google-api-python-client 2.169.0__py3-none-any.whl → 2.171.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/networkservices.v1beta1.json

@@ -2093,6 +2093,40 @@
 "scopes": [
 "https://www.googleapis.com/auth/cloud-platform"
 ]
+},
+"patch": {
+"description": "Updates the parameters of a single ServiceBinding.",
+"flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/serviceBindings/{serviceBindingsId}",
+"httpMethod": "PATCH",
+"id": "networkservices.projects.locations.serviceBindings.patch",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Identifier. Name of the ServiceBinding resource. It matches pattern `projects/*/locations/*/serviceBindings/`.",
+"location": "path",
+"pattern": "^projects/[^/]+/locations/[^/]+/serviceBindings/[^/]+$",
+"required": true,
+"type": "string"
+},
+"updateMask": {
+"description": "Optional. Field mask is used to specify the fields to be overwritten in the ServiceBinding resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.",
+"format": "google-fieldmask",
+"location": "query",
+"type": "string"
+}
+},
+"path": "v1beta1/{+name}",
+"request": {
+"$ref": "ServiceBinding"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
 }
 }
 },
@@ -2879,7 +2913,7 @@
 }
 }
 },
-"revision": "20250410",
+"revision": "20250521",
 "rootUrl": "https://networkservices.googleapis.com/",
 "schemas": {
 "AuthzExtension": {
@@ -3034,6 +3068,10 @@
 "description": "Identifier. Name of the EndpointPolicy resource. It matches pattern `projects/{project}/locations/global/endpointPolicies/{endpoint_policy}`.",
 "type": "string"
 },
+"securityPolicy": {
+"description": "Optional. A URL referring to a SecurityPolicy resource. SecurityPolicy is used to enforce rate limiting policy on the inbound traffic at the identified backends. If this field is not set, rate limiting is disabled for this endpoint.",
+"type": "string"
+},
 "serverTlsPolicy": {
 "description": "Optional. A URL referring to ServerTlsPolicy resource. ServerTlsPolicy is used to determine the authentication policy to be applied to terminate the inbound traffic at the identified backends. If this field is not set, authentication is disabled(open) for this endpoint.",
 "type": "string"
@@ -3180,7 +3218,7 @@
 "type": "array"
 },
 "timeout": {
-"description": "Optional. Specifies the timeout for each individual message on the stream. The timeout must be between `10`-`1000` milliseconds. Required for callout extensions. This field is not supported for plugin extensions. Setting it results in a validation error.",
+"description": "Optional. Specifies the timeout for each individual message on the stream. The timeout must be between `10`-`10000` milliseconds. Required for callout extensions. This field is not supported for plugin extensions. Setting it results in a validation error.",
 "format": "google-duration",
 "type": "string"
 }
@@ -4038,7 +4076,7 @@
 "type": "object"
 },
 "HttpRouteRequestMirrorPolicy": {
-"description": "Specifies the policy on how requests are shadowed to a separate mirrored destination service. The proxy does not wait for responses from the shadow service. Prior to sending traffic to the shadow service, the host/authority header is suffixed with -shadow.",
+"description": "Specifies the policy on how requests are shadowed to a separate mirrored destination service. The proxy does not wait for responses from the shadow service. Prior to sending traffic to the shadow service, the host/authority header is suffixed with -shadow. Mirroring is currently not supported for Cloud Run destinations.",
 "id": "HttpRouteRequestMirrorPolicy",
 "properties": {
 "destination": {
@@ -5245,6 +5283,10 @@
 "$ref": "ServiceLbPolicyFailoverConfig",
 "description": "Optional. Configuration related to health based failover."
 },
+"isolationConfig": {
+"$ref": "ServiceLbPolicyIsolationConfig",
+"description": "Optional. Configuration to provide isolation support for the associated Backend Service."
+},
 "labels": {
 "additionalProperties": {
 "type": "string"
@@ -5306,6 +5348,39 @@
 },
 "type": "object"
 },
+"ServiceLbPolicyIsolationConfig": {
+"description": "Configuration to provide isolation support for the associated Backend Service.",
+"id": "ServiceLbPolicyIsolationConfig",
+"properties": {
+"isolationGranularity": {
+"description": "Optional. The isolation granularity of the load balancer.",
+"enum": [
+"ISOLATION_GRANULARITY_UNSPECIFIED",
+"REGION"
+],
+"enumDescriptions": [
+"No isolation is configured for the backend service. Traffic can overflow based on the load balancing algorithm.",
+"Traffic for this service will be isolated at the cloud region level."
+],
+"type": "string"
+},
+"isolationMode": {
+"description": "Optional. The isolation mode of the load balancer.",
+"enum": [
+"ISOLATION_MODE_UNSPECIFIED",
+"NEAREST",
+"STRICT"
+],
+"enumDescriptions": [
+"No isolation mode is configured for the backend service.",
+"Traffic will be sent to the nearest region.",
+"Traffic will fail if no serving backends are available in the same region as the load balancer."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "Status": {
 "description": "The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors).",
 "id": "Status",

googleapiclient/discovery_cache/documents/notebooks.v1.json

@@ -143,6 +143,12 @@
 "name"
 ],
 "parameters": {
+"extraLocationTypes": {
+"description": "Optional. A list of extra location types that should be used as conditions for controlling the visibility of the locations.",
+"location": "query",
+"repeated": true,
+"type": "string"
+},
 "filter": {
 "description": "A filter to narrow down results to a preferred subset. The filtering language accepts strings like `\"displayName=tokyo\"`, and is documented in more detail in [AIP-160](https://google.aip.dev/160).",
 "location": "query",
@@ -2008,7 +2014,7 @@
 }
 }
 },
-"revision": "20241204",
+"revision": "20250430",
 "rootUrl": "https://notebooks.googleapis.com/",
 "schemas": {
 "AcceleratorConfig": {

googleapiclient/discovery_cache/documents/notebooks.v2.json

@@ -143,6 +143,12 @@
 "name"
 ],
 "parameters": {
+"extraLocationTypes": {
+"description": "Optional. A list of extra location types that should be used as conditions for controlling the visibility of the locations.",
+"location": "query",
+"repeated": true,
+"type": "string"
+},
 "filter": {
 "description": "A filter to narrow down results to a preferred subset. The filtering language accepts strings like `\"displayName=tokyo\"`, and is documented in more detail in [AIP-160](https://google.aip.dev/160).",
 "location": "query",
@@ -904,7 +910,7 @@
 }
 }
 },
-"revision": "20250319",
+"revision": "20250507",
 "rootUrl": "https://notebooks.googleapis.com/",
 "schemas": {
 "AcceleratorConfig": {
@@ -1071,21 +1077,13 @@
 "description": "Optional. Defines the type of technology used by the confidential instance.",
 "enum": [
 "CONFIDENTIAL_INSTANCE_TYPE_UNSPECIFIED",
-"SEV",
-"SEV_SNP",
-"TDX"
+"SEV"
 ],
 "enumDescriptions": [
 "No type specified. Do not use this value.",
-"AMD Secure Encrypted Virtualization.",
-"AMD Secure Encrypted Virtualization - Secure Nested Paging.",
-"Intel Trust Domain eXtension."
+"AMD Secure Encrypted Virtualization."
 ],
 "type": "string"
-},
-"enableConfidentialCompute": {
-"description": "Optional. Defines whether the instance should have confidential compute enabled.",
-"type": "boolean"
 }
 },
 "type": "object"
@@ -1385,6 +1383,10 @@
 },
 "type": "array"
 },
+"reservationAffinity": {
+"$ref": "ReservationAffinity",
+"description": "Optional. Specifies the reservations that this instance can consume from."
+},
 "serviceAccounts": {
 "description": "Optional. The service account that serves as an identity for the VM instance. Currently supports only one service account.",
 "items": {
@@ -1446,6 +1448,10 @@
 "description": "Optional. If true, the notebook instance will not register with the proxy.",
 "type": "boolean"
 },
+"enableDeletionProtection": {
+"description": "Optional. If true, deletion protection will be enabled for this Workbench Instance. If false, deletion protection will be disabled for this Workbench Instance.",
+"type": "boolean"
+},
 "enableThirdPartyIdentity": {
 "description": "Optional. Flag that specifies that a notebook can be accessed with third party identity provider.",
 "type": "boolean"
@@ -1487,7 +1493,7 @@
 "type": "string"
 },
 "instanceOwners": {
-"description": "Optional. Input only. The owner of this instance after creation. Format: `alias@example.com` Currently supports one owner only. If not specified, all of the service account users of your VM instance's service account can use the instance.",
+"description": "Optional. The owner of this instance after creation. Format: `alias@example.com` Currently supports one owner only. If not specified, all of the service account users of your VM instance's service account can use the instance.",
 "items": {
 "type": "string"
 },
@@ -1819,6 +1825,40 @@
 },
 "type": "object"
 },
+"ReservationAffinity": {
+"description": "A reservation that an instance can consume from.",
+"id": "ReservationAffinity",
+"properties": {
+"consumeReservationType": {
+"description": "Required. Specifies the type of reservation from which this instance can consume resources: RESERVATION_ANY (default), RESERVATION_SPECIFIC, or RESERVATION_NONE. See Consuming reserved instances for examples.",
+"enum": [
+"RESERVATION_UNSPECIFIED",
+"RESERVATION_NONE",
+"RESERVATION_ANY",
+"RESERVATION_SPECIFIC"
+],
+"enumDescriptions": [
+"Default type.",
+"Do not consume from any allocated capacity.",
+"Consume any reservation available.",
+"Must consume from a specific reservation. Must specify key value fields for specifying the reservations."
+],
+"type": "string"
+},
+"key": {
+"description": "Optional. Corresponds to the label key of a reservation resource. To target a RESERVATION_SPECIFIC by name, use compute.googleapis.com/reservation-name as the key and specify the name of your reservation as its value.",
+"type": "string"
+},
+"values": {
+"description": "Optional. Corresponds to the label values of a reservation resource. This can be either a name to a reservation in the same project or \"projects/different-project/reservations/some-reservation-name\" to target a shared reservation in the same zone but in a different project.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "ResetInstanceRequest": {
 "description": "Request for resetting a notebook instance",
 "id": "ResetInstanceRequest",
@@ -1902,7 +1942,7 @@
 "id": "ShieldedInstanceConfig",
 "properties": {
 "enableIntegrityMonitoring": {
-"description": "Optional. Defines whether the VM instance has integrity monitoring enabled. Enables monitoring and attestation of the boot integrity of the VM instance. The attestation is performed against the integrity policy baseline. This baseline is initially derived from the implicitly trusted boot image when the VM instance is created. Enabled by default.",
+"description": "Optional. Defines whether the VM instance has integrity monitoring enabled. Enables monitoring and attestation of the boot integrity of the VM instance. The attestation is performed against the integrity policy baseline. This baseline is initially derived from the implicitly trusted boot image when the VM instance is created.",
 "type": "boolean"
 },
 "enableSecureBoot": {
@@ -1910,7 +1950,7 @@
 "type": "boolean"
 },
 "enableVtpm": {
-"description": "Optional. Defines whether the VM instance has the vTPM enabled. Enabled by default.",
+"description": "Optional. Defines whether the VM instance has the vTPM enabled.",
 "type": "boolean"
 }
 },

googleapiclient/discovery_cache/documents/ondemandscanning.v1.json

@@ -339,7 +339,7 @@
 }
 }
 },
-"revision": "20250321",
+"revision": "20250519",
 "rootUrl": "https://ondemandscanning.googleapis.com/",
 "schemas": {
 "AliasContext": {
@@ -1122,6 +1122,13 @@
 "description": "The CPE of the resource being scanned.",
 "type": "string"
 },
+"files": {
+"description": "Files that make up the resource described by the occurrence.",
+"items": {
+"$ref": "File"
+},
+"type": "array"
+},
 "lastScanTime": {
 "description": "The last time this resource was scanned.",
 "format": "google-datetime",
@@ -1173,6 +1180,21 @@
 },
 "type": "object"
 },
+"File": {
+"id": "File",
+"properties": {
+"digest": {
+"additionalProperties": {
+"type": "string"
+},
+"type": "object"
+},
+"name": {
+"type": "string"
+}
+},
+"type": "object"
+},
 "FileHashes": {
 "description": "Container message for hashes of byte content of files, used in source messages to verify integrity of source input to the build.",
 "id": "FileHashes",
@@ -1307,6 +1329,10 @@
 },
 "type": "array"
 },
+"chainId": {
+"description": "The layer chain ID (sha256 hash) of the layer in the container image. https://github.com/opencontainers/image-spec/blob/main/config.md#layer-chainid",
+"type": "string"
+},
 "command": {
 "description": "The layer build command that was used to build the layer. This may not be found in all layers depending on how the container image is built.",
 "type": "string"
@@ -1647,6 +1673,10 @@
 },
 "type": "array"
 },
+"chainId": {
+"description": "The layer chain ID (sha256 hash) of the layer in the container image. https://github.com/opencontainers/image-spec/blob/main/config.md#layer-chainid",
+"type": "string"
+},
 "command": {
 "description": "The layer build command that was used to build the layer. This may not be found in all layers depending on how the container image is built.",
 "type": "string"
@@ -1870,7 +1900,8 @@
 "COMPLIANCE",
 "DSSE_ATTESTATION",
 "VULNERABILITY_ASSESSMENT",
-"SBOM_REFERENCE"
+"SBOM_REFERENCE",
+"SECRET"
 ],
 "enumDescriptions": [
 "Default value. This value is unused.",
@@ -1885,7 +1916,8 @@
 "This represents a Compliance Note",
 "This represents a DSSE attestation Note",
 "This represents a Vulnerability Assessment.",
-"This represents an SBOM Reference."
+"This represents an SBOM Reference.",
+"This represents a secret."
 ],
 "type": "string"
 },
@@ -1913,6 +1945,10 @@
 "$ref": "SBOMReferenceOccurrence",
 "description": "Describes a specific SBOM reference occurrences."
 },
+"secret": {
+"$ref": "SecretOccurrence",
+"description": "Describes a secret."
+},
 "updateTime": {
 "description": "Output only. The time this occurrence was last updated.",
 "format": "google-datetime",
@@ -2056,7 +2092,7 @@
 "NPM packages.",
 "Nuget (C#/.NET) packages.",
 "Ruby packges (from RubyGems package manager).",
-"Rust packages from Cargo (Github ecosystem is `RUST`).",
+"Rust packages from Cargo (GitHub ecosystem is `RUST`).",
 "PHP packages from Composer package manager.",
 "Swift packages from Swift Package Manager (SwiftPM)."
 ],
@@ -2516,6 +2552,84 @@
 },
 "type": "object"
 },
+"SecretLocation": {
+"description": "The location of the secret.",
+"id": "SecretLocation",
+"properties": {
+"fileLocation": {
+"$ref": "GrafeasV1FileLocation",
+"description": "The secret is found from a file."
+}
+},
+"type": "object"
+},
+"SecretOccurrence": {
+"description": "The occurrence provides details of a secret.",
+"id": "SecretOccurrence",
+"properties": {
+"kind": {
+"description": "Required. Type of secret.",
+"enum": [
+"SECRET_KIND_UNSPECIFIED",
+"SECRET_KIND_UNKNOWN",
+"SECRET_KIND_GCP_SERVICE_ACCOUNT_KEY"
+],
+"enumDescriptions": [
+"Unspecified",
+"The secret kind is unknown.",
+"A GCP service account key per: https://cloud.google.com/iam/docs/creating-managing-service-account-keys"
+],
+"type": "string"
+},
+"locations": {
+"description": "Optional. Locations where the secret is detected.",
+"items": {
+"$ref": "SecretLocation"
+},
+"type": "array"
+},
+"statuses": {
+"description": "Optional. Status of the secret.",
+"items": {
+"$ref": "SecretStatus"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"SecretStatus": {
+"description": "The status of the secret with a timestamp.",
+"id": "SecretStatus",
+"properties": {
+"message": {
+"description": "Optional. Optional message about the status code.",
+"type": "string"
+},
+"status": {
+"description": "Optional. The status of the secret.",
+"enum": [
+"STATUS_UNSPECIFIED",
+"UNKNOWN",
+"VALID",
+"INVALID"
+],
+"enumDescriptions": [
+"Unspecified",
+"The status of the secret is unknown.",
+"The secret is valid.",
+"The secret is invalid."
+],
+"type": "string"
+},
+"updateTime": {
+"description": "Optional. The time the secret status was last updated.",
+"format": "google-datetime",
+"type": "string"
+}
+},
+"type": "object"
+},
 "Signature": {
 "description": "Verifiers (e.g. Kritis implementations) MUST verify signatures with respect to the trust anchors defined in policy (e.g. a Kritis policy). Typically this means that the verifier has been configured with a map from `public_key_id` to public key material (and any required parameters, e.g. signing algorithm). In particular, verification implementations MUST NOT treat the signature `public_key_id` as anything more than a key lookup hint. The `public_key_id` DOES NOT validate or authenticate a public key; it only provides a mechanism for quickly selecting a public key ALREADY CONFIGURED on the verifier through a trusted channel. Verification implementations MUST reject signatures in any of the following circumstances: * The `public_key_id` is not recognized by the verifier. * The public key that `public_key_id` refers to does not verify the signature with respect to the payload. The `signature` contents SHOULD NOT be \"attached\" (where the payload is included with the serialized `signature` bytes). Verifiers MUST ignore any \"attached\" payload and only verify signatures with respect to explicitly provided payload (e.g. a `payload` field on the proto message that holds this Signature, or the canonical serialization of the proto message that holds this signature).",
 "id": "Signature",

googleapiclient/discovery_cache/documents/ondemandscanning.v1beta1.json

@@ -339,7 +339,7 @@
 }
 }
 },
-"revision": "20250321",
+"revision": "20250519",
 "rootUrl": "https://ondemandscanning.googleapis.com/",
 "schemas": {
 "AliasContext": {
@@ -1117,6 +1117,13 @@
 "description": "The CPE of the resource being scanned.",
 "type": "string"
 },
+"files": {
+"description": "Files that make up the resource described by the occurrence.",
+"items": {
+"$ref": "File"
+},
+"type": "array"
+},
 "lastScanTime": {
 "description": "The last time this resource was scanned.",
 "format": "google-datetime",
@@ -1168,6 +1175,21 @@
 },
 "type": "object"
 },
+"File": {
+"id": "File",
+"properties": {
+"digest": {
+"additionalProperties": {
+"type": "string"
+},
+"type": "object"
+},
+"name": {
+"type": "string"
+}
+},
+"type": "object"
+},
 "FileHashes": {
 "description": "Container message for hashes of byte content of files, used in source messages to verify integrity of source input to the build.",
 "id": "FileHashes",
@@ -1302,6 +1324,10 @@
 },
 "type": "array"
 },
+"chainId": {
+"description": "The layer chain ID (sha256 hash) of the layer in the container image. https://github.com/opencontainers/image-spec/blob/main/config.md#layer-chainid",
+"type": "string"
+},
 "command": {
 "description": "The layer build command that was used to build the layer. This may not be found in all layers depending on how the container image is built.",
 "type": "string"
@@ -1642,6 +1668,10 @@
 },
 "type": "array"
 },
+"chainId": {
+"description": "The layer chain ID (sha256 hash) of the layer in the container image. https://github.com/opencontainers/image-spec/blob/main/config.md#layer-chainid",
+"type": "string"
+},
 "command": {
 "description": "The layer build command that was used to build the layer. This may not be found in all layers depending on how the container image is built.",
 "type": "string"
@@ -1865,7 +1895,8 @@
 "COMPLIANCE",
 "DSSE_ATTESTATION",
 "VULNERABILITY_ASSESSMENT",
-"SBOM_REFERENCE"
+"SBOM_REFERENCE",
+"SECRET"
 ],
 "enumDescriptions": [
 "Default value. This value is unused.",
@@ -1880,7 +1911,8 @@
 "This represents a Compliance Note",
 "This represents a DSSE attestation Note",
 "This represents a Vulnerability Assessment.",
-"This represents an SBOM Reference."
+"This represents an SBOM Reference.",
+"This represents a secret."
 ],
 "type": "string"
 },
@@ -1908,6 +1940,10 @@
 "$ref": "SBOMReferenceOccurrence",
 "description": "Describes a specific SBOM reference occurrences."
 },
+"secret": {
+"$ref": "SecretOccurrence",
+"description": "Describes a secret."
+},
 "updateTime": {
 "description": "Output only. The time this occurrence was last updated.",
 "format": "google-datetime",
@@ -2051,7 +2087,7 @@
 "NPM packages.",
 "Nuget (C#/.NET) packages.",
 "Ruby packges (from RubyGems package manager).",
-"Rust packages from Cargo (Github ecosystem is `RUST`).",
+"Rust packages from Cargo (GitHub ecosystem is `RUST`).",
 "PHP packages from Composer package manager.",
 "Swift packages from Swift Package Manager (SwiftPM)."
 ],
@@ -2511,6 +2547,84 @@
 },
 "type": "object"
 },
+"SecretLocation": {
+"description": "The location of the secret.",
+"id": "SecretLocation",
+"properties": {
+"fileLocation": {
+"$ref": "GrafeasV1FileLocation",
+"description": "The secret is found from a file."
+}
+},
+"type": "object"
+},
+"SecretOccurrence": {
+"description": "The occurrence provides details of a secret.",
+"id": "SecretOccurrence",
+"properties": {
+"kind": {
+"description": "Required. Type of secret.",
+"enum": [
+"SECRET_KIND_UNSPECIFIED",
+"SECRET_KIND_UNKNOWN",
+"SECRET_KIND_GCP_SERVICE_ACCOUNT_KEY"
+],
+"enumDescriptions": [
+"Unspecified",
+"The secret kind is unknown.",
+"A GCP service account key per: https://cloud.google.com/iam/docs/creating-managing-service-account-keys"
+],
+"type": "string"
+},
+"locations": {
+"description": "Optional. Locations where the secret is detected.",
+"items": {
+"$ref": "SecretLocation"
+},
+"type": "array"
+},
+"statuses": {
+"description": "Optional. Status of the secret.",
+"items": {
+"$ref": "SecretStatus"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"SecretStatus": {
+"description": "The status of the secret with a timestamp.",
+"id": "SecretStatus",
+"properties": {
+"message": {
+"description": "Optional. Optional message about the status code.",
+"type": "string"
+},
+"status": {
+"description": "Optional. The status of the secret.",
+"enum": [
+"STATUS_UNSPECIFIED",
+"UNKNOWN",
+"VALID",
+"INVALID"
+],
+"enumDescriptions": [
+"Unspecified",
+"The status of the secret is unknown.",
+"The secret is valid.",
+"The secret is invalid."
+],
+"type": "string"
+},
+"updateTime": {
+"description": "Optional. The time the secret status was last updated.",
+"format": "google-datetime",
+"type": "string"
+}
+},
+"type": "object"
+},
 "Signature": {
 "description": "Verifiers (e.g. Kritis implementations) MUST verify signatures with respect to the trust anchors defined in policy (e.g. a Kritis policy). Typically this means that the verifier has been configured with a map from `public_key_id` to public key material (and any required parameters, e.g. signing algorithm). In particular, verification implementations MUST NOT treat the signature `public_key_id` as anything more than a key lookup hint. The `public_key_id` DOES NOT validate or authenticate a public key; it only provides a mechanism for quickly selecting a public key ALREADY CONFIGURED on the verifier through a trusted channel. Verification implementations MUST reject signatures in any of the following circumstances: * The `public_key_id` is not recognized by the verifier. * The public key that `public_key_id` refers to does not verify the signature with respect to the payload. The `signature` contents SHOULD NOT be \"attached\" (where the payload is included with the serialized `signature` bytes). Verifiers MUST ignore any \"attached\" payload and only verify signatures with respect to explicitly provided payload (e.g. a `payload` field on the proto message that holds this Signature, or the canonical serialization of the proto message that holds this signature).",
 "id": "Signature",