enigma-memory 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +55 -0
- package/README.md +379 -0
- package/apps/cli/bin/enigma.mjs +1117 -0
- package/apps/desktop/src/app.js +1327 -0
- package/apps/desktop/src/index.html +1373 -0
- package/apps/desktop/src/styles.css +386 -0
- package/apps/gateway/bin/enigma-gateway.mjs +52 -0
- package/apps/gateway/src/server.mjs +1403 -0
- package/apps/native-host/README.md +265 -0
- package/apps/native-host/bin/enigma-native-host.mjs +499 -0
- package/apps/native-host/manifests/com.enigma.native_host.chrome.json +9 -0
- package/apps/native-host/manifests/com.enigma.native_host.edge.json +9 -0
- package/apps/native-host/manifests/com.enigma.native_host.firefox.json +9 -0
- package/apps/relay/bin/enigma-relay.mjs +52 -0
- package/apps/relay/src/server.mjs +1571 -0
- package/apps/verifier/bin/enigma-verify.mjs +240 -0
- package/deploy/docker-compose.production.example.yml +150 -0
- package/deploy/kubernetes/enigma-backend.example.yaml +580 -0
- package/package.json +196 -0
- package/packages/adapters/PACKAGE_CONTRACT.md +47 -0
- package/packages/adapters/src/index.js +183 -0
- package/packages/boundary/src/index.js +468 -0
- package/packages/connectors/src/index.js +533 -0
- package/packages/core/src/index.js +766 -0
- package/packages/enterprise/src/index.js +505 -0
- package/packages/importers/src/index.js +1083 -0
- package/packages/mcp-server/bin/enigma-mcp.mjs +19 -0
- package/packages/mcp-server/src/index.js +1185 -0
- package/packages/mesh/src/index.js +531 -0
- package/packages/metering/PACKAGE_CONTRACT.md +20 -0
- package/packages/metering/src/index.js +246 -0
- package/packages/optimizer/src/index.js +707 -0
- package/packages/passport/src/index.js +651 -0
- package/packages/settlement/PACKAGE_CONTRACT.md +28 -0
- package/packages/settlement/src/index.js +369 -0
- package/packages/storage/PACKAGE_CONTRACT.md +23 -0
- package/packages/storage/src/index.js +392 -0
- package/packages/vault/src/index.js +904 -0
- package/scripts/build-ai-orchestration-plan.mjs +248 -0
- package/scripts/build-cloudflare-pages-release-packet.mjs +287 -0
- package/scripts/build-cloudflare-token-policy.mjs +239 -0
- package/scripts/build-cloudflare-token-request.mjs +314 -0
- package/scripts/build-demo-assets.mjs +263 -0
- package/scripts/build-edge-backend-workers.mjs +353 -0
- package/scripts/build-goal-completion-audit.mjs +398 -0
- package/scripts/build-hosted-probe-worker.mjs +191 -0
- package/scripts/build-operator-acceptance-packet.mjs +254 -0
- package/scripts/build-operator-evidence-starter.mjs +525 -0
- package/scripts/build-production-backend-env-kit.mjs +384 -0
- package/scripts/build-production-dependency-report.mjs +369 -0
- package/scripts/build-production-handoff-packet.mjs +475 -0
- package/scripts/build-production-readiness-manifest.mjs +209 -0
- package/scripts/build-production-status-board.mjs +297 -0
- package/scripts/build-production-storage-migration.mjs +86 -0
- package/scripts/build-production-workplan.mjs +371 -0
- package/scripts/build-review-packet.mjs +594 -0
- package/scripts/check.mjs +419 -0
- package/scripts/cloudflare-ops.mjs +1672 -0
- package/scripts/cloudflare-secret-env.mjs +128 -0
- package/scripts/collect-hosted-backend-live-evidence.mjs +263 -0
- package/scripts/infrastructure-readiness.mjs +944 -0
- package/scripts/install-enigma-local.mjs +270 -0
- package/scripts/memory-optimization-benchmark.mjs +242 -0
- package/scripts/monitor-live-endpoints.mjs +358 -0
- package/scripts/release-audit.mjs +5588 -0
- package/scripts/release-provenance.mjs +250 -0
- package/scripts/run-backend-readiness-smoke.mjs +220 -0
- package/scripts/validate-backup-restore-drill.mjs +166 -0
- package/scripts/validate-cloudflare-credentials.mjs +112 -0
- package/scripts/validate-cloudflare-worker-inspect.mjs +179 -0
- package/scripts/validate-domain-tls.mjs +248 -0
- package/scripts/validate-hosted-backend-live.mjs +319 -0
- package/scripts/validate-incident-drill.mjs +221 -0
- package/scripts/validate-kms-custody.mjs +235 -0
- package/scripts/validate-legal-compliance-approval.mjs +274 -0
- package/scripts/validate-monitoring-alerting.mjs +263 -0
- package/scripts/validate-network-access-policy.mjs +285 -0
- package/scripts/validate-operator-acceptance.mjs +298 -0
- package/scripts/validate-production-manifests.mjs +325 -0
- package/scripts/validate-public-site-security.mjs +252 -0
- package/scripts/validate-security-threat-model.mjs +285 -0
- package/scripts/validate-service-settlement.mjs +256 -0
- package/scripts/validate-support-sla.mjs +190 -0
- package/scripts/validate-tenant-policy-approval.mjs +228 -0
- package/scripts/validate-usage-metering.mjs +224 -0
- package/scripts/validate-whitepaper-claims.mjs +166 -0
- package/specs/boundary-manifest-v1.schema.json +35 -0
- package/specs/capsule-v1.schema.json +55 -0
- package/specs/claim-boundary-manifest-v1.schema.json +22 -0
- package/specs/connector-profile-v1.schema.json +62 -0
- package/specs/deletion-tombstone-v1.schema.json +26 -0
- package/specs/enterprise-policy-v1.schema.json +59 -0
- package/specs/gateway-request-v1.schema.json +32 -0
- package/specs/goal-completion-audit-v1.schema.json +70 -0
- package/specs/hosted-backend-live-evidence-v1.schema.json +147 -0
- package/specs/import-report-v1.schema.json +214 -0
- package/specs/infrastructure-readiness-manifest-v1.schema.json +130 -0
- package/specs/memory-event-v1.schema.json +42 -0
- package/specs/mesh-node-v1.schema.json +126 -0
- package/specs/passport-v1.schema.json +50 -0
- package/specs/production-handoff-packet-v1.schema.json +149 -0
- package/specs/receipt-v1.schema.json +61 -0
- package/specs/relay-record-v1.schema.json +43 -0
- package/specs/state-checkpoint-v1.schema.json +37 -0
- package/specs/trust-bundle-v1.schema.json +56 -0
|
@@ -0,0 +1,149 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://enigma.memory/specs/production-handoff-packet-v1.schema.json",
|
|
4
|
+
"title": "Enigma Production Handoff Packet v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": [
|
|
8
|
+
"schema",
|
|
9
|
+
"generated_at",
|
|
10
|
+
"project",
|
|
11
|
+
"go_live_ready",
|
|
12
|
+
"local_static_artifact_ready",
|
|
13
|
+
"credentials_present",
|
|
14
|
+
"pages",
|
|
15
|
+
"infrastructure",
|
|
16
|
+
"operator_acceptance",
|
|
17
|
+
"next_actions",
|
|
18
|
+
"blockers",
|
|
19
|
+
"claim_boundary"
|
|
20
|
+
],
|
|
21
|
+
"properties": {
|
|
22
|
+
"schema": { "const": "enigma.production_handoff_packet.v1" },
|
|
23
|
+
"generated_at": { "type": "string", "format": "date-time" },
|
|
24
|
+
"project": { "$ref": "#/$defs/project" },
|
|
25
|
+
"go_live_ready": { "type": "boolean" },
|
|
26
|
+
"local_static_artifact_ready": { "type": "boolean" },
|
|
27
|
+
"credentials_present": { "$ref": "#/$defs/credentials" },
|
|
28
|
+
"pages": { "$ref": "#/$defs/pages" },
|
|
29
|
+
"infrastructure": { "$ref": "#/$defs/infrastructure" },
|
|
30
|
+
"operator_acceptance": { "$ref": "#/$defs/operatorAcceptance" },
|
|
31
|
+
"next_actions": { "type": "array", "items": { "$ref": "#/$defs/action" } },
|
|
32
|
+
"blockers": { "type": "array", "items": { "type": "string" } },
|
|
33
|
+
"claim_boundary": { "type": "array", "items": { "type": "string" } }
|
|
34
|
+
},
|
|
35
|
+
"$defs": {
|
|
36
|
+
"project": {
|
|
37
|
+
"type": "object",
|
|
38
|
+
"additionalProperties": false,
|
|
39
|
+
"required": ["name", "domain", "cloudflare_pages_project", "site"],
|
|
40
|
+
"properties": {
|
|
41
|
+
"name": { "type": "string", "minLength": 1 },
|
|
42
|
+
"domain": { "type": ["string", "null"] },
|
|
43
|
+
"cloudflare_pages_project": { "type": "string", "minLength": 1 },
|
|
44
|
+
"site": { "type": "string", "minLength": 1 }
|
|
45
|
+
}
|
|
46
|
+
},
|
|
47
|
+
"credentials": {
|
|
48
|
+
"type": "object",
|
|
49
|
+
"additionalProperties": false,
|
|
50
|
+
"required": ["cloudflare_api_token", "cloudflare_account_id"],
|
|
51
|
+
"properties": {
|
|
52
|
+
"cloudflare_api_token": { "type": "boolean" },
|
|
53
|
+
"cloudflare_account_id": { "type": "boolean" }
|
|
54
|
+
}
|
|
55
|
+
},
|
|
56
|
+
"pages": {
|
|
57
|
+
"type": "object",
|
|
58
|
+
"additionalProperties": false,
|
|
59
|
+
"required": [
|
|
60
|
+
"schema",
|
|
61
|
+
"local_artifact_ready",
|
|
62
|
+
"automated_deploy_ready",
|
|
63
|
+
"credential_present",
|
|
64
|
+
"artifact_file_count",
|
|
65
|
+
"artifact_root_hash",
|
|
66
|
+
"security_blocker_count",
|
|
67
|
+
"deployment_blockers",
|
|
68
|
+
"live_observation"
|
|
69
|
+
],
|
|
70
|
+
"properties": {
|
|
71
|
+
"schema": { "const": "enigma.cloudflare_pages_release_packet.v1" },
|
|
72
|
+
"local_artifact_ready": { "type": "boolean" },
|
|
73
|
+
"automated_deploy_ready": { "type": "boolean" },
|
|
74
|
+
"credential_present": { "type": "boolean" },
|
|
75
|
+
"artifact_file_count": { "type": ["integer", "null"], "minimum": 0 },
|
|
76
|
+
"artifact_root_hash": { "type": ["string", "null"], "pattern": "^sha256:[a-fA-F0-9]{64}$" },
|
|
77
|
+
"security_blocker_count": { "type": ["integer", "null"], "minimum": 0 },
|
|
78
|
+
"deployment_blockers": { "type": "array", "items": { "type": "string" } },
|
|
79
|
+
"live_observation": { "$ref": "#/$defs/nullableLiveObservation" }
|
|
80
|
+
}
|
|
81
|
+
},
|
|
82
|
+
"nullableLiveObservation": {
|
|
83
|
+
"type": ["object", "null"],
|
|
84
|
+
"additionalProperties": false,
|
|
85
|
+
"required": ["ok", "live_url", "status", "title", "title_matched", "blockers"],
|
|
86
|
+
"properties": {
|
|
87
|
+
"ok": { "type": "boolean" },
|
|
88
|
+
"live_url": { "type": ["string", "null"] },
|
|
89
|
+
"status": { "type": ["integer", "null"] },
|
|
90
|
+
"title": { "type": ["string", "null"] },
|
|
91
|
+
"title_matched": { "type": "boolean" },
|
|
92
|
+
"blockers": { "type": "array", "items": { "type": "string" } }
|
|
93
|
+
}
|
|
94
|
+
},
|
|
95
|
+
"infrastructure": {
|
|
96
|
+
"type": "object",
|
|
97
|
+
"additionalProperties": false,
|
|
98
|
+
"required": [
|
|
99
|
+
"schema",
|
|
100
|
+
"ok",
|
|
101
|
+
"mode",
|
|
102
|
+
"contract_ready",
|
|
103
|
+
"hosted_live_ready",
|
|
104
|
+
"public_live_ready",
|
|
105
|
+
"cloudflare_observed",
|
|
106
|
+
"hosted_required_ref_count",
|
|
107
|
+
"hosted_required_ref_missing_count",
|
|
108
|
+
"external_blocker_count",
|
|
109
|
+
"external_blockers"
|
|
110
|
+
],
|
|
111
|
+
"properties": {
|
|
112
|
+
"schema": { "const": "enigma.infrastructure_readiness.v1" },
|
|
113
|
+
"ok": { "type": "boolean" },
|
|
114
|
+
"mode": { "type": "string" },
|
|
115
|
+
"contract_ready": { "type": "boolean" },
|
|
116
|
+
"hosted_live_ready": { "type": "boolean" },
|
|
117
|
+
"public_live_ready": { "type": "boolean" },
|
|
118
|
+
"cloudflare_observed": { "type": "boolean" },
|
|
119
|
+
"hosted_required_ref_count": { "type": ["integer", "null"], "minimum": 0 },
|
|
120
|
+
"hosted_required_ref_missing_count": { "type": ["integer", "null"], "minimum": 0 },
|
|
121
|
+
"external_blocker_count": { "type": ["integer", "null"], "minimum": 0 },
|
|
122
|
+
"external_blockers": { "type": "array", "items": { "type": "string" } }
|
|
123
|
+
}
|
|
124
|
+
},
|
|
125
|
+
"operatorAcceptance": {
|
|
126
|
+
"type": "object",
|
|
127
|
+
"additionalProperties": false,
|
|
128
|
+
"required": ["schema", "ok", "decision", "blocker_count", "warning_count"],
|
|
129
|
+
"properties": {
|
|
130
|
+
"schema": { "const": "enigma.operator_acceptance_result.v1" },
|
|
131
|
+
"ok": { "type": "boolean" },
|
|
132
|
+
"decision": { "type": "string" },
|
|
133
|
+
"blocker_count": { "type": "integer", "minimum": 0 },
|
|
134
|
+
"warning_count": { "type": "integer", "minimum": 0 }
|
|
135
|
+
}
|
|
136
|
+
},
|
|
137
|
+
"action": {
|
|
138
|
+
"type": "object",
|
|
139
|
+
"additionalProperties": false,
|
|
140
|
+
"required": ["id", "owner", "command", "evidence"],
|
|
141
|
+
"properties": {
|
|
142
|
+
"id": { "type": "string", "minLength": 1 },
|
|
143
|
+
"owner": { "type": "string", "minLength": 1 },
|
|
144
|
+
"command": { "type": "string", "minLength": 1 },
|
|
145
|
+
"evidence": { "type": "string", "minLength": 1 }
|
|
146
|
+
}
|
|
147
|
+
}
|
|
148
|
+
}
|
|
149
|
+
}
|
|
@@ -0,0 +1,61 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://schemas.enigma.ai/receipt-v1.schema.json",
|
|
4
|
+
"title": "Enigma Receipt v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": [
|
|
7
|
+
"schema",
|
|
8
|
+
"receipt_id",
|
|
9
|
+
"event_hash",
|
|
10
|
+
"operation",
|
|
11
|
+
"tenant_id",
|
|
12
|
+
"subject_id",
|
|
13
|
+
"sequence",
|
|
14
|
+
"previous_receipt_hash",
|
|
15
|
+
"active_set_root",
|
|
16
|
+
"receipt_log_root",
|
|
17
|
+
"timestamp",
|
|
18
|
+
"signer",
|
|
19
|
+
"signature"
|
|
20
|
+
],
|
|
21
|
+
"additionalProperties": false,
|
|
22
|
+
"properties": {
|
|
23
|
+
"schema": { "const": "enigma.receipt.v1" },
|
|
24
|
+
"receipt_id": { "type": "string", "minLength": 8 },
|
|
25
|
+
"event_hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
|
|
26
|
+
"operation": {
|
|
27
|
+
"type": "string",
|
|
28
|
+
"enum": ["create", "read", "update", "supersede", "delete", "retrieve", "inject", "export", "import", "deny", "quarantine", "boundary_cross"]
|
|
29
|
+
},
|
|
30
|
+
"tenant_id": { "type": "string", "minLength": 1 },
|
|
31
|
+
"subject_id": { "type": "string", "minLength": 1 },
|
|
32
|
+
"memory_addr": { "type": "string" },
|
|
33
|
+
"source_addr": { "type": "string" },
|
|
34
|
+
"provider": { "type": "string" },
|
|
35
|
+
"model": { "type": "string" },
|
|
36
|
+
"policy_id": { "type": "string" },
|
|
37
|
+
"sequence": { "type": "integer", "minimum": 0 },
|
|
38
|
+
"previous_receipt_hash": { "type": "string", "pattern": "^(sha256:[a-f0-9]{64}|GENESIS)$" },
|
|
39
|
+
"active_set_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
|
|
40
|
+
"receipt_log_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
|
|
41
|
+
"timestamp": { "type": "string", "format": "date-time" },
|
|
42
|
+
"signer": {
|
|
43
|
+
"type": "object",
|
|
44
|
+
"required": ["key_id", "alg"],
|
|
45
|
+
"additionalProperties": false,
|
|
46
|
+
"properties": {
|
|
47
|
+
"key_id": { "type": "string", "minLength": 1 },
|
|
48
|
+
"alg": { "const": "Ed25519" }
|
|
49
|
+
}
|
|
50
|
+
},
|
|
51
|
+
"signature": {
|
|
52
|
+
"type": "object",
|
|
53
|
+
"required": ["alg", "value"],
|
|
54
|
+
"additionalProperties": false,
|
|
55
|
+
"properties": {
|
|
56
|
+
"alg": { "const": "Ed25519" },
|
|
57
|
+
"value": { "type": "string", "minLength": 64 }
|
|
58
|
+
}
|
|
59
|
+
}
|
|
60
|
+
}
|
|
61
|
+
}
|
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://schemas.enigma.ai/relay-record-v1.schema.json",
|
|
4
|
+
"title": "Enigma Relay Record v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": [
|
|
7
|
+
"schema",
|
|
8
|
+
"record_id",
|
|
9
|
+
"store_id",
|
|
10
|
+
"capsule_id",
|
|
11
|
+
"encrypted_payload_hash",
|
|
12
|
+
"opaque_encrypted_record",
|
|
13
|
+
"received_at",
|
|
14
|
+
"expires_at",
|
|
15
|
+
"signature"
|
|
16
|
+
],
|
|
17
|
+
"additionalProperties": false,
|
|
18
|
+
"properties": {
|
|
19
|
+
"schema": { "const": "enigma.relay_record.v1" },
|
|
20
|
+
"record_id": { "type": "string", "minLength": 8 },
|
|
21
|
+
"relay_record_id": { "type": "string", "minLength": 8 },
|
|
22
|
+
"store_id": { "type": "string", "minLength": 1 },
|
|
23
|
+
"capsule_id": { "type": ["string", "null"] },
|
|
24
|
+
"encrypted_payload_hash": { "$ref": "#/$defs/sha256Root" },
|
|
25
|
+
"opaque_encrypted_record": { "type": "string", "minLength": 1 },
|
|
26
|
+
"received_at": { "type": "string", "format": "date-time" },
|
|
27
|
+
"expires_at": { "type": ["string", "null"], "format": "date-time" },
|
|
28
|
+
"signature": { "$ref": "#/$defs/signature" }
|
|
29
|
+
},
|
|
30
|
+
"$defs": {
|
|
31
|
+
"sha256Root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
|
|
32
|
+
"signature": {
|
|
33
|
+
"type": "object",
|
|
34
|
+
"required": ["alg", "key_id", "value"],
|
|
35
|
+
"additionalProperties": false,
|
|
36
|
+
"properties": {
|
|
37
|
+
"alg": { "const": "Ed25519" },
|
|
38
|
+
"key_id": { "type": "string", "minLength": 1 },
|
|
39
|
+
"value": { "type": "string", "minLength": 64 }
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
}
|
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://schemas.enigma.ai/state-checkpoint-v1.schema.json",
|
|
4
|
+
"title": "Enigma State Checkpoint v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schema", "checkpoint_id", "tenant_hash", "owner_scope_hash", "epoch", "active_memory_root", "deleted_memory_root", "receipt_log_root", "key_registry_root", "policy_registry_root", "previous_checkpoint_hash", "issued_at", "signatures"],
|
|
7
|
+
"additionalProperties": false,
|
|
8
|
+
"properties": {
|
|
9
|
+
"schema": { "const": "enigma.state_checkpoint.v1" },
|
|
10
|
+
"checkpoint_id": { "type": "string", "minLength": 8 },
|
|
11
|
+
"tenant_hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
|
|
12
|
+
"owner_scope_hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
|
|
13
|
+
"epoch": { "type": "integer", "minimum": 0 },
|
|
14
|
+
"active_memory_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
|
|
15
|
+
"deleted_memory_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
|
|
16
|
+
"receipt_log_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
|
|
17
|
+
"key_registry_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
|
|
18
|
+
"policy_registry_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
|
|
19
|
+
"previous_checkpoint_hash": { "type": "string", "pattern": "^(sha256:[a-f0-9]{64}|GENESIS)$" },
|
|
20
|
+
"witness_policy": { "type": "string" },
|
|
21
|
+
"issued_at": { "type": "string", "format": "date-time" },
|
|
22
|
+
"signatures": {
|
|
23
|
+
"type": "array",
|
|
24
|
+
"minItems": 1,
|
|
25
|
+
"items": {
|
|
26
|
+
"type": "object",
|
|
27
|
+
"required": ["alg", "key_id", "value"],
|
|
28
|
+
"additionalProperties": false,
|
|
29
|
+
"properties": {
|
|
30
|
+
"alg": { "type": "string", "enum": ["Ed25519", "Ed25519+ML-DSA-policy"] },
|
|
31
|
+
"key_id": { "type": "string", "minLength": 1 },
|
|
32
|
+
"value": { "type": "string", "minLength": 64 }
|
|
33
|
+
}
|
|
34
|
+
}
|
|
35
|
+
}
|
|
36
|
+
}
|
|
37
|
+
}
|
|
@@ -0,0 +1,56 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://schemas.enigma.ai/trust-bundle-v1.schema.json",
|
|
4
|
+
"title": "Enigma Trust Bundle v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schema", "bundle_id", "created_at", "trusted_issuers", "trusted_witnesses", "accepted_algorithms", "revocations"],
|
|
7
|
+
"additionalProperties": false,
|
|
8
|
+
"properties": {
|
|
9
|
+
"schema": { "const": "enigma.trust_bundle.v1" },
|
|
10
|
+
"bundle_id": { "type": "string", "minLength": 8 },
|
|
11
|
+
"created_at": { "type": "string", "format": "date-time" },
|
|
12
|
+
"trusted_issuers": {
|
|
13
|
+
"type": "array",
|
|
14
|
+
"items": {
|
|
15
|
+
"type": "object",
|
|
16
|
+
"required": ["issuer_id", "key_id", "public_key", "scope"],
|
|
17
|
+
"additionalProperties": false,
|
|
18
|
+
"properties": {
|
|
19
|
+
"issuer_id": { "type": "string", "minLength": 1 },
|
|
20
|
+
"key_id": { "type": "string", "minLength": 1 },
|
|
21
|
+
"public_key": { "type": "string", "minLength": 1 },
|
|
22
|
+
"scope": { "type": "array", "items": { "type": "string" } }
|
|
23
|
+
}
|
|
24
|
+
}
|
|
25
|
+
},
|
|
26
|
+
"trusted_witnesses": {
|
|
27
|
+
"type": "array",
|
|
28
|
+
"items": {
|
|
29
|
+
"type": "object",
|
|
30
|
+
"required": ["witness_id", "key_id", "public_key"],
|
|
31
|
+
"additionalProperties": false,
|
|
32
|
+
"properties": {
|
|
33
|
+
"witness_id": { "type": "string", "minLength": 1 },
|
|
34
|
+
"key_id": { "type": "string", "minLength": 1 },
|
|
35
|
+
"public_key": { "type": "string", "minLength": 1 }
|
|
36
|
+
}
|
|
37
|
+
}
|
|
38
|
+
},
|
|
39
|
+
"accepted_algorithms": { "type": "array", "items": { "type": "string", "enum": ["Ed25519", "Ed25519+ML-DSA-policy", "sha256", "hmac-sha256"] } },
|
|
40
|
+
"import_capsule_policy": {
|
|
41
|
+
"type": "object",
|
|
42
|
+
"required": ["private_plaintext_boundary", "completeness_evidence_required", "recognized_importer_count", "unsupported_importer_count"],
|
|
43
|
+
"additionalProperties": false,
|
|
44
|
+
"properties": {
|
|
45
|
+
"private_plaintext_boundary": {
|
|
46
|
+
"type": "string",
|
|
47
|
+
"enum": ["payload_private_public_artifacts_hash_only"]
|
|
48
|
+
},
|
|
49
|
+
"completeness_evidence_required": { "type": "boolean" },
|
|
50
|
+
"recognized_importer_count": { "type": "integer", "minimum": 0 },
|
|
51
|
+
"unsupported_importer_count": { "type": "integer", "minimum": 0 }
|
|
52
|
+
}
|
|
53
|
+
},
|
|
54
|
+
"revocations": { "type": "array", "items": { "type": "string" } }
|
|
55
|
+
}
|
|
56
|
+
}
|