@slicedearth/whoisleuth-cli 2.4.0 → 2.5.1

package/packages/comparison/relationship-provenance.mjs

@@ -1,10 +1,16 @@
 // Only the source metadata needed to qualify an observed relationship crosses
 // this boundary. Collection and retention times are never source-time fallbacks.
-import { normalizeDomain } from "../cases/case-model.mjs";
+import { normalizeDomain } from "../evidence/domain-name.mjs";
+import { canonicalPublicIpAddress } from "../evidence/public-address-policy.mjs";
 import { normalizeExplicitIsoTimestamp, readObservationEnvelope } from "../evidence/observation.mjs";
 export const RELATIONSHIP_TYPES = Object.freeze([
     'nameserver_set', 'ip_address', 'certificate', 'tracking_identifier', 'favicon', 'official_asset',
 ]);
+export const NON_PUBLIC_RELATIONSHIP_LIMITATION = 'This is an equal non-public DNS answer, not evidence of shared public hosting. Private, loopback, reserved and sinkhole-style answers can recur independently.';
+export const FAVICON_RELATIONSHIP_DESCRIPTION = 'Each domain is connected by exact or bounded perceptual favicon matches, directly or through another member. Not every pair necessarily matches.';
+export function isNonPublicAddressRelationship(type, value) {
+    return type === 'ip_address' && !canonicalPublicIpAddress(value);
+}
 const SOURCES = ['dns', 'tls', 'http', 'page_identity', 'favicon', 'registration_or_dns', 'unknown'];
 const SOURCES_BY_TYPE = {
     nameserver_set: ['dns', 'registration_or_dns'], ip_address: ['dns'], certificate: ['tls'],

package/packages/contracts/analyst-interchange.mjs

@@ -3,9 +3,9 @@ import { buildExtractedLifecycleFamily } from "./extracted-domain-lifecycle.mjs"
 import { defineSchemaLifecycleFamily } from "./schema-lifecycle.mjs";
 export const ANALYST_INTERCHANGE_CONTRACT_OWNER = 'packages/contracts/analyst-interchange.mts';
 export const INVESTIGATION_CACAO_SPEC_VERSION = 'cacao-2.0';
-export const INVESTIGATION_CACAO_PROFILE_VERSION = 2;
-export const INVESTIGATION_CACAO_PROFILE_SEMVER = '2.0.0';
-export const INVESTIGATION_CACAO_SUPPORTED_PROFILE_VERSIONS = [INVESTIGATION_CACAO_PROFILE_VERSION];
+export const INVESTIGATION_CACAO_PROFILE_VERSION = 3;
+export const INVESTIGATION_CACAO_PROFILE_SEMVER = '3.0.0';
+export const INVESTIGATION_CACAO_SUPPORTED_PROFILE_VERSIONS = [2, INVESTIGATION_CACAO_PROFILE_VERSION];
 export const MAX_INVESTIGATION_CACAO_IMPORT_BYTES = 384 * 1024;
 export const BRAND_PROTECTION_OPERATIONS_REPORT_SCHEMA = 'whoisleuth.brand-protection-operations-report';
 export const BRAND_PROTECTION_OPERATIONS_REPORT_VERSION = 2;
@@ -18,6 +18,10 @@ export const STIX_INDICATOR_LIFECYCLE_SCHEMA = 'whoisleuth.internal.stix-indicat
 export const STIX_INDICATOR_EXPORT_VERSION = 2;
 export const MISP_INDICATOR_LIFECYCLE_SCHEMA = 'whoisleuth.internal.misp-indicators';
 export const MISP_INDICATOR_EXPORT_VERSION = 2;
+export const MANAGED_INDICATOR_SET_SCHEMA = 'whoisleuth.managed-indicator-set';
+export const MANAGED_INDICATOR_SET_VERSION = 1;
+export const MAX_MANAGED_INDICATOR_SET_BYTES = 4 * 1024 * 1024;
+export const MAX_MANAGED_INDICATOR_PLAN_BYTES = 16 * 1024 * 1024;
 export const DNS_CHANGE_REHEARSAL_VERSION = 2;
 export const DNS_CHANGE_REHEARSAL_EXPORT_SCHEMA = 'whoisleuth.dns-change-rehearsal';
 export const MAIL_REPORT_SCHEMA = 'whoisleuth.mail-report-review';
@@ -34,15 +38,16 @@ export const MAX_STATIC_PAGE_PATTERN_PACK_BYTES = 256 * 1024;
 export const WEB_CAPTURE_SUMMARY_SCHEMA = 'whoisleuth.web-capture-summary';
 export const WEB_CAPTURE_SUMMARY_VERSION = 1;
 export const WEB_CAPTURE_MANIFEST_SCHEMA = 'whoisleuth.web-capture-manifest';
-export const WEB_CAPTURE_MANIFEST_VERSION = 2;
+export const WEB_CAPTURE_MANIFEST_VERSION = 3;
+export const WEB_CAPTURE_MANIFEST_SUPPORTED_VERSIONS = [2, WEB_CAPTURE_MANIFEST_VERSION];
 export const MAX_WEB_CAPTURE_MANIFEST_BYTES = 1024 * 1024;
 const CACAO_COMPATIBILITY = defineSchemaCompatibility({
     id: 'export.investigation-cacao-profile', kind: 'export', schema: INVESTIGATION_CACAO_SPEC_VERSION,
     currentVersion: INVESTIGATION_CACAO_PROFILE_VERSION, supportedVersions: INVESTIGATION_CACAO_SUPPORTED_PROFILE_VERSIONS,
-    acceptsUnversionedLegacy: false, futureVersionBehavior: 'reject', migration: 'exact_current_only',
+    acceptsUnversionedLegacy: false, futureVersionBehavior: 'reject', migration: 'normalize_to_current',
     writeSemantics: 'non_destructive_merge', byteBudget: MAX_INVESTIGATION_CACAO_IMPORT_BYTES,
     owner: ANALYST_INTERCHANGE_CONTRACT_OWNER,
-    note: 'Restricted CACAO 2.0 profile with a connected linear sequence of manual analyst steps; version 2 adds fixed response recipe identifiers while executable commands, branches, targets, credentials, and arbitrary operations remain rejected.',
+    note: 'Restricted CACAO 2.0 manual profile. Version 3 retains optional lesson-revision provenance; public profile 2 remains readable. Executable commands, branches, targets and credentials remain rejected.',
 });
 const OPERATIONS_REPORT_COMPATIBILITY = defineSchemaCompatibility({
     id: 'export.brand-protection-operations-report', kind: 'export', schema: BRAND_PROTECTION_OPERATIONS_REPORT_SCHEMA,
@@ -72,6 +77,13 @@ const MISP_INDICATORS_COMPATIBILITY = defineSchemaCompatibility({
     writeSemantics: 'read_only', byteBudget: null, owner: ANALYST_INTERCHANGE_CONTRACT_OWNER,
     note: 'Unpublished, non-IDS, non-correlating event for reviewed import. Version 2 omits optional seen times when the source observation time is unknown.',
 });
+export const MANAGED_INDICATOR_SET_COMPATIBILITY = defineSchemaCompatibility({
+    id: 'export.managed-indicator-set', kind: 'export', schema: MANAGED_INDICATOR_SET_SCHEMA,
+    currentVersion: MANAGED_INDICATOR_SET_VERSION, supportedVersions: [MANAGED_INDICATOR_SET_VERSION],
+    acceptsUnversionedLegacy: false, futureVersionBehavior: 'reject', migration: 'exact_current_only',
+    writeSemantics: 'read_only', byteBudget: MAX_MANAGED_INDICATOR_SET_BYTES, owner: ANALYST_INTERCHANGE_CONTRACT_OWNER,
+    note: 'File-backed managed indicator revisions retain original observations, stable identities, explicit renewals and permanent withdrawals. Known predecessors prevent history replacement; content digests do not authenticate authorship or an unavailable earlier chain.',
+});
 const WEB_CAPTURE_SUMMARY_COMPATIBILITY = defineSchemaCompatibility({
     id: 'export.web-capture-summary', kind: 'export', schema: WEB_CAPTURE_SUMMARY_SCHEMA,
     currentVersion: WEB_CAPTURE_SUMMARY_VERSION, supportedVersions: [WEB_CAPTURE_SUMMARY_VERSION],
@@ -81,11 +93,11 @@ const WEB_CAPTURE_SUMMARY_COMPATIBILITY = defineSchemaCompatibility({
 });
 const WEB_CAPTURE_MANIFEST_COMPATIBILITY = defineSchemaCompatibility({
     id: 'export.web-capture-manifest', kind: 'export', schema: WEB_CAPTURE_MANIFEST_SCHEMA,
-    currentVersion: WEB_CAPTURE_MANIFEST_VERSION, supportedVersions: [WEB_CAPTURE_MANIFEST_VERSION],
+    currentVersion: WEB_CAPTURE_MANIFEST_VERSION, supportedVersions: WEB_CAPTURE_MANIFEST_SUPPORTED_VERSIONS,
     acceptsUnversionedLegacy: false, futureVersionBehavior: 'reject', migration: 'read_only',
     writeSemantics: 'read_only', byteBudget: MAX_WEB_CAPTURE_MANIFEST_BYTES,
     owner: ANALYST_INTERCHANGE_CONTRACT_OWNER,
-    note: 'Metadata-only capture manifest; the browser and offline artefact comparison accept the v1.47.4 current-writer version 2.',
+    note: 'Metadata-only capture manifest. Version 3 adds bounded page and dependency observations; version 2 remains readable with those observations unavailable.',
 });
 const DEFENSIVE_MANIFEST_COMPATIBILITY = defineSchemaCompatibility({
     id: 'export.defensive-indicator-manifest', kind: 'export', schema: DEFENSIVE_INDICATOR_MANIFEST_SCHEMA,
@@ -141,12 +153,17 @@ export const ANALYST_INTERCHANGE_LIFECYCLE_FAMILY = defineSchemaLifecycleFamily(
     includedCategories: ['reviewed-indicators', 'source-identity', 'provenance', 'completeness', 'omitted-counts', 'limitations'],
     excludedCategories: ['credentials', 'cookies', 'message-content', 'raw-upstream-responses', 'expanded-contacts'],
     formats: [
+        { descriptor: MANAGED_INDICATOR_SET_COMPATIBILITY, lifecycleSchema: MANAGED_INDICATOR_SET_SCHEMA,
+            requiredKeys: ['schema', 'version', 'id', 'producerId', 'revisionId', 'name', 'revision', 'createdAt', 'modifiedAt', 'previous', 'entries', 'integrity'], optionalKeys: [],
+            hook: { module: 'packages/interchange/managed-indicator-set.mts', exportName: 'validateManagedIndicatorSet', role: 'structure_validator', runtime: 'shared' },
+            fixtures: [{ id: 'managed-indicator-set-v1', path: `${F}managed-indicator-set-v1.json`, bytes: 1_193, sha256: '3a4ffb7256e696d1f1b3bae14743bb8c03ddeb0922186868e935f5a489ba3985', version: MANAGED_INDICATOR_SET_VERSION }] },
         { descriptor: CACAO_COMPATIBILITY, lifecycleSchema: INVESTIGATION_CACAO_SPEC_VERSION,
             requiredKeys: ['type', 'spec_version', 'id', 'name', 'created', 'modified', 'workflow_start', 'workflow', 'extension_definitions'],
             optionalKeys: ['description', 'playbook_types', 'playbook_activities', 'created_by', 'playbook_extensions', 'agent_definitions', 'x_whoisleuth_profile_version'],
             hook: { module: 'packages/interchange/investigation-playbook-interchange.mts', exportName: 'parseCacaoInvestigationPlaybook', role: 'normaliser', runtime: 'shared' },
             fixtures: [
-                { id: 'investigation-cacao-profile-v2', path: `${F}investigation-cacao-profile-v2.json`, bytes: 4_091, sha256: '7e9a3de6e12b83477690c0c58e03e6efbbb8b0c11fd98dc8470bdb6784d42358', version: INVESTIGATION_CACAO_PROFILE_VERSION },
+                { id: 'investigation-cacao-profile-v2', path: `${F}investigation-cacao-profile-v2.json`, bytes: 4_091, sha256: '7e9a3de6e12b83477690c0c58e03e6efbbb8b0c11fd98dc8470bdb6784d42358', version: 2 },
+                { id: 'investigation-cacao-profile-v3', path: `${F}investigation-cacao-profile-v3.json`, bytes: 4_067, sha256: '608cbb7875c3448ca11f6f8cb2f96ae098e18316532a8f651bbe540ca7f25a2d', version: INVESTIGATION_CACAO_PROFILE_VERSION },
             ] },
         { descriptor: OPERATIONS_REPORT_COMPATIBILITY, lifecycleSchema: BRAND_PROTECTION_OPERATIONS_REPORT_SCHEMA,
             requiredKeys: ['schema', 'version', 'generatedAt', 'window', 'limitations'], optionalKeys: ['sourceState', 'summary', 'counts', 'states', 'actionTypes', 'durations', 'denominators', 'omissions'],
@@ -182,7 +199,8 @@ export const ANALYST_INTERCHANGE_LIFECYCLE_FAMILY = defineSchemaLifecycleFamily(
             requiredKeys: ['schema', 'schemaVersion', 'source', 'captures'], optionalKeys: [],
             hook: { module: 'packages/interchange/web-capture-import.mts', exportName: 'parseWebCaptureManifest', role: 'normaliser', runtime: 'shared' },
             fixtures: [
-                { id: 'web-capture-manifest-v2', path: `${F}web-capture-manifest-v2.json`, bytes: 494, sha256: 'a2208dc956a832d70e37cd9a5929db81d29148856c485e4fd6ce5b123de5b8e6', version: WEB_CAPTURE_MANIFEST_VERSION },
+                { id: 'web-capture-manifest-v2', path: `${F}web-capture-manifest-v2.json`, bytes: 494, sha256: 'a2208dc956a832d70e37cd9a5929db81d29148856c485e4fd6ce5b123de5b8e6', version: 2 },
+                { id: 'web-capture-manifest-v3', path: `${F}web-capture-manifest-v3.json`, bytes: 868, sha256: 'bca4e8cb539ac6035dd44586fa7e27774766a14dadbc4fc73cad2b71dace2ac8', version: WEB_CAPTURE_MANIFEST_VERSION },
             ] },
         { descriptor: DEFENSIVE_MANIFEST_COMPATIBILITY, lifecycleSchema: DEFENSIVE_INDICATOR_MANIFEST_SCHEMA,
             requiredKeys: ['schema', 'version', 'generatedAt'], optionalKeys: ['expiresAt', 'reviewRequired', 'explicitSelection', 'includeWildcards', 'entries', 'indicators', 'exclusions', 'limitations'],

package/packages/contracts/case-portability.mjs

@@ -3,14 +3,15 @@ import { defineSchemaCompatibility } from "./schema-compatibility.mjs";
 import { defineSchemaLifecycleFamily } from "./schema-lifecycle.mjs";
 export const CASE_CONTRACT_OWNER = 'packages/contracts/case-portability.mts';
 export const MAX_CASE_OBJECTIVE_LENGTH = 320;
-export const LATEST_PUBLIC_APPLICATION_VERSION = '2.3.0';
-// Published writer identities are independent of the next writer. Historical
-// readers below use fixed release epochs, never a moving "latest" identity.
-export const LATEST_PUBLIC_CASE_SCHEMA_VERSION = 15;
-export const LATEST_PUBLIC_CASE_REPORT_SCHEMA_VERSION = 11;
-export const LATEST_PUBLIC_CASE_RESPONSE_PACKET_VERSION = 9;
-export const LATEST_PUBLIC_CASE_RESPONSE_REVIEW_INPUTS_VERSION = 3;
-export const LATEST_PUBLIC_WORKSPACE_ARCHIVE_VERSION = 8;
+// These published export names identify a format checkpoint, not the newest
+// application patch. Release verification reads the preceding tag's durable
+// commitments directly. Historical readers use fixed schema epochs below.
+export const LATEST_PUBLIC_APPLICATION_VERSION = '2.4.0';
+export const LATEST_PUBLIC_CASE_SCHEMA_VERSION = 16;
+export const LATEST_PUBLIC_CASE_REPORT_SCHEMA_VERSION = 12;
+export const LATEST_PUBLIC_CASE_RESPONSE_PACKET_VERSION = 10;
+export const LATEST_PUBLIC_CASE_RESPONSE_REVIEW_INPUTS_VERSION = 4;
+export const LATEST_PUBLIC_WORKSPACE_ARCHIVE_VERSION = 9;
 export const CASE_PORTABILITY_IDENTITY_CONSTANTS = Object.freeze([
     'LATEST_PUBLIC_APPLICATION_VERSION',
     'LATEST_PUBLIC_CASE_SCHEMA_VERSION',
@@ -27,6 +28,7 @@ export const CASE_PORTABILITY_IDENTITY_CONSTANTS = Object.freeze([
     'PUBLISHED_V2_3_CASE_REPORT_SCHEMA_VERSION',
     'PUBLISHED_V2_3_CASE_RESPONSE_PACKET_VERSION',
     'PUBLISHED_V2_3_CASE_RESPONSE_REVIEW_INPUTS_VERSION',
+    'PUBLISHED_V2_3_WORKSPACE_ARCHIVE_VERSION',
     'CASE_BROWSER_STORE_LIFECYCLE_SCHEMA',
     'CASE_EXPORT_LIFECYCLE_SCHEMA',
     'CASE_SCHEMA_VERSION',
@@ -158,12 +160,14 @@ export const PUBLISHED_V2_CASE_SCHEMA_VERSION = 13;
 export const PUBLISHED_V2_2_CASE_SCHEMA_VERSION = 14;
 export const PUBLISHED_V2_3_CASE_SCHEMA_VERSION = 15;
 export const INCIDENT_CASE_SCHEMA_VERSION = 16;
-export const CASE_SCHEMA_VERSION = INCIDENT_CASE_SCHEMA_VERSION;
+export const EVIDENCE_FOLLOW_UP_CASE_SCHEMA_VERSION = 17;
+export const CASE_SCHEMA_VERSION = EVIDENCE_FOLLOW_UP_CASE_SCHEMA_VERSION;
 export const CASE_BROWSER_SUPPORTED_VERSIONS = Object.freeze([
     PUBLIC_CASE_SCHEMA_VERSION,
     PUBLISHED_V2_CASE_SCHEMA_VERSION,
     PUBLISHED_V2_2_CASE_SCHEMA_VERSION,
     PUBLISHED_V2_3_CASE_SCHEMA_VERSION,
+    INCIDENT_CASE_SCHEMA_VERSION,
     CASE_SCHEMA_VERSION,
 ]);
 export const CASE_IMPORT_VERSIONS = CASE_BROWSER_SUPPORTED_VERSIONS;
@@ -172,11 +176,12 @@ export const PUBLIC_CASE_REPORT_SCHEMA_VERSION = 8;
 export const PUBLISHED_V2_CASE_REPORT_SCHEMA_VERSION = 9;
 export const PUBLISHED_V2_2_CASE_REPORT_SCHEMA_VERSION = 10;
 export const PUBLISHED_V2_3_CASE_REPORT_SCHEMA_VERSION = 11;
-export const CASE_REPORT_SCHEMA_VERSION = 12;
+export const CASE_REPORT_SCHEMA_VERSION = 13;
 export const CASE_REPORT_OUTPUT_VERSIONS = Object.freeze([
     PUBLISHED_V2_CASE_REPORT_SCHEMA_VERSION,
     PUBLISHED_V2_2_CASE_REPORT_SCHEMA_VERSION,
     PUBLISHED_V2_3_CASE_REPORT_SCHEMA_VERSION,
+    LATEST_PUBLIC_CASE_REPORT_SCHEMA_VERSION,
     CASE_REPORT_SCHEMA_VERSION,
 ]);
 export const CASE_RESPONSE_PACKET_SCHEMA = 'whoisleuth.case-response-packet';
@@ -184,12 +189,13 @@ export const PUBLIC_CASE_RESPONSE_PACKET_VERSION = 6;
 export const PUBLISHED_V2_CASE_RESPONSE_PACKET_VERSION = 7;
 export const PUBLISHED_V2_2_CASE_RESPONSE_PACKET_VERSION = 8;
 export const PUBLISHED_V2_3_CASE_RESPONSE_PACKET_VERSION = 9;
-export const CASE_RESPONSE_PACKET_VERSION = 10;
+export const CASE_RESPONSE_PACKET_VERSION = 11;
 export const CASE_RESPONSE_PACKET_OUTPUT_VERSIONS = Object.freeze([
     PUBLIC_CASE_RESPONSE_PACKET_VERSION,
     PUBLISHED_V2_CASE_RESPONSE_PACKET_VERSION,
     PUBLISHED_V2_2_CASE_RESPONSE_PACKET_VERSION,
     PUBLISHED_V2_3_CASE_RESPONSE_PACKET_VERSION,
+    LATEST_PUBLIC_CASE_RESPONSE_PACKET_VERSION,
     CASE_RESPONSE_PACKET_VERSION,
 ]);
 export const SUPPORTED_CASE_RESPONSE_PACKET_VERSIONS = CASE_RESPONSE_PACKET_OUTPUT_VERSIONS;
@@ -197,16 +203,17 @@ export const CASE_RESPONSE_REVIEW_INPUTS_SCHEMA = 'whoisleuth.case-response-revi
 export const PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUTS_VERSION = 1;
 export const PUBLISHED_V2_2_CASE_RESPONSE_REVIEW_INPUTS_VERSION = 2;
 export const PUBLISHED_V2_3_CASE_RESPONSE_REVIEW_INPUTS_VERSION = 3;
-export const CASE_RESPONSE_REVIEW_INPUTS_VERSION = 4;
+export const CASE_RESPONSE_REVIEW_INPUTS_VERSION = 5;
 export const SUPPORTED_CASE_RESPONSE_REVIEW_INPUTS_VERSIONS = Object.freeze([
     PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUTS_VERSION,
     PUBLISHED_V2_2_CASE_RESPONSE_REVIEW_INPUTS_VERSION,
     PUBLISHED_V2_3_CASE_RESPONSE_REVIEW_INPUTS_VERSION,
+    LATEST_PUBLIC_CASE_RESPONSE_REVIEW_INPUTS_VERSION,
     CASE_RESPONSE_REVIEW_INPUTS_VERSION,
 ]);
 export const CLI_CASE_PACK_SCHEMA = 'whoisleuth.cli.case-pack';
 export const CLI_CASE_PACK_VERSION = 2;
-export const CLI_CASE_PACK_WRITER_FIXTURE_ID = 'cli-case-pack-v2-case-v16-current';
+export const CLI_CASE_PACK_WRITER_FIXTURE_ID = 'cli-case-pack-v2-case-v17-current';
 export const CLI_CASE_PACK_INPUT_CASE_VERSIONS = Object.freeze(CASE_IMPORT_VERSIONS.filter((version) => version >= PUBLISHED_V2_3_CASE_SCHEMA_VERSION));
 export const SUPPORTED_CLI_CASE_PACK_VERSIONS = Object.freeze([CLI_CASE_PACK_VERSION]);
 export const CLI_CASE_PACK_ROOT_KEYS = Object.freeze(['version', 'exportedAt', 'cases', 'packet', 'integrity']);
@@ -225,6 +232,7 @@ export const CLI_CASE_PACK_CASE_REPORT_EPOCHS = Object.freeze([
     Object.freeze({ caseVersions: Object.freeze([PUBLISHED_V2_CASE_SCHEMA_VERSION]), reportVersions: Object.freeze([PUBLISHED_V2_CASE_REPORT_SCHEMA_VERSION]) }),
     Object.freeze({ caseVersions: Object.freeze([PUBLISHED_V2_2_CASE_SCHEMA_VERSION]), reportVersions: Object.freeze([PUBLISHED_V2_2_CASE_REPORT_SCHEMA_VERSION]) }),
     Object.freeze({ caseVersions: Object.freeze([PUBLISHED_V2_3_CASE_SCHEMA_VERSION]), reportVersions: Object.freeze([PUBLISHED_V2_3_CASE_REPORT_SCHEMA_VERSION]) }),
+    Object.freeze({ caseVersions: Object.freeze([INCIDENT_CASE_SCHEMA_VERSION]), reportVersions: Object.freeze([LATEST_PUBLIC_CASE_REPORT_SCHEMA_VERSION]) }),
     Object.freeze({ caseVersions: Object.freeze([CASE_SCHEMA_VERSION]), reportVersions: Object.freeze([CASE_REPORT_SCHEMA_VERSION]) }),
 ]);
 export function caseReportVersionMatchesCase(caseVersion, reportVersion) {
@@ -237,12 +245,13 @@ export const WORKSPACE_ARCHIVE_SCHEMA = 'whoisleuth.workspace-archive';
 export const PUBLIC_WORKSPACE_ARCHIVE_VERSION = 5;
 export const PUBLISHED_V2_WORKSPACE_ARCHIVE_VERSION = 6;
 export const PUBLISHED_V2_2_WORKSPACE_ARCHIVE_VERSION = 7;
+export const PUBLISHED_V2_3_WORKSPACE_ARCHIVE_VERSION = 8;
 export const WORKSPACE_ARCHIVE_VERSION = 9;
 export const SUPPORTED_WORKSPACE_ARCHIVE_VERSIONS = Object.freeze([
     PUBLIC_WORKSPACE_ARCHIVE_VERSION,
     PUBLISHED_V2_WORKSPACE_ARCHIVE_VERSION,
     PUBLISHED_V2_2_WORKSPACE_ARCHIVE_VERSION,
-    LATEST_PUBLIC_WORKSPACE_ARCHIVE_VERSION,
+    PUBLISHED_V2_3_WORKSPACE_ARCHIVE_VERSION,
     WORKSPACE_ARCHIVE_VERSION,
 ]);
 export function isSupportedWorkspaceArchiveVersion(value) {
@@ -448,7 +457,7 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         version: PUBLIC_CASE_SCHEMA_VERSION,
         role: 'historical',
         expectation: 'normalises_to_current_output',
-        expectedOutputFixtureId: 'browser-case-v16',
+        expectedOutputFixtureId: 'browser-case-v17',
         shapeId: `case.browser-store.v${PUBLIC_CASE_SCHEMA_VERSION}`,
         scope: 'repository',
     }),
@@ -462,7 +471,7 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         version: PUBLISHED_V2_CASE_SCHEMA_VERSION,
         role: 'historical',
         expectation: 'normalises_to_current_output',
-        expectedOutputFixtureId: 'browser-case-v16',
+        expectedOutputFixtureId: 'browser-case-v17',
         shapeId: `case.browser-store.v${PUBLISHED_V2_CASE_SCHEMA_VERSION}`,
         scope: 'repository',
     }),
@@ -476,7 +485,7 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         version: PUBLISHED_V2_2_CASE_SCHEMA_VERSION,
         role: 'historical',
         expectation: 'normalises_to_current_output',
-        expectedOutputFixtureId: 'browser-case-v16',
+        expectedOutputFixtureId: 'browser-case-v17',
         shapeId: `case.browser-store.v${PUBLISHED_V2_2_CASE_SCHEMA_VERSION}`,
         scope: 'repository',
     }),
@@ -490,7 +499,7 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         version: PUBLISHED_V2_3_CASE_SCHEMA_VERSION,
         role: 'historical',
         expectation: 'normalises_to_current_output',
-        expectedOutputFixtureId: 'browser-case-v16',
+        expectedOutputFixtureId: 'browser-case-v17',
         shapeId: `case.browser-store.v${PUBLISHED_V2_3_CASE_SCHEMA_VERSION}`,
         scope: 'repository',
     }),
@@ -501,6 +510,20 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         sha256: 'e0d9dd7d1da29ca31e1b6ccd0c514c44267d84fe9db2eff0ffce23c51fb04ce4',
         contentDigestSha256: null,
         schema: CASE_BROWSER_STORE_LIFECYCLE_SCHEMA,
+        version: INCIDENT_CASE_SCHEMA_VERSION,
+        role: 'historical',
+        expectation: 'normalises_to_current_output',
+        expectedOutputFixtureId: 'browser-case-v17',
+        shapeId: `case.browser-store.v${INCIDENT_CASE_SCHEMA_VERSION}`,
+        scope: 'repository',
+    }),
+    Object.freeze({
+        id: 'browser-case-v17',
+        path: 'test/fixtures/case-lifecycle/browser-case-v17.json',
+        bytes: 3312,
+        sha256: '8de3bb904b09ec07994d832738b148321902d91c4351763eebdc0cf908bf5429',
+        contentDigestSha256: null,
+        schema: CASE_BROWSER_STORE_LIFECYCLE_SCHEMA,
         version: CASE_SCHEMA_VERSION,
         role: 'current',
         expectation: 'accepted_exact',
@@ -518,7 +541,7 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         version: PUBLIC_CASE_SCHEMA_VERSION,
         role: 'historical',
         expectation: 'normalises_to_current_output',
-        expectedOutputFixtureId: 'case-export-v16',
+        expectedOutputFixtureId: 'case-export-v17',
         shapeId: `case.export.v${PUBLIC_CASE_SCHEMA_VERSION}`,
         scope: 'repository',
     }),
@@ -532,7 +555,7 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         version: PUBLISHED_V2_CASE_SCHEMA_VERSION,
         role: 'historical',
         expectation: 'normalises_to_current_output',
-        expectedOutputFixtureId: 'case-export-v16',
+        expectedOutputFixtureId: 'case-export-v17',
         shapeId: `case.export.v${PUBLISHED_V2_CASE_SCHEMA_VERSION}`,
         scope: 'repository',
     }),
@@ -546,7 +569,7 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         version: PUBLISHED_V2_2_CASE_SCHEMA_VERSION,
         role: 'historical',
         expectation: 'normalises_to_current_output',
-        expectedOutputFixtureId: 'case-export-v16',
+        expectedOutputFixtureId: 'case-export-v17',
         shapeId: `case.export.v${PUBLISHED_V2_2_CASE_SCHEMA_VERSION}`,
         scope: 'repository',
     }),
@@ -560,7 +583,7 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         version: PUBLISHED_V2_3_CASE_SCHEMA_VERSION,
         role: 'historical',
         expectation: 'normalises_to_current_output',
-        expectedOutputFixtureId: 'case-export-v16',
+        expectedOutputFixtureId: 'case-export-v17',
         shapeId: `case.export.v${PUBLISHED_V2_3_CASE_SCHEMA_VERSION}`,
         scope: 'repository',
     }),
@@ -571,6 +594,20 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         sha256: 'b0c14fd4d391b1067f101d61c1549c28570999c9cebb58aed21e164d7af56ad8',
         contentDigestSha256: null,
         schema: CASE_EXPORT_LIFECYCLE_SCHEMA,
+        version: INCIDENT_CASE_SCHEMA_VERSION,
+        role: 'historical',
+        expectation: 'normalises_to_current_output',
+        expectedOutputFixtureId: 'case-export-v17',
+        shapeId: `case.export.v${INCIDENT_CASE_SCHEMA_VERSION}`,
+        scope: 'repository',
+    }),
+    Object.freeze({
+        id: 'case-export-v17',
+        path: 'test/fixtures/case-lifecycle/case-export-v17.json',
+        bytes: 3356,
+        sha256: 'bbce977c1045fd2b5d576619f07c6cc19388d3d192f671f467ab0ad069f01e8b',
+        contentDigestSha256: null,
+        schema: CASE_EXPORT_LIFECYCLE_SCHEMA,
         version: CASE_SCHEMA_VERSION,
         role: 'current',
         expectation: 'accepted_exact',
@@ -641,6 +678,20 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         sha256: '175b9ab720d95e497eb89a73f437b00c5db9595833b02b033a09bb526a926f36',
         contentDigestSha256: null,
         schema: CASE_REPORT_SCHEMA,
+        version: LATEST_PUBLIC_CASE_REPORT_SCHEMA_VERSION,
+        role: 'historical',
+        expectation: 'accepted_exact',
+        expectedOutputFixtureId: null,
+        shapeId: `case.report.v${LATEST_PUBLIC_CASE_REPORT_SCHEMA_VERSION}`,
+        scope: 'repository',
+    }),
+    Object.freeze({
+        id: 'case-report-v13',
+        path: 'test/fixtures/case-lifecycle/case-report-v13.json',
+        bytes: 4894,
+        sha256: '3b0e69f800a2b7a087a0ffcdf81ebbe4237863f42aea7812fd0d0f6b600b8426',
+        contentDigestSha256: null,
+        schema: CASE_REPORT_SCHEMA,
         version: CASE_REPORT_SCHEMA_VERSION,
         role: 'current',
         expectation: 'accepted_exact',
@@ -697,6 +748,20 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         sha256: '991475b878f65d9673e60c776162daf921ec5915e16715080ea0534516cff9c4',
         contentDigestSha256: 'sha256:97cfe929ace59edb46ee0b84e6135614aba782e170e730c3de3fb24b82413162',
         schema: CASE_RESPONSE_PACKET_SCHEMA,
+        version: LATEST_PUBLIC_CASE_RESPONSE_PACKET_VERSION,
+        role: 'historical',
+        expectation: 'accepted_exact',
+        expectedOutputFixtureId: null,
+        shapeId: `case.response-packet.v${LATEST_PUBLIC_CASE_RESPONSE_PACKET_VERSION}`,
+        scope: 'repository',
+    }),
+    Object.freeze({
+        id: 'case-response-packet-v11',
+        path: 'test/fixtures/case-lifecycle/case-response-packet-v11.json',
+        bytes: 12276,
+        sha256: '42817b82fbba58930866d9d4f5554732f56c143fd7a64c6e0acab57b66ddfdce',
+        contentDigestSha256: "sha256:603558cc7a9112ab759b7dd01f44c53c9408ed6d71db19f562fced2629d5c437",
+        schema: CASE_RESPONSE_PACKET_SCHEMA,
         version: CASE_RESPONSE_PACKET_VERSION,
         role: 'current',
         expectation: 'accepted_exact',
@@ -753,6 +818,20 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         sha256: 'b054fc8405663992055ec6c07998fd19ab2f12dcc581b87b42f773b1ab4acec7',
         contentDigestSha256: null,
         schema: CASE_RESPONSE_REVIEW_INPUTS_SCHEMA,
+        version: LATEST_PUBLIC_CASE_RESPONSE_REVIEW_INPUTS_VERSION,
+        role: 'historical',
+        expectation: 'accepted_exact',
+        expectedOutputFixtureId: null,
+        shapeId: `case.response-review-inputs.v${LATEST_PUBLIC_CASE_RESPONSE_REVIEW_INPUTS_VERSION}`,
+        scope: 'repository',
+    }),
+    Object.freeze({
+        id: 'case-response-review-inputs-v5',
+        path: 'test/fixtures/case-lifecycle/case-response-review-inputs-v5.json',
+        bytes: 7604,
+        sha256: '4a54acbc37ee4384c7a2b5c6168d3fffce6757e259d5314da537c8d423c8bee4',
+        contentDigestSha256: null,
+        schema: CASE_RESPONSE_REVIEW_INPUTS_SCHEMA,
         version: CASE_RESPONSE_REVIEW_INPUTS_VERSION,
         role: 'current',
         expectation: 'accepted_exact',
@@ -831,8 +910,8 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         scope: 'repository',
     }),
     Object.freeze({
-        id: CLI_CASE_PACK_WRITER_FIXTURE_ID,
-        path: `test/fixtures/case-lifecycle/${CLI_CASE_PACK_WRITER_FIXTURE_ID}.json`,
+        id: 'cli-case-pack-v2-case-v16-current',
+        path: 'test/fixtures/case-lifecycle/cli-case-pack-v2-case-v16-current.json',
         bytes: 9602,
         sha256: '2ac29a7b64b3d8930e92f6ab6b826566061224f281799f9b4b15c0acc98550f0',
         contentDigestSha256: 'sha256:c6e3cfbe171a85e9318a0a6780d54dc4ad3e662113a75f483fd527c2e36e0143',
@@ -844,6 +923,20 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         shapeId: 'case.cli-pack.current',
         scope: 'repository',
     }),
+    Object.freeze({
+        id: CLI_CASE_PACK_WRITER_FIXTURE_ID,
+        path: `test/fixtures/case-lifecycle/${CLI_CASE_PACK_WRITER_FIXTURE_ID}.json`,
+        bytes: 9874,
+        sha256: '3b25440521ddcc1e3ea65a0e56907df4fb725e27b91415c8f1afabab1c4f7e58',
+        contentDigestSha256: 'sha256:3cbf9f6dcacdc8efdaa55319e5ce7068a5cf2ea116c80e9ff8ccf6d2dc8741c6',
+        schema: CLI_CASE_PACK_SCHEMA,
+        version: CLI_CASE_PACK_VERSION,
+        role: 'current',
+        expectation: 'accepted_exact',
+        expectedOutputFixtureId: null,
+        shapeId: 'case.cli-pack.current',
+        scope: 'repository',
+    }),
     Object.freeze({
         id: 'workspace-archive-v5-public',
         path: 'test/fixtures/case-lifecycle/workspace-archive-v5-public.json',
@@ -893,7 +986,7 @@ const CASE_LIFECYCLE_FIXTURES = Object.freeze([
         sha256: '747062e2dbbcf96724b19718d36bf0dc50b08e96d8adb670115d2315032b6c05',
         contentDigestSha256: null,
         schema: WORKSPACE_ARCHIVE_SCHEMA,
-        version: LATEST_PUBLIC_WORKSPACE_ARCHIVE_VERSION,
+        version: PUBLISHED_V2_3_WORKSPACE_ARCHIVE_VERSION,
         role: 'historical',
         expectation: 'normalises_to_current_output',
         expectedOutputFixtureId: `workspace-archive-v${WORKSPACE_ARCHIVE_VERSION}-empty-current`,

package/packages/contracts/cli-command-semantics.mjs

@@ -76,9 +76,11 @@ export const CLI_COMMAND_SEMANTICS = Object.freeze({
     'page-compare': semantic('investigate', CAPABILITY_IDS.OFFLINE_REVIEW),
     'mail-review': semantic('investigate', CAPABILITY_IDS.OFFLINE_REVIEW),
     'mail-headers': semantic('investigate', CAPABILITY_IDS.OFFLINE_REVIEW),
+    intake: semantic('investigate', CAPABILITY_IDS.OFFLINE_REVIEW),
     'review-evidence': semantic('investigate', CAPABILITY_IDS.PORTABLE_EVIDENCE),
     brief: semantic('investigate', CAPABILITY_IDS.OFFLINE_REVIEW),
     case: semantic('respond', CAPABILITY_IDS.ANALYST_CASES),
+    'indicator-set': semantic('respond', CAPABILITY_IDS.PORTABLE_EVIDENCE),
     'case-pack': semantic('respond', CAPABILITY_IDS.PORTABLE_EVIDENCE),
     'domain-control': semantic('assure', CAPABILITY_IDS.PORTABLE_EVIDENCE),
     'monitor-once': semantic('assure', CAPABILITY_IDS.LOOKUP),

package/packages/contracts/cli-grammar.mjs

@@ -0,0 +1,6 @@
+import { MAX_INVESTIGATION_MANIFEST_ARTIFACTS } from "./investigation-package-limits.mjs";
+export const MAX_CLI_ARGUMENTS = MAX_INVESTIGATION_MANIFEST_ARTIFACTS + 32;
+export const MAX_CLI_ARGUMENT_LENGTH = 1024;
+export function hasUnsafeCliText(value) {
+    return /[\x00-\x1f\x7f-\x9f]|\p{Default_Ignorable_Code_Point}/u.test(value);
+}

package/packages/contracts/cli-lookup-brief.mjs

@@ -0,0 +1,2 @@
+export const CLI_LOOKUP_BRIEF_SCHEMA = 'whoisleuth.cli.lookup-brief';
+export const CLI_LOOKUP_BRIEF_VERSION = 3;

package/packages/contracts/context-review.mjs

@@ -0,0 +1,24 @@
+/** Common presentation of bounded, analyst-selected contextual evidence. */
+export const CONTEXT_REVIEW_SCHEMA = 'whoisleuth.context-review';
+export const CONTEXT_REVIEW_VERSION = 1;
+export const DOMAIN_HISTORY_INPUT_SCHEMA = 'whoisleuth.domain-history.input';
+export const DOMAIN_HISTORY_INPUT_VERSION = 1;
+export const PLATFORM_CONTINUITY_INPUT_SCHEMA = 'whoisleuth.platform-continuity.input';
+export const PLATFORM_CONTINUITY_INPUT_VERSION = 1;
+export const STOREFRONT_INPUT_SCHEMA = 'whoisleuth.storefront-review.input';
+export const STOREFRONT_INPUT_VERSION = 1;
+export const CONNECTOR_INPUT_SCHEMA = 'whoisleuth.connector-review.input';
+export const CONNECTOR_INPUT_VERSION = 1;
+export const INCIDENT_SEQUENCE_INPUT_SCHEMA = 'whoisleuth.incident-sequence.input';
+export const INCIDENT_SEQUENCE_INPUT_VERSION = 1;
+export const CONTEXT_INPUT_CONTRACTS = [
+    { schema: DOMAIN_HISTORY_INPUT_SCHEMA, version: DOMAIN_HISTORY_INPUT_VERSION },
+    { schema: PLATFORM_CONTINUITY_INPUT_SCHEMA, version: PLATFORM_CONTINUITY_INPUT_VERSION },
+    { schema: STOREFRONT_INPUT_SCHEMA, version: STOREFRONT_INPUT_VERSION },
+    { schema: CONNECTOR_INPUT_SCHEMA, version: CONNECTOR_INPUT_VERSION },
+    { schema: INCIDENT_SEQUENCE_INPUT_SCHEMA, version: INCIDENT_SEQUENCE_INPUT_VERSION },
+];
+export const CONTEXT_INPUT_SCHEMAS = CONTEXT_INPUT_CONTRACTS.map(input => input.schema);
+export const MAX_CONTEXT_INPUT_BYTES = 16 * 1024 * 1024;
+export const MAX_CONTEXT_RECORDS = 200;
+export const CONTEXT_REVIEW_KINDS = ['domain_history', 'platform_continuity', 'storefront', 'connector', 'incident_sequence'];

package/packages/contracts/document-intake.mjs

@@ -0,0 +1,11 @@
+/** Input admission, decoded XML, page work and pixels are independently bounded. */
+export const MAX_DOCUMENT_PARTS = 512;
+export const MAX_DOCUMENT_PAGES = 256;
+export const MAX_DOCUMENT_DECODED_BYTES = 32 * 1024 * 1024;
+export const MAX_DOCUMENT_TEXT_BYTES = 8 * 1024 * 1024;
+export const MAX_DOCUMENT_XML_NODES = 200_000;
+export const MAX_DOCUMENT_PAGE_OPERATIONS = 200_000;
+export const MAX_DOCUMENT_XML_DEPTH = 64;
+export const MAX_DOCUMENT_IMAGE_PIXELS = 16 * 1024 * 1024;
+export const MAX_DOCUMENT_TOTAL_IMAGE_PIXELS = 64 * 1024 * 1024;
+export const DOCUMENT_REVIEW_DEADLINE_MS = 60_000;

package/packages/contracts/domain-control-flight-recorder.mjs

@@ -5,8 +5,8 @@ import { MAX_DOMAIN_CONTROL_MONITOR_CONCURRENCY, MAX_DOMAIN_CONTROL_MONITOR_DOMA
 export const DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA = 'whoisleuth.domain-control-flight-recorder.input';
 export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA = 'whoisleuth.domain-control-flight-recorder';
 export const PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION = 1;
-export const DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION = 2;
-export const SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS = [PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION, DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION];
+export const DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION = 3;
+export const SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS = [PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION, 2, DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION];
 export const MIN_FLIGHT_RECORDER_OBSERVATIONS = 1;
 export const MAX_FLIGHT_RECORDER_OBSERVATIONS = 200;
 export const MAX_FLIGHT_RECORDER_WINDOWS = 40;
@@ -95,11 +95,14 @@ export const PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS = Object.freeze([
     'approvedWindow',
     'explanation',
 ]);
-export const DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS = Object.freeze([...PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS, 'capturedAt']);
-export const DOMAIN_CONTROL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS = Object.freeze([
+export const SOURCE_TIMED_FLIGHT_RECORDER_EVENT_KEYS = Object.freeze([...PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS, 'capturedAt']);
+export const DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS = Object.freeze([...SOURCE_TIMED_FLIGHT_RECORDER_EVENT_KEYS, 'collectionDepth', 'changeInterval']);
+export const FLIGHT_RECORDER_CHANGE_INTERVAL_KEYS = Object.freeze(['after', 'by', 'incompleteObservations']);
+export const HISTORICAL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS = Object.freeze([
     'id',
     'reason',
 ]);
+export const DOMAIN_CONTROL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS = Object.freeze([...HISTORICAL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS, 'startsAt', 'endsAt']);
 export const PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_SUMMARY_KEYS = Object.freeze([
     'firstObservations',
     'observedChanges',
@@ -115,10 +118,14 @@ export const PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS = Object.freeze([
     'Approved windows label expected timing but do not delete evidence or establish that a change was authorised, successful, safe, or complete.',
     'Observed changes can reflect publication lag or different collection conditions and require analyst review.',
 ]);
-export const DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS = Object.freeze([
+export const SOURCE_TIMED_FLIGHT_RECORDER_LIMITATIONS = Object.freeze([
     ...PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS,
     'Capture time and source observation time remain separate. Unknown, conflicting or non-increasing source times cannot establish an observed change.',
 ]);
+export const DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS = Object.freeze([
+    ...SOURCE_TIMED_FLIGHT_RECORDER_LIMITATIONS,
+    'A change interval is bounded by comparable complete source observations, not an exact change time. Incomplete observations inside it remain explicit. An approved window must contain the whole interval.',
+]);
 export const DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_COMPATIBILITY = defineSchemaCompatibility({
     id: 'cli.domain-control-flight-recorder-input',
     kind: 'cli_document',
@@ -224,14 +231,22 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
             scope: 'repository',
         },
     ].flatMap((fixture) => {
-        const version = DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION;
-        const id = fixture.id.replace(/v\d+$/u, `v${version}`);
-        const content = fixture.role === 'input'
-            ? { bytes: 2108, sha256: '6998ea864355dd0802b3b6f2c4905f8c84136ad0d4ac9cad1a0fd63dca523b60' }
-            : { bytes: 4649, sha256: '8f3168d101291166f34cede351bc176a934e7997920cd8c22ec00d642ec000df' };
         return [
             { ...fixture, role: fixture.role === 'input' ? 'input' : 'historical', expectation: 'accepted_exact', expectedOutputFixtureId: null },
-            { ...fixture, ...content, id, path: `test/fixtures/${id}.json`, version, expectedOutputFixtureId: fixture.expectedOutputFixtureId?.replace(/v\d+$/u, `v${version}`) ?? null },
+            ...[2, DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION].map(version => {
+                const id = fixture.id.replace(/v\d+$/u, `v${version}`);
+                const content = version === 2
+                    ? fixture.role === 'input'
+                        ? { bytes: 2108, sha256: '6998ea864355dd0802b3b6f2c4905f8c84136ad0d4ac9cad1a0fd63dca523b60' }
+                        : { bytes: 4649, sha256: '8f3168d101291166f34cede351bc176a934e7997920cd8c22ec00d642ec000df' }
+                    : fixture.role === 'input'
+                        ? { bytes: 2108, sha256: '3d9b91dfd34754482047cde64d6343676ec4747267677fcbcc989a65fbd9a6c6' }
+                        : { bytes: 5597, sha256: 'ab6a82cfecfb8238a72fbe2dcd4a68a1fd888990e5070eff9d98a337796624d6' };
+                return { ...fixture, ...content, id, path: `test/fixtures/${id}.json`, version,
+                    role: fixture.role === 'input' ? 'input' : version === DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION ? 'current' : 'historical',
+                    expectation: version === DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION ? fixture.expectation : 'accepted_exact',
+                    expectedOutputFixtureId: version === DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION ? fixture.expectedOutputFixtureId?.replace(/v\d+$/u, `v${version}`) ?? null : null };
+            }),
         ];
     }),
     metadata: {
@@ -257,11 +272,12 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
                 versions: [version],
                 objects: [
                     { path: '$', requiredKeys: DOMAIN_CONTROL_FLIGHT_RECORDER_ROOT_KEYS, optionalKeys: [], unknownKeys: 'reject' },
-                    { path: '$.events[]', requiredKeys: version === PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION ? PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS : DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS, optionalKeys: [], unknownKeys: 'reject' },
-                    { path: '$.events[].approvedWindow', requiredKeys: DOMAIN_CONTROL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS, optionalKeys: [], unknownKeys: 'reject' },
+                    { path: '$.events[]', requiredKeys: version === 1 ? PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS : version === 2 ? SOURCE_TIMED_FLIGHT_RECORDER_EVENT_KEYS : DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS, optionalKeys: [], unknownKeys: 'reject' },
+                    { path: '$.events[].approvedWindow', requiredKeys: version >= 3 ? DOMAIN_CONTROL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS : HISTORICAL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS, optionalKeys: [], unknownKeys: 'reject' },
+                    ...(version >= 3 ? [{ path: '$.events[].changeInterval', requiredKeys: FLIGHT_RECORDER_CHANGE_INTERVAL_KEYS, optionalKeys: [], unknownKeys: 'reject' }] : []),
                     { path: '$.summary', requiredKeys: version === PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION ? PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_SUMMARY_KEYS : DOMAIN_CONTROL_FLIGHT_RECORDER_SUMMARY_KEYS, optionalKeys: [], unknownKeys: 'reject' },
                 ],
-                fixedArrays: [{ path: '$.limitations', values: version === PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION ? PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS : DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS }],
+                fixedArrays: [{ path: '$.limitations', values: version === 1 ? PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS : version === 2 ? SOURCE_TIMED_FLIGHT_RECORDER_LIMITATIONS : DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS }],
                 normalisation: 'preserve_document',
                 target: null,
             },

package/packages/contracts/domain-control-manifest.mjs

@@ -410,7 +410,7 @@ export const DOMAIN_CONTROL_SCHEMA_LIFECYCLE = defineSchemaLifecycleFamily({
                 bounds: [
                     { id: 'exported-entries', path: '$.selectedDomains', phase: 'action', unit: 'entries', minimum: 1, maximum: MAX_DOMAIN_CONTROL_BROWSER_PROFILE_ENTRIES, handling: 'cap_operation' },
                     { id: 'previewed-entries', path: '$.verifiedManifest.entries', phase: 'action', unit: 'entries', minimum: 1, maximum: MAX_DOMAIN_CONTROL_MANIFEST_ENTRIES, handling: 'reject' },
-                    { id: 'applied-baselines', path: '$.choices', phase: 'action', unit: 'entries', minimum: 0, maximum: MAX_DOMAIN_CONTROL_BROWSER_PROFILE_ENTRIES, handling: 'cap_operation' },
+                    { id: 'applied-baselines', path: '$.choices', phase: 'action', unit: 'entries', minimum: 0, maximum: MAX_DOMAIN_CONTROL_BROWSER_PROFILE_ENTRIES, handling: 'reject' },
                 ],
             },
             {