full-reverse 0.0.0-stage → 1.0.0

package/skills/full-reverse/schemas/examples/inventory.example.json

@@ -0,0 +1,106 @@
+{
+  "schema_version": "full-reverse.inventory/1",
+  "investigation_id": "inv_20260115-example",
+  "created_at": "2026-01-15T10:00:00Z",
+  "inputs": {
+    "evidence_index": {
+      "path": "evidence/index.json",
+      "sha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
+    }
+  },
+  "artifacts": [
+    {
+      "build_id": "bld_app-asar",
+      "artifact_kind": "javascript-electron",
+      "format": "asar",
+      "architecture": null,
+      "version": "1.4.2",
+      "components": [
+        {
+          "component_id": "cmp_main-process",
+          "kind": "javascript-module",
+          "path": "main.js",
+          "sha256": null,
+          "description": "Electron main-process entry",
+          "evidence": [
+            {
+              "kind": "canonical",
+              "file": "evidence/records/0123456789abcdef-analyze-javascript-application.json",
+              "sha256": "1111111111111111111111111111111111111111111111111111111111111111",
+              "evidence_id": "ev_2222222222222222222222222222222222222222222222222222222222222222",
+              "selectors": [
+                {
+                  "type": "json-pointer",
+                  "pointer": "/normalized_result/graph/modules/0/path",
+                  "role": "path",
+                  "expect": {
+                    "equals": "main.js"
+                  }
+                }
+              ]
+            }
+          ]
+        }
+      ],
+      "capabilities": [
+        {
+          "capability": "static-javascript-analysis",
+          "status": "available",
+          "detail": "rea analyze-javascript-application completed",
+          "evidence": [
+            {
+              "kind": "canonical",
+              "file": "evidence/records/0123456789abcdef-analyze-javascript-application.json",
+              "sha256": "1111111111111111111111111111111111111111111111111111111111111111",
+              "evidence_id": "ev_2222222222222222222222222222222222222222222222222222222222222222",
+              "selectors": [
+                {
+                  "type": "json-pointer",
+                  "pointer": "/normalized_result/summary/module_count",
+                  "role": "count",
+                  "expect": {
+                    "equals": 42
+                  }
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "capability": "native-disassembly",
+          "status": "unavailable",
+          "detail": "No native binary in this artifact",
+          "evidence": []
+        }
+      ],
+      "evidence": [
+        {
+          "kind": "canonical",
+          "file": "evidence/records/0123456789abcdef-analyze-javascript-application.json",
+          "sha256": "1111111111111111111111111111111111111111111111111111111111111111",
+          "evidence_id": "ev_2222222222222222222222222222222222222222222222222222222222222222",
+          "selectors": [
+            {
+              "type": "json-pointer",
+              "pointer": "/normalized_result/summary/module_count",
+              "role": "count",
+              "expect": {
+                "equals": 42
+              }
+            }
+          ]
+        }
+      ],
+      "unknowns": []
+    }
+  ],
+  "unknowns": [
+    {
+      "unknown_id": "unk_server-side",
+      "text": "Server-side pricing is not visible from the client artifact.",
+      "question_ids": [
+        "q_server-pricing"
+      ]
+    }
+  ]
+}

package/skills/full-reverse/schemas/examples/investigation.example.json

@@ -0,0 +1,159 @@
+{
+  "schema_version": "full-reverse.investigation/1",
+  "investigation_id": "inv_20260115-example",
+  "created_at": "2026-01-15T10:00:00Z",
+  "objective": "Explain how the packaged application computes the discount shown at checkout.",
+  "non_goals": [
+    "Reconstruct the original source",
+    "Prove equivalence of a replica"
+  ],
+  "workspace": {
+    "path": "/work/investigations/example",
+    "allowed_output_paths": [
+      "/work/investigations/example"
+    ]
+  },
+  "builds": [
+    {
+      "build_id": "bld_app-asar",
+      "kind": "file",
+      "name": "app.asar",
+      "version_label": "1.4.2",
+      "identity": {
+        "method": "file-sha256",
+        "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        "bytes": 1048576,
+        "coverage": "complete",
+        "rea_format": "asar",
+        "note": "Full streamed SHA-256 of the ASAR file."
+      },
+      "local_path": "/apps/Example/resources/app.asar",
+      "parent_build_id": null
+    },
+    {
+      "build_id": "bld_app-dir",
+      "kind": "directory",
+      "name": "Example app directory",
+      "identity": {
+        "method": "rea-subject-digest",
+        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+        "bytes": null,
+        "coverage": "unknown",
+        "rea_format": "directory",
+        "note": "Digest REA reported as the subject of the directory analysis; manifest coverage not established."
+      },
+      "local_path": null,
+      "parent_build_id": null
+    }
+  ],
+  "questions": [
+    {
+      "question_id": "q_discount-rule",
+      "text": "Which module computes the checkout discount?",
+      "status": "answered",
+      "reason": null,
+      "claim_ids": [
+        "clm_discount-module"
+      ],
+      "feature": "discount",
+      "build_ids": [
+        "bld_app-asar"
+      ]
+    },
+    {
+      "question_id": "q_server-pricing",
+      "text": "Does the client contact a pricing service?",
+      "status": "unresolved",
+      "reason": "Only static evidence is available; runtime observation was not authorized.",
+      "claim_ids": [
+        "clm_pricing-unknown"
+      ],
+      "feature": null
+    }
+  ],
+  "authorizations": [
+    {
+      "grant_id": "auth_launch-sandbox",
+      "user_instruction": "You may launch the app copy in /tmp/sandbox with no network to observe checkout.",
+      "conversation_ref": "message 12",
+      "recorded_at": "2026-01-15T10:00:00Z",
+      "build_id": "bld_app-asar",
+      "permitted_effects": [
+        "launch",
+        "file-write"
+      ],
+      "environment_boundary": "Disposable copy; no network",
+      "storage_boundary": "Writes only under /tmp/sandbox and the investigation workspace",
+      "valid_scope": "This investigation, build bld_app-asar only",
+      "persistence": "session",
+      "reconfirmed_at": null
+    }
+  ],
+  "tools": [
+    {
+      "name": "rea",
+      "version": "6.4.0",
+      "observed_at": "2026-01-15T10:00:00Z",
+      "note": "rea --version"
+    }
+  ],
+  "phase": "inspect",
+  "steps": [
+    {
+      "step_id": "step_inspect-js-1",
+      "specialist": "inspect",
+      "question_ids": [
+        "q_discount-rule"
+      ],
+      "operation": "analyze-javascript-application",
+      "attempt": 1,
+      "supersedes_step_id": null,
+      "status": "completed",
+      "build_id": "bld_app-asar",
+      "effects": [],
+      "authorization_grant_id": null,
+      "inputs": [
+        {
+          "path": "inventory.json",
+          "sha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+        }
+      ],
+      "outputs": [
+        {
+          "path": "evidence/records/0123456789abcdef-analyze-javascript-application.json",
+          "sha256": "1111111111111111111111111111111111111111111111111111111111111111"
+        }
+      ],
+      "started_at": "2026-01-15T10:00:00Z",
+      "finished_at": "2026-01-15T10:05:00Z",
+      "note": ""
+    },
+    {
+      "step_id": "step_observe-checkout-1",
+      "specialist": "observe",
+      "question_ids": [
+        "q_server-pricing"
+      ],
+      "operation": "capture-process",
+      "attempt": 1,
+      "supersedes_step_id": null,
+      "status": "planned",
+      "build_id": "bld_app-asar",
+      "effects": [
+        "launch",
+        "file-write"
+      ],
+      "authorization_grant_id": "auth_launch-sandbox",
+      "inputs": [],
+      "outputs": [],
+      "started_at": "2026-01-15T10:10:00Z",
+      "finished_at": null,
+      "note": "Waiting for user reconfirmation after resume."
+    }
+  ],
+  "lifecycle": {
+    "last_resumed_at": null,
+    "review_sha256": null,
+    "updated_at": "2026-01-15T10:00:00Z"
+  }
+}

package/skills/full-reverse/schemas/examples/review.example.json

@@ -0,0 +1,75 @@
+{
+  "schema_version": "full-reverse.review/1",
+  "investigation_id": "inv_20260115-example",
+  "reviewed_at": "2026-01-15T12:00:00Z",
+  "reviewer": "full-reverse-verify",
+  "reviewed_inputs": {
+    "inventory": {
+      "path": "inventory.json",
+      "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"
+    },
+    "evidence_index": {
+      "path": "evidence/index.json",
+      "sha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
+    },
+    "claims": {
+      "path": "claims.json",
+      "sha256": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
+    },
+    "specs": [
+      {
+        "path": "specs/discount/requirements.md",
+        "sha256": "6666666666666666666666666666666666666666666666666666666666666666"
+      },
+      {
+        "path": "specs/discount/reference-design.md",
+        "sha256": "7777777777777777777777777777777777777777777777777777777777777777"
+      },
+      {
+        "path": "specs/index.md",
+        "sha256": "8888888888888888888888888888888888888888888888888888888888888888"
+      }
+    ],
+    "scope": {
+      "sha256": "9999999999999999999999999999999999999999999999999999999999999999"
+    }
+  },
+  "validator_report": {
+    "mode": "closure",
+    "outcome": "pass",
+    "failed": 0,
+    "unverified": 0,
+    "note": "validate --mode closure exit 0"
+  },
+  "dispositions": [
+    {
+      "question_id": "q_discount-rule",
+      "disposition": "answered",
+      "reason": "Module located with verified selectors; purpose remains an inference.",
+      "claim_ids": [
+        "clm_discount-module",
+        "clm_discount-purpose"
+      ]
+    },
+    {
+      "question_id": "q_server-pricing",
+      "disposition": "unresolved",
+      "reason": "No runtime evidence was authorized.",
+      "claim_ids": [
+        "clm_pricing-unknown"
+      ]
+    }
+  ],
+  "findings": [
+    {
+      "finding_id": "fnd_purpose-inference",
+      "severity": "minor",
+      "category": "semantic-overclaim",
+      "claim_id": "clm_discount-purpose",
+      "text": "Purpose is inferred from names only; spec must keep the Inferred: prefix.",
+      "status": "accepted-limitation",
+      "route_to": null
+    }
+  ],
+  "verdict": "approved-with-limits"
+}

package/skills/full-reverse/schemas/external-evidence.schema.json

@@ -0,0 +1,68 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://full-reverse.local/schemas/external-evidence.schema.json",
+  "title": "Full Reverse external evidence record",
+  "description": "One evidence file collected outside REA (screenshot, log, trace, note). Embedded in evidence/index.json as entry.external. ext_id is ext_ + the SHA-256 of the file bytes; the helper derives ext_id, file and registered_at.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "ext_id", "file", "media_type", "observation_kind", "description", "acquisition", "sensitivity",
+    "target_association", "limitations", "registered_at"
+  ],
+  "properties": {
+    "ext_id": { "$ref": "common.schema.json#/$defs/externalId" },
+    "file": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sha256", "bytes"],
+      "properties": {
+        "path": { "$ref": "common.schema.json#/$defs/relativePath" },
+        "sha256": { "$ref": "common.schema.json#/$defs/sha256" },
+        "bytes": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "media_type": { "type": "string", "description": "IANA media type when known, otherwise application/octet-stream." },
+    "observation_kind": {
+      "enum": ["screenshot", "screen-recording", "log", "trace", "network-log", "packet-capture-original", "crash-dump-original", "note", "user-supplied-document", "other"]
+    },
+    "description": { "$ref": "common.schema.json#/$defs/nonEmptyString" },
+    "acquisition": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["provenance_status", "method", "tool", "acquired_by", "acquired_at", "scenario_id"],
+      "properties": {
+        "provenance_status": {
+          "enum": ["known", "partial", "unknown"],
+          "description": "unknown limits supported claims to state inferred; partial to derived at most."
+        },
+        "method": { "type": ["string", "null"] },
+        "tool": { "type": ["string", "null"], "description": "Tool and version used to collect the file, if known." },
+        "acquired_by": { "type": ["string", "null"] },
+        "acquired_at": { "oneOf": [{ "$ref": "common.schema.json#/$defs/timestamp" }, { "type": "null" }] },
+        "scenario_id": { "oneOf": [{ "$ref": "common.schema.json#/$defs/scenarioId" }, { "type": "null" }] }
+      }
+    },
+    "sensitivity": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["classification", "contains_secrets_or_personal_data", "sharing"],
+      "properties": {
+        "classification": { "enum": ["public", "internal", "confidential", "restricted", "unknown"] },
+        "contains_secrets_or_personal_data": { "enum": ["yes", "no", "unknown"] },
+        "sharing": { "type": "string", "description": "Storage and sharing boundary agreed for this file." }
+      }
+    },
+    "target_association": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "build_id", "rationale"],
+      "properties": {
+        "status": { "enum": ["declared", "unbound", "unknown"] },
+        "build_id": { "oneOf": [{ "$ref": "common.schema.json#/$defs/buildId" }, { "type": "null" }] },
+        "rationale": { "type": "string" }
+      }
+    },
+    "limitations": { "type": "array", "items": { "type": "string" } },
+    "registered_at": { "$ref": "common.schema.json#/$defs/timestamp" }
+  }
+}

package/skills/full-reverse/schemas/inventory.schema.json

@@ -0,0 +1,91 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://full-reverse.local/schemas/inventory.schema.json",
+  "title": "Full Reverse artifact inventory (inventory.json)",
+  "description": "Written only by the inventory specialist. Artifact-aware facts with evidence references and explicit unknowns. No fact may be present without evidence or a stated user/environment source.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "investigation_id", "created_at", "inputs", "artifacts", "unknowns"],
+  "properties": {
+    "schema_version": { "const": "full-reverse.inventory/1" },
+    "investigation_id": { "$ref": "common.schema.json#/$defs/investigationId" },
+    "created_at": { "$ref": "common.schema.json#/$defs/timestamp" },
+    "inputs": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["evidence_index"],
+      "properties": {
+        "evidence_index": {
+          "oneOf": [{ "$ref": "common.schema.json#/$defs/fileDigest" }, { "type": "null" }],
+          "description": "Digest of evidence/index.json the inventory was derived from."
+        }
+      }
+    },
+    "artifacts": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["build_id", "artifact_kind", "format", "architecture", "version", "components", "capabilities", "evidence", "unknowns"],
+        "properties": {
+          "build_id": { "$ref": "common.schema.json#/$defs/buildId" },
+          "artifact_kind": {
+            "enum": ["native-binary", "javascript-electron", "managed-assembly", "android-package", "package-or-installer", "web-capture", "recorded-evidence", "firmware", "wasm", "database", "other", "unknown"]
+          },
+          "format": { "type": ["string", "null"] },
+          "architecture": { "type": ["string", "null"] },
+          "version": { "type": ["string", "null"] },
+          "components": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["component_id", "kind", "path", "sha256", "evidence"],
+              "properties": {
+                "component_id": { "type": "string", "pattern": "^cmp_[a-z0-9][a-z0-9_-]{0,62}$" },
+                "kind": { "$ref": "common.schema.json#/$defs/nonEmptyString" },
+                "path": { "type": ["string", "null"] },
+                "sha256": { "oneOf": [{ "$ref": "common.schema.json#/$defs/sha256" }, { "type": "null" }] },
+                "description": { "type": "string" },
+                "evidence": { "type": "array", "minItems": 1, "items": { "$ref": "common.schema.json#/$defs/evidenceRef" } }
+              }
+            }
+          },
+          "capabilities": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["capability", "status", "detail", "evidence"],
+              "properties": {
+                "capability": { "$ref": "common.schema.json#/$defs/nonEmptyString" },
+                "status": { "enum": ["available", "unavailable", "unknown"] },
+                "detail": { "type": "string" },
+                "evidence": { "type": "array", "items": { "$ref": "common.schema.json#/$defs/evidenceRef" } }
+              }
+            }
+          },
+          "evidence": {
+            "type": "array",
+            "items": { "$ref": "common.schema.json#/$defs/evidenceRef" },
+            "description": "Evidence supporting artifact-level facts (kind, format, architecture, version)."
+          },
+          "unknowns": { "type": "array", "items": { "$ref": "#/$defs/unknown" } }
+        }
+      }
+    },
+    "unknowns": { "type": "array", "items": { "$ref": "#/$defs/unknown" } }
+  },
+  "$defs": {
+    "unknown": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["unknown_id", "text"],
+      "properties": {
+        "unknown_id": { "type": "string", "pattern": "^unk_[a-z0-9][a-z0-9_-]{0,62}$" },
+        "text": { "$ref": "common.schema.json#/$defs/nonEmptyString" },
+        "question_ids": { "type": "array", "items": { "$ref": "common.schema.json#/$defs/questionId" } }
+      }
+    }
+  }
+}

package/skills/full-reverse/schemas/investigation.schema.json

@@ -0,0 +1,142 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://full-reverse.local/schemas/investigation.schema.json",
+  "title": "Full Reverse investigation state (investigation.json)",
+  "description": "Owned and written only by the entry skill. Records scope, builds, questions, authorization grants, steps/attempts and lifecycle checkpoints.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version", "investigation_id", "created_at", "objective", "non_goals", "workspace",
+    "builds", "questions", "authorizations", "tools", "phase", "steps", "lifecycle"
+  ],
+  "properties": {
+    "schema_version": { "const": "full-reverse.investigation/1" },
+    "investigation_id": { "$ref": "common.schema.json#/$defs/investigationId" },
+    "created_at": { "$ref": "common.schema.json#/$defs/timestamp" },
+    "objective": { "$ref": "common.schema.json#/$defs/nonEmptyString" },
+    "non_goals": { "type": "array", "items": { "$ref": "common.schema.json#/$defs/nonEmptyString" } },
+    "workspace": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "allowed_output_paths"],
+      "properties": {
+        "path": { "$ref": "common.schema.json#/$defs/nonEmptyString" },
+        "allowed_output_paths": {
+          "type": "array",
+          "items": { "$ref": "common.schema.json#/$defs/nonEmptyString" },
+          "description": "Absolute paths (workspace included) where analyst-controlled outputs may be written."
+        }
+      }
+    },
+    "builds": {
+      "type": "array",
+      "items": { "$ref": "common.schema.json#/$defs/build" }
+    },
+    "questions": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["question_id", "text", "status", "reason", "claim_ids", "feature"],
+        "properties": {
+          "question_id": { "$ref": "common.schema.json#/$defs/questionId" },
+          "text": { "$ref": "common.schema.json#/$defs/nonEmptyString" },
+          "status": { "enum": ["pending", "answered", "partial", "unresolved"] },
+          "reason": { "type": ["string", "null"] },
+          "claim_ids": { "type": "array", "items": { "$ref": "common.schema.json#/$defs/claimId" } },
+          "feature": { "type": ["string", "null"], "pattern": "^[a-z0-9][a-z0-9-]{0,62}$" },
+          "build_ids": { "type": "array", "items": { "$ref": "common.schema.json#/$defs/buildId" } }
+        }
+      }
+    },
+    "authorizations": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "grant_id", "user_instruction", "conversation_ref", "recorded_at", "build_id",
+          "permitted_effects", "environment_boundary", "storage_boundary", "valid_scope",
+          "persistence", "reconfirmed_at"
+        ],
+        "properties": {
+          "grant_id": { "$ref": "common.schema.json#/$defs/grantId" },
+          "user_instruction": {
+            "$ref": "common.schema.json#/$defs/nonEmptyString",
+            "description": "The user's own words granting the effect. A persisted record is evidence of a grant, never authority to create one."
+          },
+          "conversation_ref": { "type": ["string", "null"] },
+          "recorded_at": { "$ref": "common.schema.json#/$defs/timestamp" },
+          "build_id": { "$ref": "common.schema.json#/$defs/buildId" },
+          "permitted_effects": {
+            "type": "array",
+            "uniqueItems": true,
+            "items": { "enum": ["launch", "attach", "instrument", "ui-action", "file-write", "network", "device", "storage", "mount"] }
+          },
+          "environment_boundary": { "$ref": "common.schema.json#/$defs/nonEmptyString" },
+          "storage_boundary": { "$ref": "common.schema.json#/$defs/nonEmptyString" },
+          "valid_scope": { "$ref": "common.schema.json#/$defs/nonEmptyString" },
+          "persistence": { "enum": ["session", "persistent"] },
+          "reconfirmed_at": { "oneOf": [{ "$ref": "common.schema.json#/$defs/timestamp" }, { "type": "null" }] }
+        }
+      }
+    },
+    "tools": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["name", "version", "observed_at"],
+        "properties": {
+          "name": { "$ref": "common.schema.json#/$defs/nonEmptyString" },
+          "version": { "type": ["string", "null"] },
+          "observed_at": { "$ref": "common.schema.json#/$defs/timestamp" },
+          "note": { "type": "string" }
+        }
+      }
+    },
+    "phase": { "enum": ["scope", "inventory", "inspect", "observe", "model", "verify", "complete"] },
+    "steps": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "step_id", "specialist", "question_ids", "operation", "attempt", "supersedes_step_id", "status",
+          "build_id", "effects", "authorization_grant_id", "inputs", "outputs", "started_at", "finished_at", "note"
+        ],
+        "properties": {
+          "step_id": { "$ref": "common.schema.json#/$defs/stepId" },
+          "specialist": { "enum": ["entry", "inventory", "inspect", "observe", "model", "verify"] },
+          "question_ids": { "type": "array", "items": { "$ref": "common.schema.json#/$defs/questionId" } },
+          "operation": { "$ref": "common.schema.json#/$defs/nonEmptyString" },
+          "attempt": { "type": "integer", "minimum": 1 },
+          "supersedes_step_id": { "oneOf": [{ "$ref": "common.schema.json#/$defs/stepId" }, { "type": "null" }] },
+          "status": { "enum": ["planned", "running", "completed", "interrupted", "failed", "superseded"] },
+          "build_id": { "oneOf": [{ "$ref": "common.schema.json#/$defs/buildId" }, { "type": "null" }] },
+          "effects": {
+            "type": "array",
+            "uniqueItems": true,
+            "items": { "enum": ["launch", "attach", "instrument", "ui-action", "file-write", "network", "device", "storage", "mount"] }
+          },
+          "authorization_grant_id": { "oneOf": [{ "$ref": "common.schema.json#/$defs/grantId" }, { "type": "null" }] },
+          "inputs": { "type": "array", "items": { "$ref": "common.schema.json#/$defs/fileDigest" } },
+          "outputs": { "type": "array", "items": { "$ref": "common.schema.json#/$defs/fileDigest" } },
+          "started_at": { "$ref": "common.schema.json#/$defs/timestamp" },
+          "finished_at": { "oneOf": [{ "$ref": "common.schema.json#/$defs/timestamp" }, { "type": "null" }] },
+          "note": { "type": "string" }
+        }
+      }
+    },
+    "lifecycle": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["last_resumed_at", "review_sha256", "updated_at"],
+      "properties": {
+        "last_resumed_at": { "oneOf": [{ "$ref": "common.schema.json#/$defs/timestamp" }, { "type": "null" }] },
+        "review_sha256": { "oneOf": [{ "$ref": "common.schema.json#/$defs/sha256" }, { "type": "null" }] },
+        "updated_at": { "$ref": "common.schema.json#/$defs/timestamp" }
+      }
+    }
+  }
+}