
4158
  "baseUrl": "https://fixture-1.example.com/",
4248
4159
  "basePath": "/fixture-1",
4249
4160
  "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4250
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
4251
4161
  "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4252
4162
  "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4253
4163
  "renderPolicy": {
@@ -4259,23 +4169,6 @@
4259
4169
  },
4260
4170
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4261
4171
  },
4262
- {
4263
- "caseId": "build-provenance-invalid-7b077bfcad67d0a4",
4264
- "coveredRuleIds": [
4265
- "build-provenance:#/$defs/workflowCarrierEvidence:required:byteCount"
4266
- ],
4267
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
4268
- "schemaPointer": "#/$defs/workflowCarrierEvidence",
4269
- "keyword": "required",
4270
- "instance": {
4271
- "purpose": "verified-inputs",
4272
- "artifactId": "1",
4273
- "name": "fixture-1",
4274
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4275
- "expiresAt": "2026-09-13T12:00:00.000Z"
4276
- },
4277
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4278
- },
4279
4172
  {
4280
4173
  "caseId": "build-provenance-invalid-7d302649b4ca0d7e",
4281
4174
  "coveredRuleIds": [
@@ -4716,62 +4609,6 @@
4716
4609
  },
4717
4610
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4718
4611
  },
4719
- {
4720
- "caseId": "build-provenance-invalid-8388fbe41a556aa2",
4721
- "coveredRuleIds": [
4722
- "build-provenance:#/$defs/reproducibleBuildRecord:required:basePath"
4723
- ],
4724
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
4725
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
4726
- "keyword": "required",
4727
- "instance": {
4728
- "repositoryId": "1",
4729
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
4730
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
4731
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4732
- "buildEpoch": "2026-09-13T12:00:00.000Z",
4733
- "contractVersion": "2.0.0",
4734
- "builder": {
4735
- "package": "@rathnasgala2/publish-action",
4736
- "version": "2.0.0",
4737
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4738
- "registry": "https://fixture-1.example.com/"
4739
- },
4740
- "schemas": {
4741
- "package": "@rathnasgala2/schemas",
4742
- "version": "2.0.0",
4743
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4744
- "registry": "https://fixture-1.example.com/"
4745
- },
4746
- "template": {
4747
- "package": "@rathnasgala2/template",
4748
- "version": "2.0.0",
4749
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4750
- "registry": "https://fixture-1.example.com/"
4751
- },
4752
- "theme": {
4753
- "package": "@rathnasgala2/theme-default",
4754
- "version": "2.0.0",
4755
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4756
- "registry": "https://fixture-1.example.com/"
4757
- },
4758
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4759
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4760
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4761
- "baseUrl": "https://fixture-1.example.com/",
4762
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4763
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
4764
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4765
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4766
- "renderPolicy": {
4767
- "name": "gala-render-policy",
4768
- "version": "2.0.0",
4769
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
4770
- },
4771
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
4772
- },
4773
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4774
- },
4775
4612
  {
4776
4613
  "caseId": "build-provenance-invalid-8502c4c231d684cf",
4777
4614
  "coveredRuleIds": [
@@ -5024,29 +4861,12 @@
5024
4861
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5025
4862
  },
5026
4863
  {
5027
- "caseId": "build-provenance-invalid-86ee57ed4cbab5f3",
5028
- "coveredRuleIds": [
5029
- "build-provenance:#/$defs/workflowFileEvidence:required:path"
5030
- ],
5031
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
5032
- "schemaPointer": "#/$defs/workflowFileEvidence",
5033
- "keyword": "required",
5034
- "instance": {
5035
- "role": "author-caller",
5036
- "repositoryId": "1",
5037
- "commit": "sha1:0000000000000000000000000000000000000001",
5038
- "fileDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5039
- "identitySource": "declared-graph"
5040
- },
5041
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5042
- },
5043
- {
5044
- "caseId": "build-provenance-invalid-8b253f414439d91a",
4864
+ "caseId": "build-provenance-invalid-8668670882af647e",
5045
4865
  "coveredRuleIds": [
5046
- "build-provenance:#/$defs/reproducibleBuildRecord:required:baseUrl"
4866
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:stylingContractDigest"
5047
4867
  ],
5048
4868
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
5049
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
4869
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
5050
4870
  "keyword": "required",
5051
4871
  "instance": {
5052
4872
  "repositoryId": "1",
@@ -5082,11 +4902,11 @@
5082
4902
  "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5083
4903
  "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5084
4904
  "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4905
+ "baseUrl": "https://fixture-1.example.com/",
5085
4906
  "basePath": "/fixture-1",
5086
4907
  "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5087
4908
  "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
5088
4909
  "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5089
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5090
4910
  "renderPolicy": {
5091
4911
  "name": "gala-render-policy",
5092
4912
  "version": "2.0.0",
@@ -5096,6 +4916,23 @@
5096
4916
  },
5097
4917
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5098
4918
  },
4919
+ {
4920
+ "caseId": "build-provenance-invalid-86ee57ed4cbab5f3",
4921
+ "coveredRuleIds": [
4922
+ "build-provenance:#/$defs/workflowFileEvidence:required:path"
4923
+ ],
4924
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
4925
+ "schemaPointer": "#/$defs/workflowFileEvidence",
4926
+ "keyword": "required",
4927
+ "instance": {
4928
+ "role": "author-caller",
4929
+ "repositoryId": "1",
4930
+ "commit": "sha1:0000000000000000000000000000000000000001",
4931
+ "fileDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
4932
+ "identitySource": "declared-graph"
4933
+ },
4934
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4935
+ },
5099
4936
  {
5100
4937
  "caseId": "build-provenance-invalid-8bfb3c45c62338ee",
5101
4938
  "coveredRuleIds": [
@@ -5145,6 +4982,20 @@
5145
4982
  },
5146
4983
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5147
4984
  },
4985
+ {
4986
+ "caseId": "build-provenance-invalid-8e684463d5119a6d",
4987
+ "coveredRuleIds": [
4988
+ "build-provenance:#/$defs/manifestRenderPolicyIdentity:required:version"
4989
+ ],
4990
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
4991
+ "schemaPointer": "#/$defs/manifestRenderPolicyIdentity",
4992
+ "keyword": "required",
4993
+ "instance": {
4994
+ "name": "gala-render-policy",
4995
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
4996
+ },
4997
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
4998
+ },
5148
4999
  {
5149
5000
  "caseId": "build-provenance-invalid-8f4aa29b0aece8a8",
5150
5001
  "coveredRuleIds": [
@@ -5177,64 +5028,23 @@
5177
5028
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5178
5029
  },
5179
5030
  {
5180
- "caseId": "build-provenance-invalid-8f8e882527e273c3",
5031
+ "caseId": "build-provenance-invalid-9290f1fe86c6071d",
5032
+ "coveredRuleIds": [
5033
+ "build-provenance:#/$defs/manifestRenderPolicyIdentity:required:digest"
5034
+ ],
5035
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
5036
+ "schemaPointer": "#/$defs/manifestRenderPolicyIdentity",
5037
+ "keyword": "required",
5038
+ "instance": { "name": "gala-render-policy", "version": "2.0.0" },
5039
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5040
+ },
5041
+ {
5042
+ "caseId": "build-provenance-invalid-93f6051fbdca7b2c",
5181
5043
  "coveredRuleIds": [
5182
- "build-provenance:#/$defs/reproducibleBuildRecord:required:renderPolicy"
5044
+ "build-provenance:#/$defs/buildToolIdentity/oneOf/0:required:name"
5183
5045
  ],
5184
5046
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
5185
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
5186
- "keyword": "required",
5187
- "instance": {
5188
- "repositoryId": "1",
5189
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
5190
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
5191
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5192
- "buildEpoch": "2026-09-13T12:00:00.000Z",
5193
- "contractVersion": "2.0.0",
5194
- "builder": {
5195
- "package": "@rathnasgala2/publish-action",
5196
- "version": "2.0.0",
5197
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5198
- "registry": "https://fixture-1.example.com/"
5199
- },
5200
- "schemas": {
5201
- "package": "@rathnasgala2/schemas",
5202
- "version": "2.0.0",
5203
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5204
- "registry": "https://fixture-1.example.com/"
5205
- },
5206
- "template": {
5207
- "package": "@rathnasgala2/template",
5208
- "version": "2.0.0",
5209
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5210
- "registry": "https://fixture-1.example.com/"
5211
- },
5212
- "theme": {
5213
- "package": "@rathnasgala2/theme-default",
5214
- "version": "2.0.0",
5215
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5216
- "registry": "https://fixture-1.example.com/"
5217
- },
5218
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5219
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5220
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5221
- "baseUrl": "https://fixture-1.example.com/",
5222
- "basePath": "/fixture-1",
5223
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5224
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
5225
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5226
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5227
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
5228
- },
5229
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5230
- },
5231
- {
5232
- "caseId": "build-provenance-invalid-93f6051fbdca7b2c",
5233
- "coveredRuleIds": [
5234
- "build-provenance:#/$defs/buildToolIdentity/oneOf/0:required:name"
5235
- ],
5236
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
5237
- "schemaPointer": "#/$defs/buildToolIdentity/oneOf/0",
5047
+ "schemaPointer": "#/$defs/buildToolIdentity/oneOf/0",
5238
5048
  "keyword": "required",
5239
5049
  "instance": {
5240
5050
  "kind": "runtime",
@@ -5243,62 +5053,6 @@
5243
5053
  },
5244
5054
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5245
5055
  },
5246
- {
5247
- "caseId": "build-provenance-invalid-9462dd99e0d64893",
5248
- "coveredRuleIds": [
5249
- "build-provenance:#/$defs/reproducibleBuildRecord:required:buildPolicyDecisionDigest"
5250
- ],
5251
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
5252
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
5253
- "keyword": "required",
5254
- "instance": {
5255
- "repositoryId": "1",
5256
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
5257
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
5258
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5259
- "buildEpoch": "2026-09-13T12:00:00.000Z",
5260
- "contractVersion": "2.0.0",
5261
- "builder": {
5262
- "package": "@rathnasgala2/publish-action",
5263
- "version": "2.0.0",
5264
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5265
- "registry": "https://fixture-1.example.com/"
5266
- },
5267
- "schemas": {
5268
- "package": "@rathnasgala2/schemas",
5269
- "version": "2.0.0",
5270
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5271
- "registry": "https://fixture-1.example.com/"
5272
- },
5273
- "template": {
5274
- "package": "@rathnasgala2/template",
5275
- "version": "2.0.0",
5276
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5277
- "registry": "https://fixture-1.example.com/"
5278
- },
5279
- "theme": {
5280
- "package": "@rathnasgala2/theme-default",
5281
- "version": "2.0.0",
5282
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5283
- "registry": "https://fixture-1.example.com/"
5284
- },
5285
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5286
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5287
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5288
- "baseUrl": "https://fixture-1.example.com/",
5289
- "basePath": "/fixture-1",
5290
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5291
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
5292
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5293
- "renderPolicy": {
5294
- "name": "gala-render-policy",
5295
- "version": "2.0.0",
5296
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
5297
- },
5298
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
5299
- },
5300
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5301
- },
5302
5056
  {
5303
5057
  "caseId": "build-provenance-invalid-949c595d62bc4499",
5304
5058
  "coveredRuleIds": [
@@ -5771,57 +5525,6 @@
5771
5525
  },
5772
5526
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5773
5527
  },
5774
- {
5775
- "caseId": "build-provenance-invalid-9f48e8358863ff22",
5776
- "coveredRuleIds": [
5777
- "build-provenance:#/$defs/reproducibleBuildRecord:required:theme"
5778
- ],
5779
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
5780
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
5781
- "keyword": "required",
5782
- "instance": {
5783
- "repositoryId": "1",
5784
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
5785
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
5786
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5787
- "buildEpoch": "2026-09-13T12:00:00.000Z",
5788
- "contractVersion": "2.0.0",
5789
- "builder": {
5790
- "package": "@rathnasgala2/publish-action",
5791
- "version": "2.0.0",
5792
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5793
- "registry": "https://fixture-1.example.com/"
5794
- },
5795
- "schemas": {
5796
- "package": "@rathnasgala2/schemas",
5797
- "version": "2.0.0",
5798
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5799
- "registry": "https://fixture-1.example.com/"
5800
- },
5801
- "template": {
5802
- "package": "@rathnasgala2/template",
5803
- "version": "2.0.0",
5804
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5805
- "registry": "https://fixture-1.example.com/"
5806
- },
5807
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5808
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5809
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5810
- "baseUrl": "https://fixture-1.example.com/",
5811
- "basePath": "/fixture-1",
5812
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5813
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
5814
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5815
- "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
5816
- "renderPolicy": {
5817
- "name": "gala-render-policy",
5818
- "version": "2.0.0",
5819
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
5820
- },
5821
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
5822
- },
5823
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
5824
- },
5825
5528
  {
5826
5529
  "caseId": "build-provenance-invalid-a0ef7dcae28c79db",
5827
5530
  "coveredRuleIds": [
@@ -6183,62 +5886,6 @@
6183
5886
  },
6184
5887
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6185
5888
  },
6186
- {
6187
- "caseId": "build-provenance-invalid-aaae6a454970d91b",
6188
- "coveredRuleIds": [
6189
- "build-provenance:#/$defs/reproducibleBuildRecord:required:stylingContractDigest"
6190
- ],
6191
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
6192
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
6193
- "keyword": "required",
6194
- "instance": {
6195
- "repositoryId": "1",
6196
- "sourceCommit": "sha1:0000000000000000000000000000000000000001",
6197
- "sourceTree": "sha1:0000000000000000000000000000000000000001",
6198
- "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6199
- "buildEpoch": "2026-09-13T12:00:00.000Z",
6200
- "contractVersion": "2.0.0",
6201
- "builder": {
6202
- "package": "@rathnasgala2/publish-action",
6203
- "version": "2.0.0",
6204
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6205
- "registry": "https://fixture-1.example.com/"
6206
- },
6207
- "schemas": {
6208
- "package": "@rathnasgala2/schemas",
6209
- "version": "2.0.0",
6210
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6211
- "registry": "https://fixture-1.example.com/"
6212
- },
6213
- "template": {
6214
- "package": "@rathnasgala2/template",
6215
- "version": "2.0.0",
6216
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6217
- "registry": "https://fixture-1.example.com/"
6218
- },
6219
- "theme": {
6220
- "package": "@rathnasgala2/theme-default",
6221
- "version": "2.0.0",
6222
- "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6223
- "registry": "https://fixture-1.example.com/"
6224
- },
6225
- "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6226
- "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6227
- "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6228
- "baseUrl": "https://fixture-1.example.com/",
6229
- "basePath": "/fixture-1",
6230
- "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6231
- "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
6232
- "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6233
- "renderPolicy": {
6234
- "name": "gala-render-policy",
6235
- "version": "2.0.0",
6236
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
6237
- },
6238
- "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
6239
- },
6240
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6241
- },
6242
5889
  {
6243
5890
  "caseId": "build-provenance-invalid-ae0eb13971a9ce61",
6244
5891
  "coveredRuleIds": [
@@ -6683,6 +6330,20 @@
6683
6330
  },
6684
6331
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6685
6332
  },
6333
+ {
6334
+ "caseId": "build-provenance-invalid-b2103a5701fb4c21",
6335
+ "coveredRuleIds": [
6336
+ "build-provenance:#/$defs/manifestRenderPolicyIdentity:required:name"
6337
+ ],
6338
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
6339
+ "schemaPointer": "#/$defs/manifestRenderPolicyIdentity",
6340
+ "keyword": "required",
6341
+ "instance": {
6342
+ "version": "2.0.0",
6343
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
6344
+ },
6345
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6346
+ },
6686
6347
  {
6687
6348
  "caseId": "build-provenance-invalid-b4b4d5aecbbed6c0",
6688
6349
  "coveredRuleIds": [
@@ -6701,18 +6362,19 @@
6701
6362
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6702
6363
  },
6703
6364
  {
6704
- "caseId": "build-provenance-invalid-b4d28f3ebc0a36a1",
6365
+ "caseId": "build-provenance-invalid-b58dd9f40f8b56b4",
6705
6366
  "coveredRuleIds": [
6706
- "build-provenance:#/$defs/reproducibleBuildRecord:required:buildEpoch"
6367
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:basePath"
6707
6368
  ],
6708
6369
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
6709
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
6370
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
6710
6371
  "keyword": "required",
6711
6372
  "instance": {
6712
6373
  "repositoryId": "1",
6713
6374
  "sourceCommit": "sha1:0000000000000000000000000000000000000001",
6714
6375
  "sourceTree": "sha1:0000000000000000000000000000000000000001",
6715
6376
  "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6377
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
6716
6378
  "contractVersion": "2.0.0",
6717
6379
  "builder": {
6718
6380
  "package": "@rathnasgala2/publish-action",
@@ -6742,7 +6404,6 @@
6742
6404
  "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6743
6405
  "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6744
6406
  "baseUrl": "https://fixture-1.example.com/",
6745
- "basePath": "/fixture-1",
6746
6407
  "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6747
6408
  "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
6748
6409
  "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
@@ -6757,58 +6418,114 @@
6757
6418
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6758
6419
  },
6759
6420
  {
6760
- "caseId": "build-provenance-invalid-b91380a6424fe809",
6761
- "coveredRuleIds": [
6762
- "build-provenance:#/$defs/manifestRedirect:required:sourceRoute"
6763
- ],
6764
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
6765
- "schemaPointer": "#/$defs/manifestRedirect",
6766
- "keyword": "required",
6767
- "instance": {
6768
- "targetRoute": "/fixture-1",
6769
- "status": 200,
6770
- "backingPath": "content/fixture-1.md",
6771
- "sha256": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
6772
- },
6773
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6774
- },
6775
- {
6776
- "caseId": "build-provenance-invalid-ba52ef733a662ee3",
6777
- "coveredRuleIds": [
6778
- "build-provenance:#/$defs/manifestValidationEvidence:required:version"
6779
- ],
6780
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
6781
- "schemaPointer": "#/$defs/manifestValidationEvidence",
6782
- "keyword": "required",
6783
- "instance": {
6784
- "profile": "gala-artifact-validation-v2",
6785
- "findingCount": 0,
6786
- "evidenceDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
6787
- },
6788
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6789
- },
6790
- {
6791
- "caseId": "build-provenance-invalid-ba895140623251a6",
6421
+ "caseId": "build-provenance-invalid-b5b12fa68dff3205",
6792
6422
  "coveredRuleIds": [
6793
- "build-provenance:#/$defs/packageIdentity:required:integrity"
6423
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:sourceTree"
6794
6424
  ],
6795
6425
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
6796
- "schemaPointer": "#/$defs/packageIdentity",
6426
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
6797
6427
  "keyword": "required",
6798
6428
  "instance": {
6799
- "package": "fixture-1",
6800
- "version": "2.0.0",
6801
- "registry": "https://fixture-1.example.com/"
6802
- },
6803
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6804
- },
6805
- {
6806
- "caseId": "build-provenance-invalid-bbd79dddc498d71b",
6807
- "coveredRuleIds": [
6808
- "build-provenance:#/$defs/manifestRedirect:required:status"
6809
- ],
6810
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
6811
- "schemaPointer": "#/$defs/manifestRedirect",
6429
+ "repositoryId": "1",
6430
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
6431
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6432
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
6433
+ "contractVersion": "2.0.0",
6434
+ "builder": {
6435
+ "package": "@rathnasgala2/publish-action",
6436
+ "version": "2.0.0",
6437
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6438
+ "registry": "https://fixture-1.example.com/"
6439
+ },
6440
+ "schemas": {
6441
+ "package": "@rathnasgala2/schemas",
6442
+ "version": "2.0.0",
6443
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6444
+ "registry": "https://fixture-1.example.com/"
6445
+ },
6446
+ "template": {
6447
+ "package": "@rathnasgala2/template",
6448
+ "version": "2.0.0",
6449
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6450
+ "registry": "https://fixture-1.example.com/"
6451
+ },
6452
+ "theme": {
6453
+ "package": "@rathnasgala2/theme-default",
6454
+ "version": "2.0.0",
6455
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6456
+ "registry": "https://fixture-1.example.com/"
6457
+ },
6458
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6459
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6460
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6461
+ "baseUrl": "https://fixture-1.example.com/",
6462
+ "basePath": "/fixture-1",
6463
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6464
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
6465
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6466
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
6467
+ "renderPolicy": {
6468
+ "name": "gala-render-policy",
6469
+ "version": "2.0.0",
6470
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
6471
+ },
6472
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
6473
+ },
6474
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6475
+ },
6476
+ {
6477
+ "caseId": "build-provenance-invalid-b91380a6424fe809",
6478
+ "coveredRuleIds": [
6479
+ "build-provenance:#/$defs/manifestRedirect:required:sourceRoute"
6480
+ ],
6481
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
6482
+ "schemaPointer": "#/$defs/manifestRedirect",
6483
+ "keyword": "required",
6484
+ "instance": {
6485
+ "targetRoute": "/fixture-1",
6486
+ "status": 200,
6487
+ "backingPath": "content/fixture-1.md",
6488
+ "sha256": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
6489
+ },
6490
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6491
+ },
6492
+ {
6493
+ "caseId": "build-provenance-invalid-ba52ef733a662ee3",
6494
+ "coveredRuleIds": [
6495
+ "build-provenance:#/$defs/manifestValidationEvidence:required:version"
6496
+ ],
6497
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
6498
+ "schemaPointer": "#/$defs/manifestValidationEvidence",
6499
+ "keyword": "required",
6500
+ "instance": {
6501
+ "profile": "gala-artifact-validation-v2",
6502
+ "findingCount": 0,
6503
+ "evidenceDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
6504
+ },
6505
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6506
+ },
6507
+ {
6508
+ "caseId": "build-provenance-invalid-ba895140623251a6",
6509
+ "coveredRuleIds": [
6510
+ "build-provenance:#/$defs/packageIdentity:required:integrity"
6511
+ ],
6512
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
6513
+ "schemaPointer": "#/$defs/packageIdentity",
6514
+ "keyword": "required",
6515
+ "instance": {
6516
+ "package": "fixture-1",
6517
+ "version": "2.0.0",
6518
+ "registry": "https://fixture-1.example.com/"
6519
+ },
6520
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
6521
+ },
6522
+ {
6523
+ "caseId": "build-provenance-invalid-bbd79dddc498d71b",
6524
+ "coveredRuleIds": [
6525
+ "build-provenance:#/$defs/manifestRedirect:required:status"
6526
+ ],
6527
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
6528
+ "schemaPointer": "#/$defs/manifestRedirect",
6812
6529
  "keyword": "required",
6813
6530
  "instance": {
6814
6531
  "sourceRoute": "/fixture-1",
@@ -7288,20 +7005,6 @@
7288
7005
  },
7289
7006
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7290
7007
  },
7291
- {
7292
- "caseId": "build-provenance-invalid-c9282aebd2530844",
7293
- "coveredRuleIds": [
7294
- "build-provenance:#/$defs/renderPolicyIdentity:required:version"
7295
- ],
7296
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
7297
- "schemaPointer": "#/$defs/renderPolicyIdentity",
7298
- "keyword": "required",
7299
- "instance": {
7300
- "name": "gala-render-policy",
7301
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7302
- },
7303
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7304
- },
7305
7008
  {
7306
7009
  "caseId": "build-provenance-invalid-cb719fc5a710ddee",
7307
7010
  "coveredRuleIds": [
@@ -7377,6 +7080,57 @@
7377
7080
  },
7378
7081
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7379
7082
  },
7083
+ {
7084
+ "caseId": "build-provenance-invalid-ce3915c3a025a134",
7085
+ "coveredRuleIds": [
7086
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:template"
7087
+ ],
7088
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
7089
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
7090
+ "keyword": "required",
7091
+ "instance": {
7092
+ "repositoryId": "1",
7093
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
7094
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
7095
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7096
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
7097
+ "contractVersion": "2.0.0",
7098
+ "builder": {
7099
+ "package": "@rathnasgala2/publish-action",
7100
+ "version": "2.0.0",
7101
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7102
+ "registry": "https://fixture-1.example.com/"
7103
+ },
7104
+ "schemas": {
7105
+ "package": "@rathnasgala2/schemas",
7106
+ "version": "2.0.0",
7107
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7108
+ "registry": "https://fixture-1.example.com/"
7109
+ },
7110
+ "theme": {
7111
+ "package": "@rathnasgala2/theme-default",
7112
+ "version": "2.0.0",
7113
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7114
+ "registry": "https://fixture-1.example.com/"
7115
+ },
7116
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7117
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7118
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7119
+ "baseUrl": "https://fixture-1.example.com/",
7120
+ "basePath": "/fixture-1",
7121
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7122
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
7123
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7124
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7125
+ "renderPolicy": {
7126
+ "name": "gala-render-policy",
7127
+ "version": "2.0.0",
7128
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7129
+ },
7130
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7131
+ },
7132
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7133
+ },
7380
7134
  {
7381
7135
  "caseId": "build-provenance-invalid-ce6dd9e7d1a20a51",
7382
7136
  "coveredRuleIds": ["build-provenance:#:required:sandbox"],
@@ -7560,20 +7314,6 @@
7560
7314
  },
7561
7315
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7562
7316
  },
7563
- {
7564
- "caseId": "build-provenance-invalid-cf13ed0a87e3cea5",
7565
- "coveredRuleIds": [
7566
- "build-provenance:#/$defs/renderPolicyIdentity:required:name"
7567
- ],
7568
- "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
7569
- "schemaPointer": "#/$defs/renderPolicyIdentity",
7570
- "keyword": "required",
7571
- "instance": {
7572
- "version": "2.0.0",
7573
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7574
- },
7575
- "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7576
- },
7577
7317
  {
7578
7318
  "caseId": "build-provenance-invalid-cf77b99e48811b00",
7579
7319
  "coveredRuleIds": [
@@ -7644,14 +7384,115 @@
7644
7384
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7645
7385
  },
7646
7386
  {
7647
- "caseId": "build-provenance-invalid-d42720811b67d329",
7387
+ "caseId": "build-provenance-invalid-d2c7d3ac2dc3135b",
7648
7388
  "coveredRuleIds": [
7649
- "build-provenance:#/$defs/renderPolicyIdentity:required:digest"
7389
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:buildPolicyDecisionDigest"
7650
7390
  ],
7651
7391
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
7652
- "schemaPointer": "#/$defs/renderPolicyIdentity",
7392
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
7653
7393
  "keyword": "required",
7654
- "instance": { "name": "gala-render-policy", "version": "2.0.0" },
7394
+ "instance": {
7395
+ "repositoryId": "1",
7396
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
7397
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
7398
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7399
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
7400
+ "contractVersion": "2.0.0",
7401
+ "builder": {
7402
+ "package": "@rathnasgala2/publish-action",
7403
+ "version": "2.0.0",
7404
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7405
+ "registry": "https://fixture-1.example.com/"
7406
+ },
7407
+ "schemas": {
7408
+ "package": "@rathnasgala2/schemas",
7409
+ "version": "2.0.0",
7410
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7411
+ "registry": "https://fixture-1.example.com/"
7412
+ },
7413
+ "template": {
7414
+ "package": "@rathnasgala2/template",
7415
+ "version": "2.0.0",
7416
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7417
+ "registry": "https://fixture-1.example.com/"
7418
+ },
7419
+ "theme": {
7420
+ "package": "@rathnasgala2/theme-default",
7421
+ "version": "2.0.0",
7422
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7423
+ "registry": "https://fixture-1.example.com/"
7424
+ },
7425
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7426
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7427
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7428
+ "baseUrl": "https://fixture-1.example.com/",
7429
+ "basePath": "/fixture-1",
7430
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7431
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
7432
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7433
+ "renderPolicy": {
7434
+ "name": "gala-render-policy",
7435
+ "version": "2.0.0",
7436
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7437
+ },
7438
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7439
+ },
7440
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7441
+ },
7442
+ {
7443
+ "caseId": "build-provenance-invalid-d74d55ae0dd5871b",
7444
+ "coveredRuleIds": [
7445
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:buildEpoch"
7446
+ ],
7447
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
7448
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
7449
+ "keyword": "required",
7450
+ "instance": {
7451
+ "repositoryId": "1",
7452
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
7453
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
7454
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7455
+ "contractVersion": "2.0.0",
7456
+ "builder": {
7457
+ "package": "@rathnasgala2/publish-action",
7458
+ "version": "2.0.0",
7459
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7460
+ "registry": "https://fixture-1.example.com/"
7461
+ },
7462
+ "schemas": {
7463
+ "package": "@rathnasgala2/schemas",
7464
+ "version": "2.0.0",
7465
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7466
+ "registry": "https://fixture-1.example.com/"
7467
+ },
7468
+ "template": {
7469
+ "package": "@rathnasgala2/template",
7470
+ "version": "2.0.0",
7471
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7472
+ "registry": "https://fixture-1.example.com/"
7473
+ },
7474
+ "theme": {
7475
+ "package": "@rathnasgala2/theme-default",
7476
+ "version": "2.0.0",
7477
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7478
+ "registry": "https://fixture-1.example.com/"
7479
+ },
7480
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7481
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7482
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7483
+ "baseUrl": "https://fixture-1.example.com/",
7484
+ "basePath": "/fixture-1",
7485
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7486
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
7487
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7488
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7489
+ "renderPolicy": {
7490
+ "name": "gala-render-policy",
7491
+ "version": "2.0.0",
7492
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7493
+ },
7494
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7495
+ },
7655
7496
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7656
7497
  },
7657
7498
  {
@@ -7668,6 +7509,57 @@
7668
7509
  },
7669
7510
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7670
7511
  },
7512
+ {
7513
+ "caseId": "build-provenance-invalid-d8d6496886fe576a",
7514
+ "coveredRuleIds": [
7515
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:theme"
7516
+ ],
7517
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
7518
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
7519
+ "keyword": "required",
7520
+ "instance": {
7521
+ "repositoryId": "1",
7522
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
7523
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
7524
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7525
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
7526
+ "contractVersion": "2.0.0",
7527
+ "builder": {
7528
+ "package": "@rathnasgala2/publish-action",
7529
+ "version": "2.0.0",
7530
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7531
+ "registry": "https://fixture-1.example.com/"
7532
+ },
7533
+ "schemas": {
7534
+ "package": "@rathnasgala2/schemas",
7535
+ "version": "2.0.0",
7536
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7537
+ "registry": "https://fixture-1.example.com/"
7538
+ },
7539
+ "template": {
7540
+ "package": "@rathnasgala2/template",
7541
+ "version": "2.0.0",
7542
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7543
+ "registry": "https://fixture-1.example.com/"
7544
+ },
7545
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7546
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7547
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7548
+ "baseUrl": "https://fixture-1.example.com/",
7549
+ "basePath": "/fixture-1",
7550
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7551
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
7552
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7553
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7554
+ "renderPolicy": {
7555
+ "name": "gala-render-policy",
7556
+ "version": "2.0.0",
7557
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7558
+ },
7559
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7560
+ },
7561
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7562
+ },
7671
7563
  {
7672
7564
  "caseId": "build-provenance-invalid-dbc6de02ab32d263",
7673
7565
  "coveredRuleIds": [
@@ -7691,6 +7583,62 @@
7691
7583
  },
7692
7584
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7693
7585
  },
7586
+ {
7587
+ "caseId": "build-provenance-invalid-dc491918f39f7cdc",
7588
+ "coveredRuleIds": [
7589
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:workflowIdentity"
7590
+ ],
7591
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
7592
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
7593
+ "keyword": "required",
7594
+ "instance": {
7595
+ "repositoryId": "1",
7596
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
7597
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
7598
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7599
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
7600
+ "contractVersion": "2.0.0",
7601
+ "builder": {
7602
+ "package": "@rathnasgala2/publish-action",
7603
+ "version": "2.0.0",
7604
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7605
+ "registry": "https://fixture-1.example.com/"
7606
+ },
7607
+ "schemas": {
7608
+ "package": "@rathnasgala2/schemas",
7609
+ "version": "2.0.0",
7610
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7611
+ "registry": "https://fixture-1.example.com/"
7612
+ },
7613
+ "template": {
7614
+ "package": "@rathnasgala2/template",
7615
+ "version": "2.0.0",
7616
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7617
+ "registry": "https://fixture-1.example.com/"
7618
+ },
7619
+ "theme": {
7620
+ "package": "@rathnasgala2/theme-default",
7621
+ "version": "2.0.0",
7622
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7623
+ "registry": "https://fixture-1.example.com/"
7624
+ },
7625
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7626
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7627
+ "buildInputDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7628
+ "baseUrl": "https://fixture-1.example.com/",
7629
+ "basePath": "/fixture-1",
7630
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7631
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
7632
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7633
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7634
+ "renderPolicy": {
7635
+ "name": "gala-render-policy",
7636
+ "version": "2.0.0",
7637
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7638
+ }
7639
+ },
7640
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7641
+ },
7694
7642
  {
7695
7643
  "caseId": "build-provenance-invalid-dc6b45940b56a4e7",
7696
7644
  "coveredRuleIds": ["build-provenance:#/$defs/finding:required:messageKey"],
@@ -7789,12 +7737,12 @@
7789
7737
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
7790
7738
  },
7791
7739
  {
7792
- "caseId": "build-provenance-invalid-e6b43c4c06cb7c97",
7740
+ "caseId": "build-provenance-invalid-e2fef7142c7b2d91",
7793
7741
  "coveredRuleIds": [
7794
- "build-provenance:#/$defs/reproducibleBuildRecord:required:policyReleaseId"
7742
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:renderPolicy"
7795
7743
  ],
7796
7744
  "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
7797
- "schemaPointer": "#/$defs/reproducibleBuildRecord",
7745
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
7798
7746
  "keyword": "required",
7799
7747
  "instance": {
7800
7748
  "repositoryId": "1",
@@ -7833,13 +7781,9 @@
7833
7781
  "baseUrl": "https://fixture-1.example.com/",
7834
7782
  "basePath": "/fixture-1",
7835
7783
  "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7784
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
7836
7785
  "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7837
7786
  "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
7838
- "renderPolicy": {
7839
- "name": "gala-render-policy",
7840
- "version": "2.0.0",
7841
- "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7842
- },
7843
7787
  "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
7844
7788
  },
7845
7789
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
@@ -8108,6 +8052,62 @@
8108
8052
  },
8109
8053
  "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
8110
8054
  },
8055
+ {
8056
+ "caseId": "build-provenance-invalid-f266e525aa67b0a2",
8057
+ "coveredRuleIds": [
8058
+ "build-provenance:#/$defs/manifestReproducibleBuildRecord:required:buildInputDigest"
8059
+ ],
8060
+ "schemaId": "urn:gala:metadata:build-provenance:2.0.0",
8061
+ "schemaPointer": "#/$defs/manifestReproducibleBuildRecord",
8062
+ "keyword": "required",
8063
+ "instance": {
8064
+ "repositoryId": "1",
8065
+ "sourceCommit": "sha1:0000000000000000000000000000000000000001",
8066
+ "sourceTree": "sha1:0000000000000000000000000000000000000001",
8067
+ "repositoryRootDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8068
+ "buildEpoch": "2026-09-13T12:00:00.000Z",
8069
+ "contractVersion": "2.0.0",
8070
+ "builder": {
8071
+ "package": "@rathnasgala2/publish-action",
8072
+ "version": "2.0.0",
8073
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8074
+ "registry": "https://fixture-1.example.com/"
8075
+ },
8076
+ "schemas": {
8077
+ "package": "@rathnasgala2/schemas",
8078
+ "version": "2.0.0",
8079
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8080
+ "registry": "https://fixture-1.example.com/"
8081
+ },
8082
+ "template": {
8083
+ "package": "@rathnasgala2/template",
8084
+ "version": "2.0.0",
8085
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8086
+ "registry": "https://fixture-1.example.com/"
8087
+ },
8088
+ "theme": {
8089
+ "package": "@rathnasgala2/theme-default",
8090
+ "version": "2.0.0",
8091
+ "integrity": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8092
+ "registry": "https://fixture-1.example.com/"
8093
+ },
8094
+ "dependencyLockDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8095
+ "packageReleaseCatalogDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8096
+ "baseUrl": "https://fixture-1.example.com/",
8097
+ "basePath": "/fixture-1",
8098
+ "destinationCapabilityDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8099
+ "policyReleaseId": "019c0000-0000-7000-8000-000000000001",
8100
+ "buildPolicyDecisionDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8101
+ "stylingContractDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000001",
8102
+ "renderPolicy": {
8103
+ "name": "gala-render-policy",
8104
+ "version": "2.0.0",
8105
+ "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
8106
+ },
8107
+ "workflowIdentity": "sha256:0000000000000000000000000000000000000000000000000000000000000001"
8108
+ },
8109
+ "expectedCodes": ["SCHEMA_REQUIRED_FIELD_MISSING"]
8110
+ },
8111
8111
  {
8112
8112
  "caseId": "build-provenance-invalid-f394e15d4a3d28b7",
8113
8113
  "coveredRuleIds": [