@xemahq/contracts 0.81.0 → 0.83.0

package/dist/conformance/customer-edition-definition.vectors.json

@@ -0,0 +1,987 @@
+{
+  "$comment": "Conformance vectors for CustomerEditionDefinitionSchema. Every identifier is a fixture name. `issue` is a substring the refusal message carries.",
+  "vectors": [
+    {
+      "name": "catalogue-and-sources-branch-ref",
+      "expect": "accept",
+      "why": "Named biomes with per-biome options (installPolicy optional per entry), a branch ref, and a ceiling: the accepted shape of a definition that draws from its own source.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-catalogue-biome-a",
+            "installPolicy": "required"
+          },
+          {
+            "biome": "fixture-catalogue-biome-b",
+            "installPolicy": "optional"
+          },
+          {
+            "biome": "fixture-catalogue-biome-c",
+            "installPolicy": "required",
+            "mandatory": true
+          },
+          {
+            "biome": "fixture-catalogue-biome-d"
+          },
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "trustCeiling": {
+          "assignments": [
+            {
+              "domain": "fixture-domain-a",
+              "biomes": [
+                "fixture-source-biome-a"
+              ]
+            },
+            {
+              "domain": "fixture-domain-b",
+              "biomes": [
+                "fixture-source-biome-b"
+              ]
+            }
+          ]
+        },
+        "sources": [
+          {
+            "name": "fixture-customer-biomes",
+            "kind": "git",
+            "url": "https://git.example.com/fixture/customer-biomes.git",
+            "ref": "main"
+          }
+        ]
+      }
+    },
+    {
+      "name": "sources-tag-ref",
+      "expect": "accept",
+      "why": "A tag is a ref.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "trustCeiling": {
+          "assignments": [
+            {
+              "domain": "fixture-domain-a",
+              "biomes": [
+                "fixture-source-biome-a"
+              ]
+            },
+            {
+              "domain": "fixture-domain-b",
+              "biomes": [
+                "fixture-source-biome-b"
+              ]
+            }
+          ]
+        },
+        "sources": [
+          {
+            "name": "fixture-customer-biomes",
+            "kind": "git",
+            "url": "https://git.example.com/fixture/customer-biomes.git",
+            "ref": "v1.4.0"
+          }
+        ]
+      }
+    },
+    {
+      "name": "pure-catalogue",
+      "expect": "accept",
+      "why": "No sources, so no ceiling.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-catalogue-biome-a"
+          },
+          {
+            "biome": "fixture-catalogue-biome-b",
+            "installPolicy": "optional"
+          }
+        ]
+      }
+    },
+    {
+      "name": "sources-with-token-and-username",
+      "expect": "accept",
+      "why": "The git source's own auth rule applies unchanged.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "trustCeiling": {
+          "assignments": [
+            {
+              "domain": "fixture-domain-a",
+              "biomes": [
+                "fixture-source-biome-a"
+              ]
+            },
+            {
+              "domain": "fixture-domain-b",
+              "biomes": [
+                "fixture-source-biome-b"
+              ]
+            }
+          ]
+        },
+        "sources": [
+          {
+            "name": "fixture-customer-biomes",
+            "kind": "git",
+            "url": "https://git.example.com/fixture/customer-biomes.git",
+            "ref": "main",
+            "authTokenEnv": "FIXTURE_CUSTOMER_BIOMES_TOKEN",
+            "authUsername": "x-access-token"
+          }
+        ]
+      }
+    },
+    {
+      "name": "source-ref-is-a-commit-id",
+      "expect": "refuse",
+      "issue": "never a commit id",
+      "why": "The first shape found in the field: complete, except that the source pins a commit.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "trustCeiling": {
+          "assignments": [
+            {
+              "domain": "fixture-domain-a",
+              "biomes": [
+                "fixture-source-biome-a",
+                "fixture-source-biome-b"
+              ]
+            }
+          ]
+        },
+        "sources": [
+          {
+            "name": "fixture-customer-biomes",
+            "kind": "git",
+            "url": "https://git.example.com/fixture/customer-biomes.git",
+            "ref": "0123456789abcdef0123456789abcdef01234567"
+          }
+        ]
+      }
+    },
+    {
+      "name": "source-ref-is-a-sha256-commit-id",
+      "expect": "refuse",
+      "issue": "never a commit id",
+      "why": "Any full-hex object id, in any case.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "trustCeiling": {
+          "assignments": [
+            {
+              "domain": "fixture-domain-a",
+              "biomes": [
+                "fixture-source-biome-a"
+              ]
+            },
+            {
+              "domain": "fixture-domain-b",
+              "biomes": [
+                "fixture-source-biome-b"
+              ]
+            }
+          ]
+        },
+        "sources": [
+          {
+            "name": "fixture-customer-biomes",
+            "kind": "git",
+            "url": "https://git.example.com/fixture/customer-biomes.git",
+            "ref": "0123456789ABCDEF0123456789abcdef0123456789abcdef0123456789abcdef"
+          }
+        ]
+      }
+    },
+    {
+      "name": "visibility-and-no-ref-no-ceiling",
+      "expect": "refuse",
+      "issue": "visibility",
+      "why": "The second shape found in the field: visibility declared, the source names no ref, and there is no ceiling.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-catalogue-biome-a",
+            "installPolicy": "required"
+          },
+          {
+            "biome": "fixture-catalogue-biome-b",
+            "installPolicy": "optional"
+          },
+          {
+            "biome": "fixture-catalogue-biome-c",
+            "installPolicy": "required",
+            "mandatory": true
+          },
+          {
+            "biome": "fixture-catalogue-biome-d"
+          },
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "visibility": "private",
+        "sources": [
+          {
+            "name": "fixture-customer-biomes",
+            "kind": "git",
+            "url": "https://git.example.com/fixture/customer-biomes.git"
+          }
+        ]
+      }
+    },
+    {
+      "name": "visibility-declared",
+      "expect": "refuse",
+      "issue": "visibility",
+      "why": "visibility alone.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "trustCeiling": {
+          "assignments": [
+            {
+              "domain": "fixture-domain-a",
+              "biomes": [
+                "fixture-source-biome-a"
+              ]
+            },
+            {
+              "domain": "fixture-domain-b",
+              "biomes": [
+                "fixture-source-biome-b"
+              ]
+            }
+          ]
+        },
+        "sources": [
+          {
+            "name": "fixture-customer-biomes",
+            "kind": "git",
+            "url": "https://git.example.com/fixture/customer-biomes.git",
+            "ref": "main"
+          }
+        ],
+        "visibility": "private"
+      }
+    },
+    {
+      "name": "source-without-ref",
+      "expect": "refuse",
+      "issue": "`ref` is required",
+      "why": "ref alone.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "trustCeiling": {
+          "assignments": [
+            {
+              "domain": "fixture-domain-a",
+              "biomes": [
+                "fixture-source-biome-a"
+              ]
+            },
+            {
+              "domain": "fixture-domain-b",
+              "biomes": [
+                "fixture-source-biome-b"
+              ]
+            }
+          ]
+        },
+        "sources": [
+          {
+            "name": "fixture-customer-biomes",
+            "kind": "git",
+            "url": "https://git.example.com/fixture/customer-biomes.git"
+          }
+        ]
+      }
+    },
+    {
+      "name": "sources-without-ceiling",
+      "expect": "refuse",
+      "issue": "`trustCeiling` is required",
+      "why": "Sources and no ceiling.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "sources": [
+          {
+            "name": "fixture-customer-biomes",
+            "kind": "git",
+            "url": "https://git.example.com/fixture/customer-biomes.git",
+            "ref": "main"
+          }
+        ]
+      }
+    },
+    {
+      "name": "ceiling-without-sources",
+      "expect": "refuse",
+      "issue": "refused when it declares none",
+      "why": "A pure-catalogue definition has nothing to assign.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-catalogue-biome-a"
+          }
+        ],
+        "trustCeiling": {
+          "assignments": [
+            {
+              "domain": "fixture-domain-a",
+              "biomes": [
+                "fixture-source-biome-a"
+              ]
+            },
+            {
+              "domain": "fixture-domain-b",
+              "biomes": [
+                "fixture-source-biome-b"
+              ]
+            }
+          ]
+        }
+      }
+    },
+    {
+      "name": "ceiling-with-no-assignment",
+      "expect": "refuse",
+      "issue": "assignments",
+      "why": "The kernel trust policy refuses an empty assignment list.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "trustCeiling": {
+          "assignments": []
+        },
+        "sources": [
+          {
+            "name": "fixture-customer-biomes",
+            "kind": "git",
+            "url": "https://git.example.com/fixture/customer-biomes.git",
+            "ref": "main"
+          }
+        ]
+      }
+    },
+    {
+      "name": "ceiling-assigns-a-biome-twice",
+      "expect": "refuse",
+      "issue": "exactly ONE trust domain",
+      "why": "Exactly once is the kernel trust policy's own rule.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "trustCeiling": {
+          "assignments": [
+            {
+              "domain": "fixture-domain-a",
+              "biomes": [
+                "fixture-source-biome-a"
+              ]
+            },
+            {
+              "domain": "fixture-domain-b",
+              "biomes": [
+                "fixture-source-biome-a"
+              ]
+            }
+          ]
+        },
+        "sources": [
+          {
+            "name": "fixture-customer-biomes",
+            "kind": "git",
+            "url": "https://git.example.com/fixture/customer-biomes.git",
+            "ref": "main"
+          }
+        ]
+      }
+    },
+    {
+      "name": "empty-sources",
+      "expect": "refuse",
+      "issue": "omit the key",
+      "why": "An empty list is not a second way to say no sources.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "sources": []
+      }
+    },
+    {
+      "name": "extends-declared",
+      "expect": "refuse",
+      "issue": "extends",
+      "why": "No parent.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "extends": "fixture-parent"
+      }
+    },
+    {
+      "name": "exclude-declared",
+      "expect": "refuse",
+      "issue": "exclude",
+      "why": "Nothing is removed.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "exclude": [
+          "fixture-catalogue-biome-a"
+        ]
+      }
+    },
+    {
+      "name": "tier-sweep-selector",
+      "expect": "refuse",
+      "issue": "include",
+      "why": "No sweep selectors.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "tier": "base"
+          }
+        ]
+      }
+    },
+    {
+      "name": "origin-sweep-selector",
+      "expect": "refuse",
+      "issue": "include",
+      "why": "No sweep selectors.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "origin": "first-party"
+          }
+        ]
+      }
+    },
+    {
+      "name": "installation-class-sweep-selector",
+      "expect": "refuse",
+      "issue": "include",
+      "why": "No sweep selectors.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "installationClass": "core"
+          }
+        ]
+      }
+    },
+    {
+      "name": "biome-included-twice",
+      "expect": "refuse",
+      "issue": "included twice",
+      "why": "One entry per biome.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-catalogue-biome-a"
+          },
+          {
+            "biome": "fixture-catalogue-biome-a",
+            "installPolicy": "optional"
+          }
+        ]
+      }
+    },
+    {
+      "name": "include-absent",
+      "expect": "refuse",
+      "issue": "include",
+      "why": "An absent include is not an empty one.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ]
+      }
+    },
+    {
+      "name": "oci-source",
+      "expect": "refuse",
+      "issue": "sources",
+      "why": "A customer source is a git source: only it has a ref to follow.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "trustCeiling": {
+          "assignments": [
+            {
+              "domain": "fixture-domain-a",
+              "biomes": [
+                "fixture-source-biome-a"
+              ]
+            },
+            {
+              "domain": "fixture-domain-b",
+              "biomes": [
+                "fixture-source-biome-b"
+              ]
+            }
+          ]
+        },
+        "sources": [
+          {
+            "name": "fixture-customer-oci",
+            "kind": "oci",
+            "registry": "registry.example.com/fixture"
+          }
+        ]
+      }
+    },
+    {
+      "name": "platform-services-declared",
+      "expect": "refuse",
+      "issue": "platformServices",
+      "why": "Substrate is not a customer selection.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "platformServices": [
+          {
+            "name": "fixture-service",
+            "tier": "edge"
+          }
+        ]
+      }
+    },
+    {
+      "name": "token-without-username",
+      "expect": "refuse",
+      "issue": "authUsername",
+      "why": "The git source's own auth rule applies unchanged.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "trustCeiling": {
+          "assignments": [
+            {
+              "domain": "fixture-domain-a",
+              "biomes": [
+                "fixture-source-biome-a"
+              ]
+            },
+            {
+              "domain": "fixture-domain-b",
+              "biomes": [
+                "fixture-source-biome-b"
+              ]
+            }
+          ]
+        },
+        "sources": [
+          {
+            "name": "fixture-customer-biomes",
+            "kind": "git",
+            "url": "https://git.example.com/fixture/customer-biomes.git",
+            "ref": "main",
+            "authTokenEnv": "FIXTURE_CUSTOMER_BIOMES_TOKEN"
+          }
+        ]
+      }
+    },
+    {
+      "name": "ceiling-names-the-vendor-first-party-domain",
+      "expect": "refuse",
+      "why": "The vendor's own trust domain is reserved to the vendor catalogue: a customer ceiling cannot place its code in it.",
+      "issue": "[trustCeiling.assignments.0.domain] trust domain \"first-party\" is reserved to the vendor catalogue",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-catalogue-biome-a",
+            "installPolicy": "required"
+          },
+          {
+            "biome": "fixture-catalogue-biome-b",
+            "installPolicy": "optional"
+          },
+          {
+            "biome": "fixture-catalogue-biome-c",
+            "installPolicy": "required",
+            "mandatory": true
+          },
+          {
+            "biome": "fixture-catalogue-biome-d"
+          },
+          {
+            "biome": "fixture-source-biome-a"
+          },
+          {
+            "biome": "fixture-source-biome-b"
+          }
+        ],
+        "trustCeiling": {
+          "assignments": [
+            {
+              "domain": "first-party",
+              "biomes": [
+                "fixture-source-biome-a"
+              ]
+            },
+            {
+              "domain": "fixture-domain-b",
+              "biomes": [
+                "fixture-source-biome-b"
+              ]
+            }
+          ]
+        },
+        "sources": [
+          {
+            "name": "fixture-customer-biomes",
+            "kind": "git",
+            "url": "https://git.example.com/fixture/customer-biomes.git",
+            "ref": "main"
+          }
+        ]
+      }
+    },
+    {
+      "name": "store-publisher-selection",
+      "expect": "accept",
+      "why": "A definition selects official Store publishers from its base edition by anchorKey.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-catalogue-biome-a"
+          }
+        ],
+        "storePublisherAnchorKeys": [
+          "fixture-publisher-a",
+          "fixture-publisher-b"
+        ]
+      }
+    },
+    {
+      "name": "store-publisher-selection-empty",
+      "expect": "refuse",
+      "why": "An empty selection says nothing; absent is the one form of 'none'.",
+      "issue": "selects nothing",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-catalogue-biome-a"
+          }
+        ],
+        "storePublisherAnchorKeys": []
+      }
+    },
+    {
+      "name": "store-publisher-selection-duplicate",
+      "expect": "refuse",
+      "why": "A publisher is selected once.",
+      "issue": "selected twice",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-catalogue-biome-a"
+          }
+        ],
+        "storePublisherAnchorKeys": [
+          "fixture-publisher-a",
+          "fixture-publisher-a"
+        ]
+      }
+    },
+    {
+      "name": "store-publisher-selection-entry-not-key",
+      "expect": "refuse",
+      "why": "A selection names a base entry by anchorKey; it never states a signer of its own.",
+      "issue": "storePublisherAnchorKeys",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-customer",
+        "displayName": "Fixture customer edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [
+          {
+            "biome": "fixture-catalogue-biome-a"
+          }
+        ],
+        "storePublisherAnchorKeys": [
+          {
+            "anchorKey": "fixture-publisher-a",
+            "oidcIssuer": "https://issuer.example",
+            "identity": "s"
+          }
+        ]
+      }
+    }
+  ]
+}