@vela-science/canopus 0.6.5 → 0.8.0

package/docs/adr/0010-nonmutating-runs-and-explicit-submission.md

@@ -0,0 +1,191 @@
+# ADR 0010: Nonmutating Runs and explicit Submission
+
+- Status: Accepted
+- Candidate release: Canopus `v0.8.0`
+- Protocol effect: None
+- Vela requirement: current `vela.submission.v1` and `vela submit`
+- Supersedes for current writers: automatic landing portions of ADR 0004
+- Acceptance gate: the corrected real Erdős Submission must register as
+  pending review with accepted-event delta zero and reproduce from a clean
+  clone; package, custody, provenance, and release checks must also pass.
+
+## Context
+
+Canopus is a bounded research runner, not a scientific-state authority. Its
+released product nevertheless combined model execution, independent verifier
+replay, Receipt construction, Vela work mutation, Proposal registration, and
+landing into one ordinary `run` command.
+
+That composition made a successful computation hard to distinguish from a
+registered scientific request. It also made safe inspection depend on terms
+such as landing and Receipt that are no longer part of Vela's current producer
+language.
+
+The current product cycle is:
+
+```text
+doctor -> run -> show -> replay -> export -> submit
+```
+
+The boundary must remain useful when Canopus is deleted and interoperable with
+any producer capable of emitting the same authenticated Vela Submission.
+
+## Decision
+
+### Run
+
+`canopus run` is nonmutating by default and has no mutating mode.
+
+It:
+
+1. resolves one exact Vela offer;
+2. prepares disposable, bounded worker and verifier environments;
+3. freezes the candidate bytes;
+4. executes the independent verifier;
+5. reproduces the verifier result from a clean clone; and
+6. writes `canopus.run.v2` with `effect: "none"`,
+   `authority: "non_authoritative"`, and `submission: null`.
+
+It does not claim Vela work, publish Artifacts into a Frontier, register a
+Proposal, create a Verification Record, create a Decision or Event, or change
+Standing.
+
+There is no `--no-land` switch because the safe behavior is not optional.
+
+### Show and replay
+
+`canopus show` reads current Run v2 and retained failure records. Historical
+diagnostic and landed Run formats remain readable through their exact tagged
+Canopus releases; the current package does not ship their parsers or schemas
+and never normalizes their bytes into the current schema.
+
+`canopus replay` reruns the frozen verifier without a model call or Frontier
+mutation. The current command accepts Run v2 only.
+
+### Export
+
+`canopus export <run.json>` converts only a successful, independently
+verifier-passing current Run into a portable bundle:
+
+```text
+canopus.submission-bundle.v1
+  submission.json
+  manifest.json
+  artifacts/sha256/<full-digest>
+```
+
+`submission.json` is a whole-body Ed25519-signed `vela.submission.v1`. The
+identity is ephemeral and agent-class. Canopus retains no private key or
+withdrawal capability after the authenticated Submission bytes exist.
+
+Independent verifier output is named as a verification requirement. It is not
+placed in `producer_checks`, called a Verification Record, or treated as
+acceptance.
+
+`vela.execution-binding.v1` remains optional on Submission v1. A review-only
+Run without a positive result contract may export without it; the Submission's
+verification requirement still binds the exact capsule root. Such a Submission
+is not policy-eligible. Exact policy eligibility requires the full packet,
+profile, verifier-capsule, and result-contract binding.
+
+### Submit
+
+`canopus submit <bundle> <frontier>` is the only current Canopus operation that
+may change a Frontier.
+
+Before mutation it verifies:
+
+- the closed bundle manifest;
+- the Submission identity, whole-body signature, and full root;
+- exact agreement between bundled and declared Artifacts;
+- safe relative paths, byte counts, and full digests;
+- the exact retained source Git commit and tree;
+- that the current clean Frontier is that commit or a descendant of it;
+- a clean source worktree; and
+- the current supported registration binary version and its observed SHA-256.
+
+The Run's historical Vela version and SHA-256 remain immutable source
+provenance. They are not incorrectly required to write a later current
+repository epoch. The submit result records the exact current registration
+binary identity.
+
+It performs registration in a disposable exact-head clone, accepts only
+`vela.submit-result.v1` with `pending_review` and accepted-event delta zero,
+then fast-forwards the still-clean source checkout. A failure before the final
+fast-forward leaves the source Frontier unchanged.
+
+Canopus never emits a Verification Record, Decision, Event, or scientific
+Standing.
+
+## Compatibility and migration
+
+Historical Run, Receipt, landing, and activity bytes remain immutable in Git
+history, releases, and retained run evidence. Their exact releases remain the
+corresponding readers. The current package contains neither their writers nor
+their readers.
+
+Mission v1 and profile v2 remain advanced, content-addressed input contracts.
+Their historical `landing` field is interpreted only as a bounded legacy
+result expectation; current Run does not execute a landing. A future input
+schema may rename that field only with a demonstrated interoperation need.
+
+Current source exposes exactly:
+
+```text
+doctor run show replay export submit
+```
+
+`inspect`, automatic landing, Receipt authoring, retained producer
+capabilities, and Canopus-managed withdrawal are not compatibility aliases.
+
+## Adversarial cases
+
+- A dirty or root-drifted source Frontier blocks submit.
+- A missing source commit, wrong retained tree, or non-descendant current
+  Frontier blocks submit.
+- The submit result discloses the exact registration-binary SHA-256; release
+  qualification fails if it does not match the pinned platform artifact.
+- A malformed, extra-field, path-traversing, duplicated, missing, truncated,
+  or digest-mismatched Artifact blocks before Vela runs.
+- A manifest that swaps producer, identity binding, Submission, source roots,
+  or Artifact bindings blocks.
+- A verifier pass cannot populate a Verification Record or accepted Standing.
+- A failed clean-clone reproduction cannot be exported.
+- A successful Run cannot mutate the Frontier, even when a historical Mission
+  contains a landing expectation.
+- Deleting Canopus and all private Run evidence cannot change Vela replay.
+
+## Conformance contract
+
+Focused tests must prove:
+
+- current help exposes exactly the six-command cycle;
+- Run v2 leaves source Git and Vela roots unchanged;
+- a current Run reproduces from a clean clone;
+- export emits an authenticated Vela Submission with no retained key;
+- bundle and Submission Artifact sets agree exactly;
+- submit rejects path traversal, bundle drift, unsupported registration
+  binaries, missing/non-descendant source history, and authority-changing Vela
+  results;
+- submit fast-forwards only after verified pending registration;
+- historical current-source readers still parse released Run formats; and
+- released Vela composition retains zero mutation during Run.
+
+Release checks:
+
+```bash
+bun install --frozen-lockfile
+bun run check
+bun run pack:check
+git diff --check
+```
+
+## Consequences
+
+The ordinary product now matches its actual responsibility: Canopus produces
+bounded, replayable research evidence; Vela registers authenticated producer
+input and owns review and Standing.
+
+The extra explicit `export` and `submit` steps are deliberate. They make the
+mutation boundary inspectable, scriptable, and replaceable without adding a
+new service, protocol object, authority surface, or retained key lifecycle.

package/missions/erdos1056-k15-next/mission.draft.json

@@ -1,15 +1,15 @@
 {
-  "id": "mission_erdos1056_k15_range_10428801_10429000_native3",
+  "id": "mission_erdos1056_k15_range_10429201_10429400",
   "target": "auto",
   "frontier": ".",
   "actor": "agent:canopus-local",
   "role": "producer",
   "claim_type": "computational",
   "replayability": "exact",
-  "objective": "Perform one finite exhaustive search for an Erdős 1056 k=15 witness over every prime p in the exact inclusive range 10428801..10429000. Use a compiled C++ program, one prime at a time; a flat open-addressed table keyed by the factorial residue keeps this bounded computation inside the registered memory and time limits. For each prime, compute t! modulo p for every cut t in 0..p-1 and count every residue fiber. For each p choose its largest fiber, breaking a tie by the smallest residue. If any largest fiber has at least 16 cuts, stop at the first such prime and report status=witness. Otherwise report status=negative and the greatest multiplicity over the whole range, breaking ties by the earliest prime and then the smallest residue. In both cases list every increasing cut in the selected fiber. Produce exactly one UTF-8 artifact at artifacts/erdos1056-k15-range-10428801-10429000.txt with these newline-terminated lines in order: schema=canopus.erdos1056-k15-search.v1; status=witness or status=negative; problem=1056; k=15; range_start=10428801; range_end=10429000; primes_tested=<exact count>; max_multiplicity=<exact count>; best_p=<prime>; best_residue=<residue>; cuts=<comma-separated cuts>. Return engine status success only after the program completes the entire registered range and writes the exact artifact. This is an exact bounded computation, not a universal answer to Erdős 1056.",
-  "completion_condition": "The independent frozen capsule recomputes the full exact range in a separate network-denied and write-denied container and byte-matches the single artifact.",
+  "objective": "Perform one finite exhaustive search for an Erdős 1056 k=15 witness over every prime p in the exact inclusive range 10429201..10429400. Use a compiled C++ program, one prime at a time; a flat open-addressed table keyed by the factorial residue keeps this bounded computation inside the registered memory and time limits. For each prime, compute t! modulo p for every cut t in 0..p-1 and count every residue fiber. For each p choose its largest fiber, breaking a tie by the smallest residue. If any largest fiber has at least 16 cuts, stop at the first such prime and report status=witness. Otherwise report status=negative and the greatest multiplicity over the whole range, breaking ties by the earliest prime and then the smallest residue. In both cases list every increasing cut in the selected fiber. Produce exactly one UTF-8 artifact at artifacts/erdos1056-k15-range-10429201-10429400.txt with these newline-terminated lines in order: schema=canopus.erdos1056-k15-search.v1; status=witness or status=negative; problem=1056; k=15; range_start=10429201; range_end=10429400; primes_tested=<exact count>; max_multiplicity=<exact count>; best_p=<prime>; best_residue=<residue>; cuts=<comma-separated cuts>. Independently cross-check the selected prime, residue, multiplicity, and complete cut list before emitting the artifact. Return engine status success only after the program completes the entire registered range and writes the exact artifact. This is an exact bounded computation, not a universal answer to Erdős 1056.",
+  "completion_condition": "The frozen verifier independently recomputes the full exact range in a separate network-denied and write-denied container and byte-matches the single artifact.",
   "allowed_paths": [
-    "artifacts/erdos1056-k15-range-10428801-10429000.txt"
+    "artifacts/erdos1056-k15-range-10429201-10429400.txt"
   ],
   "budgets": {
     "max_research_wall_time_ms": 1800000,
@@ -26,7 +26,7 @@
   "verifier": {
     "argv": [
       "capsule/verifier",
-      "{artifact:artifacts/erdos1056-k15-range-10428801-10429000.txt}"
+      "{artifact:artifacts/erdos1056-k15-range-10429201-10429400.txt}"
     ],
     "cwd": "site",
     "timeout_ms": 300000,
@@ -34,7 +34,9 @@
     "capsule_path": "capsule/verifier"
   },
   "scientific_chain": {
-    "predicted_observable": "The frozen verifier independently obtains the same first witness or complete bounded-negative result for all primes in 10428801..10429000 and exits zero on the exact candidate bytes.",
-    "performed_test": "capsule/verifier artifacts/erdos1056-k15-range-10428801-10429000.txt"
-  }
+    "predicted_observable": "The frozen verifier independently obtains the same first witness or complete bounded-negative result for all primes in 10429201..10429400 and exits zero on the exact candidate bytes.",
+    "performed_test": "capsule/verifier artifacts/erdos1056-k15-range-10429201-10429400.txt"
+  },
+  "parent_candidate": "sha256:b369f29c3dfe777401375eeb47f682d20d89ca0387deaf600d791c01f98da9c0",
+  "repair_reason": "Continue Erdős 1056 with the next exact non-overlapping inclusive range after the retained 10429001..10429200 artifact. Do not reuse a prior numeric result, and independently cross-check the selected fiber before emitting the one allowed artifact."
 }

package/package.json

@@ -1,13 +1,14 @@
 {
   "name": "@vela-science/canopus",
-  "version": "0.6.5",
+  "version": "0.8.0",
   "description": "A bounded, replaceable research harness over released Vela interfaces",
   "type": "module",
   "private": false,
   "license": "Apache-2.0 OR MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/vela-science/vela-research-harness.git"
+    "url": "git+https://github.com/vela-science/vela.git",
+    "directory": "packages/canopus"
   },
   "publishConfig": {
     "access": "public",
@@ -31,15 +32,12 @@
     "dist/src/artifact",
     "dist/src/budget",
     "dist/src/candidate",
-    "dist/src/capability",
     "dist/src/contracts",
     "dist/src/engines",
     "dist/src/evidence",
     "dist/src/mission",
     "dist/src/product",
     "dist/src/projection",
-    "dist/src/receipt",
-    "dist/src/repair",
     "dist/src/util",
     "dist/src/vela",
     "dist/src/verifier",
@@ -48,33 +46,25 @@
     "dist/src/cli.d.ts",
     "dist/src/index.js",
     "dist/src/index.d.ts",
-    "dist/src/roles.js",
-    "dist/src/roles.d.ts",
     "dist/src/run.js",
     "dist/src/run.d.ts",
     "schemas",
-    "capsules/erdos1056-k15/bin/linux-arm64/10428801-10429000/verifier",
-    "capsules/erdos1056-k15/bin/linux-x86_64/10428801-10429000/verifier",
-    "capsules/formal-erdos-505-test-dim-one/verifier",
-    "capsules/quantum-10-1-4/verifier.py",
-    "capsules/sidon-a24/bin/linux-arm64/verifier",
-    "capsules/sidon-a24/bin/linux-x86_64/verifier",
+    "capsules/erdos1056-k15/bin/linux-arm64/10429201-10429400/verifier",
+    "capsules/erdos1056-k15/bin/linux-x86_64/10429201-10429400/verifier",
     "missions",
     "profiles",
+    "compatibility.json",
+    "toolchain.lock.json",
     "runtime",
-    "advisories",
-    "evidence/build-week",
-    "evidence/erdos",
-    "scripts/run-claim-fidelity-advisory.mjs",
     "scripts/run-hostile-native-custody-fixture.mjs",
     "scripts/run-hostile-verifier-fixture.mjs",
     "tests/fixtures/hostile-verifier",
     "README.md",
-    "BUILD_WEEK.md",
     "THIRD_PARTY.md",
     "docs/MISSIONS.md",
-    "docs/RELEASES.md",
     "docs/RUN_RECORD.md",
+    "docs/EVALUATION.md",
+    "docs/adr/0010-nonmutating-runs-and-explicit-submission.md",
     "CHANGELOG.md",
     "SECURITY.md",
     "LICENSE-APACHE",
@@ -88,13 +78,19 @@
     "check": "bun run lint && bun run test",
     "prepack": "bun run build",
     "pack:check": "bun pm pack --dry-run",
-    "experiment:task-authority": "bun experiments/task-authority/run.mjs",
-    "experiment:task-authority-shadow": "bun experiments/task-authority/run-live-shadow.mjs",
     "fixture:hostile-custody": "node scripts/run-hostile-native-custody-fixture.mjs",
-    "fixture:hostile-verifier": "node scripts/run-hostile-verifier-fixture.mjs"
+    "fixture:hostile-verifier": "node scripts/run-hostile-verifier-fixture.mjs",
+    "eval:validate": "bun evaluation/scripts/validate-plan.mjs",
+    "eval:run": "bun evaluation/scripts/run-plan.mjs",
+    "eval:report": "bun evaluation/scripts/report.mjs",
+    "eval:conformance": "node --test tests/evaluation-plan.test.mjs",
+    "trace:export": "bun evaluation/scripts/trace-export.mjs"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",
     "typescript": "^5.9.0"
+  },
+  "dependencies": {
+    "@vela-science/protocol": "0.1.0"
   }
 }

package/profiles/{erdos1056-k15-10428801-10429000.json → erdos1056-k15-10429201-10429400.json}

@@ -1,15 +1,15 @@
 {
   "schema": "canopus.profile.v2",
-  "name": "erdos1056-k15-10428801-10429000",
+  "name": "erdos1056-k15-10429201-10429400",
   "target": "erdos:1056",
   "target_packet_schema": "erdos-frontier.problem-work.v1",
   "draft": "missions/erdos1056-k15-next/mission.draft.json",
-  "draft_sha256": "sha256:bcf426097f93fef79e2743e1591940f0d2e13a899f6b81b5e58e697213ddfd9e",
-  "objective_sha256": "sha256:cc5ec511b6b66a5d4e99047aba59a8b2e89dff5c8f496a759183355547f968a5",
-  "completion_condition_sha256": "sha256:4a4a06e2c867867a191af27900e96c23e677db2775783f1829c31e4867a7f270",
-  "allowed_artifacts_sha256": "sha256:f0f5f096175d80648c9d0463c726ebdf2811ed25511b1640e7151ab3eb622bd3",
+  "draft_sha256": "sha256:b0d702c5f475daaa1edd37710cf9b90609d8d17a268f8635289f3dec31aeeed1",
+  "objective_sha256": "sha256:95e7fc685a31e7c2f1f876e5b3082d87e95427e2822214625551476ca0d54f4b",
+  "completion_condition_sha256": "sha256:92a9aa5ba79b24363a8a1406188b16b61d942e799038c3b512778065fe9bff5e",
+  "allowed_artifacts_sha256": "sha256:0e56c453a599e65fa40ec30e781fe5fdc2fa779aae3d4c4e057181dd405f00b7",
   "budgets_sha256": "sha256:5457a393d492978d8f191aca42fde0bf95261d74d701ce7ecd1b99f6e0dcbc0c",
-  "replay_argv_sha256": "sha256:5442bf3648b752afc9898cfec9197cb47021bde71caa48028700ede7367a9176",
+  "replay_argv_sha256": "sha256:91c8625cb6aedde017b328a322645239015f5d73958dd26aa2510567790bddb1",
   "landing": {
     "expected_routes": ["defer"],
     "max_accepted_delta": 0
@@ -18,15 +18,15 @@
     "darwin-arm64": {
       "worker_profile": "runtime/native-worker/config.toml",
       "worker_profile_sha256": "sha256:12b58762819481ad101e7a172a296224b6050a8a07a7431272e521a4102908da",
-      "verifier_capsule": "capsules/erdos1056-k15/bin/linux-arm64/10428801-10429000/verifier",
-      "verifier_capsule_sha256": "sha256:c9533a8650ca2a76f37c4d482e5467849eb6df4e11d18759207abd94739293f3",
+      "verifier_capsule": "capsules/erdos1056-k15/bin/linux-arm64/10429201-10429400/verifier",
+      "verifier_capsule_sha256": "sha256:6abe6125b5ed7cfeb256a1d86f3a66c6e7000a5542417d9dd04b2e5f9d3ffe81",
       "verifier_image": "ghcr.io/vela-science/canopus-verifier@sha256:a6f354862f2a3f7d72eb99244c65fa8583c98b74e17e3d5ce6e31ef48aa16536"
     },
     "linux-x86_64": {
       "worker_profile": "runtime/native-worker/config-linux.toml",
       "worker_profile_sha256": "sha256:fddecc4b7458b91f6d55ae16b666d297ae7bcd1a2f5deeb6650dcea60fc0242c",
-      "verifier_capsule": "capsules/erdos1056-k15/bin/linux-x86_64/10428801-10429000/verifier",
-      "verifier_capsule_sha256": "sha256:f9c33462ce457cf465aa95ae7e557a33c3c3988f5a9b7891b2accedb0eabee9e",
+      "verifier_capsule": "capsules/erdos1056-k15/bin/linux-x86_64/10429201-10429400/verifier",
+      "verifier_capsule_sha256": "sha256:ce73ca27d54a2ed31607a6d279d85ed36f28c2a830891b5d5d27b9cf50f0fcb4",
       "verifier_image": "ghcr.io/vela-science/canopus-verifier@sha256:a6f354862f2a3f7d72eb99244c65fa8583c98b74e17e3d5ce6e31ef48aa16536"
     }
   }

package/schemas/failure.v1.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://vela.science/schemas/canopus/failure.v1.json",
+  "title": "Canopus nonmutating failure v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "run_id", "error", "phase", "effect", "activity_tip", "authority"],
+  "properties": {
+    "schema": { "const": "canopus.failure.v1" },
+    "run_id": { "type": "string", "pattern": "^run_[A-Za-z0-9._-]+$" },
+    "error": { "type": "string", "minLength": 1, "maxLength": 16384 },
+    "phase": { "type": "string", "pattern": "^[a-z][a-z0-9_]*$" },
+    "effect": { "const": "none" },
+    "activity_tip": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "authority": { "const": "non_authoritative" }
+  }
+}

package/schemas/mission.v0.json

@@ -33,7 +33,7 @@
     "target": { "type": "string", "minLength": 1, "maxLength": 256 },
     "vela_version": {
       "type": "string",
-      "pattern": "^0\\.[0-9]+\\.[0-9]+$"
+      "pattern": "^0\\.[0-9]+\\.[0-9]+(?:-[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?$"
     },
     "vela_sha256": { "$ref": "#/$defs/sha256" },
     "frontier": {
@@ -61,12 +61,11 @@
     "roots": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["git_commit", "git_tree", "vela_event_log", "vela_snapshot"],
+      "required": ["git_commit", "git_tree", "vela_repository"],
       "properties": {
         "git_commit": { "$ref": "#/$defs/gitObject" },
         "git_tree": { "$ref": "#/$defs/gitObject" },
-        "vela_event_log": { "$ref": "#/$defs/sha256" },
-        "vela_snapshot": { "$ref": "#/$defs/sha256" }
+        "vela_repository": { "$ref": "#/$defs/sha256" }
       }
     },
     "allowed_paths": {

package/schemas/mission.v1.json

@@ -7,7 +7,7 @@
   "required": [
     "schema", "id", "target", "vela_version", "vela_sha256", "frontier",
     "actor", "role", "claim_type", "replayability", "objective",
-    "completion_condition", "roots", "target_packet", "strict_baseline",
+    "completion_condition", "roots", "target_packet",
     "allowed_paths", "budgets", "worker", "verifier", "scientific_chain",
     "landing"
   ],
@@ -34,7 +34,10 @@
     "schema": { "const": "canopus.mission.v1" },
     "id": { "type": "string", "pattern": "^mission_[a-z0-9][a-z0-9._-]{0,126}$" },
     "target": { "type": "string", "minLength": 1, "maxLength": 256 },
-    "vela_version": { "type": "string", "pattern": "^0\\.[0-9]+\\.[0-9]+$" },
+    "vela_version": {
+      "type": "string",
+      "pattern": "^0\\.[0-9]+\\.[0-9]+(?:-[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?$"
+    },
     "vela_sha256": { "$ref": "#/$defs/sha256" },
     "frontier": { "anyOf": [{ "const": "." }, { "$ref": "#/$defs/relativePath" }] },
     "actor": { "type": "string", "pattern": "^agent:[a-z0-9][a-z0-9._-]{0,62}$" },
@@ -94,29 +97,6 @@
         }
       }
     },
-    "strict_baseline": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["status", "blocker_count", "blockers_root", "rule_counts"],
-      "properties": {
-        "status": { "enum": ["pass", "fail"] },
-        "blocker_count": { "type": "integer", "minimum": 0, "maximum": 1000000 },
-        "blockers_root": { "$ref": "#/$defs/sha256" },
-        "rule_counts": {
-          "type": "array",
-          "maxItems": 64,
-          "items": {
-            "type": "object",
-            "additionalProperties": false,
-            "required": ["rule", "count"],
-            "properties": {
-              "rule": { "type": "string", "pattern": "^[a-z][a-z0-9_]*$", "maxLength": 128 },
-              "count": { "type": "integer", "minimum": 1, "maximum": 1000000 }
-            }
-          }
-        }
-      }
-    },
     "allowed_paths": {
       "type": "array", "minItems": 1, "maxItems": 64, "uniqueItems": true,
       "items": { "$ref": "#/$defs/relativePath" }
@@ -187,12 +167,11 @@
     "relativePath": { "type": "string", "minLength": 1, "maxLength": 1024 },
     "roots": {
       "type": "object", "additionalProperties": false,
-      "required": ["git_commit", "git_tree", "vela_event_log", "vela_snapshot"],
+      "required": ["git_commit", "git_tree", "vela_repository"],
       "properties": {
         "git_commit": { "$ref": "#/$defs/gitObject" },
         "git_tree": { "$ref": "#/$defs/gitObject" },
-        "vela_event_log": { "$ref": "#/$defs/sha256" },
-        "vela_snapshot": { "$ref": "#/$defs/sha256" }
+        "vela_repository": { "$ref": "#/$defs/sha256" }
       }
     },
     "budgets": {