@runbooks/schema 0.1.0

package/spec/v1/schema/record.json

@@ -0,0 +1,908 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://runbooks.directory/spec/v1/schema/record.json",
+  "$defs": {
+    "stepId": {
+      "type": "string",
+      "pattern": "^[a-z][a-z0-9_]{0,31}$",
+      "description": "Unique within a version. Referenced by on_fail, branches and rollback_ref."
+    },
+    "toolRef": {
+      "type": "string",
+      "pattern": "^(mcp:[a-z0-9][a-z0-9-]*|cli:[a-z0-9][a-z0-9._-]*|iam:[a-z0-9-]+:[A-Za-z0-9*]+)$",
+      "description": "Same grammar as runbook.capabilities. A step may name a tool absent from capabilities[]: the schema permits it and the linter rejects it as a blocking T2 error (RUNBOOK.md 12). Schema and linter have different jobs."
+    },
+    "title": {
+      "type": "string",
+      "minLength": 3,
+      "maxLength": 48,
+      "description": "An imperative verb phrase (RUNBOOK.md 18.6): 'Capture current lag', not 'Lag problem'. The 48-character cap is what keeps a node label to two lines."
+    },
+    "step": {
+      "type": "object",
+      "required": [
+        "id",
+        "kind",
+        "title"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "id": {
+          "$ref": "#/$defs/stepId"
+        },
+        "kind": {
+          "enum": [
+            "check",
+            "action",
+            "decision",
+            "wait",
+            "escalate"
+          ]
+        },
+        "title": {
+          "$ref": "#/$defs/title"
+        },
+        "tool": {
+          "$ref": "#/$defs/toolRef"
+        },
+        "command": {
+          "type": "string",
+          "description": "May interpolate {{inputs.<name>}}, and only names declared in runbook.inputs. The reference check is semantic, not structural, so it lives in the linter."
+        },
+        "expect": {
+          "type": "string",
+          "minLength": 3
+        },
+        "assert": {
+          "type": "object",
+          "additionalProperties": false,
+          "minProperties": 1,
+          "description": "A machine-checkable postcondition, required by R2 supervision. `expect` stays prose for the reader; this is what a supervisor evaluates. A step with only prose is unevaluable at R2 - a first-class outcome in which the supervisor halts and asks a human rather than guessing (docs/decisions/Q12-expect-evaluability.md).",
+          "properties": {
+            "exit_code": {
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 255
+            },
+            "stdout_matches": {
+              "type": "string",
+              "description": "Regular expression."
+            },
+            "stdout_not_matches": {
+              "type": "string"
+            },
+            "stderr_empty": {
+              "type": "boolean"
+            },
+            "json_path": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "path",
+                "equals"
+              ],
+              "properties": {
+                "path": {
+                  "type": "string"
+                },
+                "equals": {}
+              }
+            }
+          }
+        },
+        "on_fail": {
+          "type": "string",
+          "pattern": "^(escalate:)?([a-z][a-z0-9_]{0,31}|end:(success|failed|aborted))$"
+        },
+        "question": {
+          "type": "string",
+          "minLength": 3
+        },
+        "branches": {
+          "type": "object",
+          "minProperties": 2,
+          "additionalProperties": {
+            "$ref": "#/$defs/stepId"
+          },
+          "description": "Label to step id. Two or more is structural and checked here; that one of them is a default is graph invariant 3, checked by the linter."
+        },
+        "risk": {
+          "enum": [
+            "read-only",
+            "reversible-write",
+            "destructive",
+            "irreversible"
+          ]
+        },
+        "requires_approval": {
+          "type": "boolean"
+        },
+        "rollback_ref": {
+          "type": "string",
+          "pattern": "^(rb_[0-9A-HJKMNP-TV-Z]{26}|[a-z][a-z0-9_]{0,31})$",
+          "description": "A step in this runbook, or another runbook. Cross-runbook resolution is not in v1; until then a rollback_ref to another runbook is documentation for a human, not a route a supervisor can take."
+        },
+        "duration": {
+          "type": "string",
+          "pattern": "^[0-9]+(s|m|h)$"
+        },
+        "until": {
+          "type": "string",
+          "minLength": 3
+        },
+        "timeout": {
+          "type": "string",
+          "pattern": "^[0-9]+(s|m|h)$"
+        },
+        "retry": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "max"
+          ],
+          "properties": {
+            "max": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 20
+            },
+            "target": {
+              "$ref": "#/$defs/stepId"
+            }
+          },
+          "description": "The only permitted cycle, and it must be finite: an unbounded loop in an autonomous agent costs money and causes incidents (invariant 6)."
+        },
+        "to": {
+          "type": "string",
+          "minLength": 2
+        },
+        "next": {
+          "type": "string",
+          "pattern": "^([a-z][a-z0-9_]{0,31}|end:(success|failed|aborted))$",
+          "description": "The next step, or an explicit terminal. Invariant 7 requires every terminal to be explicit: a graph may not end by running out of next node."
+        },
+        "x-layout": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "x",
+            "y"
+          ],
+          "properties": {
+            "x": {
+              "type": "number"
+            },
+            "y": {
+              "type": "number"
+            }
+          },
+          "description": "An authoring-time position from the constructor. Accepted so that a draft laid out by hand can be submitted, and stripped on publish: auto-layout is canonical, the catalog stores no positions, and every reader of a version sees the same graph (docs/decisions/Q8-layout.md). It never participates in content_hash, so re-laying-out a graph is not a new version."
+        }
+      },
+      "allOf": [
+        {
+          "description": "A check without expect and on_fail cannot be evaluated or routed, so a supervisor would have to improvise both (invariant 4).",
+          "if": {
+            "properties": {
+              "kind": {
+                "const": "check"
+              }
+            },
+            "required": [
+              "kind"
+            ]
+          },
+          "then": {
+            "properties": {
+              "expect": {
+                "type": "string"
+              },
+              "on_fail": {
+                "type": "string"
+              }
+            },
+            "required": [
+              "expect",
+              "on_fail"
+            ]
+          }
+        },
+        {
+          "description": "An action must state its risk. Unstated risk defaults to nothing safe.",
+          "if": {
+            "properties": {
+              "kind": {
+                "const": "action"
+              }
+            },
+            "required": [
+              "kind"
+            ]
+          },
+          "then": {
+            "properties": {
+              "risk": {
+                "type": "string"
+              }
+            },
+            "required": [
+              "risk"
+            ]
+          }
+        },
+        {
+          "description": "Invariant 5: a destructive or irreversible action is always paired - an approval gate before it, or a rollback after it. This is the one rule the whole product exists to enforce, so it is structural rather than advisory.",
+          "if": {
+            "properties": {
+              "kind": {
+                "const": "action"
+              },
+              "risk": {
+                "enum": [
+                  "destructive",
+                  "irreversible"
+                ]
+              }
+            },
+            "required": [
+              "kind",
+              "risk"
+            ]
+          },
+          "then": {
+            "anyOf": [
+              {
+                "properties": {
+                  "requires_approval": {
+                    "const": true
+                  }
+                },
+                "required": [
+                  "requires_approval"
+                ]
+              },
+              {
+                "properties": {
+                  "rollback_ref": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "rollback_ref"
+                ]
+              }
+            ]
+          }
+        },
+        {
+          "description": "A decision needs a question and at least two branches.",
+          "if": {
+            "properties": {
+              "kind": {
+                "const": "decision"
+              }
+            },
+            "required": [
+              "kind"
+            ]
+          },
+          "then": {
+            "properties": {
+              "question": {
+                "type": "string"
+              },
+              "branches": {
+                "type": "object"
+              }
+            },
+            "required": [
+              "question",
+              "branches"
+            ]
+          }
+        },
+        {
+          "description": "A wait must be bounded: either a duration, or a condition with a timeout. An unbounded wait is a hang with better manners.",
+          "if": {
+            "properties": {
+              "kind": {
+                "const": "wait"
+              }
+            },
+            "required": [
+              "kind"
+            ]
+          },
+          "then": {
+            "anyOf": [
+              {
+                "properties": {
+                  "duration": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "duration"
+                ]
+              },
+              {
+                "properties": {
+                  "until": {
+                    "type": "string"
+                  },
+                  "timeout": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "until",
+                  "timeout"
+                ]
+              }
+            ]
+          }
+        },
+        {
+          "description": "Escalation is an exit from the workflow, so it must say where it goes.",
+          "if": {
+            "properties": {
+              "kind": {
+                "const": "escalate"
+              }
+            },
+            "required": [
+              "kind"
+            ]
+          },
+          "then": {
+            "properties": {
+              "to": {
+                "type": "string"
+              }
+            },
+            "required": [
+              "to"
+            ]
+          }
+        }
+      ]
+    }
+  },
+  "title": "Runbook, as the catalog serves it",
+  "description": "A published record: the authored document plus what the build concluded about it. Validate /v1/runbooks/{publisher}/{slug}.json against this; validate a document you are about to submit against p0.json or p1.json, which forbid the fields the catalog assigns.",
+  "allOf": [
+    {
+      "title": "Runbook, profile P0",
+      "description": "Frontmatter for a P0 (prose) runbook. A superset of Agent Skills: `name` and `description` keep their Agent Skills meaning at the top level, and everything this specification adds lives under the single `runbook` key. See docs/decisions/Q2-frontmatter-namespacing.md.",
+      "type": "object",
+      "required": [
+        "name",
+        "description",
+        "runbook"
+      ],
+      "additionalProperties": true,
+      "properties": {
+        "name": {
+          "type": "string",
+          "pattern": "^[a-z0-9]+(-[a-z0-9]+)*$",
+          "maxLength": 64,
+          "description": "Agent Skills field. ASCII slug, never reused (§9)."
+        },
+        "description": {
+          "type": "string",
+          "minLength": 16,
+          "maxLength": 1024,
+          "description": "Agent Skills field. What the procedure does and when to reach for it."
+        },
+        "runbook": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "schema_version",
+            "profile",
+            "domain",
+            "targets",
+            "trigger",
+            "execution",
+            "risk",
+            "capabilities",
+            "publisher",
+            "lang",
+            "license",
+            "source",
+            "content_hash",
+            "trust"
+          ],
+          "properties": {
+            "schema_version": {
+              "const": "v1"
+            },
+            "id": {
+              "type": "string",
+              "pattern": "^rb_[0-9A-HJKMNP-TV-Z]{26}$",
+              "description": "ULID assigned by the catalog. Immutable, survives renames (§9). Absent in an authored document."
+            },
+            "semver": {
+              "type": "string",
+              "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-[0-9A-Za-z.-]+)?$",
+              "description": "The version this snapshot is. Assigned by the catalog alongside `id` and `content_hash`; absent in an authored document, present in everything the catalog serves."
+            },
+            "content_hash": {
+              "type": "string",
+              "pattern": "^sha256:[0-9a-f]{64}$",
+              "description": "What this version is (RUNBOOK.md 9). Agent pins point at it and attestations bind to it. Computed over the document with this field and x-layout excluded, so it cannot be part of what it hashes."
+            },
+            "profile": {
+              "enum": [
+                "P0",
+                "P1",
+                "P2"
+              ]
+            },
+            "min_runtime_profile": {
+              "enum": [
+                "R0",
+                "R1",
+                "R2"
+              ],
+              "description": "Lowest client runtime profile permitted to follow this runbook (§13.3). A client refuses a document whose minimum exceeds what it enforces."
+            },
+            "domain": {
+              "enum": [
+                "incident-response",
+                "data-pipelines",
+                "llm-ops",
+                "agent-workflows",
+                "cloud-infra",
+                "databases",
+                "ci-cd",
+                "security"
+              ],
+              "description": "Closed list, changed only by RFC (§4). Navigation and URLs, not classification."
+            },
+            "targets": {
+              "type": "array",
+              "minItems": 1,
+              "uniqueItems": true,
+              "items": {
+                "type": "string",
+                "pattern": "^[a-z0-9]+(-[a-z0-9]+)*$"
+              }
+            },
+            "trigger": {
+              "enum": [
+                "alert",
+                "symptom",
+                "scheduled",
+                "manual",
+                "agent-invoked"
+              ]
+            },
+            "execution": {
+              "enum": [
+                "human-only",
+                "human-with-agent",
+                "agent-autonomous"
+              ]
+            },
+            "risk": {
+              "enum": [
+                "read-only",
+                "reversible-write",
+                "destructive",
+                "irreversible"
+              ]
+            },
+            "blast_radius": {
+              "enum": [
+                "resource",
+                "service",
+                "cluster",
+                "tenant",
+                "global"
+              ]
+            },
+            "duration": {
+              "enum": [
+                "<5m",
+                "5-30m",
+                ">30m"
+              ]
+            },
+            "capabilities": {
+              "type": "array",
+              "uniqueItems": true,
+              "description": "A privilege request, not a description (§2). A client MUST check it against its own allowlist before execution (§12).",
+              "items": {
+                "type": "string",
+                "pattern": "^(mcp:[a-z0-9][a-z0-9-]*|cli:[a-z0-9][a-z0-9._-]*|iam:[a-z0-9-]+:[A-Za-z0-9*]+)$"
+              }
+            },
+            "applies_to": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              },
+              "description": "Version ranges per target, e.g. {\"postgres\": \">=14 <17\"}."
+            },
+            "publisher": {
+              "type": "string",
+              "pattern": "^(std|[a-z0-9][a-z0-9-]{0,38}|github:[A-Za-z0-9][A-Za-z0-9-]{0,38}|domain:[a-z0-9.-]+\\.[a-z]{2,})$",
+              "description": "Namespace (§7). Claimed, not granted, except `std` which is ours."
+            },
+            "lang": {
+              "type": "string",
+              "pattern": "^[a-z]{2,3}(-[A-Za-z0-9]{2,8})*$",
+              "default": "en"
+            },
+            "title_en": {
+              "type": "string",
+              "maxLength": 200
+            },
+            "summary_en": {
+              "type": "string",
+              "maxLength": 1024
+            },
+            "translation_of": {
+              "type": "string",
+              "pattern": "^rb_[0-9A-HJKMNP-TV-Z]{26}$"
+            },
+            "derived_from": {
+              "type": "string",
+              "pattern": "^rb_[0-9A-HJKMNP-TV-Z]{26}$",
+              "description": "The catalog record this was adapted from, when the original is itself in the catalog. Attribution for an adaptation is its source (RUNBOOK.md 10.2), which every record carries; this is the edge that lets a reader see both and keeps deduplication from counting one procedure twice. Requiring it of an adaptation whose original is not in the catalog would be requiring a link to nothing."
+            },
+            "content_class": {
+              "enum": [
+                "ingested",
+                "adapted",
+                "submitted",
+                "curated"
+              ],
+              "description": "How this record got here (RUNBOOK.md 15). `adapted` means the procedure derives from somebody else's document under a licence that allows it, whether a machine segmented it or a person rewrote it by hand. It is the one class with a rule of its own: it does not publish without a human confirming the step segmentation and the risk labelling, because an unreviewed machine adaptation is what that rule is guarding against. Its attribution is `source`, which is mandatory for every record."
+            },
+            "license": {
+              "type": "string",
+              "minLength": 2,
+              "description": "SPDX identifier. Mandatory: an undetectable licence means the record is not ingested at all (§10.2)."
+            },
+            "keywords": {
+              "type": "array",
+              "uniqueItems": true,
+              "items": {
+                "type": "string",
+                "maxLength": 40
+              },
+              "description": "The pressure valve for anything that is not a facet: uncontrolled, unguaranteed, not filterable (§4)."
+            },
+            "inputs": {
+              "type": "object",
+              "description": "Declared parameters. Interpolation may reference only these, and a missing required input aborts a run rather than interpolating empty (§5).",
+              "additionalProperties": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                  "type"
+                ],
+                "properties": {
+                  "type": {
+                    "enum": [
+                      "string",
+                      "number",
+                      "boolean"
+                    ]
+                  },
+                  "required": {
+                    "type": "boolean",
+                    "default": false
+                  },
+                  "default": {},
+                  "description": {
+                    "type": "string",
+                    "maxLength": 200
+                  },
+                  "secret": {
+                    "type": "boolean",
+                    "default": false,
+                    "description": "The value is a credential and is redacted wherever the run is shown to a human - an approval request above all (RUNBOOK.md 13, NG3). An approval channel is somewhere a secret should never arrive."
+                  }
+                }
+              }
+            },
+            "steps": {
+              "type": "array",
+              "description": "Permitted but unconstrained at P0, which is prose. P1 requires it and constrains every item (spec/v1/schema/p1.json). It is declared here so that each profile is a strict superset of the one below: a P1 document must also be a valid P0 document, or every facet, hub and search filter would need a second code path."
+            },
+            "source": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "url",
+                "fetched_at",
+                "upstream_state"
+              ],
+              "description": "Provenance. A record without it does not validate (§10).",
+              "properties": {
+                "url": {
+                  "type": "string",
+                  "format": "uri"
+                },
+                "commit": {
+                  "type": "string",
+                  "pattern": "^[0-9a-f]{7,40}$"
+                },
+                "fetched_at": {
+                  "type": "string",
+                  "format": "date"
+                },
+                "upstream_state": {
+                  "enum": [
+                    "current",
+                    "changed",
+                    "gone"
+                  ]
+                },
+                "upstream_hash": {
+                  "type": "string",
+                  "pattern": "^sha256:[0-9a-f]{64}$",
+                  "description": "The hash of the upstream document as it was when this record was made. What a reindex compares against: without it, 'has upstream changed' can only be answered by re-deriving the record, and a derivation that differs for our own reasons would read as the source having moved. Never part of content_hash — noticing that a source moved is not a new version of this record."
+                },
+                "checked_at": {
+                  "type": "string",
+                  "format": "date",
+                  "description": "When the upstream was last looked at, which is not when the record was made. A marker with no date is a claim about the present made at an unknown time."
+                }
+              }
+            },
+            "trust": {
+              "enum": [
+                "T0",
+                "T1",
+                "T2",
+                "T3",
+                "T4"
+              ],
+              "description": "Computed by the catalog at build time from evidence plus a clock, never asserted by the record. Forbidden in an authored document (p0.json); present in every served one."
+            },
+            "attestations": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "required": [
+                  "issuer",
+                  "issued_at",
+                  "content_hash",
+                  "status",
+                  "self_attested",
+                  "counts"
+                ],
+                "additionalProperties": false,
+                "properties": {
+                  "issuer": {
+                    "type": "string"
+                  },
+                  "issued_at": {
+                    "type": "string",
+                    "format": "date"
+                  },
+                  "content_hash": {
+                    "type": "string",
+                    "pattern": "^sha256:[0-9a-f]{64}$"
+                  },
+                  "status": {
+                    "enum": [
+                      "valid",
+                      "invalid",
+                      "unverifiable"
+                    ]
+                  },
+                  "self_attested": {
+                    "type": "boolean"
+                  },
+                  "counts": {
+                    "type": "boolean"
+                  },
+                  "why": {
+                    "type": "string"
+                  }
+                }
+              }
+            },
+            "profile_verified": {
+              "not": {},
+              "description": "Forbidden. There is no self-certification of any kind. See RUNBOOK.md 19 on why there is no score."
+            },
+            "relations": {
+              "type": "array",
+              "description": "Edges to other records (§22). A relation is authored: unlike an attestation, it is the author saying how this procedure stands to another, and only they can say it. Every reference must resolve to a record this catalog holds, or the record does not publish.",
+              "items": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                  "kind",
+                  "ref"
+                ],
+                "properties": {
+                  "kind": {
+                    "enum": [
+                      "requires",
+                      "rollback_of",
+                      "escalates_to",
+                      "part_of"
+                    ],
+                    "description": "requires: this cannot run until that one has. rollback_of: this undoes that one. escalates_to: when this hands off, it hands off to that one. part_of: this is a step of that larger procedure (§18.6's decomposition)."
+                  },
+                  "ref": {
+                    "type": "string",
+                    "pattern": "^[a-z0-9][a-z0-9-]{0,38}/[a-z0-9][a-z0-9-]{0,63}(@[0-9]+\\.[0-9]+\\.[0-9]+)?$",
+                    "description": "publisher/slug, optionally pinned with @semver. `requires` and `rollback_of` must pin, because they assert what another record does and that is only true of a version. `part_of` and `escalates_to` must not, because they are structural and a pinned structure rots."
+                  },
+                  "why": {
+                    "type": "string",
+                    "maxLength": 280,
+                    "description": "One sentence for a reader. Optional, and the only free text in a relation."
+                  },
+                  "step": {
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9_-]{0,31}$",
+                    "description": "`part_of` only: the step of the parent this record expands (§18.6). Without it a decomposition is a claim of membership with no place in the parent's procedure, and a reader cannot tell which of twelve steps this is the detail of."
+                  }
+                }
+              }
+            },
+            "trust_evidence": {
+              "type": "object",
+              "required": [
+                "level",
+                "date",
+                "issuer",
+                "self_attested"
+              ],
+              "additionalProperties": false,
+              "description": "Why the level reads as it does (§18.5): a badge without a date and an issuer is a claim nobody can check.",
+              "properties": {
+                "level": {
+                  "enum": [
+                    "T0",
+                    "T1",
+                    "T2",
+                    "T3",
+                    "T4"
+                  ]
+                },
+                "date": {
+                  "type": "string",
+                  "format": "date"
+                },
+                "issuer": {
+                  "type": "string"
+                },
+                "self_attested": {
+                  "type": "boolean"
+                },
+                "expires_on": {
+                  "type": "string",
+                  "format": "date"
+                },
+                "reasons": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                }
+              }
+            },
+            "signature": {
+              "type": "object",
+              "required": [
+                "status",
+                "key_id"
+              ],
+              "additionalProperties": false,
+              "description": "What checking the publisher's signature concluded. `unverifiable` states are published as themselves: a signature nobody could check must not look like one that passed, nor like a record nobody signed.",
+              "properties": {
+                "status": {
+                  "enum": [
+                    "valid",
+                    "invalid",
+                    "unknown-key",
+                    "revoked"
+                  ]
+                },
+                "key_id": {
+                  "type": "string"
+                },
+                "why": {
+                  "type": "string"
+                }
+              }
+            }
+          },
+          "allOf": [
+            {
+              "description": "Non-English content must carry an English title and summary, or clustering splits one topic into language clusters (RUNBOOK.md 16). ajv strict mode requires each conditional branch to define the properties it names.",
+              "if": {
+                "properties": {
+                  "lang": {
+                    "type": "string",
+                    "not": {
+                      "const": "en"
+                    }
+                  }
+                },
+                "required": [
+                  "lang"
+                ]
+              },
+              "then": {
+                "properties": {
+                  "title_en": {
+                    "type": "string",
+                    "maxLength": 200
+                  },
+                  "summary_en": {
+                    "type": "string",
+                    "maxLength": 1024
+                  }
+                },
+                "required": [
+                  "title_en",
+                  "summary_en"
+                ]
+              }
+            }
+          ]
+        },
+        "body": {
+          "type": "string",
+          "description": "The markdown body of the SKILL.md this record came from, carried so it participates in content_hash. Changing the prose of a procedure is a change to the procedure."
+        }
+      }
+    },
+    {
+      "if": {
+        "type": "object",
+        "properties": {
+          "runbook": {
+            "type": "object",
+            "properties": {
+              "profile": {
+                "const": "P1"
+              }
+            }
+          }
+        }
+      },
+      "then": {
+        "type": "object",
+        "required": [
+          "runbook"
+        ],
+        "properties": {
+          "runbook": {
+            "type": "object",
+            "required": [
+              "profile",
+              "steps"
+            ],
+            "properties": {
+              "profile": {
+                "enum": [
+                  "P1",
+                  "P2"
+                ]
+              },
+              "steps": {
+                "type": "array",
+                "minItems": 1,
+                "items": {
+                  "$ref": "#/$defs/step"
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  ]
+}