enigma-memory 0.1.18 → 0.1.22

package/specs/boundary-manifest-v1.schema.json

@@ -1,35 +1,35 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://schemas.enigma.ai/boundary-manifest-v1.schema.json",
-  "title": "Enigma Boundary Manifest v1",
-  "type": "object",
-  "required": ["schema", "manifest_id", "system_id", "created_at", "paths", "default_action"],
-  "additionalProperties": false,
-  "properties": {
-    "schema": { "const": "enigma.boundary_manifest.v1" },
-    "manifest_id": { "type": "string", "minLength": 8 },
-    "system_id": { "type": "string", "minLength": 1 },
-    "created_at": { "type": "string", "format": "date-time" },
-    "default_action": { "const": "fail_unknown" },
-    "paths": {
-      "type": "array",
-      "minItems": 1,
-      "items": {
-        "type": "object",
-        "required": ["path_id", "surface", "classification"],
-        "additionalProperties": false,
-        "properties": {
-          "path_id": { "type": "string", "minLength": 1 },
-          "surface": {
-            "type": "string",
-            "enum": ["model_input", "model_output", "tool_args", "tool_result", "scratchpad", "memory_write", "memory_read", "rag_ingest", "rag_retrieve", "file_write", "log", "telemetry", "browser_dom", "mcp_resource", "network", "inter_agent", "cache", "human_approval"]
-          },
-          "classification": { "type": "string", "enum": ["committed", "blocked", "declared_out_of_scope", "broken"] },
-          "adapter": { "type": "string" },
-          "reason": { "type": "string" },
-          "coverage_receipt_required": { "type": "boolean" }
-        }
-      }
-    }
-  }
-}
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.enigma.ai/boundary-manifest-v1.schema.json",
+  "title": "Enigma Boundary Manifest v1",
+  "type": "object",
+  "required": ["schema", "manifest_id", "system_id", "created_at", "paths", "default_action"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": { "const": "enigma.boundary_manifest.v1" },
+    "manifest_id": { "type": "string", "minLength": 8 },
+    "system_id": { "type": "string", "minLength": 1 },
+    "created_at": { "type": "string", "format": "date-time" },
+    "default_action": { "const": "fail_unknown" },
+    "paths": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "required": ["path_id", "surface", "classification"],
+        "additionalProperties": false,
+        "properties": {
+          "path_id": { "type": "string", "minLength": 1 },
+          "surface": {
+            "type": "string",
+            "enum": ["model_input", "model_output", "tool_args", "tool_result", "scratchpad", "memory_write", "memory_read", "rag_ingest", "rag_retrieve", "file_write", "log", "telemetry", "browser_dom", "mcp_resource", "network", "inter_agent", "cache", "human_approval"]
+          },
+          "classification": { "type": "string", "enum": ["committed", "blocked", "declared_out_of_scope", "broken"] },
+          "adapter": { "type": "string" },
+          "reason": { "type": "string" },
+          "coverage_receipt_required": { "type": "boolean" }
+        }
+      }
+    }
+  }
+}

package/specs/capsule-v1.schema.json

@@ -1,55 +1,55 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://schemas.enigma.ai/capsule-v1.schema.json",
-  "title": "Enigma Capsule v1",
-  "type": "object",
-  "required": ["schema", "capsule_id", "capsule_type", "issuer", "created_at", "expires_at", "scope", "payload", "proofs"],
-  "additionalProperties": false,
-  "properties": {
-    "schema": { "const": "enigma.capsule.v1" },
-    "capsule_id": { "type": "string", "minLength": 8 },
-    "capsule_type": { "type": "string", "enum": ["personal_passport", "project", "session", "audit", "migration"] },
-    "issuer": { "type": "string", "minLength": 1 },
-    "holder": { "type": "string" },
-    "created_at": { "type": "string", "format": "date-time" },
-    "expires_at": { "type": "string", "format": "date-time" },
-    "scope": {
-      "type": "object",
-      "required": ["subjects", "operations"],
-      "additionalProperties": false,
-      "properties": {
-        "subjects": { "type": "array", "items": { "type": "string" } },
-        "memory_addrs": { "type": "array", "items": { "type": "string" } },
-        "operations": { "type": "array", "items": { "type": "string" } },
-        "purpose": { "type": "string" }
-      }
-    },
-    "payload": {
-      "type": "object",
-      "required": ["encryption", "objects_ref"],
-      "additionalProperties": false,
-      "properties": {
-        "encryption": { "type": "string", "enum": ["encrypted", "receipt_only", "plaintext_user_requested"] },
-        "objects_ref": { "type": "string" }
-      }
-    },
-    "proofs": {
-      "type": "object",
-      "required": ["receipt_log_root", "active_set_root"],
-      "additionalProperties": false,
-      "properties": {
-        "receipt_log_root": {
-          "type": "string",
-          "pattern": "^sha256:[a-f0-9]{64}$",
-          "description": "Canonical custody roots must be derived from receipt objects that are available for verification; receipt-hash-only claims are candidate evidence."
-        },
-        "active_set_root": {
-          "type": "string",
-          "pattern": "^sha256:[a-f0-9]{64}$",
-          "description": "Canonical custody roots must commit only memory addresses backed by matching receipt objects, not arbitrary receipt hashes."
-        },
-        "receipt_bundle_ref": { "type": "string" }
-      }
-    }
-  }
-}
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.enigma.ai/capsule-v1.schema.json",
+  "title": "Enigma Capsule v1",
+  "type": "object",
+  "required": ["schema", "capsule_id", "capsule_type", "issuer", "created_at", "expires_at", "scope", "payload", "proofs"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": { "const": "enigma.capsule.v1" },
+    "capsule_id": { "type": "string", "minLength": 8 },
+    "capsule_type": { "type": "string", "enum": ["personal_passport", "project", "session", "audit", "migration"] },
+    "issuer": { "type": "string", "minLength": 1 },
+    "holder": { "type": "string" },
+    "created_at": { "type": "string", "format": "date-time" },
+    "expires_at": { "type": "string", "format": "date-time" },
+    "scope": {
+      "type": "object",
+      "required": ["subjects", "operations"],
+      "additionalProperties": false,
+      "properties": {
+        "subjects": { "type": "array", "items": { "type": "string" } },
+        "memory_addrs": { "type": "array", "items": { "type": "string" } },
+        "operations": { "type": "array", "items": { "type": "string" } },
+        "purpose": { "type": "string" }
+      }
+    },
+    "payload": {
+      "type": "object",
+      "required": ["encryption", "objects_ref"],
+      "additionalProperties": false,
+      "properties": {
+        "encryption": { "type": "string", "enum": ["encrypted", "receipt_only", "plaintext_user_requested"] },
+        "objects_ref": { "type": "string" }
+      }
+    },
+    "proofs": {
+      "type": "object",
+      "required": ["receipt_log_root", "active_set_root"],
+      "additionalProperties": false,
+      "properties": {
+        "receipt_log_root": {
+          "type": "string",
+          "pattern": "^sha256:[a-f0-9]{64}$",
+          "description": "Canonical custody roots must be derived from receipt objects that are available for verification; receipt-hash-only claims are candidate evidence."
+        },
+        "active_set_root": {
+          "type": "string",
+          "pattern": "^sha256:[a-f0-9]{64}$",
+          "description": "Canonical custody roots must commit only memory addresses backed by matching receipt objects, not arbitrary receipt hashes."
+        },
+        "receipt_bundle_ref": { "type": "string" }
+      }
+    }
+  }
+}

package/specs/claim-boundary-manifest-v1.schema.json

@@ -1,22 +1,22 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://schemas.enigma.ai/claim-boundary-manifest-v1.schema.json",
-  "title": "Enigma Claim Boundary Manifest v1",
-  "type": "object",
-  "required": ["schema", "claim_id", "claim_text", "allowed_scope", "forbidden_interpretations", "required_artifact_types", "truth_boundary", "not_proven", "release_status", "owner", "review_epoch"],
-  "additionalProperties": false,
-  "properties": {
-    "schema": { "const": "enigma.claim_boundary_manifest.v1" },
-    "claim_id": { "type": "string", "minLength": 8 },
-    "claim_text": { "type": "string", "minLength": 1 },
-    "allowed_scope": { "type": "string", "minLength": 1 },
-    "forbidden_interpretations": { "type": "array", "minItems": 1, "items": { "type": "string" } },
-    "required_artifact_types": { "type": "array", "minItems": 1, "items": { "type": "string" } },
-    "required_tests": { "type": "array", "items": { "type": "string" } },
-    "truth_boundary": { "type": "string", "minLength": 1 },
-    "not_proven": { "type": "array", "minItems": 1, "items": { "type": "string" } },
-    "release_status": { "type": "string", "enum": ["draft", "internal", "public", "withdrawn"] },
-    "owner": { "type": "string", "minLength": 1 },
-    "review_epoch": { "type": "integer", "minimum": 0 }
-  }
-}
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.enigma.ai/claim-boundary-manifest-v1.schema.json",
+  "title": "Enigma Claim Boundary Manifest v1",
+  "type": "object",
+  "required": ["schema", "claim_id", "claim_text", "allowed_scope", "forbidden_interpretations", "required_artifact_types", "truth_boundary", "not_proven", "release_status", "owner", "review_epoch"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": { "const": "enigma.claim_boundary_manifest.v1" },
+    "claim_id": { "type": "string", "minLength": 8 },
+    "claim_text": { "type": "string", "minLength": 1 },
+    "allowed_scope": { "type": "string", "minLength": 1 },
+    "forbidden_interpretations": { "type": "array", "minItems": 1, "items": { "type": "string" } },
+    "required_artifact_types": { "type": "array", "minItems": 1, "items": { "type": "string" } },
+    "required_tests": { "type": "array", "items": { "type": "string" } },
+    "truth_boundary": { "type": "string", "minLength": 1 },
+    "not_proven": { "type": "array", "minItems": 1, "items": { "type": "string" } },
+    "release_status": { "type": "string", "enum": ["draft", "internal", "public", "withdrawn"] },
+    "owner": { "type": "string", "minLength": 1 },
+    "review_epoch": { "type": "integer", "minimum": 0 }
+  }
+}

package/specs/claim-ledger-v1.schema.json

@@ -0,0 +1,291 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.enigma.ai/claim-ledger-v1.schema.json",
+  "title": "Enigma Claim Ledger v1",
+  "type": "object",
+  "required": [
+    "schema",
+    "ledger_id",
+    "generated_at",
+    "release_status",
+    "public_safety",
+    "release_gate",
+    "evidence_refs",
+    "claims"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "schema": { "const": "enigma.claim_ledger.v1" },
+    "ledger_id": { "$ref": "#/$defs/publicRef" },
+    "generated_at": { "type": "string", "format": "date-time" },
+    "release_status": { "$ref": "#/$defs/releaseStatus" },
+    "release_ref": { "$ref": "#/$defs/publicRef" },
+    "schema_refs": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/schemaId" },
+      "uniqueItems": true
+    },
+    "public_safety": { "$ref": "#/$defs/publicSafety" },
+    "release_gate": { "$ref": "#/$defs/releaseGate" },
+    "evidence_refs": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/publicRef" },
+      "uniqueItems": true
+    },
+    "claims": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/claimEntry" }
+    }
+  },
+  "$defs": {
+    "schemaId": {
+      "type": "string",
+      "pattern": "^enigma\\.[a-z0-9_]+\\.v1$"
+    },
+    "publicRef": {
+      "type": "string",
+      "pattern": "^(sha256:[a-f0-9]{64}|root:[a-z0-9][a-z0-9._:-]*|urn:enigma:[a-z0-9][a-z0-9._:-]*|schema:enigma\\.[a-z0-9_]+\\.v1|artifact:[a-z0-9][a-z0-9._:-]*|release:[a-z0-9][a-z0-9._:-]*|review:[a-z0-9][a-z0-9._:-]*|signer:[a-z0-9][a-z0-9._:-]*|signature:[a-z0-9][a-z0-9._:-]*|policy:[a-z0-9][a-z0-9._:-]*|capability:[a-z0-9][a-z0-9._:-]*|nullifier:[a-z0-9][a-z0-9._:-]*)$"
+    },
+    "releaseStatus": {
+      "type": "string",
+      "enum": ["draft", "blocked", "internal_review", "approved", "published", "expired", "withdrawn"]
+    },
+    "claimStatus": {
+      "type": "string",
+      "enum": ["allowed", "conditional", "prohibited"]
+    },
+    "boundary": {
+      "type": "string",
+      "enum": [
+        "local_vault_state_transition",
+        "receipt_chain_root",
+        "active_root",
+        "quarantine_root",
+        "tombstone_root",
+        "context_passport_selected_root",
+        "context_passport_omitted_root",
+        "context_passport_tombstone_root",
+        "capability_grant",
+        "capability_revocation",
+        "offline_verifier_output",
+        "public_release_metadata",
+        "public_evidence_metadata",
+        "provider_deletion",
+        "model_forgetting",
+        "provider_native_memory_control",
+        "compliance_certification",
+        "benchmark_superiority",
+        "hosted_saas_readiness",
+        "byoc_readiness",
+        "patentability_or_legal_conclusion",
+        "raw_embeddings_safe_public_metadata",
+        "hardware_tamper_proofing"
+      ]
+    },
+    "evidenceRequirement": {
+      "type": "string",
+      "enum": [
+        "local_validator_output",
+        "receipt_chain_root",
+        "active_root",
+        "quarantine_root",
+        "tombstone_root",
+        "context_passport_roots",
+        "capability_artifact_ref",
+        "offline_verifier_output",
+        "release_metadata_ref",
+        "review_approval_ref",
+        "expiry_review_ref",
+        "prohibited_claim_boundary_ref",
+        "live_deployment_evidence_ref",
+        "external_provider_evidence_ref",
+        "legal_security_approval_ref",
+        "benchmark_methodology_ref"
+      ]
+    },
+    "publicSafety": {
+      "type": "object",
+      "required": [
+        "public_payload_only",
+        "private_payload_detected",
+        "raw_memory_absent",
+        "prompts_transcripts_absent",
+        "embeddings_absent",
+        "provider_responses_absent",
+        "credentials_absent",
+        "local_paths_absent",
+        "evidence_refs_only"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "public_payload_only": { "const": true },
+        "private_payload_detected": { "const": false },
+        "raw_memory_absent": { "const": true },
+        "prompts_transcripts_absent": { "const": true },
+        "embeddings_absent": { "const": true },
+        "provider_responses_absent": { "const": true },
+        "credentials_absent": { "const": true },
+        "local_paths_absent": { "const": true },
+        "evidence_refs_only": { "const": true },
+        "scanner_ref": { "$ref": "#/$defs/publicRef" },
+        "scanned_at": { "type": "string", "format": "date-time" }
+      }
+    },
+    "releaseGate": {
+      "type": "object",
+      "required": [
+        "tokenless_publishing_required",
+        "long_lived_publishing_credentials_used",
+        "long_lived_publishing_credentials_present",
+        "publishing_evidence_refs"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "tokenless_publishing_required": { "const": true },
+        "long_lived_publishing_credentials_used": { "const": false },
+        "long_lived_publishing_credentials_present": { "const": false },
+        "publishing_evidence_refs": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/$defs/publicRef" },
+          "uniqueItems": true
+        },
+        "blocker_refs": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/publicRef" },
+          "uniqueItems": true
+        }
+      }
+    },
+    "review": {
+      "type": "object",
+      "required": ["reviewer_ref", "review_status", "review_due_at", "expires_at"],
+      "additionalProperties": false,
+      "properties": {
+        "reviewer_ref": { "$ref": "#/$defs/publicRef" },
+        "review_status": {
+          "type": "string",
+          "enum": ["not_started", "in_review", "approved", "blocked", "expired", "withdrawn"]
+        },
+        "reviewed_at": { "type": "string", "format": "date-time" },
+        "review_due_at": { "type": "string", "format": "date-time" },
+        "expires_at": { "type": "string", "format": "date-time" },
+        "approval_ref": { "$ref": "#/$defs/publicRef" }
+      }
+    },
+    "claimEntry": {
+      "type": "object",
+      "required": [
+        "claim_id",
+        "claim_status",
+        "claim_text",
+        "boundary",
+        "evidence_requirements",
+        "evidence_refs",
+        "release_status",
+        "review",
+        "public_safety",
+        "not_proven"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "claim_id": { "$ref": "#/$defs/publicRef" },
+        "claim_status": { "$ref": "#/$defs/claimStatus" },
+        "claim_text": { "type": "string", "minLength": 1, "maxLength": 512 },
+        "boundary": { "$ref": "#/$defs/boundary" },
+        "evidence_requirements": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/$defs/evidenceRequirement" },
+          "uniqueItems": true
+        },
+        "evidence_refs": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/$defs/publicRef" },
+          "uniqueItems": true
+        },
+        "release_status": { "$ref": "#/$defs/releaseStatus" },
+        "review": { "$ref": "#/$defs/review" },
+        "public_safety": { "$ref": "#/$defs/publicSafety" },
+        "not_proven": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "string",
+            "enum": [
+              "provider_deletion",
+              "model_forgetting",
+              "provider_native_memory_control",
+              "compliance_certification",
+              "benchmark_superiority",
+              "hosted_saas_readiness",
+              "byoc_readiness",
+              "patentability_or_legal_conclusion",
+              "raw_embeddings_safe_public_metadata",
+              "hardware_tamper_proofing"
+            ]
+          },
+          "uniqueItems": true
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "properties": { "claim_status": { "enum": ["allowed", "conditional"] } }
+          },
+          "then": {
+            "properties": {
+              "boundary": {
+                "enum": [
+                  "local_vault_state_transition",
+                  "receipt_chain_root",
+                  "active_root",
+                  "quarantine_root",
+                  "tombstone_root",
+                  "context_passport_selected_root",
+                  "context_passport_omitted_root",
+                  "context_passport_tombstone_root",
+                  "capability_grant",
+                  "capability_revocation",
+                  "offline_verifier_output",
+                  "public_release_metadata",
+                  "public_evidence_metadata"
+                ]
+              }
+            }
+          }
+        },
+        {
+          "if": {
+            "properties": { "claim_status": { "const": "prohibited" } }
+          },
+          "then": {
+            "properties": {
+              "boundary": {
+                "enum": [
+                  "provider_deletion",
+                  "model_forgetting",
+                  "provider_native_memory_control",
+                  "compliance_certification",
+                  "benchmark_superiority",
+                  "hosted_saas_readiness",
+                  "byoc_readiness",
+                  "patentability_or_legal_conclusion",
+                  "raw_embeddings_safe_public_metadata",
+                  "hardware_tamper_proofing"
+                ]
+              },
+              "evidence_requirements": {
+                "contains": { "const": "prohibited_claim_boundary_ref" }
+              }
+            }
+          }
+        }
+      ]
+    }
+  }
+}

package/specs/context-passport-v1.schema.json

@@ -0,0 +1,59 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.enigma.ai/context-passport-v1.schema.json",
+  "title": "Enigma Context Passport v1",
+  "type": "object",
+  "required": [
+    "schema",
+    "passport_id",
+    "issued_at",
+    "subject_ref",
+    "query_commitment",
+    "selected_context_root",
+    "omitted_context_root",
+    "tombstone_context_root",
+    "selected_count",
+    "omitted_count",
+    "tombstone_count",
+    "capability_ids",
+    "policy_ids",
+    "proof_refs"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "schema": { "const": "enigma.context_passport.v1" },
+    "passport_id": { "$ref": "#/$defs/publicId" },
+    "issued_at": { "type": "string", "format": "date-time" },
+    "subject_ref": { "$ref": "#/$defs/publicRef" },
+    "query_commitment": { "$ref": "#/$defs/sha256Digest" },
+    "selected_context_root": { "$ref": "#/$defs/sha256Digest" },
+    "omitted_context_root": { "$ref": "#/$defs/sha256Digest" },
+    "tombstone_context_root": { "$ref": "#/$defs/sha256Digest" },
+    "selected_count": { "type": "integer", "minimum": 0 },
+    "omitted_count": { "type": "integer", "minimum": 0 },
+    "tombstone_count": { "type": "integer", "minimum": 0 },
+    "capability_ids": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/publicId" },
+      "uniqueItems": true
+    },
+    "policy_ids": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/publicId" },
+      "uniqueItems": true
+    },
+    "proof_refs": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/publicRef" },
+      "uniqueItems": true
+    }
+  },
+  "$defs": {
+    "sha256Digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "publicId": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{7,127}$" },
+    "publicRef": { "type": "string", "pattern": "^(?![A-Za-z]:$)[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" }
+  }
+}

package/specs/deletion-tombstone-v1.schema.json

@@ -1,26 +1,26 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://schemas.enigma.ai/deletion-tombstone-v1.schema.json",
-  "title": "Enigma Deletion Tombstone v1",
-  "type": "object",
-  "required": ["schema", "tombstone_id", "delete_receipt_hash", "target_memory_addrs", "effective_epoch", "active_memory_root_after", "deleted_memory_root_after", "erasure_scope", "not_proven", "issued_at"],
-  "additionalProperties": false,
-  "properties": {
-    "schema": { "const": "enigma.deletion_tombstone.v1" },
-    "tombstone_id": { "type": "string", "minLength": 8 },
-    "delete_receipt_hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-    "target_memory_addrs": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } },
-    "effective_epoch": { "type": "integer", "minimum": 0 },
-    "active_memory_root_after": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-    "deleted_memory_root_after": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-    "erasure_scope": {
-      "type": "array",
-      "items": { "type": "string", "enum": ["active_store", "local_cache", "device_sync_peer", "encrypted_backup", "enterprise_tenant_store", "user_export_bundle"] }
-    },
-    "key_refs_destroyed": { "type": "array", "items": { "type": "string" } },
-    "downstream_delete_request_hashes": { "type": "array", "items": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" } },
-    "backup_treatment": { "type": "string", "enum": ["not_applicable", "purged", "tombstoned_unreadable_by_destroyed_key", "legal_hold_retained", "outside_scope"] },
-    "not_proven": { "type": "array", "minItems": 1, "items": { "type": "string" } },
-    "issued_at": { "type": "string", "format": "date-time" }
-  }
-}
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.enigma.ai/deletion-tombstone-v1.schema.json",
+  "title": "Enigma Deletion Tombstone v1",
+  "type": "object",
+  "required": ["schema", "tombstone_id", "delete_receipt_hash", "target_memory_addrs", "effective_epoch", "active_memory_root_after", "deleted_memory_root_after", "erasure_scope", "not_proven", "issued_at"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": { "const": "enigma.deletion_tombstone.v1" },
+    "tombstone_id": { "type": "string", "minLength": 8 },
+    "delete_receipt_hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "target_memory_addrs": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } },
+    "effective_epoch": { "type": "integer", "minimum": 0 },
+    "active_memory_root_after": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "deleted_memory_root_after": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "erasure_scope": {
+      "type": "array",
+      "items": { "type": "string", "enum": ["active_store", "local_cache", "device_sync_peer", "encrypted_backup", "enterprise_tenant_store", "user_export_bundle"] }
+    },
+    "key_refs_destroyed": { "type": "array", "items": { "type": "string" } },
+    "downstream_delete_request_hashes": { "type": "array", "items": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" } },
+    "backup_treatment": { "type": "string", "enum": ["not_applicable", "purged", "tombstoned_unreadable_by_destroyed_key", "legal_hold_retained", "outside_scope"] },
+    "not_proven": { "type": "array", "minItems": 1, "items": { "type": "string" } },
+    "issued_at": { "type": "string", "format": "date-time" }
+  }
+}