create-yss-spec 3.5.6 → 3.5.9

package/template/.template-spec/process/schemas/approval-record.schema.json

@@ -1,23 +1,186 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://yss.dev/schemas/approval-record.schema.json",
-  "title": "YSS standalone approval record v1",
+  "title": "YSS approval record v1/v2; current authorization is verified separately",
   "type": "object",
-  "required": ["schema_version", "gate_id", "decision", "actor_kind", "role_id", "runtime_id", "principal_ref"],
+  "required": [
+    "schema_version",
+    "gate_id",
+    "decision",
+    "actor_kind",
+    "role_id",
+    "runtime_id",
+    "principal_ref"
+  ],
   "properties": {
-    "schema_version": {"const": 1},
-    "gate_id": {"type": "string", "minLength": 1},
-    "decision": {"enum": ["approved", "rejected", "vetoed"]},
-    "actor_kind": {"enum": ["digital-human", "biological-human", "orchestrator"]},
-    "role_id": {"type": "string", "minLength": 1},
-    "runtime_id": {"type": "string", "minLength": 1},
-    "principal_ref": {"type": "string", "minLength": 1},
-    "subject_ref": {"type": ["string", "null"]},
-    "subject_digest": {"type": ["string", "null"], "pattern": "^(sha256:)?[a-f0-9]{64}$"},
-    "approval_scope": {"type": "array", "items": {"type": "string", "minLength": 1}, "uniqueItems": true},
-    "biological_veto": {"type": "boolean"},
-    "evidence_refs": {"type": "array"},
-    "countersigner_role_ids": {"type": "array", "items": {"type": "string", "minLength": 1}}
+    "schema_version": {
+      "enum": [
+        1,
+        2
+      ]
+    },
+    "gate_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "decision": {
+      "enum": [
+        "approved",
+        "rejected",
+        "vetoed",
+        "pending"
+      ]
+    },
+    "actor_kind": {
+      "enum": [
+        "digital-human",
+        "biological-human",
+        "orchestrator"
+      ]
+    },
+    "role_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "runtime_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "principal_ref": {
+      "type": "string",
+      "minLength": 1
+    },
+    "subject_ref": {
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "subject_digest": {
+      "type": [
+        "string",
+        "null"
+      ],
+      "pattern": "^(sha256:)?[a-f0-9]{64}$"
+    },
+    "approval_scope": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "minLength": 1
+      },
+      "uniqueItems": true
+    },
+    "biological_veto": {
+      "type": "boolean"
+    },
+    "evidence_refs": {
+      "type": "array"
+    },
+    "countersigner_role_ids": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "minLength": 1
+      }
+    },
+    "drafter_principal_ref": {
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "basis": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "ref",
+          "digest"
+        ],
+        "properties": {
+          "ref": {
+            "type": "string",
+            "minLength": 1
+          },
+          "digest": {
+            "type": "string",
+            "pattern": "^[a-f0-9]{64}$"
+          }
+        }
+      }
+    },
+    "review_task_ref": {
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "review_task_digest": {
+      "type": [
+        "string",
+        "null"
+      ],
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "capability_ids": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {
+        "type": "string",
+        "pattern": "^capability\\.[a-z0-9][a-z0-9-]*$"
+      }
+    }
   },
-  "$comment": "Preserves the existing extensible record contract. Role, subject freshness, source and approval semantics are checked by approval-record.mjs."
+  "$comment": "Full structure schema retains history/draft readability. Current kernel requires nonempty independently bound subject/scope/basis/identity and current task; no history result authorizes execution.",
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "schema_version": {
+            "const": 2
+          }
+        },
+        "required": [
+          "schema_version"
+        ]
+      },
+      "then": {
+        "required": [
+          "subject_ref",
+          "subject_digest",
+          "approval_scope",
+          "basis",
+          "drafter_principal_ref",
+          "review_task_ref",
+          "review_task_digest",
+          "capability_ids"
+        ]
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "schema_version": {
+            "const": 1
+          }
+        },
+        "required": [
+          "schema_version"
+        ]
+      },
+      "then": {
+        "properties": {
+          "decision": {
+            "enum": [
+              "approved",
+              "rejected",
+              "vetoed"
+            ]
+          }
+        }
+      }
+    }
+  ]
 }

package/template/.template-spec/process/schemas/backend-delivery.schema.json

@@ -1,4 +1,5 @@
 {
+  "$id": "https://yss.example/schemas/backend-delivery.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "type": "object",
   "additionalProperties": false,
@@ -85,6 +86,9 @@
         "approval_ref": {
           "type": "string",
           "minLength": 1
+        },
+        "approval_context": {
+          "$ref": "approval-context.schema.json"
         }
       },
       "required": [
@@ -118,6 +122,9 @@
         "approval_ref": {
           "type": "string",
           "minLength": 1
+        },
+        "approval_context": {
+          "$ref": "approval-context.schema.json"
         }
       },
       "required": [
@@ -214,6 +221,9 @@
             "digest": {
               "type": "string",
               "pattern": "^sha256:[0-9a-f]{64}$"
+            },
+            "approval_context": {
+              "$ref": "approval-context.schema.json"
             }
           }
         },
@@ -246,6 +256,9 @@
             "digest": {
               "type": "string",
               "pattern": "^sha256:[0-9a-f]{64}$"
+            },
+            "approval_context": {
+              "$ref": "approval-context.schema.json"
             }
           },
           "required": [
@@ -264,6 +277,9 @@
             "digest": {
               "type": "string",
               "pattern": "^sha256:[0-9a-f]{64}$"
+            },
+            "approval_context": {
+              "$ref": "approval-context.schema.json"
             }
           },
           "required": [

package/template/.template-spec/process/schemas/delivery-preflight-input.schema.json

@@ -1,4 +1,5 @@
 {
+  "$id": "https://yss.example/schemas/delivery-preflight-input.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "type": "object",
   "additionalProperties": false,
@@ -151,6 +152,9 @@
         "approval_ref": {
           "type": "string",
           "minLength": 1
+        },
+        "approval_context": {
+          "$ref": "approval-context.schema.json"
         }
       }
     }

package/template/.template-spec/process/schemas/digital-human-task-package.schema.json

@@ -181,6 +181,15 @@
             "type": "string",
             "minLength": 1
           }
+        },
+        "review_skills": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
         }
       }
     },
@@ -464,8 +473,169 @@
         "implementation_task_id": {
           "type": "string",
           "minLength": 1
+        },
+        "check_ids": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "pattern": "^(gate|check)\\.[a-z0-9][a-z0-9-]*$"
+          }
+        },
+        "capability_ids": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "pattern": "^capability\\.[a-z0-9][a-z0-9-]*$"
+          }
+        },
+        "candidate_ref": {
+          "type": "string",
+          "minLength": 1
+        },
+        "candidate_digest": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "policy_ref": {
+          "const": ".template-spec/agents/digital-human-roles.yaml"
+        },
+        "policy_digest": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "reviewer_principal_ref": {
+          "type": "string",
+          "minLength": 1
+        },
+        "drafter_principal_ref": {
+          "type": "string",
+          "minLength": 1
+        },
+        "approval_scope": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "basis": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "ref",
+              "digest"
+            ],
+            "properties": {
+              "ref": {
+                "type": "string",
+                "minLength": 1
+              },
+              "digest": {
+                "type": "string",
+                "pattern": "^[a-f0-9]{64}$"
+              }
+            }
+          }
+        },
+        "current_approvals": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "boundary",
+              "subject_ref",
+              "subject_digest",
+              "approval_scope",
+              "basis",
+              "drafter_principal_ref"
+            ],
+            "properties": {
+              "boundary": {
+                "type": "string",
+                "pattern": "^(gate|check)\\.[a-z0-9][a-z0-9-]*$"
+              },
+              "subject_ref": {
+                "type": "string",
+                "minLength": 1
+              },
+              "subject_digest": {
+                "type": "string",
+                "pattern": "^[a-f0-9]{64}$"
+              },
+              "approval_scope": {
+                "type": "array",
+                "minItems": 1,
+                "uniqueItems": true,
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "basis": {
+                "type": "array",
+                "minItems": 1,
+                "items": {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": [
+                    "ref",
+                    "digest"
+                  ],
+                  "properties": {
+                    "ref": {
+                      "type": "string",
+                      "minLength": 1
+                    },
+                    "digest": {
+                      "type": "string",
+                      "pattern": "^[a-f0-9]{64}$"
+                    }
+                  }
+                }
+              },
+              "drafter_principal_ref": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          }
         }
-      }
+      },
+      "allOf": [
+        {
+          "if": {
+            "required": [
+              "capability_ids"
+            ]
+          },
+          "then": {
+            "required": [
+              "check_ids",
+              "capability_ids",
+              "candidate_ref",
+              "candidate_digest",
+              "policy_ref",
+              "policy_digest",
+              "reviewer_principal_ref",
+              "drafter_principal_ref",
+              "approval_scope",
+              "basis",
+              "current_approvals"
+            ]
+          }
+        }
+      ]
     },
     "downstream_consumers": {
       "type": "array",
@@ -955,6 +1125,71 @@
           ]
         }
       }
+    },
+    {
+      "if": {
+        "required": [
+          "skill_source"
+        ],
+        "properties": {
+          "skill_source": {
+            "required": [
+              "review_skills"
+            ]
+          }
+        }
+      },
+      "then": {
+        "properties": {
+          "schema_version": {
+            "const": 1
+          },
+          "execution_state": {
+            "enum": [
+              "Reviewer",
+              "Verifier"
+            ]
+          }
+        },
+        "required": [
+          "review_context"
+        ]
+      }
+    },
+    {
+      "if": {
+        "required": [
+          "review_context"
+        ],
+        "properties": {
+          "review_context": {
+            "required": [
+              "capability_ids"
+            ]
+          }
+        }
+      },
+      "then": {
+        "properties": {
+          "schema_version": {
+            "const": 1
+          },
+          "execution_state": {
+            "enum": [
+              "Reviewer",
+              "Verifier"
+            ]
+          },
+          "skill_source": {
+            "required": [
+              "review_skills"
+            ]
+          }
+        },
+        "required": [
+          "review_context"
+        ]
+      }
     }
   ]
 }