enigma-memory 0.1.18 → 0.1.22

package/specs/passport-v1.schema.json

@@ -1,50 +1,50 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://schemas.enigma.ai/passport-v1.schema.json",
-  "title": "Enigma Passport v1",
-  "type": "object",
-  "required": ["schema", "passport_id", "owner", "created_at", "updated_at", "vault", "policies", "checkpoints"],
-  "additionalProperties": false,
-  "properties": {
-    "schema": { "const": "enigma.passport.v1" },
-    "passport_id": { "type": "string", "minLength": 8 },
-    "owner": {
-      "type": "object",
-      "required": ["subject_id", "display_name"],
-      "additionalProperties": false,
-      "properties": {
-        "subject_id": { "type": "string", "minLength": 1 },
-        "display_name": { "type": "string" },
-        "identity_refs": { "type": "array", "items": { "type": "string" } }
-      }
-    },
-    "created_at": { "type": "string", "format": "date-time" },
-    "updated_at": { "type": "string", "format": "date-time" },
-    "vault": {
-      "type": "object",
-      "required": ["vault_id", "encryption", "active_set_root", "receipt_log_root"],
-      "additionalProperties": false,
-      "properties": {
-        "vault_id": { "type": "string", "minLength": 1 },
-        "encryption": { "type": "string", "enum": ["local_aead", "kms_envelope", "external"] },
-        "active_set_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-        "receipt_log_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
-      }
-    },
-    "policies": { "type": "array", "items": { "type": "string" } },
-    "checkpoints": {
-      "type": "array",
-      "items": {
-        "type": "object",
-        "required": ["sequence", "active_set_root", "receipt_log_root", "timestamp"],
-        "additionalProperties": false,
-        "properties": {
-          "sequence": { "type": "integer", "minimum": 0 },
-          "active_set_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-          "receipt_log_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-          "timestamp": { "type": "string", "format": "date-time" }
-        }
-      }
-    }
-  }
-}
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.enigma.ai/passport-v1.schema.json",
+  "title": "Enigma Passport v1",
+  "type": "object",
+  "required": ["schema", "passport_id", "owner", "created_at", "updated_at", "vault", "policies", "checkpoints"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": { "const": "enigma.passport.v1" },
+    "passport_id": { "type": "string", "minLength": 8 },
+    "owner": {
+      "type": "object",
+      "required": ["subject_id", "display_name"],
+      "additionalProperties": false,
+      "properties": {
+        "subject_id": { "type": "string", "minLength": 1 },
+        "display_name": { "type": "string" },
+        "identity_refs": { "type": "array", "items": { "type": "string" } }
+      }
+    },
+    "created_at": { "type": "string", "format": "date-time" },
+    "updated_at": { "type": "string", "format": "date-time" },
+    "vault": {
+      "type": "object",
+      "required": ["vault_id", "encryption", "active_set_root", "receipt_log_root"],
+      "additionalProperties": false,
+      "properties": {
+        "vault_id": { "type": "string", "minLength": 1 },
+        "encryption": { "type": "string", "enum": ["local_aead", "kms_envelope", "external"] },
+        "active_set_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+        "receipt_log_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+      }
+    },
+    "policies": { "type": "array", "items": { "type": "string" } },
+    "checkpoints": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["sequence", "active_set_root", "receipt_log_root", "timestamp"],
+        "additionalProperties": false,
+        "properties": {
+          "sequence": { "type": "integer", "minimum": 0 },
+          "active_set_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+          "receipt_log_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+          "timestamp": { "type": "string", "format": "date-time" }
+        }
+      }
+    }
+  }
+}

package/specs/proof-of-non-use-v1.schema.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.enigma.ai/proof-of-non-use-v1.schema.json",
+  "title": "Enigma Proof of Non-Use v1",
+  "type": "object",
+  "required": [
+    "schema",
+    "proof_id",
+    "issued_at",
+    "subject_ref",
+    "query_commitment",
+    "candidate_set_root",
+    "selected_set_root",
+    "omitted_set_root",
+    "tombstone_set_root",
+    "candidate_count",
+    "selected_count",
+    "omitted_count",
+    "tombstone_count",
+    "policy_id",
+    "policy_decision",
+    "verifier_status",
+    "verifier_ref",
+    "receipt_log_root",
+    "receipt_refs"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "schema": { "const": "enigma.proof_of_non_use.v1" },
+    "proof_id": { "$ref": "#/$defs/publicId" },
+    "issued_at": { "type": "string", "format": "date-time" },
+    "subject_ref": { "$ref": "#/$defs/publicRef" },
+    "query_commitment": { "$ref": "#/$defs/sha256Digest" },
+    "candidate_set_root": { "$ref": "#/$defs/sha256Digest" },
+    "selected_set_root": { "$ref": "#/$defs/sha256Digest" },
+    "omitted_set_root": { "$ref": "#/$defs/sha256Digest" },
+    "tombstone_set_root": { "$ref": "#/$defs/sha256Digest" },
+    "candidate_count": { "type": "integer", "minimum": 0 },
+    "selected_count": { "type": "integer", "minimum": 0 },
+    "omitted_count": { "type": "integer", "minimum": 0 },
+    "tombstone_count": { "type": "integer", "minimum": 0 },
+    "policy_id": { "$ref": "#/$defs/publicId" },
+    "policy_decision": {
+      "type": "string",
+      "enum": ["allow", "deny", "redact", "quarantine", "tombstone_only"]
+    },
+    "verifier_status": {
+      "type": "string",
+      "enum": ["verified", "failed", "inconclusive"]
+    },
+    "verifier_ref": { "$ref": "#/$defs/publicRef" },
+    "receipt_log_root": { "$ref": "#/$defs/sha256Digest" },
+    "receipt_refs": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/publicRef" },
+      "uniqueItems": true
+    }
+  },
+  "$defs": {
+    "sha256Digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "publicId": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{7,127}$" },
+    "publicRef": { "type": "string", "pattern": "^(?![A-Za-z]:$)[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" }
+  }
+}

package/specs/quarantine-record-v1.schema.json

@@ -0,0 +1,126 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.enigma.ai/quarantine-record-v1.schema.json",
+  "title": "Enigma Quarantine Record v1",
+  "type": "object",
+  "required": [
+    "schema",
+    "quarantine_record_id",
+    "created_at",
+    "antigen_ref",
+    "quarantine_ref",
+    "subject_commitment",
+    "transition",
+    "decision",
+    "receipts",
+    "roots",
+    "claim_boundary",
+    "public_payload_only",
+    "payload_included"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "schema": { "const": "enigma.quarantine_record.v1" },
+    "quarantine_record_id": { "$ref": "#/$defs/publicId" },
+    "created_at": { "type": "string", "format": "date-time" },
+    "antigen_ref": { "$ref": "#/$defs/publicRef" },
+    "quarantine_ref": { "$ref": "#/$defs/publicRef" },
+    "subject_commitment": { "$ref": "#/$defs/sha256Digest" },
+    "transition": { "type": "string", "enum": ["isolated", "reintegrated", "tombstoned"] },
+    "decision": {
+      "type": "object",
+      "required": ["decision_id", "decided_at", "action", "reason_labels", "policy_id"],
+      "additionalProperties": false,
+      "properties": {
+        "decision_id": { "$ref": "#/$defs/publicId" },
+        "decided_at": { "type": "string", "format": "date-time" },
+        "action": { "type": "string", "enum": ["isolate", "reintegrate", "tombstone"] },
+        "reason_labels": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/$defs/reasonLabel" },
+          "uniqueItems": true
+        },
+        "policy_id": { "$ref": "#/$defs/policyId" }
+      }
+    },
+    "receipts": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/receiptCommitment" }
+    },
+    "roots": { "$ref": "#/$defs/quarantineRoots" },
+    "claim_boundary": { "$ref": "#/$defs/claimBoundary" },
+    "public_payload_only": { "const": true },
+    "payload_included": { "const": false }
+  },
+  "$defs": {
+    "sha256Digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "publicId": { "type": "string", "pattern": "^[a-z0-9][a-z0-9._:-]{7,127}$" },
+    "publicRef": { "type": "string", "pattern": "^ref:[A-Za-z0-9][A-Za-z0-9._~:@#?=&%+-]{0,255}$" },
+    "policyId": { "type": "string", "pattern": "^policy:[A-Za-z0-9][A-Za-z0-9._~:@#?=&%+-]{0,191}$" },
+    "receiptCommitment": {
+      "type": "object",
+      "required": ["receipt_ref", "receipt_hash", "sequence", "operation"],
+      "additionalProperties": false,
+      "properties": {
+        "receipt_ref": { "$ref": "#/$defs/publicRef" },
+        "receipt_hash": { "$ref": "#/$defs/sha256Digest" },
+        "sequence": { "type": "integer", "minimum": 0 },
+        "operation": { "type": "string", "enum": ["quarantine", "isolate", "review", "reintegrate", "tombstone"] }
+      }
+    },
+    "quarantineRoots": {
+      "type": "object",
+      "required": [
+        "previous_active_root",
+        "previous_quarantine_root",
+        "previous_tombstone_root",
+        "next_active_root",
+        "next_quarantine_root",
+        "next_tombstone_root",
+        "receipt_chain_root"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "previous_active_root": { "$ref": "#/$defs/sha256Digest" },
+        "previous_quarantine_root": { "$ref": "#/$defs/sha256Digest" },
+        "previous_tombstone_root": { "$ref": "#/$defs/sha256Digest" },
+        "next_active_root": { "$ref": "#/$defs/sha256Digest" },
+        "next_quarantine_root": { "$ref": "#/$defs/sha256Digest" },
+        "next_tombstone_root": { "$ref": "#/$defs/sha256Digest" },
+        "receipt_chain_root": { "$ref": "#/$defs/sha256Digest" }
+      }
+    },
+    "claimBoundary": {
+      "type": "object",
+      "required": [
+        "local_state_transition_claim",
+        "provider_deletion_claim",
+        "model_forgetting_claim",
+        "raw_payload_public",
+        "hardware_tamper_proof_claim"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "local_state_transition_claim": { "const": true },
+        "provider_deletion_claim": { "const": false },
+        "model_forgetting_claim": { "const": false },
+        "raw_payload_public": { "const": false },
+        "hardware_tamper_proof_claim": { "const": false }
+      }
+    },
+    "reasonLabel": {
+      "type": "string",
+      "enum": [
+        "untrusted_origin",
+        "prompt_injection",
+        "data_exfiltration",
+        "secret_material",
+        "memory_poisoning",
+        "policy_violation",
+        "manual_review"
+      ]
+    }
+  }
+}

package/specs/receipt-v1.schema.json

@@ -1,61 +1,61 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://schemas.enigma.ai/receipt-v1.schema.json",
-  "title": "Enigma Receipt v1",
-  "type": "object",
-  "required": [
-    "schema",
-    "receipt_id",
-    "event_hash",
-    "operation",
-    "tenant_id",
-    "subject_id",
-    "sequence",
-    "previous_receipt_hash",
-    "active_set_root",
-    "receipt_log_root",
-    "timestamp",
-    "signer",
-    "signature"
-  ],
-  "additionalProperties": false,
-  "properties": {
-    "schema": { "const": "enigma.receipt.v1" },
-    "receipt_id": { "type": "string", "minLength": 8 },
-    "event_hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-    "operation": {
-      "type": "string",
-      "enum": ["create", "read", "update", "supersede", "delete", "retrieve", "inject", "export", "import", "deny", "quarantine", "boundary_cross"]
-    },
-    "tenant_id": { "type": "string", "minLength": 1 },
-    "subject_id": { "type": "string", "minLength": 1 },
-    "memory_addr": { "type": "string" },
-    "source_addr": { "type": "string" },
-    "provider": { "type": "string" },
-    "model": { "type": "string" },
-    "policy_id": { "type": "string" },
-    "sequence": { "type": "integer", "minimum": 0 },
-    "previous_receipt_hash": { "type": "string", "pattern": "^(sha256:[a-f0-9]{64}|GENESIS)$" },
-    "active_set_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-    "receipt_log_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-    "timestamp": { "type": "string", "format": "date-time" },
-    "signer": {
-      "type": "object",
-      "required": ["key_id", "alg"],
-      "additionalProperties": false,
-      "properties": {
-        "key_id": { "type": "string", "minLength": 1 },
-        "alg": { "const": "Ed25519" }
-      }
-    },
-    "signature": {
-      "type": "object",
-      "required": ["alg", "value"],
-      "additionalProperties": false,
-      "properties": {
-        "alg": { "const": "Ed25519" },
-        "value": { "type": "string", "minLength": 64 }
-      }
-    }
-  }
-}
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.enigma.ai/receipt-v1.schema.json",
+  "title": "Enigma Receipt v1",
+  "type": "object",
+  "required": [
+    "schema",
+    "receipt_id",
+    "event_hash",
+    "operation",
+    "tenant_id",
+    "subject_id",
+    "sequence",
+    "previous_receipt_hash",
+    "active_set_root",
+    "receipt_log_root",
+    "timestamp",
+    "signer",
+    "signature"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "schema": { "const": "enigma.receipt.v1" },
+    "receipt_id": { "type": "string", "minLength": 8 },
+    "event_hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "operation": {
+      "type": "string",
+      "enum": ["create", "read", "update", "supersede", "delete", "retrieve", "inject", "export", "import", "deny", "quarantine", "boundary_cross"]
+    },
+    "tenant_id": { "type": "string", "minLength": 1 },
+    "subject_id": { "type": "string", "minLength": 1 },
+    "memory_addr": { "type": "string" },
+    "source_addr": { "type": "string" },
+    "provider": { "type": "string" },
+    "model": { "type": "string" },
+    "policy_id": { "type": "string" },
+    "sequence": { "type": "integer", "minimum": 0 },
+    "previous_receipt_hash": { "type": "string", "pattern": "^(sha256:[a-f0-9]{64}|GENESIS)$" },
+    "active_set_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "receipt_log_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "timestamp": { "type": "string", "format": "date-time" },
+    "signer": {
+      "type": "object",
+      "required": ["key_id", "alg"],
+      "additionalProperties": false,
+      "properties": {
+        "key_id": { "type": "string", "minLength": 1 },
+        "alg": { "const": "Ed25519" }
+      }
+    },
+    "signature": {
+      "type": "object",
+      "required": ["alg", "value"],
+      "additionalProperties": false,
+      "properties": {
+        "alg": { "const": "Ed25519" },
+        "value": { "type": "string", "minLength": 64 }
+      }
+    }
+  }
+}

package/specs/state-checkpoint-v1.schema.json

@@ -1,37 +1,37 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://schemas.enigma.ai/state-checkpoint-v1.schema.json",
-  "title": "Enigma State Checkpoint v1",
-  "type": "object",
-  "required": ["schema", "checkpoint_id", "tenant_hash", "owner_scope_hash", "epoch", "active_memory_root", "deleted_memory_root", "receipt_log_root", "key_registry_root", "policy_registry_root", "previous_checkpoint_hash", "issued_at", "signatures"],
-  "additionalProperties": false,
-  "properties": {
-    "schema": { "const": "enigma.state_checkpoint.v1" },
-    "checkpoint_id": { "type": "string", "minLength": 8 },
-    "tenant_hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-    "owner_scope_hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-    "epoch": { "type": "integer", "minimum": 0 },
-    "active_memory_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-    "deleted_memory_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-    "receipt_log_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-    "key_registry_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-    "policy_registry_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-    "previous_checkpoint_hash": { "type": "string", "pattern": "^(sha256:[a-f0-9]{64}|GENESIS)$" },
-    "witness_policy": { "type": "string" },
-    "issued_at": { "type": "string", "format": "date-time" },
-    "signatures": {
-      "type": "array",
-      "minItems": 1,
-      "items": {
-        "type": "object",
-        "required": ["alg", "key_id", "value"],
-        "additionalProperties": false,
-        "properties": {
-          "alg": { "type": "string", "enum": ["Ed25519", "Ed25519+ML-DSA-policy"] },
-          "key_id": { "type": "string", "minLength": 1 },
-          "value": { "type": "string", "minLength": 64 }
-        }
-      }
-    }
-  }
-}
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.enigma.ai/state-checkpoint-v1.schema.json",
+  "title": "Enigma State Checkpoint v1",
+  "type": "object",
+  "required": ["schema", "checkpoint_id", "tenant_hash", "owner_scope_hash", "epoch", "active_memory_root", "deleted_memory_root", "receipt_log_root", "key_registry_root", "policy_registry_root", "previous_checkpoint_hash", "issued_at", "signatures"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": { "const": "enigma.state_checkpoint.v1" },
+    "checkpoint_id": { "type": "string", "minLength": 8 },
+    "tenant_hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "owner_scope_hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "epoch": { "type": "integer", "minimum": 0 },
+    "active_memory_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "deleted_memory_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "receipt_log_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "key_registry_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "policy_registry_root": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "previous_checkpoint_hash": { "type": "string", "pattern": "^(sha256:[a-f0-9]{64}|GENESIS)$" },
+    "witness_policy": { "type": "string" },
+    "issued_at": { "type": "string", "format": "date-time" },
+    "signatures": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "required": ["alg", "key_id", "value"],
+        "additionalProperties": false,
+        "properties": {
+          "alg": { "type": "string", "enum": ["Ed25519", "Ed25519+ML-DSA-policy"] },
+          "key_id": { "type": "string", "minLength": 1 },
+          "value": { "type": "string", "minLength": 64 }
+        }
+      }
+    }
+  }
+}

package/specs/trust-bundle-v1.schema.json

@@ -1,56 +1,56 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://schemas.enigma.ai/trust-bundle-v1.schema.json",
-  "title": "Enigma Trust Bundle v1",
-  "type": "object",
-  "required": ["schema", "bundle_id", "created_at", "trusted_issuers", "trusted_witnesses", "accepted_algorithms", "revocations"],
-  "additionalProperties": false,
-  "properties": {
-    "schema": { "const": "enigma.trust_bundle.v1" },
-    "bundle_id": { "type": "string", "minLength": 8 },
-    "created_at": { "type": "string", "format": "date-time" },
-    "trusted_issuers": {
-      "type": "array",
-      "items": {
-        "type": "object",
-        "required": ["issuer_id", "key_id", "public_key", "scope"],
-        "additionalProperties": false,
-        "properties": {
-          "issuer_id": { "type": "string", "minLength": 1 },
-          "key_id": { "type": "string", "minLength": 1 },
-          "public_key": { "type": "string", "minLength": 1 },
-          "scope": { "type": "array", "items": { "type": "string" } }
-        }
-      }
-    },
-    "trusted_witnesses": {
-      "type": "array",
-      "items": {
-        "type": "object",
-        "required": ["witness_id", "key_id", "public_key"],
-        "additionalProperties": false,
-        "properties": {
-          "witness_id": { "type": "string", "minLength": 1 },
-          "key_id": { "type": "string", "minLength": 1 },
-          "public_key": { "type": "string", "minLength": 1 }
-        }
-      }
-    },
-    "accepted_algorithms": { "type": "array", "items": { "type": "string", "enum": ["Ed25519", "Ed25519+ML-DSA-policy", "sha256", "hmac-sha256"] } },
-    "import_capsule_policy": {
-      "type": "object",
-      "required": ["private_plaintext_boundary", "completeness_evidence_required", "recognized_importer_count", "unsupported_importer_count"],
-      "additionalProperties": false,
-      "properties": {
-        "private_plaintext_boundary": {
-          "type": "string",
-          "enum": ["payload_private_public_artifacts_hash_only"]
-        },
-        "completeness_evidence_required": { "type": "boolean" },
-        "recognized_importer_count": { "type": "integer", "minimum": 0 },
-        "unsupported_importer_count": { "type": "integer", "minimum": 0 }
-      }
-    },
-    "revocations": { "type": "array", "items": { "type": "string" } }
-  }
-}
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.enigma.ai/trust-bundle-v1.schema.json",
+  "title": "Enigma Trust Bundle v1",
+  "type": "object",
+  "required": ["schema", "bundle_id", "created_at", "trusted_issuers", "trusted_witnesses", "accepted_algorithms", "revocations"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": { "const": "enigma.trust_bundle.v1" },
+    "bundle_id": { "type": "string", "minLength": 8 },
+    "created_at": { "type": "string", "format": "date-time" },
+    "trusted_issuers": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["issuer_id", "key_id", "public_key", "scope"],
+        "additionalProperties": false,
+        "properties": {
+          "issuer_id": { "type": "string", "minLength": 1 },
+          "key_id": { "type": "string", "minLength": 1 },
+          "public_key": { "type": "string", "minLength": 1 },
+          "scope": { "type": "array", "items": { "type": "string" } }
+        }
+      }
+    },
+    "trusted_witnesses": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["witness_id", "key_id", "public_key"],
+        "additionalProperties": false,
+        "properties": {
+          "witness_id": { "type": "string", "minLength": 1 },
+          "key_id": { "type": "string", "minLength": 1 },
+          "public_key": { "type": "string", "minLength": 1 }
+        }
+      }
+    },
+    "accepted_algorithms": { "type": "array", "items": { "type": "string", "enum": ["Ed25519", "Ed25519+ML-DSA-policy", "sha256", "hmac-sha256"] } },
+    "import_capsule_policy": {
+      "type": "object",
+      "required": ["private_plaintext_boundary", "completeness_evidence_required", "recognized_importer_count", "unsupported_importer_count"],
+      "additionalProperties": false,
+      "properties": {
+        "private_plaintext_boundary": {
+          "type": "string",
+          "enum": ["payload_private_public_artifacts_hash_only"]
+        },
+        "completeness_evidence_required": { "type": "boolean" },
+        "recognized_importer_count": { "type": "integer", "minimum": 0 },
+        "unsupported_importer_count": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "revocations": { "type": "array", "items": { "type": "string" } }
+  }
+}