openapi.json

{
  "openapi": "3.1.0",
  "info": {
    "title": "Judgment Pack Runner local pilot",
    "version": "0.1.0",
    "description": "Single local installation owner, one fixed pack release per job. Durable local schedules, file changes and authenticated event admission. Experimental evaluator; no external actions. Direct runner prefix /v1; owner-authenticated Desk proxy /api/operations."
  },
  "servers": [
    {
      "url": "/v1"
    }
  ],
  "security": [
    {
      "bearer": []
    }
  ],
  "paths": {
    "/status": {
      "get": {
        "operationId": "status",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Status"
                }
              }
            }
          },
          "default": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "description": "Runner's identity, health and capabilities. A capability names a feature a client can test for before using it; journal-backward means the journal routes accept tail and before."
      }
    },
    "/previews": {
      "post": {
        "operationId": "previewRelease",
        "responses": {
          "201": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Release"
                }
              }
            }
          },
          "default": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/PreviewRequest"
              }
            }
          }
        }
      }
    },
    "/jobs": {
      "get": {
        "operationId": "listJobs",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Page"
                }
              }
            }
          },
          "default": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "parameters": [
          {
            "name": "after",
            "in": "query",
            "schema": {
              "type": "integer",
              "minimum": 0
            },
            "description": "Cursor from the previous response. Omit for the newest page."
          },
          {
            "name": "q",
            "in": "query",
            "description": "Literal case-insensitive substring search; ASCII case folding. Applied before pagination.",
            "schema": {
              "type": "string",
              "maxLength": 200
            }
          }
        ],
        "description": "Paginated jobs include packTitle, packVersion and up to five recentRuns with id, state and createdAt."
      },
      "post": {
        "operationId": "createJob",
        "responses": {
          "201": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Job"
                }
              }
            }
          },
          "default": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/CreateJob"
              }
            }
          }
        }
      }
    },
    "/jobs/{job}": {
      "get": {
        "operationId": "getJob",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/JobDetail"
                }
              }
            }
          },
          "default": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "parameters": [
          {
            "name": "job",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ]
      }
    },
    "/jobs/{job}/runs": {
      "get": {
        "operationId": "listRuns",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Page"
                }
              }
            }
          },
          "default": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "parameters": [
          {
            "name": "job",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "after",
            "in": "query",
            "schema": {
              "type": "integer",
              "minimum": 0
            },
            "description": "Cursor from the previous response. Omit for the newest page."
          },
          {
            "name": "q",
            "in": "query",
            "description": "Literal case-insensitive substring search; ASCII case folding. Applied before pagination.",
            "schema": {
              "type": "string",
              "maxLength": 200
            }
          },
          {
            "name": "state",
            "in": "query",
            "schema": {
              "type": "string",
              "enum": [
                "queued",
                "running",
                "completed",
                "failed",
                "interrupted"
              ]
            }
          },
          {
            "name": "review",
            "in": "query",
            "description": "Only failed/interrupted runs or completed runs with unresolved decisions or requested handoff.",
            "schema": {
              "type": "boolean"
            }
          }
        ]
      },
      "post": {
        "operationId": "submitRun",
        "responses": {
          "202": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Run"
                }
              }
            }
          },
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Run"
                }
              }
            }
          },
          "default": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Input"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "job",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "minLength": 1,
              "maxLength": 128,
              "pattern": "^[!-~]+$"
            },
            "description": "An identical retry under the same key returns the run first accepted, also after a profile its mapping names was set aside. A retry whose input is an import that names a set-aside profile is refused as 422 input_profile_set_aside: the import is bound before the retry is looked up."
          }
        ]
      }
    },
    "/runs/{run}": {
      "get": {
        "operationId": "getRun",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Run"
                }
              }
            }
          },
          "default": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "parameters": [
          {
            "name": "run",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ]
      }
    },
    "/inputs/preview": {
      "post": {
        "operationId": "previewInputMapping",
        "description": "Project a retained v1 file or verify/derive a v2 ordered mapping, without network acquisition, persistence or evaluation. Invalid proof and derivation errors refuse preparation; valid rule unknowns remain policy data.",
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Input"
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Mapped inputs",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/InputPreview"
                }
              }
            }
          },
          "default": {
            "description": "Rejected input",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/input-profiles": {
      "get": {
        "operationId": "listInputProfiles",
        "description": "Trusted bootstrap and durable registered installation profiles with canonical digests. Imported fixtures never install authority. After them, each registered profile set aside when Runner opened its store: one an earlier Runner admitted and this Runner's form refuses on its own, such as a scoped page profile whose endpointScope entry RFC 0018 round 16 refuses. It is listed with state set-aside and the reason, its profile the stored bytes served compacted and JSON-escaped as every answer is; the store's row keeps them exactly. Its ID stays taken, it counts toward the 16 profiles, and a binding, job or run that names it is refused as input_profile_set_aside, naming it.",
        "responses": {
          "200": {
            "description": "Profiles",
            "content": {
              "application/json": {
                "schema": {
                  "type": "array",
                  "items": {
                    "oneOf": [
                      {
                        "$ref": "#/components/schemas/InstalledInputProfile"
                      },
                      {
                        "$ref": "#/components/schemas/SetAsideInputProfile"
                      }
                    ]
                  }
                }
              }
            }
          },
          "default": {
            "description": "Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      },
      "post": {
        "operationId": "registerInputProfile",
        "description": "Trusted-host configuration only. Add one immutable profile (request at most 32 KiB) without restarting workers. Persist before visibility. An identical retry returns the same digest; changed contents under an existing ID are refused, and so is the ID of a profile set aside when Runner opened its store. At most 16 combined profiles, a set-aside one included; none is evicted. The store's row keeps every profile it holds as it holds it, a set-aside one byte for byte. Does not acquire data, change releases or authorize model execution. Bearer authentication is required and browser Origin requests are refused.",
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/InputProfile"
              }
            }
          }
        },
        "responses": {
          "201": {
            "description": "Profile durably registered",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/InstalledInputProfile"
                }
              }
            }
          },
          "200": {
            "description": "Identical profile already registered",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/InstalledInputProfile"
                }
              }
            }
          },
          "409": {
            "description": "Profile ID already names different contents",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "422": {
            "description": "Invalid profile or combined installation limit exceeded",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "default": {
            "description": "Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/runs/{run}/verification": {
      "get": {
        "operationId": "exportInputVerification",
        "description": "Offline input lineage bundle. Trust the profiles and release digest independently. Does not establish sealed-session completeness or policy truth. Version 2, 3, 4 or 5 may be asked for, at most once (none asked is 2), and the run is served at the highest version up to the one asked whose material it holds, answered 200 either way, so read version from the body: version 3 adds the audit record's original bytes, version 4 also the run's entry in the installation's chain of runs, and version 5 also the record's signature sidecar. A run the store no longer holds, whose entry the chain still names, is answered with 410 run_not_held, naming the entry's sequence. A run of a job with no input mapping, or a v1 file mapping, has no lineage: it is served from version 3 on, by the same steps, with inputs: not-mapped and no preparation, and is refused with 422 not_verified_mapping when it holds no audit record's bytes or version 2 (or none) is asked.",
        "parameters": [
          {
            "name": "run",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "version",
            "in": "query",
            "required": false,
            "description": "The export version asked for, at most once, in a well-formed query. Without it, or with 2: version 2, unchanged. With 3: version 3 when the run holds its audit record's bytes, and version 2 for a run that holds none (recorded before Runner kept them, or without an audit record). With 4: version 4 when the run also has an entry in the installation's chain of runs, and otherwise what 3 serves: a run recorded before Runner chained its runs has no entry and is unchained. With 5: version 5 when the run also keeps the signature sidecar of its audit record, and otherwise what 4 serves: a run recorded without a signing key, by a Runtime that cannot sign, or before Runner kept the sidecar, is unsigned. Anything else, or a malformed query, is refused with invalid_version. A run without lineage (no input mapping, or a v1 file mapping) has no version-2 export: with none or 2 it is refused with 422 not_verified_mapping, and with 3, 4 or 5 it is served as above, from version 3.",
            "schema": {
              "type": "integer",
              "enum": [
                2,
                3,
                4,
                5
              ],
              "default": 2
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Verification bundle",
            "content": {
              "application/json": {
                "schema": {
                  "oneOf": [
                    {
                      "$ref": "#/components/schemas/VerificationBundle"
                    },
                    {
                      "$ref": "#/components/schemas/VerificationBundleV3"
                    },
                    {
                      "$ref": "#/components/schemas/VerificationBundleV4"
                    },
                    {
                      "$ref": "#/components/schemas/VerificationBundleV5"
                    }
                  ]
                }
              }
            }
          },
          "422": {
            "description": "not_verified_mapping: the run's job has no input mapping, or a v1 file mapping, so its export has no lineage, and the run holds no audit record's bytes (it failed, was interrupted, expired or has not finished, or was recorded before Runner kept them) or version 2, or none, was asked. Message: \"This run does not use mapping v2, and an export without lineage carries the audit record's bytes: ask for version 3, 4 or 5 of a completed run that holds them.\"",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "default": {
            "description": "Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/runs/{run}/diagnostics": {
      "parameters": [
        {
          "name": "run",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        },
        {
          "name": "stream",
          "in": "query",
          "required": false,
          "schema": {
            "enum": [
              "stderr",
              "stdout"
            ],
            "default": "stderr"
          },
          "description": "The stream the Runtime wrote when it evaluated the run, at most once in a well-formed query. Anything else is refused with 400 invalid_stream."
        }
      ],
      "get": {
        "operationId": "getRunDiagnostics",
        "description": "A finished run's attempt diagnostics: what its Runtime wrote to standard error, or standard output, when it evaluated the run, as written, up to the first 65,536 bytes (cut before a character the bound would split). A run still queued or running is refused with 409 run_not_finished. A run whose stream is not retained answers 404 no_diagnostics, with its state and what the store records of it (it expired in the queue, or never started); a missing file is never taken to say the Runtime did not run. The stream is read through the attempts directory Runner holds, and Runner serves only the file it looked at and then opened: the run's directory and the stream are each looked at without following a link, and checked on the opened descriptor to be that same object, a directory or a regular file private to the operator. A link when Runner looks, a file or directory others may read, or a name that resolves to any other object when opened is refused with 500 diagnostics_refused, and nothing of it is served; a name that vanishes in between answers 404. The Runtime's own words, kept in the operator's store: they explain a run and establish nothing about it. A read writes no entry in the journal of job activity.",
        "responses": {
          "200": {
            "description": "The stream's first bytes",
            "headers": {
              "X-Diagnostics-Bytes": {
                "description": "The whole stream's size in bytes.",
                "schema": {
                  "type": "integer",
                  "minimum": 0
                }
              },
              "X-Diagnostics-Truncated": {
                "description": "Whether the answer is shorter than the stream.",
                "schema": {
                  "enum": [
                    "true",
                    "false"
                  ]
                }
              }
            },
            "content": {
              "text/plain": {
                "schema": {
                  "type": "string",
                  "maxLength": 65536
                }
              }
            }
          },
          "default": {
            "description": "Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/run-chain": {
      "get": {
        "operationId": "getRunChain",
        "description": "The installation's chain of runs: every entry's line, exactly as stored, each ended by a newline, in sequence order. An entry binds one completed run's id to the SHA-256 of its audit record's exact bytes, chained by the Runtime's rules (trail, sequence, previous over the exact bytes of the line before). It is a trail file as the Runtime's audit verify reads one, and verify-run --chain reads it. Read in pages, as it stood at some moment during the reading; a failure after the answer began aborts the transfer. The operator keeps the chain: against the operator it establishes nothing without a checkpoint held independently.",
        "responses": {
          "200": {
            "description": "The chain, one entry per line",
            "content": {
              "application/jsonl": {
                "schema": {
                  "type": "string"
                }
              }
            }
          },
          "default": {
            "description": "Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/jobs/{job}/events": {
      "parameters": [
        {
          "name": "job",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        },
        {
          "name": "after",
          "in": "query",
          "schema": {
            "type": "integer",
            "minimum": 0
          },
          "description": "Later than: the sequence of the last entry read, or 0, the default, from the start. Unlike run and occurrence lists, which page newest first, the journal pages oldest first, as the chain of runs is read."
        },
        {
          "name": "tail",
          "in": "query",
          "schema": {
            "type": "boolean"
          },
          "description": "true answers the newest page: the last up to 50 entries, in the journal's order, with more and before for the entries older than it. Capability journal-backward. false is the same as leaving it out. Not with after or before: 400 invalid_paging."
        },
        {
          "name": "before",
          "in": "query",
          "schema": {
            "type": "integer",
            "minimum": 0
          },
          "description": "Earlier than: the answer is the up to 50 entries immediately before this sequence, in the journal's order (oldest first within the page), with more true when older entries exist and before, the sequence of the page's first entry, for the next older page. A value beyond the end answers the newest page; 0 answers an empty page. Capability journal-backward. Not with after or tail: 400 invalid_paging."
        }
      ],
      "get": {
        "operationId": "listJobEvents",
        "description": "A job's entries in the journal of job activity: those naming the job, and those naming its release alone (its preview, a refused creation). Entries are oldest first, at most 50 after the cursor, in the order their changes committed. A reader that has caught up asks again with next. The operator's own log: not chained, not signed, and binding nothing against the operator. A job the store does not hold is answered 404 not_found. With tail=true or before=<sequence> the page is read from the end: the entries stay in the journal's order within the page, more says older entries exist before the page, before is the cursor for them, and next still follows the journal forward from the page's last entry. Capability journal-backward in GET /v1/status.",
        "responses": {
          "200": {
            "description": "A page of the journal",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/JournalPage"
                }
              }
            }
          },
          "default": {
            "description": "Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/events": {
      "parameters": [
        {
          "name": "after",
          "in": "query",
          "schema": {
            "type": "integer",
            "minimum": 0
          },
          "description": "Later than: the sequence of the last entry read, or 0, the default, from the start. Unlike run and occurrence lists, which page newest first, the journal pages oldest first, as the chain of runs is read."
        },
        {
          "name": "job",
          "in": "query",
          "schema": {
            "type": "string"
          },
          "description": "Only the entries the job's route serves, those naming the job and those naming its release alone, and Runner's own (journal.began, runner.started, runner.stopped), which concern no job but explain a gap in every job's. A job the store does not hold is answered 404 not_found."
        },
        {
          "name": "tail",
          "in": "query",
          "schema": {
            "type": "boolean"
          },
          "description": "true answers the newest page: the last up to 50 entries, in the journal's order, with more and before for the entries older than it. Capability journal-backward. false is the same as leaving it out. Not with after or before: 400 invalid_paging."
        },
        {
          "name": "before",
          "in": "query",
          "schema": {
            "type": "integer",
            "minimum": 0
          },
          "description": "Earlier than: the answer is the up to 50 entries immediately before this sequence, in the journal's order (oldest first within the page), with more true when older entries exist and before, the sequence of the page's first entry, for the next older page. A value beyond the end answers the newest page; 0 answers an empty page. Capability journal-backward. Not with after or tail: 400 invalid_paging."
        }
      ],
      "get": {
        "operationId": "listEvents",
        "description": "Every entry of the journal of job activity, including those that concern no job: Runner's own, a release never made into a job, a refusal that names nothing else. Entries are oldest first, at most 50 after the cursor, in the order their changes committed. A reader that has caught up asks again with next. The operator's own log: not chained, not signed, and binding nothing against the operator. With tail=true or before=<sequence> the page is read from the end: the entries stay in the journal's order within the page, more says older entries exist before the page, before is the cursor for them, and next still follows the journal forward from the page's last entry. Capability journal-backward in GET /v1/status.",
        "responses": {
          "200": {
            "description": "A page of the journal",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/JournalPage"
                }
              }
            }
          },
          "default": {
            "description": "Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/inputs/next": {
      "post": {
        "operationId": "planNextInputSource",
        "description": "Verify and derive a mapping v2 prefix. Returns the next instantiated acquisition request, or complete prepared input. Accepts source-only partial input; checks every trusted profile and class admission before returning any request. Performs no network calls, evaluation or persistence.",
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Input"
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Next source or complete preparation",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/InputPlan"
                }
              }
            }
          },
          "default": {
            "description": "Rejected input",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/runs": {
      "get": {
        "operationId": "listRuns",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Page"
                }
              }
            }
          },
          "default": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "parameters": [
          {
            "name": "after",
            "in": "query",
            "schema": {
              "type": "integer",
              "minimum": 0
            },
            "description": "Cursor from the previous response. Omit for the newest page."
          },
          {
            "name": "q",
            "in": "query",
            "description": "Literal case-insensitive substring search; ASCII case folding. Applied before pagination.",
            "schema": {
              "type": "string",
              "maxLength": 200
            }
          },
          {
            "name": "state",
            "in": "query",
            "schema": {
              "type": "string",
              "enum": [
                "queued",
                "running",
                "completed",
                "failed",
                "interrupted"
              ]
            }
          },
          {
            "name": "review",
            "in": "query",
            "description": "Only failed/interrupted runs or completed runs with unresolved decisions or requested handoff.",
            "schema": {
              "type": "boolean"
            }
          }
        ],
        "summary": "List runs across all jobs",
        "description": "Paginated run summaries include jobName, disposition and handoff, but omit input snapshots and audit bodies."
      }
    },
    "/jobs/{job}/triggers": {
      "parameters": [
        {
          "name": "job",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        }
      ],
      "get": {
        "operationId": "listTriggers",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "items": {
                      "type": "array",
                      "items": {
                        "$ref": "#/components/schemas/Trigger"
                      }
                    },
                    "localFiles": {
                      "type": "boolean"
                    },
                    "cloudConnections": {
                      "type": "array",
                      "items": {
                        "$ref": "#/components/schemas/CloudConnectionStatus"
                      }
                    },
                    "gatewayProfiles": {
                      "type": "array",
                      "items": {
                        "type": "string"
                      }
                    }
                  },
                  "required": [
                    "items",
                    "localFiles"
                  ],
                  "additionalProperties": false
                }
              }
            }
          },
          "default": {
            "description": "Request rejected; inspect code and retryable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      },
      "post": {
        "operationId": "savePausedTrigger",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Trigger"
                }
              }
            }
          },
          "default": {
            "description": "Request rejected; inspect code and retryable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "id": {
                    "type": "string"
                  },
                  "revision": {
                    "type": "integer",
                    "minimum": 1
                  },
                  "config": {
                    "$ref": "#/components/schemas/TriggerConfig"
                  }
                },
                "required": [
                  "config"
                ],
                "additionalProperties": false
              }
            }
          }
        }
      }
    },
    "/jobs/{job}/triggers/preview": {
      "parameters": [
        {
          "name": "job",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        }
      ],
      "post": {
        "operationId": "previewTrigger",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/TriggerPreview"
                }
              }
            }
          },
          "default": {
            "description": "Request rejected; inspect code and retryable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/TriggerConfig"
              }
            }
          }
        }
      }
    },
    "/triggers/{trigger}/state": {
      "parameters": [
        {
          "name": "trigger",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        }
      ],
      "post": {
        "operationId": "setTriggerState",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/TriggerMutation"
                }
              }
            }
          },
          "default": {
            "description": "Request rejected; inspect code and retryable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "revision": {
                    "type": "integer",
                    "minimum": 1
                  },
                  "paused": {
                    "type": "boolean"
                  },
                  "reviewed": {
                    "type": "boolean"
                  }
                },
                "required": [
                  "revision",
                  "paused"
                ],
                "additionalProperties": false
              }
            }
          }
        }
      }
    },
    "/triggers/{trigger}/rotate-key": {
      "parameters": [
        {
          "name": "trigger",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        }
      ],
      "post": {
        "operationId": "rotateEventToken",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/TriggerMutation"
                }
              }
            }
          },
          "default": {
            "description": "Request rejected; inspect code and retryable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "revision": {
                    "type": "integer",
                    "minimum": 1
                  }
                },
                "required": [
                  "revision"
                ],
                "additionalProperties": false
              }
            }
          }
        }
      }
    },
    "/triggers/{trigger}/events": {
      "parameters": [
        {
          "name": "trigger",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        },
        {
          "name": "X-Trigger-Token",
          "in": "header",
          "required": true,
          "schema": {
            "type": "string"
          }
        }
      ],
      "post": {
        "operationId": "deliverEvent",
        "responses": {
          "202": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "occurrence": {
                      "$ref": "#/components/schemas/Occurrence"
                    },
                    "replayed": {
                      "type": "boolean"
                    }
                  },
                  "required": [
                    "occurrence",
                    "replayed"
                  ],
                  "additionalProperties": false
                }
              }
            }
          },
          "default": {
            "description": "Request rejected; inspect code and retryable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "occurrence": {
                      "$ref": "#/components/schemas/Occurrence"
                    },
                    "replayed": {
                      "type": "boolean"
                    }
                  },
                  "required": [
                    "occurrence",
                    "replayed"
                  ],
                  "additionalProperties": false
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/EventDelivery"
              }
            }
          }
        },
        "description": "Direct Runner requires owner bearer plus X-Trigger-Token. Desk exposes POST /api/job-events/{trigger} using only Authorization: Bearer <trigger-token>; browser Origin is refused. New deliveries must be no older than 5 minutes, at most 30 seconds in the future. Exact retries return the original occurrence; changed payloads with the same ID conflict. Accepted work may be skipped by overlap/queue policy: inspect occurrence.state. The token that created an occurrence can read its result with readEventResult."
      }
    },
    "/triggers/{trigger}/occurrences/{occurrence}": {
      "parameters": [
        {
          "name": "trigger",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        },
        {
          "name": "occurrence",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        },
        {
          "name": "X-Trigger-Token",
          "in": "header",
          "required": true,
          "schema": {
            "type": "string"
          }
        }
      ],
      "get": {
        "operationId": "readEventResult",
        "description": "The one read a trigger token has: an occurrence that this token itself created, its state and, once its run completed, the disposition and handoff target. No inputs, identifiers of other records, problem text or listing. Direct Runner requires owner bearer plus X-Trigger-Token; Desk does not expose this route yet. A token that is not the trigger's current credential (wrong, rotated or absent) returns 401 invalid_trigger_token. A current token asking for an occurrence it did not create (another trigger's, one created by an earlier token of this trigger, or one accepted before this read existed) returns 404 occurrence_not_found, the same answer as for an occurrence that does not exist.",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/EventResult"
                }
              }
            }
          },
          "default": {
            "description": "Request rejected; inspect code and retryable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/jobs/{job}/occurrences": {
      "parameters": [
        {
          "name": "job",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        },
        {
          "name": "after",
          "in": "query",
          "schema": {
            "type": "integer",
            "minimum": 0
          }
        },
        {
          "name": "preparations",
          "in": "query",
          "schema": {
            "enum": [
              "1"
            ]
          },
          "description": "Only source preparations that have not produced an evaluation run; applied before pagination."
        }
      ],
      "get": {
        "operationId": "listOccurrences",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "items": {
                      "type": "array",
                      "items": {
                        "$ref": "#/components/schemas/Occurrence"
                      }
                    },
                    "next": {
                      "type": "integer",
                      "minimum": 0
                    }
                  },
                  "required": [
                    "items",
                    "next"
                  ],
                  "additionalProperties": false
                }
              }
            }
          },
          "default": {
            "description": "Request rejected; inspect code and retryable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/background-connections": {
      "get": {
        "summary": "List public installed background connections; never credentials or Gateway addresses",
        "responses": {
          "200": {
            "description": "Configured connections, not remote scheduler status",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "cloudConnections": {
                      "type": "array",
                      "items": {
                        "$ref": "#/components/schemas/CloudConnectionStatus"
                      }
                    },
                    "gatewayProfiles": {
                      "type": "array",
                      "items": {
                        "type": "string"
                      }
                    },
                    "durableGatewayProfiles": {
                      "type": "array",
                      "items": {
                        "type": "string"
                      }
                    }
                  },
                  "required": [
                    "cloudConnections",
                    "gatewayProfiles"
                  ],
                  "additionalProperties": false
                }
              }
            }
          }
        }
      }
    },
    "/occurrences/{occurrence}/cancel": {
      "parameters": [
        {
          "name": "occurrence",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string",
            "pattern": "^occ_[a-f0-9]{32}$"
          }
        }
      ],
      "post": {
        "summary": "Stop waiting and fence late results; provider cancellation is best effort.",
        "responses": {
          "200": {
            "description": "Updated occurrence",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Occurrence"
                }
              }
            }
          },
          "default": {
            "description": "Request refused",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/occurrences/{occurrence}/reconcile": {
      "parameters": [
        {
          "name": "occurrence",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string",
            "pattern": "^occ_[a-f0-9]{32}$"
          }
        }
      ],
      "post": {
        "summary": "Check the original source operation IDs again, without extending deadlines or replaying uncertain provider calls.",
        "responses": {
          "200": {
            "description": "Updated occurrence",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Occurrence"
                }
              }
            }
          },
          "default": {
            "description": "Request refused",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/jobs/{job}/upgrade": {
      "post": {
        "summary": "Review and upgrade a job to a checked release",
        "description": "Requires the current job revision and release, paused triggers, settled occurrences and passing release checks. Existing runs keep their original release. Repeating the exact completed request returns its original receipt.",
        "parameters": [
          {
            "name": "job",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "releaseId",
                  "baseReleaseId",
                  "baseRevision",
                  "reviewed"
                ],
                "properties": {
                  "releaseId": {
                    "type": "string"
                  },
                  "baseReleaseId": {
                    "type": "string"
                  },
                  "baseRevision": {
                    "type": "integer",
                    "minimum": 1
                  },
                  "reviewed": {
                    "const": true
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "The immutable receipt for the completed job revision."
          },
          "409": {
            "description": "Stale review, active automation, pending work, failed tests or invalid artifact version."
          }
        }
      }
    },
    "/triggers/{trigger}/deliveries": {
      "parameters": [
        {
          "name": "trigger",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        }
      ],
      "post": {
        "operationId": "deliverRecordRevision",
        "responses": {
          "202": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "occurrence": {
                      "$ref": "#/components/schemas/Occurrence"
                    },
                    "replayed": {
                      "type": "boolean"
                    }
                  },
                  "required": [
                    "occurrence",
                    "replayed"
                  ],
                  "additionalProperties": false
                }
              }
            }
          },
          "default": {
            "description": "Request rejected; inspect code and retryable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "occurrence": {
                      "$ref": "#/components/schemas/Occurrence"
                    },
                    "replayed": {
                      "type": "boolean"
                    }
                  },
                  "required": [
                    "occurrence",
                    "replayed"
                  ],
                  "additionalProperties": false
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "required": [
                  "releaseId",
                  "event"
                ],
                "additionalProperties": false,
                "properties": {
                  "releaseId": {
                    "type": "string"
                  },
                  "event": {
                    "$ref": "#/components/schemas/EventDelivery"
                  }
                }
              }
            }
          }
        },
        "description": "Owner-authenticated local control delivery of a previously persisted immutable record envelope. Bind releaseId to the reviewed release. Older occurredAt timestamps are allowed for outbox recovery; future timestamps, source freshness, mapping checks and queue expiry still apply. Persist exact bytes before the first request. Exact retries return the original occurrence, even when paused; changed payloads conflict. While the local queue of pending occurrences is full the delivery is refused with 429 queue_full, retryable, and nothing is admitted: deliver the same bytes again later. Unlike deliverEvent, it is never recorded as skipped for a full queue. This route is not exposed through the public Desk event-token ingress."
      }
    },
    "/triggers/{trigger}/deliveries/{event}": {
      "parameters": [
        {
          "name": "trigger",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        },
        {
          "name": "event",
          "in": "path",
          "required": true,
          "schema": {
            "type": "string"
          }
        }
      ],
      "get": {
        "operationId": "readRecordDelivery",
        "description": "Owner-authenticated reconciliation by stable event identity; does not admit or replay a delivery. Returns the retained occurrence without source inputs.",
        "responses": {
          "200": {
            "description": "Retained occurrence",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "occurrence": {
                      "$ref": "#/components/schemas/Occurrence"
                    }
                  },
                  "required": [
                    "occurrence"
                  ],
                  "additionalProperties": false
                }
              }
            }
          },
          "default": {
            "description": "Request rejected; inspect code and retryable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/jobs/{job}/upgrade-receipt": {
      "get": {
        "summary": "Read the immutable receipt for an exact reviewed job upgrade without executing it",
        "operationId": "getJobUpgradeReceipt",
        "parameters": [
          {
            "name": "job",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "baseRevision",
            "in": "query",
            "required": true,
            "schema": {
              "type": "integer",
              "minimum": 1
            }
          },
          {
            "name": "baseReleaseId",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string",
              "minLength": 1
            }
          },
          {
            "name": "releaseId",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string",
              "minLength": 1
            }
          }
        ],
        "responses": {
          "200": {
            "description": "The immutable Job receipt for the exact completed upgrade, including after later revisions.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Job"
                }
              }
            }
          },
          "409": {
            "description": "That revision belongs to a different reviewed upgrade",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "404": {
            "description": "No completed receipt exists for this upgrade",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "422": {
            "description": "Invalid or duplicate query parameters",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/jobs/{job}/execution-binding": {
      "get": {
        "operationId": "getJobExecutionBinding",
        "description": "Owner-only exact manual single-Pack execution-binding export. Refuses any trigger, mapping, dialect, source/preparation or unavailable immutable release material. Admission remains inactive.",
        "parameters": [
          {
            "name": "job",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Exact immutable execution binding",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ManualExecutionBinding"
                }
              }
            }
          },
          "default": {
            "description": "Binding unavailable or profile unsupported",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/retained-column/1/inputs/next": {
      "post": {
        "operationId": "retainedColumnPlanNextInputSource",
        "description": "Experimental retained-column Base adapter. Exact installed identity and complete operation roles are required before effects. Ordinary routes retain ordinary limits. Verify and derive a mapping v2 prefix. Returns the next instantiated acquisition request, or complete prepared input. Accepts source-only partial input; checks every trusted profile and class admission before returning any request. Performs no network calls, evaluation or persistence.",
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Input"
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Next source or complete preparation",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/InputPlan"
                }
              }
            }
          },
          "default": {
            "description": "Rejected input",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "parameters": [
          {
            "name": "JPack-Conversion-Contract",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 4096
            },
            "description": "Canonical unpadded base64url of closed ConversionContract JSON. Validated after authentication and before the larger body read. Body source.conversionContract must match exactly."
          }
        ]
      }
    },
    "/retained-column/1/inputs/preview": {
      "post": {
        "operationId": "retainedColumnPreviewInputMapping",
        "description": "Experimental retained-column Base adapter. Exact installed identity and complete operation roles are required before effects. Ordinary routes retain ordinary limits. Project a retained v1 file or verify/derive a v2 ordered mapping, without network acquisition, persistence or evaluation. Invalid proof and derivation errors refuse preparation; valid rule unknowns remain policy data.",
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Input"
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Mapped inputs",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/InputPreview"
                }
              }
            }
          },
          "default": {
            "description": "Rejected input",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "parameters": [
          {
            "name": "JPack-Conversion-Contract",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 4096
            },
            "description": "Canonical unpadded base64url of closed ConversionContract JSON. Validated after authentication and before the larger body read. Body source.conversionContract must match exactly."
          }
        ]
      }
    },
    "/retained-column/1/previews": {
      "post": {
        "operationId": "retainedColumnPreviewRelease",
        "responses": {
          "201": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Release"
                }
              }
            }
          },
          "default": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/PreviewRequest"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "JPack-Conversion-Contract",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 4096
            },
            "description": "Canonical unpadded base64url of closed ConversionContract JSON. Validated after authentication and before the larger body read. Body source.conversionContract must match exactly."
          }
        ],
        "description": "Experimental retained-column Base adapter. Exact installed identity and complete operation roles are required before effects. Ordinary routes retain ordinary limits. "
      }
    },
    "/retained-column/1/jobs/{job}/runs": {
      "get": {
        "operationId": "retainedColumnListRuns",
        "responses": {
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Page"
                }
              }
            }
          },
          "default": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "parameters": [
          {
            "name": "job",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "after",
            "in": "query",
            "schema": {
              "type": "integer",
              "minimum": 0
            },
            "description": "Cursor from the previous response. Omit for the newest page."
          },
          {
            "name": "q",
            "in": "query",
            "description": "Literal case-insensitive substring search; ASCII case folding. Applied before pagination.",
            "schema": {
              "type": "string",
              "maxLength": 200
            }
          },
          {
            "name": "state",
            "in": "query",
            "schema": {
              "type": "string",
              "enum": [
                "queued",
                "running",
                "completed",
                "failed",
                "interrupted"
              ]
            }
          },
          {
            "name": "review",
            "in": "query",
            "description": "Only failed/interrupted runs or completed runs with unresolved decisions or requested handoff.",
            "schema": {
              "type": "boolean"
            }
          },
          {
            "name": "JPack-Conversion-Contract",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 4096
            },
            "description": "Canonical unpadded base64url of closed ConversionContract JSON. Validated after authentication and before the larger body read. Body source.conversionContract must match exactly."
          }
        ],
        "description": "Experimental retained-column Base adapter. Exact installed identity and complete operation roles are required before effects. Ordinary routes retain ordinary limits. "
      },
      "post": {
        "operationId": "retainedColumnSubmitRun",
        "responses": {
          "202": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Run"
                }
              }
            }
          },
          "200": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Run"
                }
              }
            }
          },
          "default": {
            "description": "Successful response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Input"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "job",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "minLength": 1,
              "maxLength": 128,
              "pattern": "^[!-~]+$"
            },
            "description": "An identical retry under the same key returns the run first accepted, also after a profile its mapping names was set aside. A retry whose input is an import that names a set-aside profile is refused as 422 input_profile_set_aside: the import is bound before the retry is looked up."
          },
          {
            "name": "JPack-Conversion-Contract",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 4096
            },
            "description": "Canonical unpadded base64url of closed ConversionContract JSON. Validated after authentication and before the larger body read. Body source.conversionContract must match exactly."
          }
        ],
        "description": "Experimental retained-column Base adapter. Exact installed identity and complete operation roles are required before effects. Ordinary routes retain ordinary limits. "
      }
    },
    "/retained-column/1/runs/{run}/verification": {
      "get": {
        "operationId": "retainedColumnExportInputVerification",
        "description": "Experimental retained-column Base adapter. Exact installed identity and complete operation roles are required before effects. Ordinary routes retain ordinary limits. Offline input lineage bundle. Trust the profiles and release digest independently. Does not establish sealed-session completeness or policy truth. Version 2, 3, 4 or 5 may be asked for, at most once (none asked is 2), and the run is served at the highest version up to the one asked whose material it holds, answered 200 either way, so read version from the body: version 3 adds the audit record's original bytes, version 4 also the run's entry in the installation's chain of runs, and version 5 also the record's signature sidecar. A run the store no longer holds, whose entry the chain still names, is answered with 410 run_not_held, naming the entry's sequence. A run of a job with no input mapping, or a v1 file mapping, has no lineage: it is served from version 3 on, by the same steps, with inputs: not-mapped and no preparation, and is refused with 422 not_verified_mapping when it holds no audit record's bytes or version 2 (or none) is asked.",
        "parameters": [
          {
            "name": "run",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "version",
            "in": "query",
            "required": false,
            "description": "The export version asked for, at most once, in a well-formed query. Without it, or with 2: version 2, unchanged. With 3: version 3 when the run holds its audit record's bytes, and version 2 for a run that holds none (recorded before Runner kept them, or without an audit record). With 4: version 4 when the run also has an entry in the installation's chain of runs, and otherwise what 3 serves: a run recorded before Runner chained its runs has no entry and is unchained. With 5: version 5 when the run also keeps the signature sidecar of its audit record, and otherwise what 4 serves: a run recorded without a signing key, by a Runtime that cannot sign, or before Runner kept the sidecar, is unsigned. Anything else, or a malformed query, is refused with invalid_version. A run without lineage (no input mapping, or a v1 file mapping) has no version-2 export: with none or 2 it is refused with 422 not_verified_mapping, and with 3, 4 or 5 it is served as above, from version 3.",
            "schema": {
              "type": "integer",
              "enum": [
                2,
                3,
                4,
                5
              ],
              "default": 2
            }
          },
          {
            "name": "JPack-Conversion-Contract",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 4096
            },
            "description": "Canonical unpadded base64url of closed ConversionContract JSON. Validated after authentication and before the larger body read. Body source.conversionContract must match exactly."
          }
        ],
        "responses": {
          "200": {
            "description": "Verification bundle",
            "content": {
              "application/json": {
                "schema": {
                  "oneOf": [
                    {
                      "$ref": "#/components/schemas/VerificationBundle"
                    },
                    {
                      "$ref": "#/components/schemas/VerificationBundleV3"
                    },
                    {
                      "$ref": "#/components/schemas/VerificationBundleV4"
                    },
                    {
                      "$ref": "#/components/schemas/VerificationBundleV5"
                    }
                  ]
                }
              }
            }
          },
          "422": {
            "description": "not_verified_mapping: the run's job has no input mapping, or a v1 file mapping, so its export has no lineage, and the run holds no audit record's bytes (it failed, was interrupted, expired or has not finished, or was recorded before Runner kept them) or version 2, or none, was asked. Message: \"This run does not use mapping v2, and an export without lineage carries the audit record's bytes: ask for version 3, 4 or 5 of a completed run that holds them.\"",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "default": {
            "description": "Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "securitySchemes": {
      "bearer": {
        "type": "http",
        "scheme": "bearer"
      }
    },
    "schemas": {
      "Input": {
        "type": "object",
        "properties": {
          "facts": {},
          "evidence": {
            "type": "object",
            "additionalProperties": {
              "enum": [
                "present",
                "absent",
                "unknown"
              ]
            }
          },
          "source": {
            "$ref": "#/components/schemas/SourceInput"
          },
          "preparation": {
            "$ref": "#/components/schemas/Preparation",
            "readOnly": true,
            "description": "Server-computed for v2; never trusted from a caller."
          }
        },
        "additionalProperties": false,
        "anyOf": [
          {
            "required": [
              "facts"
            ]
          },
          {
            "required": [
              "source"
            ]
          }
        ],
        "description": "Manual facts/evidence, v1 selected file, or ordered v2 case/file/gateway-operation mapping. Omit facts/evidence to use projection; supplied values must match. V2 verification requires installation profiles. A dialect of version 3 is read as version 2 is, its unbound sources bound at import (source.import)."
      },
      "PreviewRequest": {
        "type": "object",
        "properties": {
          "pack": {
            "type": "string",
            "maxLength": 1048576
          },
          "input": {
            "$ref": "#/components/schemas/Input"
          },
          "matrix": {
            "type": "string",
            "maxLength": 1048576,
            "description": "Optional serialized Runtime matrix with saved expectations. Omit only when no saved tests exist. It is evaluated afresh against the frozen pack and Runtime."
          },
          "testSource": {
            "$ref": "#/components/schemas/TestSource"
          }
        },
        "required": [
          "pack",
          "input"
        ],
        "additionalProperties": false
      },
      "CreateJob": {
        "type": "object",
        "properties": {
          "name": {
            "type": "string",
            "minLength": 1,
            "maxLength": 160
          },
          "releaseId": {
            "type": "string"
          },
          "reviewed": {
            "const": true
          },
          "trigger": {
            "$ref": "#/components/schemas/TriggerConfig"
          }
        },
        "required": [
          "name",
          "releaseId",
          "reviewed"
        ],
        "additionalProperties": false,
        "description": "Requires explicit review. Only passed checks and explicitly reviewed not-run releases are admitted. Failed, incomplete or mismatched test evidence returns 409 release_not_ready. An installation booted with requireTestedReleases refuses a new job from a not-run release with 409 release_untested; repeating the creation of an existing job still returns it. Coverage never gates. Reusing an immutable release and name is idempotent. A new job from a release that names a profile set aside when Runner opened its store is refused as 422 input_profile_set_aside; repeating the creation of a job made before still returns it."
      },
      "Job": {
        "type": "object",
        "properties": {
          "schemaVersion": {
            "const": "1"
          },
          "id": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "releaseId": {
            "type": "string"
          },
          "revision": {
            "const": 1
          },
          "createdAt": {
            "type": "string"
          },
          "workspace": {
            "type": "string"
          },
          "owner": {
            "type": "string"
          },
          "initialTriggerId": {
            "type": "string"
          },
          "initialTriggerDigest": {
            "type": "string"
          },
          "packTitle": {
            "type": "string"
          },
          "packVersion": {
            "type": "string"
          },
          "recentRuns": {
            "type": "array",
            "items": {
              "type": "object",
              "properties": {
                "id": {
                  "type": "string"
                },
                "state": {
                  "type": "string"
                },
                "createdAt": {
                  "type": "string",
                  "format": "date-time"
                }
              },
              "required": [],
              "additionalProperties": false
            }
          },
          "triggers": {
            "type": "array",
            "items": {
              "type": "object",
              "properties": {
                "id": {
                  "type": "string"
                },
                "kind": {
                  "type": "string"
                },
                "paused": {
                  "type": "boolean"
                },
                "nextAt": {
                  "type": "string"
                }
              },
              "required": [],
              "additionalProperties": false
            }
          }
        },
        "required": [
          "schemaVersion",
          "id",
          "name",
          "releaseId",
          "revision",
          "createdAt",
          "workspace",
          "owner"
        ],
        "additionalProperties": false
      },
      "Release": {
        "type": "object",
        "required": [
          "id",
          "pack",
          "packDigest",
          "runtimeDigest",
          "validation",
          "preview",
          "sample",
          "tests"
        ],
        "properties": {
          "id": {
            "type": "string"
          },
          "pack": {
            "type": "string"
          },
          "packDigest": {
            "type": "string"
          },
          "runtimeDigest": {
            "type": "string"
          },
          "validation": {
            "type": "object"
          },
          "preview": {
            "type": "object"
          },
          "sample": {
            "$ref": "#/components/schemas/Input"
          },
          "tests": {
            "enum": [
              "not-run",
              "passed",
              "failed",
              "error"
            ]
          },
          "testEvidence": {
            "$ref": "#/components/schemas/ReleaseTests"
          },
          "inputMapping": {
            "$ref": "#/components/schemas/InputMapping"
          },
          "inputProfiles": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/InputProfile"
            }
          },
          "mappingWarnings": {
            "type": "array",
            "items": {
              "type": "string"
            }
          }
        }
      },
      "Run": {
        "type": "object",
        "required": [
          "id",
          "jobId",
          "releaseId",
          "revision",
          "state",
          "input",
          "createdAt",
          "attempt"
        ],
        "properties": {
          "id": {
            "type": "string"
          },
          "jobId": {
            "type": "string"
          },
          "releaseId": {
            "type": "string"
          },
          "revision": {
            "const": 1
          },
          "state": {
            "enum": [
              "queued",
              "running",
              "completed",
              "failed",
              "interrupted"
            ]
          },
          "input": {
            "$ref": "#/components/schemas/Input"
          },
          "createdAt": {
            "type": "string"
          },
          "attempt": {
            "type": "integer",
            "minimum": 0,
            "maximum": 1
          },
          "result": {
            "type": "object"
          },
          "audit": {
            "type": "object"
          },
          "auditBytes": {
            "type": "string",
            "contentEncoding": "base64",
            "description": "The audit record exactly as the Runtime wrote it, without the newline that ends its line, in standard base64: the bytes a digest of the record, such as a gateway receipt's decision.recordDigest, is taken over. audit is the same record parsed, which Runner encodes again with other bytes. Every run Runner now records completed has them: an evaluation whose trail is not that one line, ended by a newline, is refused and its run fails. Absent for a run recorded before Runner kept them, for one Runner 0.4.0 completed without them, and for a run that did not complete. Not in run lists or briefs."
          },
          "auditSignatures": {
            "type": "string",
            "contentEncoding": "base64",
            "description": "The signature sidecar of the attempt's audit trail, signatures.jsonl, exactly as the Runtime wrote it, newlines included, in standard base64: the line signing the audit record, when the installation gave the Runtime a signing key (signingKey on the boot line) and it could sign. At most 16 KiB. Absent for a run recorded without a key, by a Runtime that cannot sign, or before Runner kept the sidecar; such a run is unsigned. What it holds is checked only by verify-run --public-key. Not in run lists or briefs."
          },
          "problem": {
            "type": "string"
          },
          "trigger": {
            "$ref": "#/components/schemas/TriggerOrigin"
          },
          "interruptedAt": {
            "type": "string",
            "description": "When Runner saw this run stop, at an orderly stop: the moment the evaluation it was in was cancelled. finishedAt keeps its meaning, the time Runner recorded the run's end. A run found running at a restart has none, since Runner did not see it stop: its run.interrupted journal entry gives the window the stop lies in. Served with the run and in run lists; not in verification exports, whose version-2 readers decode strictly."
          },
          "reason": {
            "enum": [
              "queue-expired",
              "binding-refused",
              "profile-set-aside"
            ],
            "description": "Why a run ended without an evaluation, as a code: queue-expired, for an automatic run whose queue time ran out before the dispatcher reached it; binding-refused, for a mapping-v2 run whose Runtime refused the preparation's binding Runner passed (JPS-INVOCATION-BINDING), a defect of Runner, never retried without the binding; profile-set-aside, for a mapping-v2 run queued before a profile its release names was set aside when Runner opened its store, which never starts; its problem names the profile. Its state stays failed, and its problem the sentence it was. Absent for every other run, and for a run that expired before Runner kept the code. Served with the run and in run lists; not in verification exports."
          },
          "signing": {
            "type": "object",
            "description": "Whether the run's audit record is signed under the expected key: the public key of the installation's signing key as Runner read it at start, or the boot line's signingPublicKey, which that key must have, fixed for as long as it runs, and passed to each operational evaluation's Runtime as JPACK_SIGNING_PUBLIC_KEY. Held to the record's bytes the run keeps and the sidecar as kept (auditSignatures), by the check verify-run --public-key makes: signed when a valid signature under that key covers the record and no check failed, failed otherwise, with the reason in these exact words. A failed signing never withholds the decision: the run completes as an unsigned one does. Every run recorded completed with a signing key has it; absent for a run recorded without a key, one that did not complete, and one recorded before Runner kept it. Served with the run and in run lists; not in verification exports, which carry the sidecar itself.",
            "required": [
              "status"
            ],
            "properties": {
              "status": {
                "enum": [
                  "signed",
                  "failed"
                ]
              },
              "publicKey": {
                "type": "string",
                "pattern": "^[0-9a-f]{64}$",
                "description": "The expected key, which a signed record is signed under. Present only when signed."
              },
              "reason": {
                "enum": [
                  "The record's signature sidecar could not be read.",
                  "The record's signature sidecar names a key that is not the expected one.",
                  "The record's signature sidecar does not verify under the expected key.",
                  "The Runtime signed nothing: the key at the signing key's path is not the expected key.",
                  "The Runtime signed nothing, and the key at the signing key's path could not be read as a key.",
                  "The record carries no signature."
                ],
                "description": "Why the signing failed. A sidecar that could not be read is never taken for no sidecar. Where no line signs the record, the key at the signing key's path, read again after the evaluation, says which of the last three: Runtime 0.30.0 and later refuse to sign with a seed that is not the expected key. Present only when failed. It names no path and no key."
              }
            },
            "additionalProperties": false
          },
          "binding": {
            "type": "object",
            "description": "What Runner passed the Runtime of a completed mapping-v2 run's operational evaluation (MAPPING-V2, The preparation's binding): bound, when the Runtime was given the binding {\"kind\":\"judgment-pack-runner/preparation/1\",\"digest\":\"sha256:<SHA-256 of run.input.preparation in canonical form>\"} and the run's audit record carries it byte for byte; unsupported-runtime, when the Runtime names a release before 0.31.0 and was given none; unversioned-runtime, when it names no release (0.0.0-dev, a build without its release's version), so that whether it takes a binding cannot be told, and was given none. Absent for a run without a mapping v2, one that did not complete, and one recorded before Runner passed a binding. Served with the run and in run lists; not in verification exports, whose audit record carries the binding itself.",
            "required": [
              "status"
            ],
            "properties": {
              "status": {
                "enum": [
                  "bound",
                  "unsupported-runtime",
                  "unversioned-runtime"
                ]
              }
            },
            "additionalProperties": false
          }
        }
      },
      "JobDetail": {
        "type": "object",
        "properties": {
          "job": {
            "$ref": "#/components/schemas/Job"
          },
          "release": {
            "$ref": "#/components/schemas/Release"
          }
        },
        "required": [
          "job",
          "release"
        ],
        "additionalProperties": false
      },
      "Page": {
        "type": "object",
        "properties": {
          "items": {
            "type": "array",
            "maxItems": 50,
            "items": {
              "type": "object"
            }
          },
          "next": {
            "type": "integer",
            "minimum": 0
          }
        },
        "required": [
          "items",
          "next"
        ],
        "additionalProperties": false
      },
      "Status": {
        "type": "object"
      },
      "Error": {
        "type": "object",
        "properties": {
          "error": {
            "type": "object",
            "properties": {
              "code": {
                "type": "string"
              },
              "message": {
                "type": "string"
              },
              "retryable": {
                "type": "boolean"
              }
            },
            "required": [
              "code",
              "message",
              "retryable"
            ],
            "additionalProperties": false
          }
        },
        "required": [
          "error"
        ],
        "additionalProperties": false
      },
      "TestSource": {
        "type": "object",
        "additionalProperties": false,
        "properties": {
          "packKey": {
            "type": "string"
          },
          "suiteRevision": {
            "type": "integer"
          },
          "caseNames": {
            "type": "object",
            "additionalProperties": {
              "type": "string"
            }
          },
          "exploratoryCount": {
            "type": "integer"
          }
        }
      },
      "ReleaseTests": {
        "type": "object",
        "required": [
          "status",
          "matrix",
          "matrixDigest",
          "packDigest",
          "runtimeDigest",
          "checkedAt"
        ],
        "properties": {
          "status": {
            "enum": [
              "passed",
              "failed",
              "error"
            ]
          },
          "matrix": {
            "type": "string"
          },
          "matrixDigest": {
            "type": "string"
          },
          "packDigest": {
            "type": "string"
          },
          "runtimeDigest": {
            "type": "string"
          },
          "checkedAt": {
            "type": "string",
            "format": "date-time"
          },
          "source": {
            "$ref": "#/components/schemas/TestSource"
          },
          "report": {
            "type": "object",
            "description": "Retained Runtime packs test outputVersion 2, including rows and advisory coverage. Incomplete invocations may retain a diagnostic report."
          },
          "problem": {
            "type": "string"
          }
        }
      },
      "InputMapping": {
        "oneOf": [
          {
            "$ref": "#/components/schemas/InputMappingV1"
          },
          {
            "$ref": "#/components/schemas/InputMappingV2"
          },
          {
            "$ref": "#/components/schemas/InputMappingV3"
          },
          {
            "$ref": "#/components/schemas/NamedInputMappingV2"
          },
          {
            "$ref": "#/components/schemas/NamedInputMappingV3"
          }
        ]
      },
      "SourceInput": {
        "type": "object",
        "additionalProperties": false,
        "properties": {
          "mapping": {
            "$ref": "#/components/schemas/InputMapping",
            "description": "The mapping. With import, omit it, and Runner makes it the bound dialect; or give that bound dialect, which must be the one the import makes. Runner makes it only when the member is absent: a mapping given beside import, {} and null included, that is not the bound dialect byte for byte in canonical form is refused as invalid_source_input."
          },
          "snapshot": {
            "$ref": "#/components/schemas/SourceSnapshot"
          },
          "mappingDigest": {
            "type": "string",
            "description": "Runner-computed mapping digest; if supplied it must match."
          },
          "case": {
            "type": "object"
          },
          "sources": {
            "type": "object",
            "maxProperties": 16,
            "propertyNames": {
              "type": "string",
              "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$"
            },
            "additionalProperties": {
              "$ref": "#/components/schemas/SourceValue"
            }
          },
          "import": {
            "$ref": "#/components/schemas/DialectImport"
          },
          "conversionContract": {
            "$ref": "#/components/schemas/ConversionContract"
          },
          "retainedCaseJson": {
            "type": "string",
            "minLength": 1,
            "description": "Sole exact case JSON text on the retained-column path, mutually exclusive with case. Stored text is not canonicalized."
          }
        },
        "anyOf": [
          {
            "required": [
              "mapping"
            ]
          },
          {
            "required": [
              "import"
            ]
          }
        ],
        "allOf": [
          {
            "not": {
              "required": [
                "case",
                "retainedCaseJson"
              ]
            }
          }
        ]
      },
      "SourceSnapshot": {
        "type": "object",
        "required": [
          "version",
          "original"
        ],
        "description": "Retained JSON file (200,000 decoded bytes maximum). local-file requires selectedAt and forbids proof. google-drive requires the existing Desk DocumentObject proof with Drive selection, receipt response and sealed registry. Runner checks structural/byte binding, not cryptographic authenticity; consumers verify with their configured pin. No provider credentials. Snapshot max 1 MiB.",
        "properties": {
          "version": {
            "const": 1
          },
          "selectedAt": {
            "type": "string",
            "format": "date-time"
          },
          "original": {
            "type": "object",
            "required": [
              "name",
              "mediaType",
              "bytes",
              "sha256"
            ],
            "properties": {
              "name": {
                "type": "string",
                "maxLength": 1024
              },
              "mediaType": {
                "enum": [
                  "application/json",
                  "text/plain"
                ],
                "description": "text/plain requires a .json filename."
              },
              "bytes": {
                "type": "string",
                "contentEncoding": "base64"
              },
              "sha256": {
                "type": "string",
                "pattern": "^sha256:[a-f0-9]{64}$"
              }
            }
          },
          "proof": {
            "type": "object",
            "description": "Existing signed document acquisition and sealed registry contract; required for Google Drive."
          }
        }
      },
      "InputPreview": {
        "type": "object",
        "required": [
          "input",
          "factsText",
          "evidenceText"
        ],
        "properties": {
          "input": {
            "$ref": "#/components/schemas/Input"
          },
          "factsText": {
            "type": "string",
            "description": "Exact mapped facts JSON for consumers that cannot represent all JSON numbers losslessly."
          },
          "evidenceText": {
            "type": "string",
            "description": "Exact availability JSON; empty if omitted."
          }
        }
      },
      "InputMappingV1": {
        "type": "object",
        "required": [
          "version",
          "provider",
          "facts",
          "evidence"
        ],
        "additionalProperties": false,
        "properties": {
          "version": {
            "const": 1
          },
          "provider": {
            "enum": [
              "local-file",
              "google-drive"
            ]
          },
          "facts": {
            "type": "array",
            "maxItems": 256,
            "items": {
              "type": "object",
              "required": [
                "target",
                "source"
              ],
              "additionalProperties": false,
              "properties": {
                "target": {
                  "type": "string",
                  "description": "Non-root JSON Pointer destination. Targets must not overlap."
                },
                "source": {
                  "type": "string",
                  "description": "JSON Pointer in the input object, or empty for the root."
                }
              }
            }
          },
          "evidence": {
            "type": "array",
            "maxItems": 128,
            "items": {
              "type": "object",
              "required": [
                "requirement",
                "source"
              ],
              "additionalProperties": false,
              "properties": {
                "requirement": {
                  "type": "string",
                  "minLength": 1,
                  "maxLength": 256
                },
                "source": {
                  "type": "string"
                }
              }
            }
          }
        }
      },
      "CopyMapping": {
        "type": "object",
        "properties": {
          "facts": {
            "type": "array",
            "maxItems": 256,
            "items": {
              "type": "object",
              "required": [
                "target",
                "source"
              ],
              "additionalProperties": false,
              "properties": {
                "target": {
                  "type": "string",
                  "description": "Non-root JSON Pointer destination. Targets must not overlap."
                },
                "source": {
                  "type": "string",
                  "description": "JSON Pointer in the input object, or empty for the root."
                },
                "conversion": {
                  "$ref": "#/components/schemas/RetainedColumnConversion"
                }
              }
            }
          },
          "evidence": {
            "type": "array",
            "maxItems": 128,
            "items": {
              "type": "object",
              "required": [
                "requirement",
                "source"
              ],
              "additionalProperties": false,
              "properties": {
                "requirement": {
                  "type": "string",
                  "minLength": 1,
                  "maxLength": 256
                },
                "source": {
                  "type": "string"
                },
                "availability": {
                  "$ref": "#/components/schemas/RetainedColumnAvailability"
                }
              }
            }
          }
        },
        "required": [
          "facts",
          "evidence"
        ],
        "additionalProperties": false
      },
      "Parameter": {
        "type": "object",
        "properties": {
          "from": {
            "type": "string",
            "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$"
          },
          "pointer": {
            "type": "string"
          },
          "type": {
            "enum": [
              "string",
              "integer",
              "timestamp"
            ]
          }
        },
        "required": [
          "pointer",
          "type"
        ],
        "additionalProperties": false
      },
      "CaseMapping": {
        "type": "object",
        "properties": {
          "parameters": {
            "type": "object",
            "maxProperties": 64,
            "propertyNames": {
              "type": "string",
              "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$"
            },
            "additionalProperties": {
              "$ref": "#/components/schemas/Parameter"
            }
          },
          "facts": {
            "type": "array",
            "maxItems": 256,
            "items": {
              "type": "object",
              "required": [
                "target",
                "source"
              ],
              "additionalProperties": false,
              "properties": {
                "target": {
                  "type": "string",
                  "description": "Non-root JSON Pointer destination. Targets must not overlap."
                },
                "source": {
                  "type": "string",
                  "description": "JSON Pointer in the input object, or empty for the root."
                },
                "conversion": {
                  "$ref": "#/components/schemas/RetainedColumnConversion"
                }
              }
            }
          },
          "evidence": {
            "type": "array",
            "maxItems": 128,
            "items": {
              "type": "object",
              "required": [
                "requirement",
                "source"
              ],
              "additionalProperties": false,
              "properties": {
                "requirement": {
                  "type": "string",
                  "minLength": 1,
                  "maxLength": 256
                },
                "source": {
                  "type": "string"
                },
                "availability": {
                  "$ref": "#/components/schemas/RetainedColumnAvailability"
                }
              }
            }
          }
        },
        "required": [
          "facts",
          "evidence"
        ],
        "additionalProperties": false
      },
      "RuleCondition": {
        "oneOf": [
          {
            "type": "object",
            "properties": {
              "op": {
                "const": "always"
              }
            },
            "required": [
              "op"
            ],
            "additionalProperties": false
          },
          {
            "type": "object",
            "properties": {
              "op": {
                "const": "exists"
              },
              "field": {
                "type": "string"
              }
            },
            "required": [
              "op",
              "field"
            ],
            "additionalProperties": false
          },
          {
            "type": "object",
            "properties": {
              "op": {
                "const": "isTrue"
              },
              "field": {
                "type": "string"
              }
            },
            "required": [
              "op",
              "field"
            ],
            "additionalProperties": false
          },
          {
            "type": "object",
            "properties": {
              "op": {
                "const": "isDecimalString"
              },
              "field": {
                "type": "string"
              }
            },
            "required": [
              "op",
              "field"
            ],
            "additionalProperties": false
          },
          {
            "type": "object",
            "properties": {
              "op": {
                "const": "equals"
              },
              "field": {
                "type": "string"
              },
              "to": {}
            },
            "required": [
              "op",
              "field",
              "to"
            ],
            "additionalProperties": false
          },
          {
            "type": "object",
            "properties": {
              "op": {
                "const": "equalsParam"
              },
              "field": {
                "type": "string"
              },
              "param": {
                "type": "string",
                "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$"
              }
            },
            "required": [
              "op",
              "field",
              "param"
            ],
            "additionalProperties": false
          },
          {
            "type": "object",
            "properties": {
              "op": {
                "const": "freshWithin"
              },
              "field": {
                "type": "string"
              },
              "asOf": {
                "type": "string",
                "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$"
              },
              "maxAge": {
                "type": "string",
                "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$"
              }
            },
            "required": [
              "op",
              "field",
              "asOf",
              "maxAge"
            ],
            "additionalProperties": false
          },
          {
            "type": "object",
            "properties": {
              "op": {
                "const": "not"
              },
              "of": {
                "$ref": "#/components/schemas/RuleCondition"
              }
            },
            "required": [
              "op",
              "of"
            ],
            "additionalProperties": false
          },
          {
            "type": "object",
            "properties": {
              "op": {
                "const": "all"
              },
              "of": {
                "type": "array",
                "items": {
                  "$ref": "#/components/schemas/RuleCondition"
                },
                "maxItems": 64
              }
            },
            "required": [
              "op",
              "of"
            ],
            "additionalProperties": false
          },
          {
            "type": "object",
            "properties": {
              "op": {
                "const": "any"
              },
              "of": {
                "type": "array",
                "items": {
                  "$ref": "#/components/schemas/RuleCondition"
                },
                "maxItems": 64
              }
            },
            "required": [
              "op",
              "of"
            ],
            "additionalProperties": false
          }
        ]
      },
      "DerivationRule": {
        "type": "object",
        "properties": {
          "ruleVersion": {
            "const": "1"
          },
          "parameters": {
            "type": "object",
            "additionalProperties": {
              "enum": [
                "string",
                "integer",
                "timestamp"
              ]
            }
          },
          "clauses": {
            "type": "array",
            "items": {
              "type": "object",
              "properties": {
                "when": {
                  "$ref": "#/components/schemas/RuleCondition"
                },
                "reason": {
                  "type": "string"
                },
                "claim": {
                  "type": "object",
                  "properties": {
                    "facts": {
                      "type": "array",
                      "items": {
                        "type": "object",
                        "properties": {
                          "pointer": {
                            "type": "string"
                          },
                          "from": {
                            "type": "string"
                          }
                        },
                        "required": [
                          "pointer",
                          "from"
                        ],
                        "additionalProperties": false
                      },
                      "maxItems": 256
                    },
                    "evidence": {
                      "type": "object",
                      "maxProperties": 128,
                      "additionalProperties": {
                        "enum": [
                          "present",
                          "absent",
                          "unknown"
                        ]
                      }
                    },
                    "acquisitionStatus": {
                      "enum": [
                        "resolved",
                        "absent",
                        "unknown"
                      ]
                    }
                  },
                  "required": [
                    "facts",
                    "evidence",
                    "acquisitionStatus"
                  ],
                  "additionalProperties": false
                }
              },
              "required": [
                "when",
                "claim",
                "reason"
              ],
              "additionalProperties": false
            },
            "minItems": 1,
            "maxItems": 64
          }
        },
        "required": [
          "ruleVersion",
          "parameters",
          "clauses"
        ],
        "additionalProperties": false
      },
      "SourceRead": {
        "type": "object",
        "properties": {
          "unwrap": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "maxItems": 4
          },
          "copy": {
            "$ref": "#/components/schemas/CopyMapping"
          },
          "rule": {
            "$ref": "#/components/schemas/DerivationRule"
          },
          "sources": {
            "type": "array",
            "minItems": 1,
            "maxItems": 15,
            "items": {
              "type": "string"
            },
            "description": "A research source's reconciliation (spec/dialect.md section 6.4): the earlier research sources it reads, distinct, beside a rule over {\"current\": its record, \"sources\": each named source's record, a skipped one absent}, with no copy and no unwrap. The rule guards each value it selects as found, names what every other status and absence does, writes no evidence, and ends with a clause that writes no fact and resolves nothing; anything else is refused, input-malformed."
          }
        },
        "required": [],
        "additionalProperties": false,
        "oneOf": [
          {
            "required": [
              "copy"
            ],
            "not": {
              "required": [
                "rule"
              ]
            }
          },
          {
            "required": [
              "rule"
            ],
            "not": {
              "required": [
                "copy"
              ]
            }
          }
        ],
        "description": "copy or rule; a research source's read reads its record through a closed list of pointers (/fields, a declared field's entry, its status, its cites, its value and what is below it, and in a condition an observation's value) and never takes a value from under values, or is a reconciliation (sources and rule)."
      },
      "MappingSource": {
        "type": "object",
        "properties": {
          "name": {
            "type": "string",
            "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$"
          },
          "kind": {
            "enum": [
              "operation",
              "selected-file",
              "http",
              "sql",
              "web",
              "research"
            ],
            "description": "operation and selected-file are version 2's, and a version-3 document's too, prepared as version 2 prepares them. research is a kind of dialect version 3 (spec/dialect.md sections 4.3 and 4.4): a recipe, bound to an AI profile and web profiles of class generated, prepared from the research record its caller retains, each retained response replayed under the profile it came through; Runner asks no model and reads no page. http, sql and web are kinds of dialect version 3 that Runner refuses by name: in a version-3 document, each is refused with a sentence naming the kind, and in a version-2 document, as an unsupported kind."
          },
          "provider": {
            "enum": [
              "local-file",
              "google-drive"
            ]
          },
          "profile": {
            "type": "string",
            "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$"
          },
          "profileDigest": {
            "type": "string",
            "pattern": "^sha256:[a-f0-9]{64}$"
          },
          "maxAge": {
            "type": "integer",
            "minimum": 1,
            "maximum": 86400
          },
          "parameters": {
            "type": "object",
            "maxProperties": 64,
            "propertyNames": {
              "type": "string",
              "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$"
            },
            "additionalProperties": {
              "$ref": "#/components/schemas/Parameter"
            }
          },
          "arguments": {
            "type": "object",
            "description": "Frozen template; whole-value $param and integer-only $text. runAt is derivation-only."
          },
          "read": {
            "$ref": "#/components/schemas/SourceRead"
          },
          "calculation": {
            "$ref": "#/components/schemas/CalculationBinding"
          },
          "platform": {
            "type": "string",
            "minLength": 1,
            "description": "Version 3, unbound operation: the gateway catalog platform it is read through."
          },
          "operation": {
            "type": "string",
            "minLength": 1,
            "description": "Version 3, unbound operation: the operation of that platform's binding."
          },
          "shape": {
            "enum": [
              "airbyte",
              "mcp",
              "http"
            ],
            "description": "Version 3, unbound operation: the shape that serves it. The profile it is bound to must be of this shape."
          },
          "record": {
            "type": "string",
            "minLength": 1,
            "description": "Version 3, unbound operation: the record it is written against, as a profile's adapter.name names it. The profile it is bound to must name this adapter."
          },
          "method": {
            "description": "Version 3, kind http: refused by name with its source."
          },
          "path": {
            "description": "Version 3, kind http: refused by name with its source."
          },
          "query": {
            "description": "Version 3, kind http: refused by name with its source."
          },
          "body": {
            "description": "Version 3, kind http: refused by name with its source."
          },
          "headers": {
            "description": "Version 3, kind http: refused by name with its source."
          },
          "statement": {
            "description": "Version 3, kind sql: refused by name with its source."
          },
          "bindings": {
            "description": "Version 3, kind sql: refused by name with its source."
          },
          "url": {
            "description": "Version 3, kind web: refused by name with its source."
          },
          "question": {
            "description": "Version 3, kind research: the question, a string template: a string, a $text whose placeholders name integer parameters, or a $param naming a parameter of type string or timestamp, never runAt. The source's request is its recipe, the question instantiated; it is recorded and never sent."
          },
          "constraints": {
            "type": "object",
            "description": "Version 3, kind research: the recipe's constraints, in the gateway canonical domain; kept as written."
          },
          "model": {
            "type": "string",
            "minLength": 1,
            "description": "Version 3, kind research: the model the recipe asks, at most 256 UTF-8 bytes. The AI profile the source is bound to must declare this model: profile-mismatch otherwise."
          },
          "evidence": {
            "type": "array",
            "items": {
              "type": "string",
              "minLength": 1
            },
            "description": "Version 3, kind research: the evidence to retain, each instruction at most 4096 UTF-8 bytes."
          },
          "fields": {
            "type": "array",
            "minItems": 1,
            "maxItems": 64,
            "description": "Version 3, kind research: the requested fields, in order, each exactly name (a non-empty string other than case, at most 64 UTF-8 bytes, distinct), type, required and description (at most 2048 UTF-8 bytes). The research record answers them.",
            "items": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "name",
                "type",
                "required",
                "description"
              ],
              "properties": {
                "name": {
                  "type": "string",
                  "minLength": 1
                },
                "type": {
                  "enum": [
                    "integer",
                    "decimal",
                    "boolean",
                    "text",
                    "text-list",
                    "range"
                  ]
                },
                "required": {
                  "type": "boolean"
                },
                "description": {
                  "type": "string",
                  "minLength": 1
                }
              }
            }
          },
          "capabilities": {
            "type": "array",
            "minItems": 1,
            "maxItems": 3,
            "items": {
              "enum": [
                "answer",
                "search",
                "page"
              ]
            },
            "uniqueItems": true,
            "description": "Version 3, kind research: the capabilities the recipe needs, distinct, in the order answer, search, page; answer is required."
          },
          "webProfiles": {
            "type": "object",
            "additionalProperties": false,
            "maxProperties": 2,
            "properties": {
              "search": {
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "profile",
                  "profileDigest"
                ],
                "properties": {
                  "profile": {
                    "type": "string",
                    "minLength": 1
                  },
                  "profileDigest": {
                    "type": "string",
                    "pattern": "^sha256:[a-f0-9]{64}$"
                  }
                }
              },
              "page": {
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "profile",
                  "profileDigest"
                ],
                "properties": {
                  "profile": {
                    "type": "string",
                    "minLength": 1
                  },
                  "profileDigest": {
                    "type": "string",
                    "pattern": "^sha256:[a-f0-9]{64}$"
                  }
                }
              }
            },
            "description": "Version 3, kind research, bound: a profile for each web capability the source asks for, exactly those, written even when empty. With profile and profileDigest, the AI profile for answer, all three or none: a research source published with none is bound at import (SourceInput.import)."
          }
        },
        "required": [
          "name",
          "kind",
          "read"
        ],
        "additionalProperties": false,
        "allOf": [
          {
            "if": {
              "properties": {
                "kind": {
                  "const": "operation"
                }
              },
              "required": [
                "kind"
              ]
            },
            "then": {
              "required": [
                "maxAge",
                "arguments"
              ],
              "not": {
                "required": [
                  "provider"
                ]
              },
              "oneOf": [
                {
                  "required": [
                    "profile",
                    "profileDigest"
                  ],
                  "not": {
                    "anyOf": [
                      {
                        "required": [
                          "platform"
                        ]
                      },
                      {
                        "required": [
                          "operation"
                        ]
                      },
                      {
                        "required": [
                          "shape"
                        ]
                      },
                      {
                        "required": [
                          "record"
                        ]
                      }
                    ]
                  }
                },
                {
                  "required": [
                    "platform",
                    "operation",
                    "shape",
                    "record"
                  ],
                  "not": {
                    "anyOf": [
                      {
                        "required": [
                          "profile"
                        ]
                      },
                      {
                        "required": [
                          "profileDigest"
                        ]
                      }
                    ]
                  }
                }
              ]
            }
          },
          {
            "if": {
              "properties": {
                "kind": {
                  "const": "selected-file"
                }
              },
              "required": [
                "kind"
              ]
            },
            "then": {
              "required": [
                "provider"
              ]
            }
          },
          {
            "if": {
              "properties": {
                "provider": {
                  "const": "google-drive"
                }
              },
              "required": [
                "provider"
              ]
            },
            "then": {
              "required": [
                "profile",
                "profileDigest",
                "maxAge",
                "arguments"
              ]
            }
          },
          {
            "if": {
              "properties": {
                "kind": {
                  "const": "research"
                }
              },
              "required": [
                "kind"
              ]
            },
            "then": {
              "required": [
                "maxAge",
                "question",
                "constraints",
                "model",
                "evidence",
                "fields",
                "capabilities"
              ],
              "not": {
                "anyOf": [
                  {
                    "required": [
                      "provider"
                    ]
                  },
                  {
                    "required": [
                      "arguments"
                    ]
                  },
                  {
                    "required": [
                      "calculation"
                    ]
                  },
                  {
                    "required": [
                      "platform"
                    ]
                  },
                  {
                    "required": [
                      "operation"
                    ]
                  },
                  {
                    "required": [
                      "shape"
                    ]
                  },
                  {
                    "required": [
                      "record"
                    ]
                  }
                ]
              }
            }
          }
        ],
        "description": "A source of a dialect document. In version 3 an operation may be unbound: platform, operation, shape and record, all four, in place of profile and profileDigest (spec/dialect.md section 4.4); and a research source may be unbound, with none of profile, profileDigest and webProfiles. Runner prepares only a bound source: an unbound one is bound at import (SourceInput.import) and refused by name elsewhere. A research source is held to its recipe's form and the maxima of spec/dialect.md section 12, each refusal naming the specification's code at its end, input-malformed or input-over-bound; a profile it is bound to that this installation does not hold by that id and digest, that is not of class generated, declares no research capabilities, lacks the capability it is bound for or names another model is refused, profile-mismatch. The members of the kinds http, sql and web are read only so that a source of those kinds is refused for its kind. A version-2 source has none of the members of version 3."
      },
      "Admission": {
        "type": "object",
        "properties": {
          "facts": {
            "type": "object",
            "additionalProperties": {
              "type": "array",
              "items": {
                "enum": [
                  "asserted",
                  "record",
                  "generated"
                ]
              },
              "minItems": 1,
              "maxItems": 3,
              "uniqueItems": true
            }
          },
          "evidence": {
            "type": "object",
            "additionalProperties": {
              "type": "array",
              "items": {
                "enum": [
                  "asserted",
                  "record",
                  "generated"
                ]
              },
              "minItems": 1,
              "maxItems": 3,
              "uniqueItems": true
            }
          }
        },
        "required": [],
        "additionalProperties": false
      },
      "InputMappingV2": {
        "type": "object",
        "properties": {
          "version": {
            "const": 2
          },
          "case": {
            "$ref": "#/components/schemas/CaseMapping"
          },
          "sources": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/MappingSource"
            },
            "maxItems": 16
          },
          "admits": {
            "$ref": "#/components/schemas/Admission"
          },
          "unmapped": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "maxItems": 256,
            "uniqueItems": true
          },
          "unmappedEvidence": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "maxItems": 128,
            "uniqueItems": true
          },
          "provider": {
            "const": ""
          },
          "facts": {
            "type": [
              "array",
              "null"
            ],
            "maxItems": 0
          },
          "evidence": {
            "type": [
              "array",
              "null"
            ],
            "maxItems": 0
          },
          "profile": {
            "type": "string",
            "enum": [
              "base"
            ],
            "description": "Explicit Base is required for retained-column conversions. Absent, ordinary legacy behavior and limits apply."
          }
        },
        "required": [
          "version"
        ],
        "additionalProperties": false,
        "anyOf": [
          {
            "required": [
              "case"
            ]
          },
          {
            "required": [
              "sources"
            ],
            "properties": {
              "sources": {
                "minItems": 1
              }
            }
          }
        ]
      },
      "AdapterPin": {
        "type": "object",
        "properties": {
          "name": {
            "type": "string"
          },
          "version": {
            "type": "string"
          },
          "digest": {
            "type": "string",
            "pattern": "^sha256:[a-f0-9]{64}$"
          }
        },
        "required": [
          "name",
          "version",
          "digest"
        ],
        "additionalProperties": false
      },
      "InputProfile": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$"
          },
          "publicKey": {
            "type": "string",
            "pattern": "^[a-f0-9]{64}$"
          },
          "class": {
            "enum": [
              "record",
              "generated"
            ]
          },
          "source": {
            "type": "string"
          },
          "authority": {
            "type": "string"
          },
          "shape": {
            "enum": [
              "airbyte",
              "mcp",
              "http",
              "command"
            ]
          },
          "adapter": {
            "$ref": "#/components/schemas/AdapterPin"
          },
          "endpoint": {
            "type": [
              "string",
              "null"
            ]
          },
          "endpointScope": {
            "type": "array",
            "minItems": 1,
            "maxItems": 32,
            "uniqueItems": true,
            "items": {
              "type": "string",
              "maxLength": 2048,
              "description": "One entry: an endpoint prefix or https://*. Each entry is ASCII, each character from U+0021 to U+007E, so its 2048-character maxLength equals spec/dialect.md section 5.1's 2048 UTF-8 bytes."
            },
            "description": "An endpoint constraint in place of one exact endpoint, which is then null (spec/dialect.md section 5.1): 1 to 32 distinct endpoint prefixes, each https://, a DNS name of two or more labels, nothing, :443 or : with nothing, and an optional path beginning with /, with no user, query, fragment, IP literal or other port, no escaped slash or backslash (%2f, %2F, %5c, %5C) in the path, and no path segment that is a dot segment, or whose part before its first ;, %3b, %3B, %3f, %3F, %23 or %00 is one; or exactly https://*, admitted on a generated profile only. Only on shape http with adapter.name adapter-web; a generated profile carrying it declares research capabilities exactly [\"page\"]. A page receipt's acquisition.endpoint must match an entry: hosts equal with ASCII case folded, the three spellings of port 443 one port, the path a prefix at a literal / boundary, nothing decoded. The whole scope enters the profile's digest. It binds a research source's page assignment alone; an operation or a selected file bound to it is profile-mismatch."
          },
          "tools": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "maxItems": 64,
            "uniqueItems": true
          },
          "calculator": {
            "$ref": "#/components/schemas/CalculatorPin"
          },
          "research": {
            "type": "object",
            "additionalProperties": false,
            "required": [
              "capabilities"
            ],
            "properties": {
              "capabilities": {
                "type": "array",
                "minItems": 1,
                "maxItems": 3,
                "uniqueItems": true,
                "items": {
                  "enum": [
                    "answer",
                    "search",
                    "page"
                  ]
                }
              },
              "model": {
                "type": "string",
                "minLength": 1,
                "maxLength": 256
              }
            },
            "description": "What the channel serves of a research source's capabilities, distinct, in the order answer, search, page, and the model that answers, exactly when it serves answer (spec/dialect.md section 5.1): the form a gateway's web-search status row gives as research. The installation's declaration, pinned by the profile's digest; not an observation of the model. Runner refuses to start with one of another form."
          },
          "conversionContracts": {
            "type": "array",
            "maxItems": 32,
            "items": {
              "$ref": "#/components/schemas/ConversionCapability"
            },
            "description": "Trusted registered-profile metadata bound by the existing profile digest and approval. Absent entries grant no selected producer support."
          },
          "retainedColumnProducer": {
            "type": "object",
            "additionalProperties": false,
            "required": [
              "contractVersion",
              "grammar"
            ],
            "properties": {
              "contractVersion": {
                "type": "string",
                "enum": [
                  "1"
                ]
              },
              "grammar": {
                "type": "string",
                "enum": [
                  "desk-reviewed-input/1"
                ]
              }
            }
          }
        },
        "required": [
          "id",
          "publicKey",
          "class",
          "source",
          "authority",
          "shape",
          "adapter",
          "endpoint"
        ],
        "additionalProperties": false
      },
      "SourceValue": {
        "type": "object",
        "properties": {
          "snapshot": {
            "$ref": "#/components/schemas/SourceSnapshot"
          },
          "response": {
            "type": "object",
            "properties": {
              "result": {},
              "receipt": {
                "type": "object",
                "description": "Complete signed Gateway v3 acquisition receipt; Runner verifies the signed fields, profile and canonical result."
              },
              "salts": {
                "type": "object",
                "properties": {
                  "args": {
                    "type": "string",
                    "pattern": "^[a-f0-9]{64}$"
                  },
                  "statement": {
                    "type": "string"
                  }
                },
                "required": [
                  "args"
                ],
                "additionalProperties": false
              }
            },
            "required": [
              "result"
            ],
            "additionalProperties": false,
            "dependentRequired": {
              "receipt": [
                "salts"
              ],
              "salts": [
                "receipt"
              ]
            },
            "description": "An acquisition, {result, receipt, salts}. A research source's result is its research record, exactly fields and responses (each retained response exactly profile, request, result, receipt and salts), and its receipt and salts are present exactly when the record came back through a gateway source; every other source's are required."
          },
          "retainedResponseJson": {
            "type": "string",
            "minLength": 1,
            "description": "Sole exact original signed response JSON text; excludes snapshot and response. It grants no signature, source or producer authority."
          }
        },
        "required": [],
        "additionalProperties": false,
        "oneOf": [
          {
            "required": [
              "snapshot"
            ],
            "not": {
              "required": [
                "response"
              ]
            }
          },
          {
            "required": [
              "response"
            ],
            "not": {
              "required": [
                "snapshot"
              ]
            }
          },
          {
            "required": [
              "retainedResponseJson"
            ],
            "not": {
              "anyOf": [
                {
                  "required": [
                    "snapshot"
                  ]
                },
                {
                  "required": [
                    "response"
                  ]
                }
              ]
            }
          }
        ],
        "allOf": [
          {
            "if": {
              "required": [
                "retainedResponseJson"
              ]
            },
            "then": {
              "not": {
                "anyOf": [
                  {
                    "required": [
                      "response"
                    ]
                  },
                  {
                    "required": [
                      "snapshot"
                    ]
                  }
                ]
              }
            }
          }
        ]
      },
      "Citation": {
        "type": "object",
        "properties": {
          "sessionId": {
            "type": "string"
          },
          "callIndex": {
            "type": "integer",
            "minimum": 0,
            "maximum": 9007199254740991
          },
          "signature": {
            "type": "string",
            "pattern": "^[a-f0-9]{128}$"
          }
        },
        "required": [
          "sessionId",
          "callIndex",
          "signature"
        ],
        "additionalProperties": false
      },
      "Dependency": {
        "type": "object",
        "properties": {
          "parameter": {
            "type": "string"
          },
          "source": {
            "type": "string"
          },
          "pointer": {
            "type": "string"
          }
        },
        "required": [
          "parameter",
          "source",
          "pointer"
        ],
        "additionalProperties": false
      },
      "TargetLineage": {
        "type": "object",
        "properties": {
          "target": {
            "type": "string"
          },
          "kind": {
            "enum": [
              "fact",
              "evidence"
            ]
          },
          "source": {
            "type": "string"
          },
          "class": {
            "enum": [
              "asserted",
              "record",
              "generated"
            ]
          },
          "generatedInfluence": {
            "type": "boolean"
          },
          "present": {
            "type": "boolean"
          },
          "status": {
            "enum": [
              "resolved",
              "absent",
              "unknown"
            ]
          },
          "reason": {
            "type": "string"
          },
          "readDigest": {
            "type": "string",
            "pattern": "^sha256:[a-f0-9]{64}$"
          },
          "basis": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "candidateFrom": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "dependencies": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/Dependency"
            }
          },
          "receipt": {
            "$ref": "#/components/schemas/Citation"
          },
          "calculation": {
            "$ref": "#/components/schemas/CalculationLineage"
          },
          "receipts": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/Citation"
            },
            "description": "For an acquired research source: every citation it adds to the preparation's cites, in order, each retained response's and then the record's own when it has one; written even when empty. receipt is then the record's own citation, absent when it has none."
          },
          "columnTransformation": {
            "$ref": "#/components/schemas/RetainedColumnTransformation"
          }
        },
        "required": [
          "target",
          "kind",
          "source",
          "class",
          "generatedInfluence",
          "present",
          "status",
          "reason",
          "readDigest",
          "basis"
        ],
        "additionalProperties": false
      },
      "SourceOutcome": {
        "type": "object",
        "properties": {
          "name": {
            "type": "string"
          },
          "status": {
            "type": "string"
          },
          "reason": {
            "type": "string"
          },
          "parameters": {
            "type": "object"
          },
          "arguments": {
            "type": "object"
          },
          "claim": {
            "type": "object"
          }
        },
        "required": [
          "name",
          "status",
          "reason",
          "parameters",
          "claim"
        ],
        "additionalProperties": false
      },
      "Preparation": {
        "type": "object",
        "description": "A mapping-v2 run's verified preparation. From Runtime 0.31.0 on, the run's audit record binds it: the record's binding is {\"kind\":\"judgment-pack-runner/preparation/1\",\"digest\":\"sha256:<hex>\"}, whose digest is the SHA-256 of this object with its members sorted by name, no insignificant whitespace, numbers as written, and strings escaped as Go's encoding/json escapes them, the form a frozen release is digested by. verify-run recomputes it from the export alone, compares the record's member as recorded, and reports binding: matches, mismatch, absent or foreign-kind, refusing a mismatch and a foreign kind (before any digest is compared), and, with --require-bound, a record without one. A binding that matches, in a record whose signature verifies, commits verifiedAt in the signed record: a program reading verify-run's report knows it when binding.status is matches and signature.status is signed, and unsignedFreshness keeps its name either way. Against the operator, who holds the key, only a witnessed chain shows a record signed again with a new binding.",
        "properties": {
          "version": {
            "enum": [
              2,
              3
            ],
            "description": "The dialect document's version: 3 for a version-3 document, whose preparation is otherwise a version-2 document's."
          },
          "verifiedAt": {
            "type": "string"
          },
          "mappingDigest": {
            "type": "string",
            "pattern": "^sha256:[a-f0-9]{64}$"
          },
          "verification": {
            "type": "string"
          },
          "cites": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/Citation"
            },
            "description": "Every acquisition's citation, ordered by callIndex, those of one index in the order of sources; in a preparation with a research source, in the order of sources instead, each research source adding every retained response's citation in the order its record retains them, then the record's own (spec/dialect.md section 9.1)."
          },
          "lineage": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/TargetLineage"
            }
          },
          "outcomes": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/SourceOutcome"
            }
          },
          "conversionContract": {
            "$ref": "#/components/schemas/ConversionContract"
          }
        },
        "required": [
          "version",
          "verifiedAt",
          "mappingDigest",
          "verification",
          "cites",
          "lineage",
          "outcomes"
        ],
        "additionalProperties": false
      },
      "VerificationBundle": {
        "type": "object",
        "description": "Version 2, the export Runner has always made. It carries no original bytes of the audit record.",
        "properties": {
          "version": {
            "const": 2
          },
          "releaseDigest": {
            "type": "string",
            "pattern": "^sha256:[a-f0-9]{64}$"
          },
          "release": {
            "$ref": "#/components/schemas/Release"
          },
          "run": {
            "allOf": [
              {
                "$ref": "#/components/schemas/Run"
              },
              {
                "not": {
                  "required": [
                    "auditBytes"
                  ]
                }
              }
            ]
          }
        },
        "required": [
          "version",
          "releaseDigest",
          "release",
          "run"
        ],
        "additionalProperties": false
      },
      "VerificationBundleV3": {
        "type": "object",
        "description": "Version 3: version 2 with the audit record's bytes, as run.auditBytes, beside the parsed run.audit. Only a completed run that holds them is exported as version 3. verify-run checks that the bytes parse to run.audit and reports their SHA-256, the digest a gateway receipt would name for those bytes; that they are the bytes the Runtime wrote for this run is shown only by comparison with a digest held independently, such as a receipt's. Held to 8 MiB beside the run.auditBytes member, whose bytes are held to 8 MiB.",
        "properties": {
          "version": {
            "const": 3
          },
          "releaseDigest": {
            "type": "string",
            "pattern": "^sha256:[a-f0-9]{64}$"
          },
          "release": {
            "$ref": "#/components/schemas/Release"
          },
          "inputs": {
            "const": "not-mapped",
            "description": "Present only in the export of a run whose job has no input mapping, or a v1 file mapping: the run has no lineage, and its run.input has no preparation. Absent from a mapping-v2 run's export. verify-run checks such an export's bytes, chain entry and signature as any export's, and in place of lineage that the release froze no mapping v2, the run names the release and its mapping, and the audit record evaluated the run's facts and evidence with no citation; it reports inputs: not-mapped and no targetsByClass."
          },
          "run": {
            "allOf": [
              {
                "$ref": "#/components/schemas/Run"
              },
              {
                "required": [
                  "audit",
                  "auditBytes"
                ],
                "properties": {
                  "state": {
                    "const": "completed"
                  }
                }
              }
            ]
          }
        },
        "required": [
          "version",
          "releaseDigest",
          "release",
          "run"
        ],
        "additionalProperties": false
      },
      "VerificationBundleV4": {
        "type": "object",
        "description": "Version 4: version 3 with the run's entry in the installation's chain of runs, as chain. Only a completed run that holds its audit record's bytes and has an entry is exported as version 4. verify-run checks that the entry names this run and the SHA-256 of run.auditBytes, and that the checkpoint is the entry's; along a supplied chain and against checkpoints held independently of the operator, it checks the entry's place in the chain. Without a held checkpoint it establishes nothing against the operator, who keeps the chain. Held to 8 MiB beside the run.auditBytes and chain members; the entry is held to 1024 bytes. It carries no run.auditSignatures, which only version 5 does.",
        "properties": {
          "version": {
            "const": 4
          },
          "releaseDigest": {
            "type": "string",
            "pattern": "^sha256:[a-f0-9]{64}$"
          },
          "release": {
            "$ref": "#/components/schemas/Release"
          },
          "inputs": {
            "const": "not-mapped",
            "description": "Present only in the export of a run whose job has no input mapping, or a v1 file mapping: the run has no lineage, and its run.input has no preparation. Absent from a mapping-v2 run's export. verify-run checks such an export's bytes, chain entry and signature as any export's, and in place of lineage that the release froze no mapping v2, the run names the release and its mapping, and the audit record evaluated the run's facts and evidence with no citation; it reports inputs: not-mapped and no targetsByClass."
          },
          "run": {
            "allOf": [
              {
                "$ref": "#/components/schemas/Run"
              },
              {
                "required": [
                  "audit",
                  "auditBytes"
                ],
                "properties": {
                  "state": {
                    "const": "completed"
                  }
                }
              }
            ]
          },
          "chain": {
            "$ref": "#/components/schemas/RunChainExport"
          }
        },
        "required": [
          "version",
          "releaseDigest",
          "release",
          "run",
          "chain"
        ],
        "additionalProperties": false
      },
      "VerificationBundleV5": {
        "type": "object",
        "description": "Version 5: version 4 with the signature sidecar of the run's audit record, as run.auditSignatures. Only a completed run that has an entry in the installation's chain of runs and keeps a sidecar is exported as version 5. verify-run --public-key checks the record's signature under the key it is given, held first to the key check (no key of small order, no non-canonical encoding), by the Runtime guide's rule with the attempt's one-record trail known; --require-signed refuses a run that no valid signature covers. A valid signature shows only that whoever held the key signed these exact bytes: nothing against the operator, who holds the key, and nothing once the key is copied. Held to 8 MiB beside the run.auditBytes, chain and run.auditSignatures members; the sidecar is held to 16 KiB.",
        "properties": {
          "version": {
            "const": 5
          },
          "releaseDigest": {
            "type": "string",
            "pattern": "^sha256:[a-f0-9]{64}$"
          },
          "release": {
            "$ref": "#/components/schemas/Release"
          },
          "inputs": {
            "const": "not-mapped",
            "description": "Present only in the export of a run whose job has no input mapping, or a v1 file mapping: the run has no lineage, and its run.input has no preparation. Absent from a mapping-v2 run's export. verify-run checks such an export's bytes, chain entry and signature as any export's, and in place of lineage that the release froze no mapping v2, the run names the release and its mapping, and the audit record evaluated the run's facts and evidence with no citation; it reports inputs: not-mapped and no targetsByClass."
          },
          "run": {
            "allOf": [
              {
                "$ref": "#/components/schemas/Run"
              },
              {
                "required": [
                  "audit",
                  "auditBytes",
                  "auditSignatures"
                ],
                "properties": {
                  "state": {
                    "const": "completed"
                  }
                }
              }
            ]
          },
          "chain": {
            "$ref": "#/components/schemas/RunChainExport"
          }
        },
        "required": [
          "version",
          "releaseDigest",
          "release",
          "run",
          "chain"
        ],
        "additionalProperties": false
      },
      "RunChainExport": {
        "type": "object",
        "description": "A run's entry in the installation's chain of runs, and that entry's checkpoint, which a holder keeps. The checkpoint is a function of the entry's bytes.",
        "properties": {
          "entry": {
            "type": "string",
            "contentEncoding": "base64",
            "description": "The entry's line exactly as stored, in standard base64: one JSON object of entryVersion \"1\", trail (32 lowercase hex characters), sequence (from 1), previous (the SHA-256 of the line before it, or of nothing for the first), kind \"run\", run (the run's id) and auditDigest (the SHA-256 of the run's audit record's exact bytes), in that order as Runner writes it. Read by its members, as JSON reads them."
          },
          "checkpoint": {
            "$ref": "#/components/schemas/Checkpoint"
          }
        },
        "required": [
          "entry",
          "checkpoint"
        ],
        "additionalProperties": false
      },
      "Checkpoint": {
        "type": "object",
        "description": "The Runtime's checkpoint (ADR-0047): a chain's identity, an entry's sequence, and the SHA-256 of that entry's exact line bytes. Its compact encoding, members in this order, is its RFC 8785 canonical form.",
        "properties": {
          "checkpointVersion": {
            "const": "1"
          },
          "recordDigest": {
            "type": "string",
            "pattern": "^sha256:[a-f0-9]{64}$"
          },
          "sequence": {
            "type": "integer",
            "minimum": 1,
            "maximum": 9007199254740990
          },
          "trail": {
            "type": "string",
            "pattern": "^[a-f0-9]{32}$"
          }
        },
        "required": [
          "checkpointVersion",
          "recordDigest",
          "sequence",
          "trail"
        ],
        "additionalProperties": false
      },
      "PlannedSource": {
        "type": "object",
        "additionalProperties": false,
        "required": [
          "name",
          "kind"
        ],
        "properties": {
          "name": {
            "type": "string"
          },
          "kind": {
            "enum": [
              "operation",
              "selected-file",
              "research"
            ]
          },
          "provider": {
            "enum": [
              "local-file",
              "google-drive"
            ]
          },
          "profile": {
            "type": "string"
          },
          "source": {
            "type": "string"
          },
          "arguments": {
            "type": "object"
          },
          "conversionContract": {
            "$ref": "#/components/schemas/ConversionContract"
          },
          "conversionLimits": {
            "$ref": "#/components/schemas/ProducerConversionLimits"
          },
          "retainedColumn": {
            "type": "boolean",
            "description": "Derived by Runner from the approved producer profile and mapping read. True requires all effective producer ceilings; it grants no producer authority."
          }
        },
        "description": "The next source to acquire. For a research source, the caller runs the recipe (arguments) through the profiles the source is bound to and supplies the research record it assembles from the responses it retains: Runner asks no model and reads no page.",
        "allOf": [
          {
            "if": {
              "properties": {
                "retainedColumn": {
                  "const": true
                }
              },
              "required": [
                "retainedColumn"
              ]
            },
            "then": {
              "required": [
                "conversionContract",
                "conversionLimits"
              ]
            }
          }
        ]
      },
      "InputPlan": {
        "oneOf": [
          {
            "type": "object",
            "additionalProperties": false,
            "required": [
              "next"
            ],
            "properties": {
              "next": {
                "$ref": "#/components/schemas/PlannedSource"
              }
            }
          },
          {
            "type": "object",
            "additionalProperties": false,
            "required": [
              "input"
            ],
            "properties": {
              "input": {
                "$ref": "#/components/schemas/Input"
              },
              "factsText": {
                "type": "string"
              },
              "evidenceText": {
                "type": "string"
              }
            }
          }
        ]
      },
      "Schedule": {
        "type": "object",
        "properties": {
          "kind": {
            "enum": [
              "interval",
              "daily",
              "weekly",
              "once"
            ]
          },
          "timezone": {
            "type": "string"
          },
          "startAt": {
            "type": "string",
            "format": "date-time"
          },
          "endAt": {
            "type": "string",
            "format": "date-time"
          },
          "everySeconds": {
            "type": "integer",
            "minimum": 60,
            "maximum": 2592000
          },
          "time": {
            "type": "string",
            "pattern": "^([01][0-9]|2[0-3]):[0-5][0-9]$"
          },
          "weekday": {
            "type": "integer",
            "minimum": 0,
            "maximum": 6
          }
        },
        "required": [
          "kind",
          "timezone",
          "startAt"
        ],
        "additionalProperties": false,
        "description": "Intervals use elapsed time. Calendar schedules skip nonexistent local times and choose the first repeated time. End is exclusive. Kind-specific fields are mutually exclusive."
      },
      "AutomaticInput": {
        "type": "object",
        "properties": {
          "kind": {
            "enum": [
              "constant",
              "input-file",
              "mapped-files",
              "mapped-sources"
            ]
          },
          "value": {
            "type": "string",
            "description": "Exact JSON Input envelope; constants only. Source responses and computed preparation are forbidden."
          },
          "path": {
            "type": "string",
            "description": "Project-relative JSON input envelope or v2 case file."
          },
          "case": {
            "type": "object"
          },
          "files": {
            "type": "object",
            "additionalProperties": {
              "type": "string"
            }
          }
        },
        "required": [
          "kind"
        ],
        "additionalProperties": false,
        "description": "mapped-sources supports v2 local files and installed Gateway operations. Retained source responses and interactive file grants are never reused."
      },
      "TriggerConfig": {
        "type": "object",
        "properties": {
          "name": {
            "type": "string",
            "minLength": 1,
            "maxLength": 160
          },
          "kind": {
            "enum": [
              "schedule",
              "file",
              "event",
              "cloud"
            ]
          },
          "schedule": {
            "$ref": "#/components/schemas/Schedule"
          },
          "input": {
            "$ref": "#/components/schemas/AutomaticInput"
          },
          "missed": {
            "enum": [
              "skip",
              "latest"
            ]
          },
          "overlap": {
            "enum": [
              "skip",
              "queue"
            ]
          },
          "queueSeconds": {
            "type": "integer",
            "minimum": 60,
            "maximum": 86400
          },
          "watchPath": {
            "type": "string"
          },
          "stableSeconds": {
            "type": "integer",
            "minimum": 1,
            "maximum": 3600
          },
          "cloud": {
            "$ref": "#/components/schemas/CloudBinding"
          },
          "preparationSeconds": {
            "description": "Omit or use 0 for one hour on durable connections. Explicit waits require mapped-sources and all operation profiles installed as durable.",
            "oneOf": [
              {
                "const": 0
              },
              {
                "type": "integer",
                "minimum": 60,
                "maximum": 604800
              }
            ]
          }
        },
        "required": [
          "name",
          "kind",
          "missed",
          "overlap",
          "queueSeconds"
        ],
        "additionalProperties": false,
        "description": "Event triggers take inputs from each delivery and forbid schedule/input/watch fields. Schedules require schedule and input. File triggers require a watched path used by their file inputs and a stability delay. Cloud triggers require cloud and input and forbid schedule/watch fields. For cloud, missed=latest delivers every signal before expiry; expiry starts at scheduledAt."
      },
      "Trigger": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string"
          },
          "jobId": {
            "type": "string"
          },
          "revision": {
            "type": "integer",
            "minimum": 1
          },
          "authority": {
            "enum": [
              "local",
              "google-cloud"
            ]
          },
          "config": {
            "$ref": "#/components/schemas/TriggerConfig"
          },
          "paused": {
            "type": "boolean"
          },
          "createdAt": {
            "type": "string",
            "format": "date-time"
          },
          "updatedAt": {
            "type": "string",
            "format": "date-time"
          },
          "nextAt": {
            "type": "string",
            "format": "date-time"
          },
          "hasKey": {
            "type": "boolean"
          },
          "problem": {
            "type": "string"
          }
        },
        "required": [
          "id",
          "jobId",
          "revision",
          "authority",
          "config",
          "paused",
          "createdAt",
          "updatedAt",
          "hasKey"
        ],
        "additionalProperties": false
      },
      "TriggerOrigin": {
        "type": "object",
        "properties": {
          "occurrenceId": {
            "type": "string"
          },
          "triggerId": {
            "type": "string"
          },
          "triggerRevision": {
            "type": "integer",
            "minimum": 1
          },
          "kind": {
            "type": "string"
          },
          "scheduledAt": {
            "type": "string",
            "format": "date-time"
          },
          "eventId": {
            "type": "string"
          },
          "inputDigest": {
            "type": "string"
          },
          "expiresAt": {
            "type": "string",
            "format": "date-time"
          }
        },
        "required": [
          "occurrenceId",
          "triggerId",
          "triggerRevision",
          "kind"
        ],
        "additionalProperties": false
      },
      "Occurrence": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string"
          },
          "jobId": {
            "type": "string"
          },
          "releaseId": {
            "type": "string"
          },
          "jobRevision": {
            "type": "integer",
            "minimum": 1
          },
          "triggerId": {
            "type": "string"
          },
          "triggerRevision": {
            "type": "integer",
            "minimum": 1
          },
          "kind": {
            "type": "string"
          },
          "eventId": {
            "type": "string"
          },
          "scheduledAt": {
            "type": "string",
            "format": "date-time"
          },
          "receivedAt": {
            "type": "string",
            "format": "date-time"
          },
          "expiresAt": {
            "type": "string",
            "format": "date-time"
          },
          "inputDigest": {
            "type": "string"
          },
          "state": {
            "enum": [
              "accepted",
              "submitted",
              "skipped",
              "failed",
              "expired",
              "preparing",
              "waiting",
              "needs-attention",
              "cancelled"
            ]
          },
          "runId": {
            "type": "string"
          },
          "reason": {
            "type": "string"
          },
          "missedFrom": {
            "type": "string",
            "format": "date-time"
          },
          "missedThrough": {
            "type": "string",
            "format": "date-time"
          },
          "preparationSeconds": {
            "type": "integer"
          },
          "queueSeconds": {
            "type": "integer"
          },
          "readyUntil": {
            "type": "string",
            "format": "date-time"
          },
          "preparation": {
            "$ref": "#/components/schemas/SourcePreparation"
          }
        },
        "required": [
          "id",
          "jobId",
          "releaseId",
          "jobRevision",
          "triggerId",
          "triggerRevision",
          "kind",
          "receivedAt",
          "expiresAt",
          "state"
        ],
        "additionalProperties": false
      },
      "EventDelivery": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "minLength": 1,
            "maxLength": 128
          },
          "occurredAt": {
            "type": "string",
            "format": "date-time"
          },
          "input": {
            "$ref": "#/components/schemas/Input"
          }
        },
        "required": [
          "id",
          "occurredAt",
          "input"
        ],
        "additionalProperties": false
      },
      "TriggerPreview": {
        "type": "object",
        "properties": {
          "config": {
            "$ref": "#/components/schemas/TriggerConfig"
          },
          "next": {
            "type": "array",
            "items": {
              "type": "string",
              "format": "date-time"
            }
          },
          "inputReady": {
            "type": "boolean"
          },
          "factsText": {
            "type": "string"
          },
          "evidenceText": {
            "type": "string"
          },
          "configurationReady": {
            "type": "boolean"
          },
          "deferred": {
            "type": "boolean"
          }
        },
        "required": [
          "config",
          "next",
          "inputReady"
        ],
        "additionalProperties": false
      },
      "TriggerMutation": {
        "type": "object",
        "properties": {
          "trigger": {
            "$ref": "#/components/schemas/Trigger"
          },
          "token": {
            "type": "string",
            "description": "Plaintext only when first enabling an event or rotating its credential; otherwise empty. Never retrievable later."
          }
        },
        "required": [
          "trigger",
          "token"
        ],
        "additionalProperties": false
      },
      "CloudBinding": {
        "type": "object",
        "additionalProperties": false,
        "required": [
          "connection",
          "subscription",
          "job"
        ],
        "properties": {
          "connection": {
            "type": "string"
          },
          "subscription": {
            "type": "string"
          },
          "job": {
            "type": "string"
          }
        }
      },
      "CloudConnectionStatus": {
        "type": "object",
        "additionalProperties": false,
        "required": [
          "id",
          "subscription",
          "problem"
        ],
        "properties": {
          "id": {
            "type": "string"
          },
          "subscription": {
            "type": "string"
          },
          "problem": {
            "type": "string"
          }
        }
      },
      "SourceTask": {
        "type": "object",
        "additionalProperties": false,
        "required": [
          "name",
          "id",
          "state",
          "startedAt",
          "checks"
        ],
        "properties": {
          "name": {
            "type": "string"
          },
          "id": {
            "type": "string"
          },
          "state": {
            "type": "string"
          },
          "startedAt": {
            "type": "string",
            "format": "date-time"
          },
          "completedAt": {
            "type": "string",
            "format": "date-time"
          },
          "checks": {
            "type": "integer",
            "minimum": 0
          }
        }
      },
      "SourcePreparation": {
        "type": "object",
        "additionalProperties": false,
        "required": [
          "startedAt",
          "deadline",
          "tasks"
        ],
        "properties": {
          "startedAt": {
            "type": "string",
            "format": "date-time"
          },
          "deadline": {
            "type": "string",
            "format": "date-time"
          },
          "nextCheck": {
            "type": "string",
            "format": "date-time"
          },
          "tasks": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/SourceTask"
            }
          }
        },
        "description": "Public progress only. Checkpoint bytes, frozen operation requests and installed Gateway URLs remain private."
      },
      "EventResult": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string"
          },
          "state": {
            "enum": [
              "accepted",
              "submitted",
              "skipped",
              "failed",
              "expired",
              "preparing",
              "waiting",
              "needs-attention",
              "cancelled"
            ]
          },
          "run": {
            "type": "object",
            "description": "Present once the occurrence has a run.",
            "properties": {
              "state": {
                "enum": [
                  "queued",
                  "running",
                  "completed",
                  "failed",
                  "interrupted"
                ]
              },
              "result": {
                "type": "object",
                "description": "Present once the run completed.",
                "properties": {
                  "disposition": {
                    "type": "object"
                  },
                  "handoffTarget": {
                    "type": [
                      "object",
                      "null"
                    ]
                  }
                },
                "required": [
                  "disposition",
                  "handoffTarget"
                ],
                "additionalProperties": false
              }
            },
            "required": [
              "state"
            ],
            "additionalProperties": false
          }
        },
        "required": [
          "id",
          "state"
        ],
        "additionalProperties": false
      },
      "CalculatorPin": {
        "type": "object",
        "description": "The installation's statement that each allowed tool computes a deterministic function of the inputs it echoes and the tables it reports, calling no model. Only on a record MCP profile.",
        "properties": {
          "name": {
            "type": "string",
            "minLength": 1,
            "maxLength": 256
          },
          "version": {
            "type": "string",
            "minLength": 1,
            "maxLength": 256
          }
        },
        "required": [
          "name",
          "version"
        ],
        "additionalProperties": false
      },
      "CalculationBinding": {
        "type": "object",
        "description": "Required exactly when the operation's profile names a calculator. Binds each echoed input to a parameter of the source (never runAt) and each reported table to its maximum age in seconds.",
        "properties": {
          "inputs": {
            "type": "object",
            "maxProperties": 64,
            "propertyNames": {
              "type": "string",
              "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$"
            },
            "additionalProperties": {
              "type": "string",
              "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$"
            }
          },
          "tables": {
            "type": "object",
            "maxProperties": 64,
            "propertyNames": {
              "type": "string",
              "pattern": "^[a-zA-Z0-9_.-]{1,128}$"
            },
            "additionalProperties": {
              "type": "integer",
              "minimum": 1,
              "maximum": 315360000
            }
          }
        },
        "required": [
          "inputs",
          "tables"
        ],
        "additionalProperties": false
      },
      "CalculationLineage": {
        "type": "object",
        "properties": {
          "calculator": {
            "$ref": "#/components/schemas/CalculatorPin"
          },
          "status": {
            "enum": [
              "computed",
              "input-missing",
              "cannot-compute"
            ]
          },
          "inputs": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/CalculationInput"
            }
          },
          "asOf": {
            "type": "object",
            "additionalProperties": {
              "type": "string"
            }
          }
        },
        "required": [
          "calculator",
          "status",
          "inputs",
          "asOf"
        ],
        "additionalProperties": false
      },
      "CalculationInput": {
        "type": "object",
        "description": "An input the calculator echoed, the parameter it is bound to, and where that parameter's value came from: the case or an earlier source, and the pointer.",
        "properties": {
          "name": {
            "type": "string"
          },
          "parameter": {
            "type": "string"
          },
          "source": {
            "type": "string"
          },
          "pointer": {
            "type": "string"
          }
        },
        "required": [
          "name",
          "parameter",
          "source",
          "pointer"
        ],
        "additionalProperties": false
      },
      "JournalActor": {
        "description": "Who Runner can say initiated a change. Never a person: Runner cannot know one. installation is whoever holds the owner bearer, named by the boot line's owner; a trigger acts at a revision; a trigger-credential is an event delivery whose X-Trigger-Token was the trigger's current key, named by the revision the key was issued at (null for a key issued before the journal began), never by the token or its digest; a delivery refused after its credential was authenticated is that credential's, as it was then, even if the key is rotated before the refusal is recorded; a cloud-connection is a cloud signal Runner discarded; runner is Runner itself.",
        "oneOf": [
          {
            "type": "object",
            "required": [
              "kind",
              "owner"
            ],
            "additionalProperties": false,
            "properties": {
              "kind": {
                "const": "installation"
              },
              "owner": {
                "type": "string"
              }
            }
          },
          {
            "type": "object",
            "required": [
              "kind",
              "trigger",
              "revision"
            ],
            "additionalProperties": false,
            "properties": {
              "kind": {
                "const": "trigger"
              },
              "trigger": {
                "type": "string"
              },
              "revision": {
                "type": "integer",
                "minimum": 1
              }
            }
          },
          {
            "type": "object",
            "required": [
              "kind",
              "trigger",
              "keyRevision"
            ],
            "additionalProperties": false,
            "properties": {
              "kind": {
                "const": "trigger-credential"
              },
              "trigger": {
                "type": "string"
              },
              "keyRevision": {
                "type": [
                  "integer",
                  "null"
                ],
                "minimum": 1
              }
            }
          },
          {
            "type": "object",
            "required": [
              "kind",
              "connection"
            ],
            "additionalProperties": false,
            "properties": {
              "kind": {
                "const": "cloud-connection"
              },
              "connection": {
                "type": "string"
              }
            }
          },
          {
            "type": "object",
            "required": [
              "kind"
            ],
            "additionalProperties": false,
            "properties": {
              "kind": {
                "const": "runner"
              }
            }
          }
        ]
      },
      "JournalConcerns": {
        "type": "object",
        "description": "The ids a change is about, each present only where it applies. An entry that names a job also names its release.",
        "additionalProperties": false,
        "properties": {
          "job": {
            "type": "string"
          },
          "release": {
            "type": "string"
          },
          "trigger": {
            "type": "string"
          },
          "occurrence": {
            "type": "string"
          },
          "run": {
            "type": "string"
          }
        }
      },
      "JournalInterruption": {
        "type": "object",
        "description": "An interruption's own time. seen true: Runner saw the stop, at at. seen false: Runner found the work at a restart and cannot know when it stopped; it was running at lastKnownRunning, the last time Runner recorded it alive (absent when the journal holds no such time), and had stopped by the restart, the runner.started entry at sequence restart.",
        "required": [
          "seen"
        ],
        "additionalProperties": false,
        "properties": {
          "seen": {
            "type": "boolean"
          },
          "at": {
            "type": "string"
          },
          "lastKnownRunning": {
            "type": "string"
          },
          "restart": {
            "type": "integer",
            "minimum": 1
          }
        }
      },
      "JournalEntry": {
        "type": "object",
        "description": "One entry of the journal of job activity (docs/design/activity-journal.md): one change of state Runner made, written in the transaction that made it, or a refused request to start work. The operator's own log: not chained, not signed, and binding nothing against the operator. It holds no inputs, secrets, tokens or digests of either. The members after reason are particular to kinds, as their descriptions say; a member added later raises entryVersion.",
        "required": [
          "sequence",
          "entryVersion",
          "kind",
          "at",
          "by",
          "concerns"
        ],
        "additionalProperties": false,
        "properties": {
          "sequence": {
            "type": "integer",
            "minimum": 1,
            "description": "The entry's place in the journal, from 1, in the order changes committed: the cursor."
          },
          "entryVersion": {
            "const": "1"
          },
          "kind": {
            "enum": [
              "trigger.configured",
              "trigger.paused",
              "trigger.resumed",
              "trigger.key-rotated",
              "occurrence.received",
              "occurrence.skipped",
              "occurrence.preparing",
              "occurrence.ready",
              "occurrence.submitted",
              "occurrence.failed",
              "occurrence.expired",
              "occurrence.needs-attention",
              "occurrence.cancelled",
              "occurrence.reconciled",
              "run.queued",
              "run.started",
              "run.expired",
              "run.completed",
              "run.failed",
              "run.interrupted",
              "release.previewed",
              "job.created",
              "job.upgraded",
              "admission.refused",
              "journal.began",
              "runner.started",
              "runner.stopped"
            ]
          },
          "at": {
            "type": "string",
            "description": "When Runner wrote the entry, by its own clock. Order is sequence, never at."
          },
          "by": {
            "$ref": "#/components/schemas/JournalActor"
          },
          "concerns": {
            "$ref": "#/components/schemas/JournalConcerns"
          },
          "revision": {
            "type": "integer",
            "minimum": 1,
            "description": "The trigger revision: after the change, for a change of a trigger; the one an occurrence was admitted under, for the occurrence and its run."
          },
          "from": {
            "type": [
              "string",
              "null"
            ],
            "description": "The record's state before the change, for triggers (paused or enabled), occurrences and runs; null when the change created the record. Absent for a kind that concerns no record with a state."
          },
          "to": {
            "type": "string",
            "description": "The record's state after the change. Absent for a kind that concerns no record with a state."
          },
          "reason": {
            "type": "string",
            "description": "The reason or problem text Runner recorded with the change, where the record serves one, cut at 1,024 bytes; for a discarded cloud signal, the reason Runner gives."
          },
          "previousRevision": {
            "type": [
              "integer",
              "null"
            ],
            "minimum": 1,
            "description": "trigger.*: the trigger's revision before the change; null for a new trigger. The values of both are the trigger's snapshots, never copied here."
          },
          "triggerKind": {
            "enum": [
              "schedule",
              "event",
              "file",
              "cloud"
            ],
            "description": "trigger.configured: the kind of trigger."
          },
          "keyIssued": {
            "const": true,
            "description": "trigger.resumed: the event trigger's first key was issued at this revision. The key is in the answer to the request, never here."
          },
          "nextAt": {
            "type": "string",
            "description": "trigger.resumed, for a schedule: its next time."
          },
          "occurrenceKind": {
            "enum": [
              "schedule",
              "event",
              "file",
              "cloud"
            ],
            "description": "An occurrence's admission (from null): the kind of trigger it came from."
          },
          "scheduledAt": {
            "type": "string",
            "description": "An occurrence's admission: as the occurrence holds it."
          },
          "missedFrom": {
            "type": "string",
            "description": "An occurrence's admission: as the occurrence holds it."
          },
          "missedThrough": {
            "type": "string",
            "description": "An occurrence's admission: as the occurrence holds it."
          },
          "expiresAt": {
            "type": "string",
            "description": "An occurrence's admission: as the occurrence holds it."
          },
          "deadline": {
            "type": "string",
            "description": "occurrence.preparing, for a durable preparation: its deadline."
          },
          "readyUntil": {
            "type": "string",
            "description": "occurrence.ready, for a durable preparation: until when its run may be admitted."
          },
          "chainSequence": {
            "type": "integer",
            "minimum": 1,
            "description": "run.completed: the sequence of the run's entry in the installation's chain of runs, appended in the same transaction."
          },
          "interruption": {
            "$ref": "#/components/schemas/JournalInterruption"
          },
          "packId": {
            "type": "string",
            "description": "release.previewed."
          },
          "packVersion": {
            "type": "string",
            "description": "release.previewed."
          },
          "packDigest": {
            "type": "string",
            "description": "release.previewed."
          },
          "runtimeDigest": {
            "type": "string",
            "description": "release.previewed: the release's Runtime; runner.started: the Runtime this process pinned."
          },
          "tests": {
            "type": "string",
            "description": "release.previewed: the state of the release's saved tests."
          },
          "request": {
            "enum": [
              "submit-run",
              "deliver-event",
              "create-job",
              "cloud-signal"
            ],
            "description": "admission.refused: the request refused. A refusal's entry is best effort: if the store cannot write it, the refusal is answered as it was and has no entry."
          },
          "status": {
            "enum": [
              400,
              401,
              409,
              422,
              429
            ],
            "description": "admission.refused: the HTTP status the request was answered with. Absent for a cloud signal."
          },
          "code": {
            "type": "string",
            "description": "admission.refused: the error code the request was answered with. Absent for a cloud signal."
          },
          "coalescedSeconds": {
            "const": 60,
            "description": "admission.refused: identical refusals in this many seconds after the entry are not entries."
          },
          "held": {
            "type": "object",
            "description": "journal.began: what the store held when its journal began, none of which has an entry.",
            "required": [
              "jobs",
              "triggers",
              "occurrences",
              "runs"
            ],
            "additionalProperties": false,
            "properties": {
              "jobs": {
                "type": "integer",
                "minimum": 0
              },
              "triggers": {
                "type": "integer",
                "minimum": 0
              },
              "occurrences": {
                "type": "integer",
                "minimum": 0
              },
              "runs": {
                "type": "integer",
                "minimum": 0
              }
            }
          },
          "version": {
            "type": "string",
            "description": "runner.started: the Runner build."
          }
        }
      },
      "JournalPage": {
        "type": "object",
        "required": [
          "journalBegan",
          "items",
          "next",
          "more"
        ],
        "additionalProperties": false,
        "properties": {
          "journalBegan": {
            "type": "string",
            "description": "When the store's journal began. Nothing before it has an entry, and nothing is back-filled."
          },
          "items": {
            "type": "array",
            "maxItems": 50,
            "items": {
              "$ref": "#/components/schemas/JournalEntry"
            }
          },
          "next": {
            "type": "integer",
            "minimum": 0,
            "description": "The sequence of the page's last entry, or the cursor given when a forward page is empty (0 when a backward page is empty): the after of the next forward request. It never resets to 0 on a forward page."
          },
          "more": {
            "type": "boolean",
            "description": "Another page is already available: after a forward page, later entries; after a backward page (tail or before), entries older than the page."
          },
          "before": {
            "type": "integer",
            "minimum": 0,
            "description": "Only in the answer to a request with tail or before: the sequence of the page's first entry, the before of the request for the next older page (the cursor given, or 0 for the newest page, when the page is empty). Forward answers do not carry it."
          }
        }
      },
      "InputMappingV3": {
        "type": "object",
        "properties": {
          "version": {
            "const": 3
          },
          "case": {
            "$ref": "#/components/schemas/CaseMapping"
          },
          "sources": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/MappingSource"
            },
            "maxItems": 16
          },
          "admits": {
            "$ref": "#/components/schemas/Admission"
          },
          "unmapped": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "maxItems": 256,
            "uniqueItems": true
          },
          "unmappedEvidence": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "maxItems": 128,
            "uniqueItems": true
          },
          "profile": {
            "type": "string",
            "enum": [
              "base"
            ],
            "description": "Explicit Base is required for retained-column conversions. Absent, ordinary legacy behavior and limits apply."
          }
        },
        "required": [
          "version"
        ],
        "additionalProperties": false,
        "anyOf": [
          {
            "required": [
              "case"
            ]
          },
          {
            "required": [
              "sources"
            ],
            "properties": {
              "sources": {
                "minItems": 1
              }
            }
          }
        ],
        "description": "A dialect document of version 3 (spec/dialect.md sections 4.3 and 4.4): version 2's members but provider, facts and evidence, which version 3 does not carry. A request's version-3 document is kept as written: one Runner would write otherwise (an optional member written empty, or provider, facts or evidence) is refused, so that its digest, the preparation's mappingDigest, is the digest of the document's own canonical bytes. It is read only at source.mapping (input.source.mapping in a preview request and in an event delivery), each member named exactly so: one under a member that is one of those names but for case, or beside such a member, is refused as invalid_source_input. Its sources are bound, or are bound at import (SourceInput.import)."
      },
      "BindingDocument": {
        "type": "object",
        "additionalProperties": false,
        "required": [
          "dialect",
          "sources"
        ],
        "description": "spec/dialect.md section 4.4: binds each unbound source of one published dialect to input profiles of this installation, by id and digest, and changes nothing else: an operation to one profile, and a research source to its AI profile (profile and profileDigest) and a web profile for each web capability it asks for (webProfiles). Its digest is the SHA-256 of its gateway canonical bytes; no preparation holds it.",
        "properties": {
          "dialect": {
            "type": "string",
            "pattern": "^sha256:[a-f0-9]{64}$",
            "description": "The digest of the published dialect's gateway canonical bytes."
          },
          "sources": {
            "type": "object",
            "maxProperties": 16,
            "propertyNames": {
              "type": "string",
              "pattern": "^[a-zA-Z][a-zA-Z0-9_-]{0,63}$"
            },
            "additionalProperties": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "profile",
                "profileDigest"
              ],
              "properties": {
                "profile": {
                  "type": "string",
                  "minLength": 1
                },
                "profileDigest": {
                  "type": "string",
                  "pattern": "^sha256:[a-f0-9]{64}$"
                },
                "webProfiles": {
                  "type": "object",
                  "additionalProperties": false,
                  "maxProperties": 2,
                  "properties": {
                    "search": {
                      "type": "object",
                      "additionalProperties": false,
                      "required": [
                        "profile",
                        "profileDigest"
                      ],
                      "properties": {
                        "profile": {
                          "type": "string",
                          "minLength": 1
                        },
                        "profileDigest": {
                          "type": "string",
                          "pattern": "^sha256:[a-f0-9]{64}$"
                        }
                      }
                    },
                    "page": {
                      "type": "object",
                      "additionalProperties": false,
                      "required": [
                        "profile",
                        "profileDigest"
                      ],
                      "properties": {
                        "profile": {
                          "type": "string",
                          "minLength": 1
                        },
                        "profileDigest": {
                          "type": "string",
                          "pattern": "^sha256:[a-f0-9]{64}$"
                        }
                      }
                    }
                  },
                  "description": "For a research source, REQUIRED: a profile for each web capability it asks for, exactly those, written even when empty."
                }
              }
            }
          }
        }
      },
      "DialectImport": {
        "type": "object",
        "additionalProperties": false,
        "required": [
          "dialect",
          "binding"
        ],
        "description": "The import step. Runner binds the published dialect with the binding document under this installation's input profiles, refusing by name a dialect that is not of version 3, has no unbound source or is written otherwise than Runner keeps it; a binding for another dialect, that leaves an unbound source unbound, binds a source the dialect does not have or one already bound, or names a member other than a profile's id and digest; and a profile this installation does not hold by that id and digest, of another shape than the source's, or whose adapter is not the source's record. A research source is bound by exactly its AI profile, its digest and its web profiles, the web profiles exactly the web capabilities it asks for (input-malformed otherwise; three web assignments are input-over-bound), each profile of class generated, declaring the capability it is bound for and the source's model (profile-mismatch otherwise). The bound dialect is the published one with each unbound operation's platform, operation, shape and record replaced by the profile, and each unbound research source's three assignment members added, every other member as written. Runner keeps it as the input's mapping and keeps both documents here, as given, beside the run: the operator's record of what was bound, which no preparation holds. Every later preparation of the input, a dispatcher's and verify-run's included, binds them again under the profiles it is given and requires the mapping to be the bound dialect.",
        "properties": {
          "dialect": {
            "oneOf": [
              {
                "$ref": "#/components/schemas/InputMappingV3"
              },
              {
                "$ref": "#/components/schemas/NamedInputMappingV3"
              }
            ]
          },
          "binding": {
            "$ref": "#/components/schemas/BindingDocument"
          }
        }
      },
      "InstalledInputProfile": {
        "type": "object",
        "properties": {
          "profile": {
            "$ref": "#/components/schemas/InputProfile"
          },
          "digest": {
            "type": "string",
            "pattern": "^sha256:[a-f0-9]{64}$"
          }
        },
        "required": [
          "profile",
          "digest"
        ],
        "additionalProperties": false
      },
      "SetAsideInputProfile": {
        "type": "object",
        "description": "A registered profile Runner set aside when it opened its store: one an earlier Runner admitted and this Runner's admission refuses on its own. Never bound: a binding, job or run that names it is refused as input_profile_set_aside, naming it. A failure of the stored set, such as a malformed row, more than 16 profiles, an ID stored twice or the ID of a configured profile of another definition, still refuses to open the store; a configured profile this Runner refuses still refuses to start.",
        "properties": {
          "profile": {
            "type": "object",
            "description": "The stored profile, which this Runner's form refuses: its stored bytes, served compacted and JSON-escaped as every answer is. The store's row keeps them exactly."
          },
          "digest": {
            "type": "string",
            "pattern": "^sha256:[a-f0-9]{64}$",
            "description": "The profile's digest, as a binding to it names it."
          },
          "state": {
            "const": "set-aside"
          },
          "reason": {
            "type": "string",
            "description": "This Runner's refusal of the profile."
          }
        },
        "required": [
          "profile",
          "digest",
          "state",
          "reason"
        ],
        "additionalProperties": false
      },
      "ManualExecutionBinding": {
        "type": "object",
        "additionalProperties": false,
        "required": [
          "version",
          "workspace",
          "jobId",
          "jobRevision",
          "releaseId",
          "releaseProfile",
          "releaseDigest",
          "releaseBytes"
        ],
        "properties": {
          "version": {
            "const": 1
          },
          "workspace": {
            "type": "string"
          },
          "jobId": {
            "type": "string"
          },
          "jobRevision": {
            "type": "string",
            "pattern": "^[1-9][0-9]{0,19}$"
          },
          "releaseId": {
            "type": "string"
          },
          "releaseProfile": {
            "const": "judgment-pack-runner/canonical/1"
          },
          "releaseDigest": {
            "type": "string",
            "pattern": "^sha256:[a-f0-9]{64}$"
          },
          "releaseBytes": {
            "type": "string",
            "contentEncoding": "base64",
            "maxLength": 11184812
          }
        },
        "description": "Private experimental exact canonical typed Release preimage. Read-only binding material grants no registration or execution permission."
      },
      "ConversionSpec": {
        "type": "object",
        "additionalProperties": false,
        "required": [
          "version",
          "revision",
          "schemaSha256",
          "corpusSha256"
        ],
        "properties": {
          "version": {
            "type": "string",
            "minLength": 1
          },
          "revision": {
            "type": "string",
            "pattern": "^[0-9a-f]{40}$"
          },
          "schemaSha256": {
            "type": "string",
            "pattern": "^sha256:[0-9a-f]{64}$"
          },
          "corpusSha256": {
            "type": "string",
            "pattern": "^sha256:[0-9a-f]{64}$"
          }
        }
      },
      "ConversionContract": {
        "type": "object",
        "additionalProperties": false,
        "required": [
          "contract",
          "spec",
          "profile",
          "roles"
        ],
        "properties": {
          "contract": {
            "type": "string",
            "enum": [
              "retained-column/1"
            ]
          },
          "spec": {
            "$ref": "#/components/schemas/ConversionSpec"
          },
          "profile": {
            "type": "string",
            "enum": [
              "base"
            ]
          },
          "roles": {
            "type": "array",
            "minItems": 1,
            "maxItems": 5,
            "uniqueItems": true,
            "items": {
              "type": "string",
              "enum": [
                "document-validation",
                "preview",
                "preparation",
                "preparation-verification",
                "producer-carrier"
              ]
            }
          }
        },
        "description": "Experimental immutable Draft selection. Roles follow the listed order. The complete tuple must equal the installed reviewed package manifest; a caller cannot install a revision, maxima or producer authority. Extended Runner is unsupported."
      },
      "ConversionCapability": {
        "oneOf": [
          {
            "type": "object",
            "additionalProperties": false,
            "required": [
              "contract",
              "spec",
              "profile",
              "role",
              "limits"
            ],
            "properties": {
              "contract": {
                "type": "string",
                "enum": [
                  "retained-column/1"
                ]
              },
              "spec": {
                "$ref": "#/components/schemas/ConversionSpec"
              },
              "profile": {
                "type": "string",
                "enum": [
                  "base"
                ]
              },
              "role": {
                "type": "string",
                "enum": [
                  "document-validation"
                ]
              },
              "limits": {
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "documentBytes",
                  "frameBytes"
                ],
                "properties": {
                  "documentBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "frameBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  }
                }
              }
            }
          },
          {
            "type": "object",
            "additionalProperties": false,
            "required": [
              "contract",
              "spec",
              "profile",
              "role",
              "limits"
            ],
            "properties": {
              "contract": {
                "type": "string",
                "enum": [
                  "retained-column/1"
                ]
              },
              "spec": {
                "$ref": "#/components/schemas/ConversionSpec"
              },
              "profile": {
                "type": "string",
                "enum": [
                  "base"
                ]
              },
              "role": {
                "type": "string",
                "enum": [
                  "preview"
                ]
              },
              "limits": {
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "documentBytes",
                  "combinedBytes",
                  "frameBytes",
                  "profilesBytes",
                  "requestBodyBytes",
                  "inputReplyBytes"
                ],
                "properties": {
                  "documentBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "combinedBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "frameBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "profilesBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "requestBodyBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "inputReplyBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  }
                }
              }
            }
          },
          {
            "type": "object",
            "additionalProperties": false,
            "required": [
              "contract",
              "spec",
              "profile",
              "role",
              "limits"
            ],
            "properties": {
              "contract": {
                "type": "string",
                "enum": [
                  "retained-column/1"
                ]
              },
              "spec": {
                "$ref": "#/components/schemas/ConversionSpec"
              },
              "profile": {
                "type": "string",
                "enum": [
                  "base"
                ]
              },
              "role": {
                "type": "string",
                "enum": [
                  "preparation"
                ]
              },
              "limits": {
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "documentBytes",
                  "combinedBytes",
                  "frameBytes",
                  "preparationBytes",
                  "recordBytes",
                  "profilesBytes",
                  "requestBodyBytes",
                  "inputReplyBytes",
                  "releaseStoredBytes",
                  "runStoredBytes",
                  "exportBaseBytes",
                  "exportWireBytes"
                ],
                "properties": {
                  "documentBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "combinedBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "frameBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "preparationBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "recordBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "profilesBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "requestBodyBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "inputReplyBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "releaseStoredBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "runStoredBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "exportBaseBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "exportWireBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  }
                }
              },
              "producerGrammar": {
                "type": "string",
                "enum": [
                  "desk-reviewed-input/1"
                ]
              }
            }
          },
          {
            "type": "object",
            "additionalProperties": false,
            "required": [
              "contract",
              "spec",
              "profile",
              "role",
              "limits"
            ],
            "properties": {
              "contract": {
                "type": "string",
                "enum": [
                  "retained-column/1"
                ]
              },
              "spec": {
                "$ref": "#/components/schemas/ConversionSpec"
              },
              "profile": {
                "type": "string",
                "enum": [
                  "base"
                ]
              },
              "role": {
                "type": "string",
                "enum": [
                  "preparation-verification"
                ]
              },
              "limits": {
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "documentBytes",
                  "combinedBytes",
                  "frameBytes",
                  "preparationBytes",
                  "recordBytes",
                  "profilesBytes",
                  "requestBodyBytes",
                  "inputReplyBytes",
                  "releaseStoredBytes",
                  "runStoredBytes",
                  "exportBaseBytes",
                  "exportWireBytes"
                ],
                "properties": {
                  "documentBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "combinedBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "frameBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "preparationBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "recordBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "profilesBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "requestBodyBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "inputReplyBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "releaseStoredBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "runStoredBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "exportBaseBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "exportWireBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  }
                }
              },
              "producerGrammar": {
                "type": "string",
                "enum": [
                  "desk-reviewed-input/1"
                ]
              }
            }
          },
          {
            "type": "object",
            "additionalProperties": false,
            "required": [
              "contract",
              "spec",
              "profile",
              "role",
              "limits"
            ],
            "properties": {
              "contract": {
                "type": "string",
                "enum": [
                  "retained-column/1"
                ]
              },
              "spec": {
                "$ref": "#/components/schemas/ConversionSpec"
              },
              "profile": {
                "type": "string",
                "enum": [
                  "base"
                ]
              },
              "role": {
                "type": "string",
                "enum": [
                  "producer-carrier"
                ]
              },
              "limits": {
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "originalSnapshotBytes",
                  "carrierBytes",
                  "grantBytes",
                  "adapterStdoutBytes",
                  "responseBytes",
                  "profilesBytes"
                ],
                "properties": {
                  "originalSnapshotBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "carrierBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "grantBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "adapterStdoutBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "responseBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  },
                  "profilesBytes": {
                    "type": "integer",
                    "minimum": 1,
                    "maximum": 9007199254740991
                  }
                }
              },
              "producerGrammar": {
                "type": "string",
                "enum": [
                  "desk-reviewed-input/1"
                ]
              }
            }
          }
        ],
        "description": "Trusted installation metadata, independent of the source selector. Every integer uses a positive non-exponent JSON token. Producer grammar must match the approved source/adapter pin."
      },
      "RetainedColumnAvailability": {
        "type": "object",
        "properties": {
          "contractVersion": {
            "const": "1"
          },
          "column": {
            "type": "string",
            "minLength": 1,
            "maxLength": 160
          }
        },
        "required": [
          "contractVersion",
          "column"
        ],
        "additionalProperties": false
      },
      "RetainedColumnTransformation": {
        "type": "object",
        "properties": {
          "contractVersion": {
            "const": "1"
          },
          "column": {
            "type": "string",
            "minLength": 1,
            "maxLength": 160
          },
          "input": {
            "$ref": "#/components/schemas/RetainedColumnInput"
          },
          "result": {
            "$ref": "#/components/schemas/RetainedColumnResult"
          },
          "researchIdentity": {
            "$ref": "#/components/schemas/RetainedColumnResearchIdentity"
          }
        },
        "required": [
          "contractVersion",
          "column",
          "input",
          "result"
        ],
        "additionalProperties": false
      },
      "RetainedColumnConversion": {
        "oneOf": [
          {
            "type": "object",
            "properties": {
              "contractVersion": {
                "const": "1"
              },
              "column": {
                "type": "string",
                "minLength": 1,
                "maxLength": 160
              },
              "kind": {
                "enum": [
                  "text",
                  "decimal",
                  "number",
                  "research-value"
                ]
              }
            },
            "required": [
              "contractVersion",
              "column",
              "kind"
            ],
            "additionalProperties": false
          },
          {
            "type": "object",
            "properties": {
              "contractVersion": {
                "const": "1"
              },
              "column": {
                "type": "string",
                "minLength": 1,
                "maxLength": 160
              },
              "kind": {
                "const": "boolean"
              },
              "trueValue": {
                "type": "string",
                "minLength": 1,
                "maxLength": 160
              },
              "falseValue": {
                "type": "string",
                "minLength": 1,
                "maxLength": 160
              }
            },
            "required": [
              "contractVersion",
              "column",
              "kind",
              "trueValue",
              "falseValue"
            ],
            "additionalProperties": false
          }
        ]
      },
      "RetainedColumnInput": {
        "oneOf": [
          {
            "type": "object",
            "properties": {
              "state": {
                "const": "missing"
              }
            },
            "required": [
              "state"
            ],
            "additionalProperties": false
          },
          {
            "type": "object",
            "properties": {
              "state": {
                "const": "present"
              },
              "ref": {
                "$ref": "#/components/schemas/RetainedColumnInputReference"
              }
            },
            "required": [
              "state",
              "ref"
            ],
            "additionalProperties": false
          }
        ]
      },
      "RetainedColumnInputReference": {
        "type": "object",
        "properties": {
          "frameSha256": {
            "type": "string",
            "pattern": "^sha256:[0-9a-f]{64}$"
          },
          "location": {
            "enum": [
              "values",
              "research-value"
            ]
          }
        },
        "required": [
          "frameSha256",
          "location"
        ],
        "additionalProperties": false
      },
      "RetainedColumnResearchIdentity": {
        "type": "object",
        "properties": {
          "recipeRevision": {
            "type": "string",
            "minLength": 1,
            "maxLength": 160
          },
          "fieldSha256": {
            "type": "string",
            "pattern": "^sha256:[0-9a-f]{64}$"
          }
        },
        "required": [
          "recipeRevision",
          "fieldSha256"
        ],
        "additionalProperties": false
      },
      "RetainedColumnResult": {
        "oneOf": [
          {
            "type": "object",
            "properties": {
              "state": {
                "const": "value"
              },
              "json": {
                "type": "string"
              }
            },
            "required": [
              "state",
              "json"
            ],
            "additionalProperties": false
          },
          {
            "type": "object",
            "properties": {
              "state": {
                "const": "omitted"
              },
              "reason": {
                "enum": [
                  "missing",
                  "blank",
                  "legacy-null",
                  "unavailable"
                ]
              }
            },
            "required": [
              "state",
              "reason"
            ],
            "additionalProperties": false
          }
        ]
      },
      "NamedInputMappingV2": {
        "type": "object",
        "additionalProperties": false,
        "properties": {
          "version": {
            "type": "string",
            "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$"
          },
          "case": {
            "$ref": "#/components/schemas/CaseMapping"
          },
          "sources": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/MappingSource"
            },
            "maxItems": 16
          },
          "admits": {
            "$ref": "#/components/schemas/Admission"
          },
          "unmapped": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "maxItems": 256,
            "uniqueItems": true
          },
          "unmappedEvidence": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "maxItems": 128,
            "uniqueItems": true
          },
          "profile": {
            "type": "string",
            "enum": [
              "base"
            ],
            "description": "Explicit Base is required for retained-column conversions. Absent, ordinary legacy behavior and limits apply."
          },
          "formatVersion": {
            "const": "2.0.0"
          },
          "id": {
            "type": "string",
            "minLength": 1,
            "maxLength": 1024
          }
        },
        "required": [
          "formatVersion",
          "id",
          "version",
          "case"
        ]
      },
      "NamedInputMappingV3": {
        "type": "object",
        "additionalProperties": false,
        "properties": {
          "version": {
            "type": "string",
            "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$"
          },
          "case": {
            "$ref": "#/components/schemas/CaseMapping"
          },
          "sources": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/MappingSource"
            },
            "maxItems": 16
          },
          "admits": {
            "$ref": "#/components/schemas/Admission"
          },
          "unmapped": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "maxItems": 256,
            "uniqueItems": true
          },
          "unmappedEvidence": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "maxItems": 128,
            "uniqueItems": true
          },
          "profile": {
            "type": "string",
            "enum": [
              "base"
            ],
            "description": "Explicit Base is required for retained-column conversions. Absent, ordinary legacy behavior and limits apply."
          },
          "formatVersion": {
            "const": "3.0.0"
          },
          "id": {
            "type": "string",
            "minLength": 1,
            "maxLength": 1024
          }
        },
        "required": [
          "formatVersion",
          "id",
          "version",
          "case"
        ]
      },
      "ProducerConversionLimits": {
        "type": "object",
        "additionalProperties": false,
        "required": [
          "originalSnapshotBytes",
          "carrierBytes",
          "grantBytes",
          "adapterStdoutBytes",
          "responseBytes",
          "profilesBytes"
        ],
        "properties": {
          "originalSnapshotBytes": {
            "type": "integer",
            "minimum": 1,
            "maximum": 524288
          },
          "carrierBytes": {
            "type": "integer",
            "minimum": 1,
            "maximum": 3145728
          },
          "grantBytes": {
            "type": "integer",
            "minimum": 1,
            "maximum": 3145728
          },
          "adapterStdoutBytes": {
            "type": "integer",
            "minimum": 1,
            "maximum": 3145728
          },
          "responseBytes": {
            "type": "integer",
            "minimum": 1,
            "maximum": 5242880
          },
          "profilesBytes": {
            "type": "integer",
            "minimum": 1,
            "maximum": 81920
          }
        },
        "description": "Downward-only caller ceilings derived from the approved producer profile. They grant no producer or installation authority. Retained with durable acquisition intent; resumed intent must match."
      }
    }
  }
}