67 lines
1.9 KiB
JSON
67 lines
1.9 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"$id": "https://thinkloom.app/schemas/provenance/1.0/project-key-manifest.schema.json",
|
|
"title": "Project key manifest",
|
|
"description": "Stable key hierarchy references for protected project portability.",
|
|
"type": "object",
|
|
"properties": {
|
|
"schema_version": {
|
|
"const": "1.0"
|
|
},
|
|
"project_id": {
|
|
"type": "string",
|
|
"pattern": "^project_[0-9A-HJKMNP-TV-Z]{26}$"
|
|
},
|
|
"key_id": {
|
|
"type": "string",
|
|
"pattern": "^key_[0-9A-HJKMNP-TV-Z]{26}$"
|
|
},
|
|
"algorithm": {
|
|
"const": "xchacha20-poly1305"
|
|
},
|
|
"device_envelope_path": {
|
|
"type": "string",
|
|
"minLength": 1,
|
|
"pattern": "^(?!/)(?![A-Za-z]:)(?!.*\\\\)(?!.*(?:^|/)\\.\\.?(?:/|$))[^\\u0000-\\u001f]+$"
|
|
},
|
|
"recovery_envelope_path": {
|
|
"type": "string",
|
|
"minLength": 1,
|
|
"pattern": "^(?!/)(?![A-Za-z]:)(?!.*\\\\)(?!.*(?:^|/)\\.\\.?(?:/|$))[^\\u0000-\\u001f]+$"
|
|
},
|
|
"recovery_verified_at": {
|
|
"type": "string",
|
|
"format": "date-time",
|
|
"pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$"
|
|
},
|
|
"created_at": {
|
|
"type": "string",
|
|
"format": "date-time",
|
|
"pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$"
|
|
}
|
|
},
|
|
"required": [
|
|
"schema_version",
|
|
"project_id",
|
|
"key_id",
|
|
"algorithm",
|
|
"device_envelope_path",
|
|
"recovery_envelope_path",
|
|
"recovery_verified_at",
|
|
"created_at"
|
|
],
|
|
"additionalProperties": false,
|
|
"examples": [
|
|
{
|
|
"schema_version": "1.0",
|
|
"project_id": "project_01J00000000000000000000001",
|
|
"key_id": "key_01J0000000000000000000000G",
|
|
"algorithm": "xchacha20-poly1305",
|
|
"device_envelope_path": "provenance/keys/device-envelope.json",
|
|
"recovery_envelope_path": "provenance/keys/recovery-envelope.json",
|
|
"recovery_verified_at": "2026-07-17T18:42:10.123Z",
|
|
"created_at": "2026-07-17T18:42:10.123Z"
|
|
}
|
|
]
|
|
}
|