diff --git a/.gitattributes b/.gitattributes index ca23e9c..383dad5 100644 --- a/.gitattributes +++ b/.gitattributes @@ -17,5 +17,8 @@ internal/dialect/testdata/** -text # Pinned policy prototype files have exact upstream checksums. internal/policy/prototype/** -text +# Candidate schemas, provenance, examples and vectors also retain exact bytes. +internal/policy/candidate/** -text + # The served authoring schema has a byte digest on every platform. internal/dialect/version2.schema.json -text diff --git a/NOTICE b/NOTICE index 30f1756..3bd91ec 100644 --- a/NOTICE +++ b/NOTICE @@ -13,3 +13,10 @@ the evaluation corpus, its manifest schema, and the pack fixtures it names. The exact embedded revision and per-file SHA-256 digests are recorded in internal/artifacts/jps//lock.json. + +The experimental offline Policy tools also embed unmodified nonnormative RFC +0023 prototype and proposed-draft contract candidate artifacts from that same +Apache-2.0 specification repository. Their separate exact source revisions, +per-file SHA-256 digests, upstream LICENSE and NOTICE are retained under +internal/policy/prototype/ and internal/policy/candidate/. The candidate is not +an adopted specification artifact or a conformance class. diff --git a/README.md b/README.md index 00a56b8..c8598bd 100644 --- a/README.md +++ b/README.md @@ -1136,3 +1136,62 @@ in [MCP clients](docs/mcp-clients.md#experimental-policy-prototype-tools). The RFC, prototype schemas and synthetic fixtures are bundled from specification revision `8a56a95d555c17640d2db4984363b779536b3c2a`, with per-file digests and licensing provenance. They are never fetched at runtime. + +### Proposed draft Policy contract candidate + +The same experimental commands additionally support the **unadopted, +proposed-draft** candidate `formatVersion: "1.0.0"` +([ADR-0060](docs/adr/0060-explicit-policy-candidate-format.md)). It is a review +candidate for RFC 0023, not a stable format, adopted standard or conformance +class. Its artifacts are pinned separately to Spec commit +`0852c5fa7726e51b36e574a5b110e7f5e012e03d` in +[the candidate provenance manifest](internal/policy/candidate/provenance.json). + +Default `contract` output and all prototype reports keep their existing shape +for strict clients. Explicit discovery returns a separate `registryVersion: "1"` +report; selecting one contract returns that format's provenance and capabilities: + +```bash +jpack experimental policy contract --all-formats --format json +jpack experimental policy contract --format-version 1.0.0 --format json +jpack experimental policy init --kind policy --format-version 1.0.0 --id urn:example:candidate --version 7.3.42 +jpack experimental policy schema --kind governing-adoption --format-version 1.0.0 +jpack experimental policy check candidate-adoption.json --materials retained-materials.json --format json +``` + +`--all-formats` and contract `--format-version` are mutually exclusive. Documents +with `formatVersion` select the candidate grammar explicitly; supported prototype +inputs continue using their exact wrapper. An optional `--format-version 1.0.0` +on canonicalize/digest/validate/check also selects candidate refusal handling for +malformed or selector-less input. It does not insert a missing selector, rewrite +an artifact or migrate bytes. Candidate Policies use `workspace-managed` or +`externally-managed`; `desk-managed` is refused. Artifact `version` remains +independent of the format selector. Candidate adoption requires retained +candidate Policy bytes; prototype Policies cannot satisfy those references. + +Candidate reports identify `formatVersion`, `proposed-draft` maturity, their +exact source pin and `candidateCapabilities`. Only a full candidate `check` +includes `candidateResult`, whose complete value is one of: + +```json +{"status":"valid","formatVersion":"1.0.0","maturity":"proposed-draft"} +{"status":"refused","code":"invalid-selector"} +``` + +The finite refusal codes and phase ordering are defined by the +[pinned candidate contract](internal/policy/candidate/README.md#5-resource-limits-and-refusal-classifications). +Runtime retains exit 0 for success, 1 for invalid content and 2 for unsupported +input; the nested result supplies the portable candidate classification. +Environment failures are operational errors and provide no candidate result. +Canonicalize/digest establish encoding and identity only; validate checks closed +document forms and local references, with retained materials unchecked. Their +reports omit `candidateResult`. + +The Go harness compares all 124 exact portable result objects, acquiring vector +sources lazily and preserving raw Pack numbers and every retained-byte identity. +It uses the shared registration/checking engine directly: valid distinct-byte +bundles can exceed the private 24 MiB JSON/base64 carrier or MCP's 16 MiB request +limit, especially when identical bytes are registered under multiple media +types. Those transport ceilings are unchanged. Agreement with these vectors +supplies no independently authored implementation evidence, approval, current +authority or permission. diff --git a/docs/adr/0060-explicit-policy-candidate-format.md b/docs/adr/0060-explicit-policy-candidate-format.md new file mode 100644 index 0000000..af0bc56 --- /dev/null +++ b/docs/adr/0060-explicit-policy-candidate-format.md @@ -0,0 +1,135 @@ +--- +status: accepted +date: 2026-10-18 +deciders: maintainer +--- + +# Add an explicit Policy contract candidate without changing prototype clients + +## Context and problem statement + +The RFC 0023 Policy contract candidate introduces `formatVersion: "1.0.0"` and +`workspace-managed` ownership intent. It remains proposed at draft maturity, +outside adopted specification and conformance artifacts. Existing Runtime +consumers strictly decode prototype reports; even an additive default field +would break their discovery and authoring flows. + +## Decision drivers + +- Preserve prototype 0.0.2 source bytes, provenance, reports and default discovery. +- Share exact-byte, anchor, material and typed Pack checks across both formats. +- Follow the candidate's finite result codes and ordered refusal phases. +- Keep current authority, source acquisition, signatures and evaluation outside Runtime. + +## Considered options + +- Replace the prototype grammar or silently migrate candidate bytes to it. +- Duplicate the Policy checking engine for the candidate. +- Add explicit dispatch and optional discovery around the shared offline engine. + +## Decision outcome + +Chosen option: explicit format dispatch around the shared engine. Candidate +artifacts are separately vendored from immutable Spec commit +`0852c5fa7726e51b36e574a5b110e7f5e012e03d`, with a complete per-file provenance +manifest and independent manifest digest test. Prototype files and ADR-0059 +remain unchanged. This record adopts no normative Policy format. + +The no-argument CLI/MCP contract remains exactly the prototype contract. +`contract --all-formats` and MCP `{allFormats:true}` explicitly request a separate +`registryVersion: "1"` report. An optional exact format selector requests a +single contract; the two discovery selectors are mutually exclusive. Init/schema +continue requiring explicit kind and format. Supplied documents dispatch by +their selector; an optional operation selector permits candidate classification +of malformed or missing document selectors without changing legacy refusals. +No document is silently migrated or tried against an older grammar. + +Candidate reports identify their own provenance and `proposed-draft` maturity, +carry the exact candidate capability artifact, and add `formatVersion`. +Candidate full checks alone add `candidateResult`: exactly the portable valid or +refusal object. Canonicalize/digest check encoding and identity; validate checks +document forms and local references. Neither narrower operation claims a full +retained-material check. Runtime retains invalid exit 1 and unsupported exit 2; +the nested candidate result supplies the portable code. Environment failures +produce no candidate result. + +Full checks measure/parse/select/canonicalize the root before registration count +and ordered material registration, then check its kind/schema and semantics. +Retained Policy references require the adopting candidate's exact format. +Resolution checks original raw bytes before parsing or optional canonical +identity, and Core structural validation receives the original Pack bytes. +Source and narrative bytes, registrations under distinct media types, consuming +role bounds and typed Pack references remain shared checks. + +Candidate URI assertions use the RFC 3986 `URI` production: a scheme is required +and a fragment is permitted. Component grammar distinguishes authority, IP +literals, user information, paths, queries and fragments; percent-encoded host +characters and IPvFuture literals are valid without network interpretation. +Generic ports remain digit strings without a network port-range restriction. +Only candidate schemas/init and candidate-consuming Pack structural checks opt +into this assertion. The structural engine validates the same raw Pack bytes and +bundled schema with a per-call URI format override; default Core and prototype +URI behavior and their cached schemas remain unchanged. + +The private Runtime base64 material transport remains separate from portable raw +vector inputs. Its 24 MiB material JSON ceiling and MCP's 16 MiB request-line +ceiling remain unchanged. Repeated registrations of identical large bytes can +fit the candidate's distinct-byte budget while exceeding an encoded transport +ceiling. The portable harness therefore uses the same shared post-parse checks +and raw registration function, acquires sources lazily in declaration order and +stops on the first failure. Passing all 124 vectors promises no larger wire +envelope, authority, conformance or independent implementation agreement. + +### Consequences + +- Existing strict prototype clients retain their default contract and reports. +- Candidate users opt into a proposed contract with explicit provenance and refusal scope. +- Shared checks must preserve format-specific phase ordering as well as byte identity. +- Revisit when RFC review adopts or replaces this candidate and the owning host contracts settle publication and current admission. + +## Material decision and review + +Material-decision impact categories: `public-surface`, `documented-claim`, +`security`, `dependency`. The candidate selector, explicit discovery and typed +results extend a public surface; vendored candidate artifacts add a dependency +boundary; ordered bounded input handling concerns the security posture. + +The maintainer authorized a temporary different-vendor review waiver for this +current Policy work. The recorded clean-room review of Runtime commit +`558df435bbc50fc872b14aceecae1d482b45898d`, performed by OpenAI/Codex +`gpt-6.1-sol` at `xhigh`, found two P2 issues and no P1 issue. The maintainer +accepted both findings: candidate URI assertions and private-carrier registration +phase ordering. The [review and dispositions on PR 296](https://github.com/Judgment-Pack/judgment-pack-runtime/pull/296#issuecomment-6254960095) +identify that reviewed commit and the bounded review's actual evidence. + +Commits `6dd003e29cccf7808227b98157e55cebce4b231b` and +`2e158c5105046594749139c955839a041331a106` implement those accepted findings, +including candidate-consuming Pack URI checks over unchanged bytes and schema. +The coordinator reports that the reviewer closed both findings at `2e158c5`. +Commit `38b06043283d2ae294653ca8f25c8c5db415dd9e` additionally preserves the +vendored candidate's exact bytes under Windows checkout conversion, addressing +the third P2 finding. The [final Runtime correction review](https://github.com/Judgment-Pack/judgment-pack-runtime/pull/296#issuecomment-6254971185) +closes all three findings through that commit. Focused +verification covers the 124 portable vectors, 62 standalone and 62 consuming +Pack URI probes, ordered private-wire refusals, schema/init parity and unchanged +Core/prototype URI behavior. Checkout verification with `core.autocrlf=true` +checks every vendored source digest/length and the independent provenance pin. + +The URI source correction is pinned to the exact candidate commit above and is +recorded in [Spec PR 217's clean-room review](https://github.com/Judgment-Pack/judgment-pack-spec/pull/217#issuecomment-6254970472). +That exact `0852c5f` source passed review without P1/P2 findings, 13 focused +tests, 124 portable vectors and 99 additional URI probes, and merged as +`a74a440cfc31d0e135cdc8035f3474b17f27f320` after repository CI passed. Runtime +retains the immutable reviewed source pin; its merge also requires repository CI. This +accepted status records the maintainer-authorized merge-ready procedural +transition; it does not adopt a normative Policy format or change the RFC's +Review status. All implementation, review and agreement evidence described here +is same-vendor work under the temporary waiver, never different-vendor review +or independently authored interoperability evidence. The waiver changes no +standing repository requirement. + +## More information + +- [Prototype decision](0059-experimental-offline-policy-tools.md) +- [Offline Policy architecture](../architecture.md#experimental-offline-policy-prototype) +- [Candidate source and provenance](../../internal/policy/candidate/provenance.json) diff --git a/docs/adr/README.md b/docs/adr/README.md index 8c5c84f..bb15b92 100644 --- a/docs/adr/README.md +++ b/docs/adr/README.md @@ -155,3 +155,4 @@ authority, and following it confers no conformance status on anything. | [0056](0056-version-3-dialect-authoring.md) | Check supported version-3 Dialect declarations through shared authoring tools | accepted | | [0057](0057-named-dialect-artifact-identity.md) | Share offline tools for named Dialect artifacts | accepted | | [0059](0059-experimental-offline-policy-tools.md) | Prototype Policy document and retained-reference checks offline | accepted | +| [0060](0060-explicit-policy-candidate-format.md) | Add an explicit Policy contract candidate without changing prototype clients | accepted | diff --git a/docs/architecture.md b/docs/architecture.md index df3f5f2..3ed6758 100644 --- a/docs/architecture.md +++ b/docs/architecture.md @@ -48,6 +48,26 @@ number domain. Source/schema/example provenance pins specification revision resource is fetched at runtime. The shared 16 MiB stdio line bound is unchanged, so JSON/base64 overhead reduces the maximum retained material a call can carry. +The proposed-draft, unadopted Policy contract candidate `1.0.0` is an additional +explicit format ([ADR-0060](adr/0060-explicit-policy-candidate-format.md)). Its +schemas, prose, examples and 124 portable vectors are pinned separately to Spec +commit `0852c5fa7726e51b36e574a5b110e7f5e012e03d`. Format selection, schema and +provenance differ; material identity, UTF-8 anchors and typed Pack coverage use +the same engine. Candidate adoption cannot consume prototype Policy bytes. +No-argument contract discovery and prototype reports retain their exact prior +shape for strict clients. All-format discovery requires explicit CLI +`--all-formats` or MCP `allFormats:true` and returns registry version 1. + +Candidate full checks return a bounded `candidateResult` with exactly the +portable status/code object, separate from Runtime diagnostics and exit status. +Root physical bounds, strict JSON, selection and canonical numeric domain precede +ordered registration; root schema and semantic checks follow registration. +Portable tests defer source acquisition to its phase and use shared raw +registration directly. Duplicate media registrations count bytes once but may +repeat base64 on the wire, so candidate agreement never widens the private +24 MiB material JSON or 16 MiB MCP ceiling. No candidate result establishes +current authority, permission, publication, review trust or independent agreement. + ## Artifact version arithmetic `internal/artifactversion` owns exact three-component parsing, comparison and diff --git a/docs/mcp-clients.md b/docs/mcp-clients.md index b386029..4095a58 100644 --- a/docs/mcp-clients.md +++ b/docs/mcp-clients.md @@ -499,3 +499,42 @@ limit: base64 expands retained bytes and JSON string escaping, document text and RPC framing consume more space. Consequently, not every bundle under the 16 MiB retained-byte limit fits a single MCP request. A client must bound the complete encoded request; CLI named-file input supports the larger material JSON envelope. + +### Explicit proposed-draft candidate selection + +The seven existing tools also serve the unadopted Policy contract candidate +`1.0.0`, at `proposed-draft` maturity, pinned to Spec commit +`0852c5fa7726e51b36e574a5b110e7f5e012e03d` +([ADR-0060](adr/0060-explicit-policy-candidate-format.md)). Calling contract +without arguments or with `{}` returns the exact existing prototype report. +`{allFormats:true}` explicitly requests the separate registry version 1; +`{formatVersion:"1.0.0"}` selects the candidate contract. These two arguments +are mutually exclusive. `{formatVersion:"0.0.2"}` selects the prototype contract. + +Init/schema require the exact selected `formatVersion` as before. Document tools +accept an optional `formatVersion` string for explicit dispatch, including +candidate classification of malformed or selector-less bytes. The document +still must carry its own exact selector; no tool inserts or rewrites it. +Without an operation selector, a document carrying `formatVersion` dispatches +to the candidate; existing prototype documents retain their behavior. Candidate +Policies use `workspace-managed` or `externally-managed`, never an alias of the +prototype's `desk-managed`. Candidate adoption requires candidate Policy bytes. + +Candidate reports include their own `formatVersion`, source provenance, maturity +and exact `candidateCapabilities` artifact. Only full candidate checks add +`candidateResult`, exactly the portable valid object +`{status:"valid",formatVersion:"1.0.0",maturity:"proposed-draft"}` or refusal +`{status:"refused",code:"…"}`. Their bounded finite codes follow the +[pinned candidate contract](../internal/policy/candidate/README.md#5-resource-limits-and-refusal-classifications). +Encoding/local validation omit that field; operational failures supply no +candidate result. MCP sets `isError:true` on refusals. Neither result format +asserts current authority, permission, trusted review or standard conformance. + +Candidate physical bounds and strict JSON parsing precede selector/canonical +checks, then ordered registration precedes document schema and reference checks. +Retained artifact byte pins are checked before parsing and optional canonical +identity. Pack bytes go unchanged to Core structural validation. The private +material carrier and the 16 MiB stdio request ceiling remain unchanged; duplicate +base64 registrations can exceed a transport ceiling even when their distinct +retained bytes fit the candidate. Passing portable raw-input vectors therefore +promises no larger encoded envelope or independent interoperability evidence. diff --git a/internal/cli/policy.go b/internal/cli/policy.go index b4a953a..6976763 100644 --- a/internal/cli/policy.go +++ b/internal/cli/policy.go @@ -13,8 +13,8 @@ import ( func (a *App) policyCommand() *cobra.Command { group := &cobra.Command{ - Use: "policy", Short: "EXPERIMENTAL: offline nonnormative Policy prototype tools", - Long: "Offline tools for the nonnormative RFC 0023 Policy prototype, exact format 0.0.2. Validate checks document forms and local references. Check also checks the exact supplied retained-material closure and specific Core references; it does not perform full Core semantic validation or evaluate anything. No approval, governing-adoption authority, publication, billing or source access is established. This experimental surface may change without compatibility promise.", + Use: "policy", Short: "EXPERIMENTAL: offline Policy prototype and proposed-draft candidate tools", + Long: "Offline tools for the nonnormative RFC 0023 Policy prototype 0.0.2 and unadopted proposed-draft candidate 1.0.0. Discover candidates explicitly with contract --all-formats; no-argument contract retains the prototype contract. Validate checks document forms and local references. Check also checks the exact supplied retained-material closure and specific Core references; it does not perform full Core semantic validation or evaluate anything. No approval, governing-adoption authority, publication, billing or source access is established. This experimental surface may change without compatibility promise.", Args: cobra.NoArgs, RunE: func(cmd *cobra.Command, _ []string) error { return cmd.Help() }, } for _, operation := range []string{"contract", "init", "schema", "canonicalize", "digest", "validate", "check"} { @@ -25,18 +25,19 @@ func (a *App) policyCommand() *cobra.Command { func (a *App) policyOperation(operation string) *cobra.Command { format, kind, profileVersion, id, version, materialsPath := "human", "", "", "", "", "" + allFormats := false use, args := operation, cobra.NoArgs if operation == "canonicalize" || operation == "digest" || operation == "validate" || operation == "check" { use += " " args = cobra.ExactArgs(1) } descriptions := map[string]string{ - "contract": "Describe exact prototype capabilities, limits and pinned provenance", + "contract": "Describe capabilities and pinned provenance; opt into candidate discovery explicitly", "init": "Print a starter template; missing retained materials remain unchecked", - "schema": "Print the schema for an explicitly selected prototype kind and format", + "schema": "Print the schema for an explicitly selected Policy kind and format", "canonicalize": "Print canonical document bytes; encoding success is not validation", "digest": "Print the canonical document digest; raw-byte identity is separate", - "validate": "Check prototype document forms and local references offline", + "validate": "Check selected Policy document forms and local references offline", "check": "Check exact supplied retained materials and references offline", } c := &cobra.Command{Use: use, Short: descriptions[operation], Args: args, RunE: func(cmd *cobra.Command, operands []string) error { @@ -53,11 +54,25 @@ func (a *App) policyOperation(operation string) *cobra.Command { if operation == "init" && (!cmd.Flags().Changed("id") || !cmd.Flags().Changed("version")) { return a.operational(command, format, result.ExitInvocation, "JPS-POLICY-IDENTITY", "Init requires explicit --id and --version.") } + if operation == "contract" && cmd.Flags().Changed("all-formats") && cmd.Flags().Changed("format-version") { + return a.operational(command, format, result.ExitInvocation, "JPS-POLICY-SELECTOR", "Use either --all-formats or --format-version.") + } + if cmd.Flags().Changed("format-version") && profileVersion == "" && operation != "init" && operation != "schema" { + return a.operational(command, format, result.ExitInvocation, "JPS-POLICY-SELECTOR", "Provide a nonempty exact format version.") + } var report policy.Report + var registry *policy.Registry code := result.ExitSuccess switch operation { case "contract": - report = policy.Contract(command) + if allFormats { + r := policy.AllFormats(command) + registry = &r + } else if cmd.Flags().Changed("format-version") { + report, code = policy.ContractFormat(command, profileVersion) + } else { + report = policy.Contract(command) + } case "init": report, code = policy.Init(command, kind, profileVersion, id, version) case "schema": @@ -71,11 +86,11 @@ func (a *App) policyOperation(operation string) *cobra.Command { } switch operation { case "canonicalize": - report, code = policy.Canonicalize(command, data) + report, code = policy.CanonicalizeFormat(command, data, profileVersion) case "digest": - report, code = policy.Digest(command, data) + report, code = policy.DigestFormat(command, data, profileVersion) case "validate": - report, code = policy.Validate(command, data) + report, code = policy.ValidateFormat(command, data, profileVersion) case "check": materials, err := a.readInput(materialsPath, policy.MaxMaterialsWireBytes, "retained materials") if errors.Is(err, fssecure.ErrTooLarge) { @@ -83,11 +98,15 @@ func (a *App) policyOperation(operation string) *cobra.Command { } else if err != nil { return a.operational(command, format, result.ExitIO, "JPS-POLICY-MATERIALS-READ", "The retained-material input could not be read as a bounded local regular file or standard input.") } - report, code = policy.Check(command, data, materials, a.engine) + report, code = policy.CheckFormat(command, data, materials, a.engine, profileVersion) } } if format == "json" { - if err := a.writeJSON(report); err != nil { + var payload any = report + if registry != nil { + payload = *registry + } + if err := a.writeJSON(payload); err != nil { return &handledExit{code: result.ExitIO} } } else if code != result.ExitSuccess { @@ -100,15 +119,29 @@ func (a *App) policyOperation(operation string) *cobra.Command { var err error switch operation { case "contract": - _, err = fmt.Fprintf(a.out, "Policy tools · EXPERIMENTAL · nonnormative prototype %s\nSpecification: %s\nKinds: policy, governing-adoption\nOperations: contract, init, schema, canonicalize, digest, validate, check\nValidate checks document forms and local references. Check checks exact supplied retained materials and specific Core references, without full Core semantic validation or evaluation.\nNo approval, governing-adoption authority or standard conformance is established.\n", policy.PrototypeVersion, policy.SpecURL) + if registry != nil { + _, err = fmt.Fprintf(a.out, "Policy format registry 1 · EXPERIMENTAL\n0.0.2 · nonnormative prototype · %s\n1.0.0 · proposed-draft candidate, unadopted · %s\nSelect a format explicitly for init/schema. No authority or conformance is established.\n", policy.SpecURL, policy.CandidateURL) + } else if report.FormatVersion == policy.CandidateVersion { + _, err = fmt.Fprintf(a.out, "Policy candidate %s · EXPERIMENTAL · proposed-draft, unadopted\nSpecification: %s\nKinds: policy, governing-adoption\nNo approval, current authority or standard conformance is established.\n", report.FormatVersion, report.Specification) + } else { + _, err = fmt.Fprintf(a.out, "Policy tools · EXPERIMENTAL · nonnormative prototype %s\nSpecification: %s\nKinds: policy, governing-adoption\nOperations: contract, init, schema, canonicalize, digest, validate, check\nValidate checks document forms and local references. Check checks exact supplied retained materials and specific Core references, without full Core semantic validation or evaluation.\nNo approval, governing-adoption authority or standard conformance is established.\n", policy.PrototypeVersion, policy.SpecURL) + } case "schema": _, err = fmt.Fprint(a.out, report.Resource.Text) case "digest": _, err = fmt.Fprintln(a.out, report.CanonicalDigest) case "validate": - _, err = fmt.Fprintln(a.out, "Prototype document and local-reference checks passed. Retained materials were not checked; no authority is established.") + if report.FormatVersion == policy.CandidateVersion { + _, err = fmt.Fprintln(a.out, "Proposed-draft candidate document and local-reference checks passed. Retained materials were not checked; no authority is established.") + } else { + _, err = fmt.Fprintln(a.out, "Prototype document and local-reference checks passed. Retained materials were not checked; no authority is established.") + } case "check": - _, err = fmt.Fprintln(a.out, "Prototype retained-material and reference checks passed. Full Core semantics and evaluation were not checked; no authority is established.") + if report.FormatVersion == policy.CandidateVersion { + _, err = fmt.Fprintln(a.out, "Proposed-draft candidate retained-material and reference checks passed. Full Core semantics and evaluation were not checked; no authority is established.") + } else { + _, err = fmt.Fprintln(a.out, "Prototype retained-material and reference checks passed. Full Core semantics and evaluation were not checked; no authority is established.") + } case "init": _, err = fmt.Fprintln(a.errOut, "Starter template: retained materials are missing and unchecked; no publication or authority is established.") if err == nil { @@ -129,11 +162,14 @@ func (a *App) policyOperation(operation string) *cobra.Command { c.Flags().StringVar(&format, "format", format, "output format: human or json; JSON includes scope and provenance") if operation == "init" || operation == "schema" { c.Flags().StringVar(&kind, "kind", "", "required exact kind: policy or governing-adoption") - c.Flags().StringVar(&profileVersion, "format-version", "", "required exact nonnormative prototype format: 0.0.2") + } + c.Flags().StringVar(&profileVersion, "format-version", "", "exact format: prototype 0.0.2 or proposed-draft candidate 1.0.0; required for init/schema, optional explicit dispatch otherwise") + if operation == "contract" { + c.Flags().BoolVar(&allFormats, "all-formats", false, "explicitly discover all formats in registry version 1") } if operation == "init" { c.Flags().StringVar(&id, "id", "", "required absolute artifact URI identifier") - c.Flags().StringVar(&version, "version", "", "required exact three-component artifact version; separate from prototype format") + c.Flags().StringVar(&version, "version", "", "required exact three-component artifact version; separate from Policy format") } if operation == "check" { c.Flags().StringVar(&materialsPath, "materials", "", "required retained-material JSON file or -; private Runtime byte transport, not a release envelope") diff --git a/internal/cli/policy_candidate_test.go b/internal/cli/policy_candidate_test.go new file mode 100644 index 0000000..2319e9b --- /dev/null +++ b/internal/cli/policy_candidate_test.go @@ -0,0 +1,188 @@ +package cli + +import ( + "bytes" + "encoding/base64" + "encoding/json" + "os" + "path/filepath" + "reflect" + "strings" + "testing" + + "github.com/Judgment-Pack/judgment-pack-runtime/internal/conformance" + "github.com/Judgment-Pack/judgment-pack-runtime/internal/mcp" + "github.com/Judgment-Pack/judgment-pack-runtime/internal/policy" + "github.com/Judgment-Pack/judgment-pack-runtime/internal/validation" +) + +func candidateCLIBytes(t *testing.T, name string) string { + t.Helper() + raw, err := os.ReadFile(filepath.Join("..", "policy", "candidate", "examples", "refunds", name)) + if err != nil { + t.Fatal(err) + } + return string(raw) +} + +func candidateCLIWire(t *testing.T) string { + t.Helper() + var manifest struct { + Materials []struct { + Path string `json:"path"` + Content any `json:"content"` + } `json:"materials"` + } + if err := json.Unmarshal([]byte(candidateCLIBytes(t, "fixture.json")), &manifest); err != nil { + t.Fatal(err) + } + entries := []any{} + for _, entry := range manifest.Materials { + entries = append(entries, map[string]any{"content": entry.Content, "dataBase64": base64.StdEncoding.EncodeToString([]byte(candidateCLIBytes(t, entry.Path)))}) + } + raw, err := json.Marshal(map[string]any{"materials": entries}) + if err != nil { + t.Fatal(err) + } + return string(raw) +} + +func candidateMCPReply(t *testing.T, name string, args map[string]any) (map[string]any, bool) { + t.Helper() + engine, err := validation.NewEngine() + if err != nil { + t.Fatal(err) + } + request, err := json.Marshal(map[string]any{"jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": map[string]any{"name": name, "arguments": args}}) + if err != nil { + t.Fatal(err) + } + var out, logs bytes.Buffer + if err := mcp.NewServer(engine, conformance.NewRunner(engine)).Serve(bytes.NewReader(append(request, '\n')), &out, &logs); err != nil { + t.Fatal(err) + } + var response struct { + Result struct { + Structured map[string]any `json:"structuredContent"` + IsError bool `json:"isError"` + } `json:"result"` + } + if err := json.Unmarshal(out.Bytes(), &response); err != nil { + t.Fatal(err) + } + return response.Result.Structured, response.Result.IsError +} + +func TestPolicyCandidateCLIAndMCPParity(t *testing.T) { + materialPath := filepath.Join(t.TempDir(), "materials.json") + if err := os.WriteFile(materialPath, []byte(candidateCLIWire(t)), 0600); err != nil { + t.Fatal(err) + } + for _, tc := range []struct { + operation, document, refusal string + exit int + }{ + {"canonicalize", candidateCLIBytes(t, "policy.json"), "", 0}, + {"digest", candidateCLIBytes(t, "adoption.json"), "", 0}, + {"validate", candidateCLIBytes(t, "policy.json"), "", 0}, + {"check", candidateCLIBytes(t, "adoption.json"), "", 0}, + {"check", `{}`, "invalid-selector", 1}, + {"check", `{"formatVersion":"7.0.0","n":1.5}`, "unsupported-format", 2}, + {"check", `{"formatVersion":"1.0.0","n":1.5}`, "invalid-document", 1}, + {"check", strings.Repeat("[", 33), "input-over-bound", 2}, + } { + t.Run(tc.operation+"/"+tc.refusal, func(t *testing.T) { + args := []string{"experimental", "policy", tc.operation, "-", "--format", "json", "--format-version", policy.CandidateVersion} + input := map[string]any{"document": tc.document, "formatVersion": policy.CandidateVersion} + if tc.operation == "check" { + args = append(args, "--materials", materialPath) + input["materials"] = candidateCLIWire(t) + } + exit, stdout, stderr := runTest(t, args, tc.document) + if exit != tc.exit || stderr != "" { + t.Fatalf("exit %d stdout %s stderr %s", exit, stdout, stderr) + } + var actual map[string]any + if err := json.Unmarshal([]byte(stdout), &actual); err != nil { + t.Fatal(err) + } + other, isError := candidateMCPReply(t, "experimental_policy_"+tc.operation, input) + if isError != (exit != 0) { + t.Fatal("MCP error status") + } + delete(actual, "command") + delete(other, "command") + if !reflect.DeepEqual(actual, other) { + t.Fatalf("candidate CLI/MCP mismatch\n%v\n%v", actual, other) + } + if actual["specRevision"] != policy.CandidateRevision || actual["maturity"] != "proposed-draft" { + t.Fatal("candidate provenance") + } + if tc.operation == "check" { + result := actual["candidateResult"].(map[string]any) + if tc.refusal != "" && result["code"] != tc.refusal { + t.Fatal(result) + } + } else if actual["candidateResult"] != nil { + t.Fatal("narrower operation claimed full check") + } + }) + } + for _, operation := range []string{"validate", "check"} { + args := []string{"experimental", "policy", operation, "-"} + if operation == "check" { + args = append(args, "--materials", materialPath) + } + exit, stdout, stderr := runTest(t, args, candidateCLIBytes(t, "policy.json")) + if exit != 0 || stderr != "" || !strings.Contains(stdout, "Proposed-draft candidate") { + t.Fatalf("candidate human output %d %s %s", exit, stdout, stderr) + } + } +} + +func TestPolicyExplicitContractDiscoveryParity(t *testing.T) { + for _, tc := range []struct { + flags []string + input map[string]any + registry bool + }{ + {nil, map[string]any{}, false}, + {[]string{"--all-formats"}, map[string]any{"allFormats": true}, true}, + {[]string{"--format-version", policy.CandidateVersion}, map[string]any{"formatVersion": policy.CandidateVersion}, false}, + } { + args := append([]string{"experimental", "policy", "contract", "--format", "json"}, tc.flags...) + exit, stdout, stderr := runTest(t, args, "") + if exit != 0 || stderr != "" { + t.Fatal(exit, stdout, stderr) + } + var actual map[string]any + if err := json.Unmarshal([]byte(stdout), &actual); err != nil { + t.Fatal(err) + } + other, isError := candidateMCPReply(t, "experimental_get_policy_contract", tc.input) + if isError { + t.Fatal(other) + } + delete(actual, "command") + delete(other, "command") + if tc.registry { + for _, result := range []map[string]any{actual, other} { + for _, format := range result["formats"].([]any) { + delete(format.(map[string]any), "command") + } + } + } + if !reflect.DeepEqual(actual, other) { + t.Fatalf("discovery mismatch %v %v", actual, other) + } + if len(tc.flags) == 0 && (actual["formatVersion"] != nil || actual["candidateCapabilities"] != nil || actual["registryVersion"] != nil || actual["specRevision"] != policy.SpecRevision) { + t.Fatal("legacy contract changed", actual) + } + } + for _, flags := range [][]string{{"--all-formats", "--format-version", "1.0.0"}, {"--format-version", ""}} { + exit, _, _ := runTest(t, append([]string{"experimental", "policy", "contract"}, flags...), "") + if exit != 3 { + t.Fatal("selector conflict accepted") + } + } +} diff --git a/internal/mcp/policy.go b/internal/mcp/policy.go index 28017d2..d2f5a99 100644 --- a/internal/mcp/policy.go +++ b/internal/mcp/policy.go @@ -17,19 +17,19 @@ func policyToolName(operation string) string { func policyDefinition(operation string) map[string]any { descriptions := map[string]string{ - "contract": "Discover the pinned nonnormative RFC 0023 Policy prototype 0.0.2: exact kinds, capabilities and limits. Experimental; no project reads, persistence, evaluation or authority.", - "init": "Return a nonnormative Policy prototype starter template for an explicitly selected kind, format and identity. Retained materials are missing and unchecked. The client saves it; no publication, approval or governing-adoption authority is established.", - "schema": "Return a self-contained Runtime editing schema derived from pinned nonnormative prototype resources for an explicit kind and exact format 0.0.2. Use validate for strict document and local-reference checks. Offline; no project reads or writes.", - "canonicalize": "Return canonical Policy prototype document bytes and separate canonical/raw byte digests. Encoding success is not document validation, retained-material verification or authority. Experimental; no files read or written.", - "digest": "Return the canonical Policy prototype digest and separate raw-byte identity. Encoding success is not validation or authority. Experimental; no files read or written.", - "validate": "Check exact Policy prototype document JSON for strict forms, schema and local references. Does not check retained materials, full Core semantics, evaluation, approval or governing-adoption authority. Experimental; no files read or written.", - "check": fmt.Sprintf("Check the exact supplied Policy prototype document and retained-material closure, raw byte identities, structural Core packs and specific references. Does not run full Core semantic validation, evaluate, fetch sources, publish, approve or establish governing-adoption authority. Both arguments are exact JSON text strings, never paths or URLs. Materials use a private Runtime byte transport, not a portable release envelope. The unchanged %d-byte stdio request limit includes its delimiter and JSON/base64 overhead, so not every bundle under the retained-byte limit fits MCP.", maxMessageBytes), + "contract": "With no selectors, discover the unchanged pinned RFC 0023 prototype 0.0.2. Explicit allFormats:true discovers registry version 1; formatVersion selects one contract, mutually exclusive. Candidate 1.0.0 is proposed-draft and unadopted. Reports exact kinds, capabilities and limits. Experimental; no project reads, persistence, evaluation or authority.", + "init": "Return a nonnormative Policy companion starter template for an explicitly selected kind, format and identity. Retained materials are missing and unchecked. The client saves it; no publication, approval or governing-adoption authority is established.", + "schema": "Return a self-contained Runtime editing schema derived from pinned nonnormative prototype resources for an explicit kind and explicit prototype 0.0.2 or proposed-draft candidate 1.0.0. Use validate for strict document and local-reference checks. Offline; no project reads or writes.", + "canonicalize": "Return canonical Policy companion document bytes and separate canonical/raw byte digests. Encoding success is not document validation, retained-material verification or authority. Experimental; no files read or written.", + "digest": "Return the canonical Policy companion digest and separate raw-byte identity. Encoding success is not validation or authority. Experimental; no files read or written.", + "validate": "Check exact Policy companion document JSON for strict forms, schema and local references. Does not check retained materials, full Core semantics, evaluation, approval or governing-adoption authority. Experimental; no files read or written.", + "check": fmt.Sprintf("Check the exact supplied Policy companion document and retained-material closure, raw byte identities, structural Core packs and specific references. Does not run full Core semantic validation, evaluate, fetch sources, publish, approve or establish governing-adoption authority. Both arguments are exact JSON text strings, never paths or URLs. Materials use a private Runtime byte transport, not a portable release envelope. The unchanged %d-byte stdio request limit includes its delimiter and JSON/base64 overhead, so not every bundle under the retained-byte limit fits MCP.", maxMessageBytes), } properties := map[string]any{} schema := map[string]any{"type": "object", "additionalProperties": false, "properties": properties} if operation == "init" || operation == "schema" { properties["kind"] = map[string]any{"type": "string", "enum": []string{"policy", "governing-adoption"}} - properties["formatVersion"] = map[string]any{"type": "string", "enum": []string{policy.PrototypeVersion}, "description": "Exact nonnormative prototype version; no stable Policy format is selected by default."} + properties["formatVersion"] = map[string]any{"type": "string", "enum": []string{policy.PrototypeVersion, policy.CandidateVersion}, "description": "Exact prototype 0.0.2 or unadopted proposed-draft candidate 1.0.0; no format is selected by default."} schema["required"] = []string{"kind", "formatVersion"} if operation == "init" { properties["id"] = map[string]any{"type": "string", "description": "Explicit absolute artifact URI identifier."} @@ -41,6 +41,12 @@ func policyDefinition(operation string) map[string]any { properties["document"] = map[string]any{"type": "string", "maxLength": policy.MaxDocumentBytes, "description": fmt.Sprintf("Exact document JSON text, never a path. Maximum %d UTF-8 bytes after transport decoding.", policy.MaxDocumentBytes)} schema["required"] = []string{"document"} } + if operation == "contract" { + properties["allFormats"] = map[string]any{"type": "boolean", "description": "Explicit opt-in to registry version 1; mutually exclusive with formatVersion."} + } + if operation != "init" && operation != "schema" { + properties["formatVersion"] = map[string]any{"type": "string", "description": "Optional exact format selection: 0.0.2 prototype or 1.0.0 proposed-draft candidate. Candidate selection also classifies malformed/missing document selectors. No automatic migration."} + } if operation == "check" { properties["materials"] = map[string]any{"type": "string", "maxLength": policy.MaxMaterialsWireBytes, "description": fmt.Sprintf("Exact retained-material JSON text: {materials:[{content:{bytesDigest,byteLength,mediaType},dataBase64}]}. No paths/URLs. Maximum decoded JSON text %d bytes; stdio's %d-byte line limit can be reached first after JSON/base64 overhead.", policy.MaxMaterialsWireBytes, maxMessageBytes)} schema["required"] = []string{"document", "materials"} @@ -54,8 +60,39 @@ func (s *Server) toolPolicy(name string, args json.RawMessage) any { return toolError("Expected an arguments object; null is refused.") } if name == policyToolName("contract") { - if m := noArguments(name, args); m != "" { - return toolError("Policy contract accepts an empty arguments object only.") + if len(args) == 0 { + return toolResult(policy.Contract(command)) + } + if m := exactMembers(name, args, "allFormats", "formatVersion"); m != "" { + return toolError("Policy contract accepts only allFormats or formatVersion, each once.") + } + var input struct { + AllFormats *bool `json:"allFormats"` + FormatVersion *string `json:"formatVersion"` + } + var members map[string]json.RawMessage + if json.Unmarshal(args, &input) != nil || json.Unmarshal(args, &members) != nil || members == nil { + return toolError("Expected a Policy contract arguments object.") + } + if len(members) == 2 { + return toolError("Use either allFormats or formatVersion.") + } + if _, present := members["allFormats"]; present && input.AllFormats == nil { + return toolError("Expected allFormats as a Boolean.") + } + if _, present := members["formatVersion"]; present && input.FormatVersion == nil { + return toolError("Expected formatVersion as a string.") + } + if input.AllFormats != nil && *input.AllFormats { + return toolResult(policy.AllFormats(command)) + } + if input.FormatVersion != nil { + r, code := policy.ContractFormat(command, *input.FormatVersion) + reply := toolResult(r) + if code != 0 { + reply["isError"] = true + } + return reply } return toolResult(policy.Contract(command)) } @@ -87,7 +124,7 @@ func (s *Server) toolPolicy(name string, args json.RawMessage) any { report, code = policy.Init(command, *input.Kind, *input.FormatVersion, *input.ID, *input.Version) } } else { - members := []string{"document"} + members := []string{"document", "formatVersion"} if name == policyToolName("check") { members = append(members, "materials") } @@ -95,24 +132,39 @@ func (s *Server) toolPolicy(name string, args json.RawMessage) any { return toolError("Expected document and, for check, materials as exact JSON text strings only.") } var input struct { - Document *string `json:"document"` - Materials *string `json:"materials"` + Document *string `json:"document"` + FormatVersion *string `json:"formatVersion"` + Materials *string `json:"materials"` } if json.Unmarshal(args, &input) != nil || input.Document == nil { return toolError("Expected document as exact JSON text in a string.") } + var supplied map[string]json.RawMessage + if json.Unmarshal(args, &supplied) != nil { + return toolError("Expected Policy arguments object.") + } + if _, present := supplied["formatVersion"]; present && input.FormatVersion == nil { + return toolError("Expected formatVersion as a string.") + } + format := "" + if input.FormatVersion != nil { + format = *input.FormatVersion + if format == "" { + return toolError("Expected a nonempty exact formatVersion string.") + } + } switch name { case "experimental_policy_canonicalize": - report, code = policy.Canonicalize(command, []byte(*input.Document)) + report, code = policy.CanonicalizeFormat(command, []byte(*input.Document), format) case "experimental_policy_digest": - report, code = policy.Digest(command, []byte(*input.Document)) + report, code = policy.DigestFormat(command, []byte(*input.Document), format) case "experimental_policy_validate": - report, code = policy.Validate(command, []byte(*input.Document)) + report, code = policy.ValidateFormat(command, []byte(*input.Document), format) case "experimental_policy_check": if input.Materials == nil { return toolError("Expected materials as exact retained-material JSON text in a string.") } - report, code = policy.Check(command, []byte(*input.Document), []byte(*input.Materials), s.engine) + report, code = policy.CheckFormat(command, []byte(*input.Document), []byte(*input.Materials), s.engine, format) } } reply := toolResult(report) diff --git a/internal/mcp/policy_test.go b/internal/mcp/policy_test.go index 746c948..ce2d161 100644 --- a/internal/mcp/policy_test.go +++ b/internal/mcp/policy_test.go @@ -97,3 +97,21 @@ func TestPolicyWellTypedSelectorRefusals(t *testing.T) { } } } + +func TestPolicyCandidateDiscoveryStrictArguments(t *testing.T) { + for _, args := range []string{ + `{"allFormats":true,"formatVersion":"1.0.0"}`, `{"allFormats":null}`, `{"allFormats":"true"}`, + `{"AllFormats":true}`, `{"allFormats":true,"allFormats":true}`, `{"formatVersion":null}`, + } { + reply := runServer(t, rawToolCall(t, 1, "experimental_get_policy_contract", args))[0]["result"].(map[string]any) + if reply["isError"] != true || reply["structuredContent"] != nil { + t.Fatal(args, reply) + } + } + for _, args := range []string{`{"document":"{}","formatVersion":null}`, `{"document":"{}","FormatVersion":"1.0.0"}`} { + reply := runServer(t, rawToolCall(t, 1, "experimental_policy_validate", args))[0]["result"].(map[string]any) + if reply["isError"] != true || reply["structuredContent"] != nil { + t.Fatal(args, reply) + } + } +} diff --git a/internal/policy/candidate/0023-policy-companion.md b/internal/policy/candidate/0023-policy-companion.md new file mode 100644 index 0000000..13bf6c0 --- /dev/null +++ b/internal/policy/candidate/0023-policy-companion.md @@ -0,0 +1,376 @@ +# RFC 0023: Policy content and governing adoption + +- Status: Review +- Type: Standards track, proposed companion at draft maturity +- Created: 2026-10-17 +- Issue: [#211](https://github.com/Judgment-Pack/judgment-pack-spec/issues/211) + +This is an open proposal, not part of JPS. It adds no released schema, conformance +class or execution authority. The [candidate contract](policy-companion-contract/README.md) +proposes exact format `1.0.0` at draft maturity; it is not adopted by being written. +The historical [prototype](policy-companion-prototype/README.md) remains explicitly +non-normative and byte-for-byte frozen at proposal `0.0.2`, baseline commit +`8a56a95d555c17640d2db4984363b779536b3c2a`. Host integration guidance below names separate +product responsibilities; acceptance of this RFC would not adopt those products' +protocols on their behalf. + +## Summary + +Propose a small domain-neutral companion for retained policy content and its exact +governing relationship to a consuming pack. Preserve the pack/graph as executable +authority. Policy text, review assertions and adoption describe intent, provenance +and governance; they introduce no condition language and do not change evaluator +precedence. Optional readable structured requirements are deferred from the first +candidate, whose closed grammar refuses a `requirements` member. + +The proposed candidate supports pack consumers only. Composition with graphs needs +the relevant adopted graph contract and supporting hosts; this RFC does not +advertise standard Runner graph-job support. A Framework artifact is not required. +Collections can organize policies without implying dependency or priority. + +## Problem + +A policy may start as a document, be authored collaboratively, or be managed by +another system. It can remain effective while an executable interpretation is +developed or revised. A citation in a pack does not say whether that policy governs +execution, what exact policy version was interpreted, or what clauses remain +manual. A passing test does not establish complete coverage or approval. + +Products can store these relationships privately, but then a second consumer cannot +distinguish a governing dependency from an informational reference or reconstruct +what exact content a review covered. Putting current permissions or mutable +publication state into Core would turn a portable evaluator into a governance +service, and still would not prove that a historical statement remains current. + +The proposed boundary is immutable supplied-document meaning plus explicit limits. +The operational system owns authority and decides whether work may start now. + +## Evidence + +Three design cases motivate a shared form: + +1. **Data access.** A platform team imports a sharing policy, reviews its clauses + and implements release eligibility in a pack. Exact source/narrative bytes and + interpretation must survive export. Policy withdrawal needs a live host gate; + an offline content match cannot enforce it. +2. **Procurement.** An externally managed procurement policy publishes a new file + revision. The consumer retains its existing adoption while reviewing the new + revision. A changed file, missing file or access failure must not be inferred + to mean approved, published or withdrawn. +3. **Refunds.** A local Desk admin authors, reviews and publishes a policy alone. + The audit can truthfully record the same person performing those roles when + the configured workflow permits it. It must not claim independent approval. + Some clauses may remain manual; automated eligibility still lives in a pack. + +The prototype supplies synthetic retained material for these domains. It is +design evidence only: no production policy approval, live enforcement, external +connector run or independent implementation agreement is claimed. + +Existing Core sources/review metadata, retained Runtime/Runner artifacts and +Dialect provenance are prior boundaries to reuse, not proof this companion exists. +[RFC 0011](0011-judgment-currency-anchor.md) already explores retired pack versions +and an offline currency snapshot. It explicitly cannot establish real-time +currency or current authorization. This proposal does not adopt, supersede or move +that Draft's registry; its relationship to policy lifecycle remains a review item. +[RFC 0012](0012-witness-contract.md) and the accepted +[checkpoint witness companion](../spec/checkpoint-witness.md) concern supplied +history comparisons, not policy approval or a current permission to execute. + +## Specification + +### Proposed portable surface + +The surface consists of **Policy content** and **Governing adoption**. The +[review candidate](policy-companion-contract/README.md) supplies self-contained +proposed prose, closed schemas, a bounded offline checker/capability record, +three retained-byte domain examples and reusable static positive/refusal vectors. +Both documents require exact `formatVersion: "1.0.0"`, with `kind: "policy"` or +`kind: "governing-adoption"`. The separate strict `x.y.z` artifact `version` does +not select grammar. No shared-major inference or integer/legacy alias is allowed. +This selector is proposed, not adopted, released or stable. + +The frozen historical prototype uses its closed `prototype` wrapper with profile +`jps-policy-companion-prototype`, proposal `0.0.2` and status `non-normative`. +The candidate refuses that wrapper; no parser migration occurs. The +[explicit migration guide](policy-companion-contract/MIGRATION.md) preserves +source, narrative, interpretation and consumer bytes, requires new immutable +Policy/adoption identities and exact dependent references, retains originals and +requires dependent snapshot re-review. No approval or permission migrates. +The candidate's [prototype pin](policy-companion-contract/prototype-0.0.2-pin.json) +records the unchanged historical bytes. + +A Policy contains: + +- a stable absolute-URI identity, immutable artifact version and title; +- declared publication-management intent (`workspace-managed` or `externally-managed`), + which does not authenticate a publisher or import its authority; +- a reference to exact retained UTF-8 narrative bytes; +- stable section identities anchored by half-open UTF-8 byte ranges in that exact + narrative, plus explicit provenance references; +- retained original source references with provider/account/resource identity, + nullable opaque source revision and original content identity. + +The unreleased candidate's URI assertion is corrected after commit +`30b0b30a1b0c851c41bdb271d6ef9534c91bcdec` to the complete scheme-bearing `URI` +production of [RFC 3986](https://www.rfc-editor.org/rfc/rfc3986#appendix-A), with +optional fragments, not the narrower `absolute-URI` production. Final LF and +leading-zero IPv4 tails in IPv6 literals now refuse; uppercase `V` in IPvFuture +now validates under [RFC 5234 §2.3](https://www.rfc-editor.org/rfc/rfc5234#section-2.3). +Twenty portable URI vectors also cover percent encodings, Unicode and brackets by +component, including seven full adoptions with exact consuming-Pack IDs/references. +The candidate's consuming-Pack structural checks assert the same corrected URI +grammar; shared Core validators and the prototype remain unchanged. +This repairs candidate-only validation rather than adopting dependency +or URL-parser quirks. Core/prototype checks and exact retained-byte semantics remain +unchanged; proposed format `1.0.0` is still unreleased and not adopted. + +The narrative can be authored directly or derived from original documents. +Original PDF/page/file bytes remain separate. An anchor in the narrative is not +an original-source offset, and a new extraction does not silently rewrite either. +No runtime conditions, live ACLs, publication states or approval booleans belong in +the immutable content. Optional readable structured requirements, including any +section-reference grammar, are deferred pending a concrete authoring/interchange +need and reference-check vectors. They are unsupported in the candidate. Any +future form must remain non-executable and requires an explicit selector change; +it must not introduce a second decision language. + +A Governing adoption contains its own identity/version, the exact consuming pack +reference and one or more exact policy references. Every governing reference +declares whole-policy or explicit section scope, and per-section coverage: + +| Coverage | Required interpretation | +| --- | --- | +| `implemented` | Exact typed consumer element references and retained interpretation/review basis | +| `manual` | Explicit responsible handoff/process | +| `awaiting-interpretation` | Unresolved meaning, with explanation | +| `awaiting-implementation` | Meaning agreed but automation not supplied, with explanation | +| `out-of-scope` | Explicit rationale; never silent omission | + +The candidate resolves `{kind: "rule", id}` to Core `rules[]` and +`{kind: "exception", id}` to Core `exceptions[]`. The singleton references +`{kind: "applicability"}` and `{kind: "fallback"}` identify the actual Core +`applicability` and `fallbackOutcome` members; they have no fabricated ID. Absent +members, unknown IDs, duplicate references within one coverage record and +kind/ID confusion refuse. Fallback must name a declared, uniquely identified +outcome. These references identify supplied elements; they do not prove correct +interpretation or full Core semantic conformance. Evidence requirements, outcomes, +condition subelements and escalation are unsupported coverage kinds, as are graph +consumers. A clause implemented through scope, exception or fallback can reference +that actual element without inventing a dummy rule or a manual process. + +Informational sources are separate and do not create governing dependencies. +Scope and coverage are declarations to be reviewed, not a language for conditional +authorization. Validation cannot prove that an organization declared every +applicable policy or that an interpretation is correct. + +### Identity and offline checks + +The proposed content reference is exact-byte SHA-256, byte length and media type. +Optional canonical document identity names its profile separately. Reuse the +existing [Dialect companion's `canon`](../spec/dialect.md) domain by explicit +reference: do not substitute JCS or preparation canonicalization. Existing pack +bytes are retained unchanged; no reserialization changes a pack's execution pin. + +Artifact versions use the same lexical discipline as +[RFC 0021](0021-dialect-artifact-identity.md): exactly three unsigned decimal +components, no leading zeros except `0`, no suffixes or coercion, and the existing +256-ASCII-character bound. The candidate adds no bump arithmetic, compatibility +inference or version-reservation service. Draft CAS revisions, source revisions, +artifact versions and lifecycle revisions are separate values. + +Readers check supported selectors, closed grammar, resource bounds, exact content +references, unique section identities, anchored UTF-8 boundaries and adoption +references within their declared scope. They refuse incomplete material rather +than silently treating it as approved. Identities are opaque references, not URLs +to fetch. Access and network acquisition require separate authority. + +Candidate bounds retain the prototype's role-specific limits: parsed JSON is at +most 262,144 bytes, retained narrative/review/informational material at most +1,048,576 bytes each, and retained +original source material at most 4,194,304 bytes each. The fixture carrier loads at +most 16,777,216 distinct retained bytes in total; multiple registered media types +for identical bytes count once. An unsupported original size refuses the complete +bundle. Truncation, extraction substitution and silently dropping the original do +not produce a complete bundle. The parsed-document depth limit is 32; number +literals are at most 128 characters +with exponent magnitude at most 308. The candidate declares these limits explicitly; +they are not adopted Core limits or a stable content-size promise. Its refusal +objects use fixed bounded codes, never raw content. A malformed/missing selector +is `invalid-selector`; a well-formed unsupported selector is `unsupported-format`. +Physical/schema resource maxima report `input-over-bound`, separately from +reference, anchor, coverage and other semantic failures. Capability discovery lists +exact candidate format, proposed-draft maturity, features, limits and exclusions. + +Consumer bytes are identified before adoption. A release can then bind the +consumer, adoption and supported dependency closure without circular hashes. +The host derives that closure from its reviewed registration, not from an +execution caller's possibly shortened list. Unsupported required composition +refuses. Policy citations alone cannot be upgraded into governing adoption. + +### Review assertions and trust boundary + +A review assertion needs the exact complete candidate, workflow revision, +reviewed scope/anchors, authenticated subject, decision time and authority basis. +Historical assertions cannot transfer silently to changed candidates. A section +approval does not replace an accountable whole-policy approval. Whether the same +local admin may author and approve is a workflow rule, not a universal spec ban. + +The authentication/signature/export trust profile is unresolved. The candidate +therefore carries an exact interpretation basis, **not** portable proof of an +authorized sign-off. A hash, imported document, test report or model statement +must not be interpreted as that proof. No review-assertion conformance class is +introduced by this draft. + +### Non-normative host integration boundaries + +These are required product design considerations, not APIs standardized here: + +| Boundary | Owning responsibility | +| --- | --- | +| Source observation | Gateway retains content/extraction and raw provider revision/lifecycle evidence; Desk interprets a configured authority mapping | +| Adoption | Desk records an authorized exact interpretation; Runtime checks supplied documents; Runner retains the registered dependency closure | +| Run/action admission | Desk's authoritative governance service decides current eligibility; Runner and actual action executors enforce at dispatch | +| Review/publication | Desk persists exact candidates, scoped sign-offs, immutable publication and idempotent receipts in transactional state | + +Source state needs delivery identity, opaque source revision, observation time, +availability, retained bytes and explicit history completeness. The same bytes +with a new lifecycle assertion are a new observation. Persist snapshots/effects +before advancing cursors; duplicate/out-of-order delivery and cursor loss require +reconciliation. A source update does not overwrite drafts, transfer signatures or +upgrade pinned jobs. An unresolved update known before publication participates in +publication CAS; an update observed afterward creates impact review. + +Publication, effectiveness, supersession, expiry and withdrawal are distinct. +Withdrawal defaults to blocking new dependent starts and later external actions. +The authority serializes withdrawal with start commitment: withdrawal first blocks +the start; commitment first admits the existing attempt. This is a logical +authorization boundary, not atomicity with a remote side effect or instantaneous +knowledge of unobserved upstream changes. Required unavailable/stale authority +holds new governed work. An already dispatched external action may be irreversible. + +An eligibility preview is not a dispatch grant. Executors bind durable attempt, +resource, payload, release and epoch identities before requesting a start. A +recovered receipt is history, not a reusable permission to dispatch. Lost responses, +crashes and restored backups require reconciliation/fencing; uncertain external +operations must not be replayed. Offline pinned snapshots cannot establish these +live guarantees, so the Runtime offline reader does not implement that service. + +Local Desk can be the authority for one admin's complete policy lifecycle. Team +identity, invitations and separate reviewers extend that host mode; they do not +need to be fabricated to enable honest single-person management. Gateway consumes +admission decisions at its action boundary and does not become policy authority. + +## Alternatives + +- **No change/product-only metadata:** sufficient for a private editor but leaves + cross-product policy identity, coverage and governing/citation distinctions + ambiguous. Keep IAM, review routing and live lifecycle product-owned regardless. +- **Core extension/profile:** would couple governance to evaluation and does not + supply a live authority. Existing packs must remain usable without policies. +- **Adopt a universal control format:** OSCAL and other domain formats can support + adapters, but requiring one narrows a domain-neutral product and introduces + unnecessary control semantics. No normative mappings are proposed here. +- **Make readable requirements authoritative:** creates competing execution + semantics. Defer optional readable requirements from this candidate; any later + form must keep the pack/graph authoritative. +- **Use only pack-version currency:** RFC 0011's offline membership question is + useful but different from policy content, adoption scope and current permissions. +- **Mandate frameworks:** organizing collections do not need another release type + or implicit policy priority. Revisit only for a concrete interoperability need. + +## Compatibility + +No Core, Dialect, preparation, graph or released conformance bytes change. The +0.0.2 prototype remains unchanged. Candidate documents are opt-in; unsupported +readers refuse them, and format compatibility cannot be inferred from artifact +version arithmetic. Migrating a citation to a governing +dependency is a reviewed new adoption, never automatic import behavior. + +Published policy content and consuming releases remain immutable. Renaming a +title or moving a folder does not change stored execution pins. A fork has a new +identity and fresh authority; imported approval history does not grant local roles. +Upgrading an existing job is explicit and retains historical runs. Supersession +alone does not declare every older pin ineligible; the adopted host rules decide. + +## Security and privacy + +Content identity does not establish truth, authority, current access or currency. +Prevent ambiguous JSON, oversized material, malformed versions, anchor substitution, +missing governing dependencies, imported approval booleans and cross-tenant +reference disclosure. Bound originals, narrative and interpretation separately. +Enforce current access in indexes, counts, exports and AI retrieval as well as pages. + +Model output can suggest content but cannot sign as an invited reviewer or change +test expectations merely to obtain passing outcomes. Restore of an old local store +cannot prove that no later withdrawal/revocation occurred. An unavailable external +file or failed sync is not itself withdrawal. Cryptographic signatures, if added, +will still need trusted identity and freshness rules; they do not resolve these +questions merely by verifying mathematically. + +## Conformance + +The candidate reader result is limited to supplied-document validity and reference +agreement under exact proposed format `1.0.0`. Its reusable manifest supplies +positive, refusal, boundary and adversarial vectors with exact expected objects, +including malformed/unsupported selectors, independent artifact versions, aliases, +missing or stale byte references, optional canonical identities, section anchors, +UTF-8 boundaries, scope/coverage mismatches and governing-versus-informational +references. Runtime or other ports can execute retained static bytes directly; the +only generation grammar repeats one declared byte for a declared length. + +The candidate and frozen prototype checks are experimental agreement aids, not +released corpus entries. +They must not be scored as proofs of authorization, complete policy coverage, +live admission or independent interoperability. + +Host acceptance tests belong in their owning repositories: source update racing +publication; same bytes with changed lifecycle; revoked reviewer/access after +indexing; dependency omission; withdrawal-before-start; start-before-withdrawal +followed by refused action; lost response recovery; worker fencing; and restore +from a pre-withdrawal backup. A signed historical snapshot cannot satisfy these +live tests by itself. + +## Implementation + +Spec owns the eventual portable companion, exact reference meanings and staged +vectors. Runtime should expose shared offline validation/canonical/reference +tooling only for an explicitly adopted or clearly experimental capability. Desk +owns local/team lifecycle, durable review transactions, sync state, Library and +shared UI/chat handlers. Gateway owns provider observations and execution-boundary +enforcement. Runner owns frozen releases, closure and current start admission. +Exchange can publish reusable definitions only after its entry contract supports +them; it does not store private tenant approvals. Demo and evaluator studies +exercise these boundaries without becoming alternate production services. + +Two plausible independently authored readers are a Runtime-backed local tool and +a separate organizational policy service validating exported bundles without Desk. +They would compare exact retained bytes and declared references and explicitly +decline live-authorization claims. Two language ports by this project's author +would not demonstrate independent authorship. That evidence is not available yet. + +The first product path is single-admin local policy management. Its explicit +review can be self-review; later team deployments can require another reviewer. +Manual and chat actions must share the existing execution/context/approval/CAS +boundaries. No feature-specific model loop, permission inference or retry service +is required by this RFC. + +## Unresolved questions + +1. Adoption/disposition of the exact proposed `1.0.0` selector, declared bounds and + closed reference/coverage grammar after public review; no released schema or + conformance class is assigned here. +2. Trust/signature/export profile for review assertions and cross-workspace adoption. +3. Reconciliation with RFC 0011's proposed pack currency registry without silently + adopting it or treating offline membership as live authorization. +4. First real sync provider and its demonstrable revision/lifecycle/freshness + semantics; document-read support alone is insufficient. +5. Host defaults for self-review versus independent review, quorum changes, + role-revocation effects on old signatures, expiry/grace and scheduled publication. +6. Supported graph/composition closure and its owning execution contract. +7. Independent implementation evidence and any domain-format adapter demand. + +Moving this RFC to `Review` requests public comment; it does not mark it +`Accepted` or waive the public-comment process. The candidate supplies no +cross-vendor adversarial-review record or independent implementation evidence. +Review-assertion trust, Graph support and adoption remain unresolved. This proposal +must not be described as adopted, stable or implementation-complete on that basis. diff --git a/internal/policy/candidate/LICENSE b/internal/policy/candidate/LICENSE new file mode 100644 index 0000000..d645695 --- /dev/null +++ b/internal/policy/candidate/LICENSE @@ -0,0 +1,202 @@ + + Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS + + APPENDIX: How to apply the Apache License to your work. + + To apply the Apache License to your work, attach the following + boilerplate notice, with the fields enclosed by brackets "[]" + replaced with your own identifying information. (Don't include + the brackets!) The text should be enclosed in the appropriate + comment syntax for the file format. We also recommend that a + file or class name and description of purpose be included on the + same "printed page" as the copyright notice for easier + identification within third-party archives. + + Copyright [yyyy] [name of copyright owner] + + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. diff --git a/internal/policy/candidate/MIGRATION.md b/internal/policy/candidate/MIGRATION.md new file mode 100644 index 0000000..bebc500 --- /dev/null +++ b/internal/policy/candidate/MIGRATION.md @@ -0,0 +1,56 @@ +# Explicit migration from prototype 0.0.2 + +This is a proposed, breaking migration to the **unadopted draft candidate** +`formatVersion: "1.0.0"`. Neither semver arithmetic nor opening a document consents +to migration. The candidate reader refuses prototype documents; it never upgrades +or reinterprets them. Prototype 0.0.1 needs its own explicit path to 0.0.2 and is +not silently accepted by this guide. + +1. Keep the original 0.0.2 Policy, adoption, fixture and all retained bytes. Record + their exact digests and the original prototype pin. Migration creates new + reviewable artifacts; it does not overwrite history. +2. Obtain explicit author/operator intent to migrate, including which exact Policy + versions, consuming Pack and adoption scope are intended. Explicitly choose + `workspace-managed` for former `desk-managed` content, or retain + `externally-managed` intent. Do not infer intent from an imported source's owner, + publisher, folder, citation, access response or approval history. +3. Preserve the source, narrative, interpretation/review-basis and consumer bytes + **exactly**, with their existing raw digest, length and declared media types. + Preserve anchors, local section/source IDs, opaque provider revisions and Pack + `specVersion`/identity. Do not extract, normalize, reserialize or rewrite those + files just to satisfy migration. Re-extraction or changed meaning is separate + authoring and requires a fresh review. +4. Construct a new Policy by removing the complete `prototype` wrapper and adding + the exact string `formatVersion: "1.0.0"`. Replace `desk-managed` with the + explicitly selected `workspace-managed`. Preserve the rest of the supported + content/provenance/sections. Choose the Policy's new immutable identity/version + explicitly: preserve its stable series ID only with a new artifact version, or + fork to a new ID. Never reuse an existing immutable `(id, version)` with changed + bytes. This offline checker cannot detect historical reuse on its own. +5. Serialize and retain those new Policy bytes. Regenerate the raw content digest + and length and, when requested, the `jps-canon` canonical identity. Update every + dependent adoption's exact Policy reference (ID, artifact version, bytes and + optional canonical digest); a stale old hash must refuse. Keep the exact Pack + bytes/reference; a different Pack is a separate new interpretation. +6. Construct a new adoption with `formatVersion: "1.0.0"` and no prototype wrapper. + Choose its immutable identity/version explicitly. Preserve or deliberately + re-review its exact scope and total coverage; do not fill omissions or upgrade + manual/pending/out-of-scope clauses automatically. Retain new adoption bytes, + regenerate their identities wherever referenced, and validate the full supplied + material under the candidate checker and vectors. +7. Re-review dependent release/registration/export snapshots that pin changed Policy + or adoption bytes. Keep historical snapshots and runs on their original pins. + A new snapshot is an explicit host operation, never a side effect of parsing or + importing a document. Host authority and current admission remain separate. + +No approval, signature, authenticated review assertion, role, permission, lifecycle +state, publication receipt or dispatch grant migrates automatically. Existing +review-basis bytes remain historical explanations only. Even if every narrative +byte and clause ID is unchanged, a host must obtain fresh applicable authorization +for its new candidate and workflow, under its own contract. Informational sources +stay informational; making one governing requires a reviewed new adoption. + +The three candidate examples intentionally use new Policy/adoption IDs and retain +the old consumer/source/narrative/interpretation files unchanged. Their new hashes +are reproducible examples, not migrated organizational approvals. There is no +migration helper or implicit parser fallback in this slice. diff --git a/internal/policy/candidate/NOTICE b/internal/policy/candidate/NOTICE new file mode 100644 index 0000000..da28de4 --- /dev/null +++ b/internal/policy/candidate/NOTICE @@ -0,0 +1,5 @@ +Judgment Pack Specification +Copyright 2026 Brian Jin + +This product includes specification artifacts developed by the Judgment Pack +project (https://github.com/Judgment-Pack/judgment-pack-spec). diff --git a/internal/policy/candidate/README.md b/internal/policy/candidate/README.md new file mode 100644 index 0000000..b5a13b6 --- /dev/null +++ b/internal/policy/candidate/README.md @@ -0,0 +1,340 @@ +# Proposed draft Policy companion contract 1.0.0 + +This is the review candidate for [RFC 0023](../0023-policy-companion.md) and +[Spec #211](https://github.com/Judgment-Pack/judgment-pack-spec/issues/211). +**Proposed only, at draft maturity; not adopted, stable, released, or a JPS +conformance class.** Writing `formatVersion: "1.0.0"` does not adopt a format. +Nothing here establishes approval, current authority, permission, currency, +source access, independent implementation agreement, or production fitness. +The RFC remains open for public comment and disposition under the repository's +process. No cross-vendor review or independent evidence is claimed here. + +The portable candidate consists of this prose, the closed +[Policy](policy.schema.json), [Governing adoption](governing-adoption.schema.json) +and [shared](common.schema.json) schemas, and the agreement +[vectors](vectors/manifest.json). These are deliberately outside the adopted +`spec/`, `schema/` and `conformance/` trees. Schema acceptance alone is insufficient: +the byte, anchor, reference and coverage checks below are also required. A conflict +between prose, schemas or vectors is a candidate defect, never an authorization. + +The historical [0.0.2 prototype](../policy-companion-prototype/README.md) remains +unchanged, including its checker, tests and all retained files. Its exact baseline +is commit `8a56a95d555c17640d2db4984363b779536b3c2a`, recorded file by file in +[prototype-0.0.2-pin.json](prototype-0.0.2-pin.json). This candidate derives the +immutable-content rules from that prototype, with its own schemas and checker. +It never imports prototype code. The [migration guide](MIGRATION.md) describes the +explicit, breaking transition; a reader never silently migrates an input. + +## 1. Exact selectors and immutable artifact identity + +A document has exactly one `formatVersion`, the **string** `"1.0.0"`, and `kind` +`"policy"` or `"governing-adoption"`. No prototype wrapper, `specVersion`, integer +selector, alias, suffix, coercion, or extension member is permitted. The schemas' +URNs identify local candidate schemas, not a network location or an adopted release. +Readers must dispatch on the whole selector before interpreting this grammar. + +The independent `version` names a revision of the immutable artifact, alongside +its absolute-URI `id`. It is exactly three unsigned ASCII decimal components +separated by dots: `0` or a nonzero digit followed by digits, with no leading zeros, +suffix, spaces or final newline, at most 256 characters. `0.0.0` and a 256-character +version are valid. No component arithmetic, bump policy, compatibility, reservation +or historical uniqueness is inferred. In particular, artifact `7.3.42` still uses +format `1.0.0`. Pack artifact references follow the same bounded version grammar; +the retained Pack keeps its own Core `specVersion` unchanged. + +An `id` is an opaque, scheme-bearing identifier matching the complete `URI` +production of [RFC 3986, Appendix A](https://www.rfc-editor.org/rfc/rfc3986#appendix-A), +at most 2,048 characters. Optional query and fragment are allowed; a relative +reference is refused. This means `URI`, not the narrower `absolute-URI` production +that excludes fragments. Raw Unicode, controls, whitespace (including a final LF) +and malformed percent triplets refuse. Percent-encoded Unicode and registered +names remain valid; percent decoding, trimming and identity normalization never +occur. Raw brackets belong only around an authority's IP literal, so brackets in +path, query, fragment or rootless content must be percent-encoded. IPv6 dotted +tails must satisfy the IPv4 decimal-octet grammar without leading zeros. IPvFuture +accepts both `v` and `V`, under [RFC 5234 §2.3](https://www.rfc-editor.org/rfc/rfc5234#section-2.3). +An unbracketed numeric host that fails IPv4 can still be a valid registered name. +Identity is not permission to fetch it. Local IDs match `[a-z][a-z0-9]*(?:-[a-z0-9]+)*`, at most +128 characters. Required readable text is nonempty and at most 4,096 characters. +Every defined object is closed: unknown members at any level are refused. + +The unreleased candidate URI correction after commit +`30b0b30a1b0c851c41bdb271d6ef9534c91bcdec` changes three dependency-derived answers: +final-LF identifiers and IPv6 literals with leading-zero IPv4 tails now refuse; +uppercase-`V` IPvFuture identifiers now validate. The checker applies a local +candidate format override, including its consuming-Pack structural checks. Shared +Core validators elsewhere and the frozen prototype are unchanged. The candidate's +2,048-character ID bound belongs to its schemas; other Core URI fields retain +their existing schema bounds. +The 20 URI vectors also distinguish generic URI grammar from URL-parser behavior. +Format `1.0.0` remains proposed and unreleased; this correction confers no adoption. + +## 2. Exact retained content and optional canonical identity + +A content reference is exactly `{bytesDigest, byteLength, mediaType}`. The digest +is lowercase `sha256:` plus 64 hexadecimal digits over the exact retained bytes, +including whitespace and final newlines. Length is the exact nonnegative integer +byte count, never a Boolean. It never hashes a URL or filename. Media type is a +lowercase token/token string under the shared schema, at most 128 characters, +without parameters. Artifact bytes require `application/json`; a Policy narrative +requires `text/plain` and valid UTF-8. Original bytes may be opaque, including PDF. + +Media type belongs to a reference and its registration, rather than to the digest +alone. Identical bytes can be registered as both `text/plain` narrative and +`text/markdown` original. Each reference must resolve under its declared media +type, hash and length; registering one type does not register another. Conflicting +bytes for one digest refuse. Distinct retained bytes count once toward the total +budget, even with multiple types or roles; each consuming role still applies its +own byte limit. Media-type declarations do not prove the content's actual type. + +An artifact reference is exactly `{kind, id, version, content}` with optional +`canonicalIdentity: {profile: "jps-canon", canonicalDigest}`. The only artifact +reference kinds in this candidate are `policy` and consuming `pack`, in their +specified positions. Exact bytes are always checked, even when canonical identity +is supplied. A canonical match never substitutes for the exact-byte pin. + +`jps-canon` reuses the existing [Dialect canonical form](../../spec/dialect.md), +which in turn references the checkpoint-witness form. It is not JCS or preparation +canonicalization. Objects sort names by Unicode code point; arrays retain order; +strings retain Unicode without normalization, with JSON escaping for quotes, +backslashes and controls; output is UTF-8 without insignificant whitespace. +Only integer JSON number literals whose magnitude is at most `9007199254740991` +are in this domain; `-0` canonically becomes `0`. Fractional or exponent literals +are outside this domain, even when mathematically integral. Companion documents +use this domain before schema checking; they retain their original bytes regardless. + +Core permits other JSON numbers in optional extensions. The checker reads Pack +numbers as raw literals and validates numeric values with exact decimal/integer +values, without binary-float rounding or rewriting execution bytes. A Core-valid +Pack outside `jps-canon` remains usable with its raw content reference alone. If +its reference requests canonical identity, it refuses as +`unsupported-canonical-identity`. Canonical identity is checked only when present. +Pack and companion strict JSON reading share the existing `tools/dialect_verify.py` +reader, including number-literal and nesting bounds; no Core limit or pin changes. + +## 3. Policy content, original provenance and sections + +A Policy requires `formatVersion`, `kind`, `id`, `version`, `title`, +`managementMode`, `content`, `sections` and `sourceProvenance`. +`managementMode` is `workspace-managed` or `externally-managed`. It declares +publication-management intent and authenticates no publisher, approval or role. +It is retained artifact provenance/ownership intent, not current host governance; +changing host management or authority does not mutate historical content. +The old `desk-managed` spelling is refused, not aliased. Importing content as a +local draft requires explicit intent; it does not import the source's approval. + +`content` identifies the exact retained narrative. Each of 1–64 sections has a +unique local `id`, readable `title`, and `anchor: {startByte, endByte, bytesDigest}`. +The anchor is a nonempty, zero-based, half-open range of UTF-8 bytes in **that +narrative**, with SHA-256 of the selected bytes. Both endpoints must be UTF-8 +boundaries and `0 <= startByte < endByte <= narrative length`. Anchors may overlap +and need not partition the narrative. Their validity does not prove that all +meaningful clauses were represented, or that stable IDs preserve meaning after a +revision. These offsets are never original PDF/page/provider-document offsets. + +Each of 0–16 unique original-source records requires a local `id`, +`source: {provider, accountId, resourceId}`, explicit `sourceRevision` and `content`. +The provider/account/resource values are readable opaque provenance, not +credentials or authenticated authority. `sourceRevision` is an opaque nonempty +string or explicit null when unavailable. Original bytes remain separate from +narrative/extraction bytes. The checker neither extracts nor interprets them. +Sections optionally carry 0–16 unique `sourceRefs`, each exactly +`{sourceId, location}`. `sourceId` must resolve to an original-source record; +`location` is a readable citation such as `Clause 2`, not a verified byte offset. + +Newly authored content may have no sources. No executable conditions, lifecycle, +ACLs, roles, publication states, signatures, review assertions or approval Booleans +belong in these immutable documents. Optional structured `requirements` are also +unsupported; even a claimed non-executable form is refused. A later form requires +review and an explicit selector decision, without adding a second decision language. + +## 4. Governing adoption and scoped total coverage + +An adoption requires `formatVersion`, `kind`, `id`, `version`, `consumer` and +`governingPolicies`. The consumer is one exact retained Core `0.2.0-draft` Pack. +The checker validates its existing structural schema and resolves the elements +below. This is no evaluation or full Core semantic-conformance claim. Graph +consumers, graph composition, transitive closure, release envelopes, registration +and cycle handling remain unsupported, pending their owning contracts. + +There are 1–16 governing-policy entries, each exactly `{policy, scope, coverage}`. +One stable Policy identity can occur only once; two versions of the same identity +in one adoption refuse rather than imply precedence. List order never establishes +policy priority. Each Policy reference resolves its exact bytes, ID/version, +optional canonical identity, selector, closed grammar, sources and sections. + +Scope is either `{kind: "whole-policy"}` or +`{kind: "sections", sectionIds, reviewBasis}`. A section list is nonempty, unique, +at most 64 IDs and resolves only declared sections. The limited scope's retained +`reviewBasis` describes that intentional interpretation. Whole scope selects all +declared sections; it does not prove that the author declared every applicable +clause or every applicable policy. + +Coverage contains **exactly one** record per selected section, at most 64 records, +with no duplicate section identities, omissions, unknown IDs or outside-scope +records. The five closed forms are: + +| Status | Required members in addition to `sectionId` and `status` | +| --- | --- | +| `implemented` | Nonempty `consumerElements` (at most 64) and retained `reviewBasis` | +| `manual` | Readable `handoff` naming a responsible process | +| `awaiting-interpretation` | Readable `explanation` of unresolved meaning | +| `awaiting-implementation` | Readable `explanation` of missing implementation | +| `out-of-scope` | Readable `rationale` for this selected clause's exclusion | + +A clause excluded from limited scope has no coverage record; a selected clause +marked `out-of-scope` has the explicit rationale above. Partial automation is +valid and never asserts complete automation or permission to run. Both kinds of +`reviewBasis` are retained explanatory bytes, not proof of a reviewer's identity, +whole-policy approval or authorized sign-off. Manual handoff text grants no role. + +The typed `consumerElements` forms are exactly: + +| Reference | Actual Core target | +| --- | --- | +| `{kind: "rule", id}` | A declared `rules[]` entry with that ID | +| `{kind: "exception", id}` | A declared `exceptions[]` entry with that ID | +| `{kind: "applicability"}` | The present `applicability` condition | +| `{kind: "fallback"}` | The present `fallbackOutcome`, resolving to a declared outcome | + +Singletons have no fabricated ID. Kind/ID confusion, absent/unknown targets and +repeated references within one coverage record refuse. Rule and exception IDs +occupy separate namespaces. The checker also requires unique rule, exception and +outcome IDs, resolves fallback, and resolves each exception's optional target-rule +and outcome references. It does not implement all Core semantic checks or prove +that a condition correctly interprets a clause. Outcomes, evidence requirements, +condition subelements and escalation are unsupported coverage kinds. + +Optional `informationalSources` is at most 16 unique content references. These +bytes remain citations; they never create governing dependencies, review +assertions, authority or permissions. The checker cannot upgrade one into an +adoption, infer natural-language consistency or decide applicability. + +## 5. Resource limits and refusal classifications + +These are candidate offline-reader bounds, not changes to Core or adopted limits. +All maxima are inclusive. Strings are counted after decoding in Unicode +characters unless the table specifies bytes. The closed schemas state all field +maxima; the capability record exposes them for discovery. + +| Resource | Maximum | +| --- | --- | +| Any parsed companion/Pack/carrier JSON document | 262,144 exact bytes | +| JSON nesting, each object/array one level from zero | 32 | +| JSON number literal | 128 characters; exponent magnitude 308 | +| Narrative, interpretation/review basis, informational material | 1,048,576 bytes each | +| Original source material, one carrier registration | 4,194,304 bytes each | +| Distinct retained material across one supplied carrier | 16,777,216 bytes | +| Ordered registrations in the local fixture/vector input carrier | 16 | +| Artifact version | 256 ASCII characters | + +An artifact is also subject to the parsed-document byte limit, even though its +content reference has the general material maximum. Each role is checked +independently. Unsupported original size refuses the whole supplied input; +truncating it, silently dropping it, or substituting narrative extraction is not +a complete input. Registration exceeding a bound changes no material state. + +The reader returns exactly one of these bounded JSON objects (object member order +is irrelevant; no optional messages, paths, content, titles or provider identifiers): + +```json +{"status":"valid","formatVersion":"1.0.0","maturity":"proposed-draft"} +{"status":"refused","code":"invalid-selector"} +``` + +`valid` means supplied-document and reference agreement under this **proposed** +candidate only. A refusal reports no partial coverage or permission. CLI success +exits 0 and refusal exits 1. Environment/setup failures are not document results; +operators must not treat an inability to run as success. + +| Code | Meaning | +| --- | --- | +| `input-over-bound` | Physical bytes/nesting/number limits, schema maxima, role sizes, registration count or aggregate bytes exceeded | +| `invalid-json` | Strict UTF-8 JSON failed: duplicate keys, BOM, nonfinite numbers, unpaired surrogates, multiple values, malformed syntax | +| `invalid-selector` | Root is not an object; selector missing, wrong type, not strict ASCII `x.y.z`, or over 256 characters | +| `unsupported-format` | Selector is well-formed within that bound but is not exactly `1.0.0`; no shared-major inference | +| `invalid-document` | Supported companion fails canonical numeric domain or closed schema; wrong kind, malformed artifact version or unsupported members | +| `missing-material` | A referenced digest, required fixture document or retained local file is absent/unavailable | +| `reference-mismatch` | Raw bytes/hash/length/registered media type, ID/version, or a supported requested canonical digest differs | +| `invalid-anchor` | Narrative UTF-8, section-ID uniqueness, byte range/boundary/hash or source reference fails | +| `invalid-coverage` | Semantic scope, total coverage, policy uniqueness or typed consumer reference fails | +| `invalid-consumer` | Retained Pack fails existing Core schema or the specific ID/fallback/exception checks in §4 | +| `unsupported-canonical-identity` | Requested `jps-canon` identity is outside that existing profile's domain | +| `invalid-carrier` | Synthetic fixture/vector carrier has invalid closed shape or local path usage | + +Bounds on physical document bytes, nesting and number literals are checked before +JSON syntax, including on malformed bytes. Then strict JSON is parsed. Exact +format dispatch occurs before canonical-domain and schema interpretation: +`{"formatVersion":"7.0.0","n":1.5}` is `unsupported-format`. Selector lexical +failures, including the selector's own 256-character limit, are +`invalid-selector`; other schema maxima are `input-over-bound`. Unsupported kinds +under supported format are `invalid-document`. Other-field bounds or validity do +not cause reinterpretation under an unknown format. + +For the portable vector input, parse, select and canonical-domain-check the root +before checking the registration count and registering material in listed order. +Local carrier sources are acquired only after root dispatch and the count check, +one source immediately before its registration. An earlier refusal prevents later +source acquisition. NUL paths and path-normalization failures are `invalid-carrier`. +Then check the root's schema and semantics as implemented in `verify.py`: +Policy narrative, sources, sections in declaration order; adoption consumer then +Policies in declaration order, each reference before its Policy/coverage, then +informational sources. Canonical-domain conversion occurs immediately after root +selection; all schema maxima found at one schema check take priority over other +schema failures. Otherwise a closed-schema failure is `invalid-document` (or +`invalid-consumer` for Core), including structurally identical duplicates rejected +by `uniqueItems`. Semantic duplicate coverage/IDs with distinct records uses the +specific code above. On compound defects the first failing phase wins. Refusals +never render an input-derived diagnostic or exception string. + +## 6. Discovery, examples and independent porting + +[capabilities.json](capabilities.json), also returned by +`verify.py --capabilities`, lists exact candidate selectors, `proposed-draft` +maturity, kinds, supported Core release, features, bounds and explicit exclusions. +Capability discovery is an implementation statement, not adoption, trusted review +or a permission grant. Unsupported format and optional canonical identity are +separate capabilities; no parser tries an older grammar automatically. + +The examples are synthetic retained-byte bundles, derived from 0.0.2 with **source, +narrative, interpretation and consumer files preserved byte-for-byte**. Policy and +adoption identities/bytes are explicitly regenerated. The original consumer URI +is opaque and intentionally retained, even where its spelling mentions prototype. + +| Domain | Coverage | +| --- | --- | +| [Data access](examples/data-access/fixture.json) | Whole policy; rules, fallback, manual requests and pending audit implementation | +| [Procurement](examples/procurement/fixture.json) | Externally managed; applicability-only scope, limited sections, unresolved meaning, explicit exclusion | +| [Refunds](examples/refunds/fixture.json) | Whole policy; rules, exception-only routing, manual inspection, pending implementation | + +[fixture.schema.json](fixture.schema.json) describes a local synthetic carrier, +not a portable release envelope or proof that a dependency closure is complete. +Its files must resolve in the same directory; no network acquisition occurs. +The separate [vector carrier specification](vectors/README.md) defines static +input bytes and expected results for reuse by Go or other implementations. +Only a two-integer byte-repeat generator compresses boundary payloads; there is +no mutation language, implicit migration or dependency on Python transformations. +The current vectors measure agreement by this author's code and reuse its existing +canonicalizer; they supply no independent authorship or cross-vendor evidence. + +Using the repository's pinned `requirements-dev.txt` dependencies on Python 3.12: + +```sh +python rfcs/policy-companion-contract/verify.py --capabilities +python rfcs/policy-companion-contract/verify.py rfcs/policy-companion-contract/examples/refunds +python rfcs/policy-companion-contract/check_vectors.py +python -m unittest discover -s rfcs/policy-companion-contract -p 'test_*.py' -v +``` + +The repository workflow runs the candidate separately from the frozen prototype +and existing Core/Dialect checks. Passing these checks creates no adopted corpus. + +## 7. Remaining decisions and host boundary + +Review/publication transactions, authentication, review-assertion trust, signatures, +source observations and synchronization, current eligibility, run/action admission, +Graph closure and independent implementation evidence remain outside this +candidate. Review assertions cannot be inferred from explanatory bytes or model +test output. No citation, content match, imported history or historical approval +silently becomes local authority or permission. Host publication and admission +require their own adopted contracts and current authenticated decisions. diff --git a/internal/policy/candidate/capabilities.json b/internal/policy/candidate/capabilities.json new file mode 100644 index 0000000..313b455 --- /dev/null +++ b/internal/policy/candidate/capabilities.json @@ -0,0 +1,74 @@ +{ + "capability": "jps-policy-companion-offline", + "maturity": "proposed-draft", + "formatVersions": [ + "1.0.0" + ], + "consumerSpecVersions": [ + "0.2.0-draft" + ], + "kinds": [ + "policy", + "governing-adoption" + ], + "features": [ + "exact-byte-sha256", + "utf8-section-anchors", + "scoped-total-coverage", + "typed-core-pack-references", + "optional-jps-canon-identity", + "multiple-media-types" + ], + "limits": { + "documentBytes": 262144, + "documentDepth": 32, + "numberLiteralCharacters": 128, + "exponentMagnitude": 308, + "materialBytes": 1048576, + "originalBytes": 4194304, + "distinctRetainedBytes": 16777216, + "materialRegistrations": 16, + "versionCharacters": 256, + "sections": 64, + "sources": 16, + "governingPolicies": 16, + "consumerElementsPerSection": 64, + "textCharacters": 4096, + "uriCharacters": 2048, + "localIdCharacters": 128, + "mediaTypeCharacters": 128, + "sourceRefsPerSection": 16, + "scopeSectionIds": 64, + "coverageRecordsPerPolicy": 64, + "informationalSources": 16, + "canonicalIntegerMagnitude": 9007199254740991 + }, + "excludes": [ + "adopted-or-stable-format", + "graph-consumers", + "evaluation", + "full-core-semantics", + "signatures", + "review-assertion-trust", + "live-authority", + "permissions", + "currency", + "source-fetch", + "automatic-migration", + "independent-interoperability-evidence" + ], + "refusalCodes": [ + "input-over-bound", + "invalid-json", + "invalid-selector", + "unsupported-format", + "invalid-document", + "missing-material", + "reference-mismatch", + "invalid-anchor", + "invalid-coverage", + "invalid-consumer", + "unsupported-canonical-identity", + "invalid-carrier" + ] +} diff --git a/internal/policy/candidate/common.schema.json b/internal/policy/candidate/common.schema.json new file mode 100644 index 0000000..581bb42 --- /dev/null +++ b/internal/policy/candidate/common.schema.json @@ -0,0 +1,187 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$id": "urn:jps:proposal:policy-companion:1.0.0:common", + "title": "PROPOSED DRAFT Policy companion 1.0.0: common", + "description": "Proposed draft shared definitions. jps-canon refers to the existing spec/dialect.md canonical profile; this candidate does not adopt or change it.", + "$ref": "#/$defs/retainedContent", + "$defs": { + "version": { + "type": "string", + "minLength": 5, + "maxLength": 256, + "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?![\\s\\S])" + }, + "text": { + "type": "string", + "minLength": 1, + "maxLength": 4096 + }, + "localId": { + "type": "string", + "maxLength": 128, + "pattern": "^[a-z][a-z0-9]*(?:-[a-z0-9]+)*(?![\\s\\S])" + }, + "uri": { + "type": "string", + "format": "uri", + "minLength": 1, + "maxLength": 2048, + "description": "Scheme-bearing RFC 3986 URI production, including optional fragment. Assert the entire ASCII string; no trimming, Unicode/percent decoding, or identity normalization. See candidate prose for IPv6 and case-insensitive IPvFuture checks." + }, + "content": { + "type": "object", + "additionalProperties": false, + "required": [ + "bytesDigest", + "byteLength", + "mediaType" + ], + "properties": { + "bytesDigest": { + "type": "string", + "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" + }, + "byteLength": { + "type": "integer", + "minimum": 0, + "maximum": 1048576 + }, + "mediaType": { + "type": "string", + "maxLength": 128, + "pattern": "^[a-z0-9!#$&^_.+-]+/[a-z0-9!#$&^_.+-]+(?![\\s\\S])" + } + }, + "description": "Narrative, review basis, artifact and informational material: at most 1 MiB." + }, + "canonicalIdentity": { + "type": "object", + "additionalProperties": false, + "required": [ + "profile", + "canonicalDigest" + ], + "properties": { + "profile": { + "const": "jps-canon" + }, + "canonicalDigest": { + "type": "string", + "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" + } + } + }, + "anchor": { + "type": "object", + "additionalProperties": false, + "required": [ + "startByte", + "endByte", + "bytesDigest" + ], + "properties": { + "startByte": { + "type": "integer", + "minimum": 0, + "maximum": 1048576 + }, + "endByte": { + "type": "integer", + "minimum": 1, + "maximum": 1048576 + }, + "bytesDigest": { + "type": "string", + "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" + } + } + }, + "policyReference": { + "type": "object", + "additionalProperties": false, + "required": [ + "kind", + "id", + "version", + "content" + ], + "properties": { + "kind": { + "const": "policy" + }, + "id": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/uri" + }, + "version": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/version" + }, + "content": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/content" + }, + "canonicalIdentity": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/canonicalIdentity" + } + } + }, + "packReference": { + "type": "object", + "additionalProperties": false, + "required": [ + "kind", + "id", + "version", + "content" + ], + "properties": { + "kind": { + "const": "pack" + }, + "id": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/uri" + }, + "version": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/version" + }, + "content": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/content" + }, + "canonicalIdentity": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/canonicalIdentity" + } + } + }, + "retainedContent": { + "type": "object", + "additionalProperties": false, + "required": [ + "bytesDigest", + "byteLength", + "mediaType" + ], + "properties": { + "bytesDigest": { + "type": "string", + "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" + }, + "byteLength": { + "type": "integer", + "minimum": 0, + "maximum": 4194304 + }, + "mediaType": { + "type": "string", + "maxLength": 128, + "pattern": "^[a-z0-9!#$&^_.+-]+/[a-z0-9!#$&^_.+-]+(?![\\s\\S])" + } + }, + "description": "Generic fixture-carrier reference; consuming roles impose their own bounds." + }, + "originalContent": { + "description": "Exact retained original source bytes: at most 4 MiB; never a replacement for narrative.", + "$ref": "#/$defs/retainedContent" + }, + "formatVersion": { + "const": "1.0.0" + } + } +} diff --git a/internal/policy/candidate/examples/data-access/adoption.json b/internal/policy/candidate/examples/data-access/adoption.json new file mode 100644 index 0000000..e6e67e2 --- /dev/null +++ b/internal/policy/candidate/examples/data-access/adoption.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/examples/data-access/consumer-pack.json b/internal/policy/candidate/examples/data-access/consumer-pack.json new file mode 100644 index 0000000..a292cbe --- /dev/null +++ b/internal/policy/candidate/examples/data-access/consumer-pack.json @@ -0,0 +1,62 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + } +} diff --git a/internal/policy/candidate/examples/data-access/fixture.json b/internal/policy/candidate/examples/data-access/fixture.json new file mode 100644 index 0000000..4d9d3a3 --- /dev/null +++ b/internal/policy/candidate/examples/data-access/fixture.json @@ -0,0 +1,58 @@ +{ + "fixtureVersion": "1", + "synthetic": true, + "scenario": "data-access", + "materials": [ + { + "path": "narrative.txt", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "path": "source.txt", + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "path": "interpretation.txt", + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "path": "consumer-pack.json", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "path": "policy.json", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "path": "adoption.json", + "content": { + "bytesDigest": "sha256:98294b5df0876cc793f236fa5184380aa37f2e459e1f630a5e613237404c2ec0", + "byteLength": 2352, + "mediaType": "application/json" + } + } + ], + "policy": "policy.json", + "consumer": "consumer-pack.json", + "adoption": "adoption.json" +} diff --git a/internal/policy/candidate/examples/data-access/interpretation.txt b/internal/policy/candidate/examples/data-access/interpretation.txt new file mode 100644 index 0000000..4aa6c66 --- /dev/null +++ b/internal/policy/candidate/examples/data-access/interpretation.txt @@ -0,0 +1,4 @@ +SYNTHETIC REVIEW BASIS; no person approved this fixture. +The eligible and ineligible rules interpret the automated eligibility clause. +The fallbackOutcome routes an unmatched classification to review; unknown facts escalate. +Other coverage is stated explicitly. diff --git a/internal/policy/candidate/examples/data-access/narrative.txt b/internal/policy/candidate/examples/data-access/narrative.txt new file mode 100644 index 0000000..bd5e686 --- /dev/null +++ b/internal/policy/candidate/examples/data-access/narrative.txt @@ -0,0 +1,10 @@ +SYNTHETIC RFC PROTOTYPE — Data access + +Automated release +Only de-identified datasets may be released through this automated path. Identifiable datasets are refused; missing classification goes to a data steward. + +Restricted requests +A data steward reviews restricted requests through the manual access process. This pack cannot grant an exception. + +Quarterly audit +Review the access log quarterly. A separate audit implementation is still needed. diff --git a/internal/policy/candidate/examples/data-access/policy.json b/internal/policy/candidate/examples/data-access/policy.json new file mode 100644 index 0000000..ae2a479 --- /dev/null +++ b/internal/policy/candidate/examples/data-access/policy.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/examples/data-access/source.txt b/internal/policy/candidate/examples/data-access/source.txt new file mode 100644 index 0000000..794f462 --- /dev/null +++ b/internal/policy/candidate/examples/data-access/source.txt @@ -0,0 +1,5 @@ +SYNTHETIC ORIGINAL SOURCE; NOT AN APPROVED POLICY + +Clause 1: Only de-identified datasets may be released through this automated path. Identifiable datasets are refused; missing classification goes to a data steward. +Clause 2: A data steward reviews restricted requests through the manual access process. This pack cannot grant an exception. +Clause 3: Review the access log quarterly. A separate audit implementation is still needed. diff --git a/internal/policy/candidate/examples/procurement/adoption.json b/internal/policy/candidate/examples/procurement/adoption.json new file mode 100644 index 0000000..9c55f54 --- /dev/null +++ b/internal/policy/candidate/examples/procurement/adoption.json @@ -0,0 +1,97 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/procurement/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/procurement/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:d810d8b3972a4bbc31cd3deb7ada4de965f1ad59bf753cec6748f943213cbcee", + "byteLength": 1725, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:205a2afdc68ebd46d5b022256fadec6bd071bc8e34faff481f288c20df008f60" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/procurement/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:539587356d8c0942f6e2c98ec09311e9c55fc4efcc6b9f8845e58db817a8dc58", + "byteLength": 2793, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:f0ef6fe0bb4703eaf6b2c1edf2f12712dffc139e887317c46fc82d83dba71275" + } + }, + "scope": { + "kind": "sections", + "sectionIds": [ + "eligibility", + "conflict-review", + "invoice-payment", + "purchase-scope" + ], + "reviewBasis": { + "bytesDigest": "sha256:14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "byteLength": 402, + "mediaType": "text/plain" + } + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "byteLength": 402, + "mediaType": "text/plain" + } + }, + { + "sectionId": "conflict-review", + "status": "awaiting-interpretation", + "explanation": "Synthetic open work item: agree the conflict threshold before implementation." + }, + { + "sectionId": "invoice-payment", + "status": "out-of-scope", + "rationale": "This pack assesses eligibility only; treasury payment reconciliation is a separate process." + }, + { + "sectionId": "purchase-scope", + "status": "implemented", + "consumerElements": [ + { + "kind": "applicability" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "byteLength": 402, + "mediaType": "text/plain" + } + } + ] + } + ] +} diff --git a/internal/policy/candidate/examples/procurement/consumer-pack.json b/internal/policy/candidate/examples/procurement/consumer-pack.json new file mode 100644 index 0000000..0745b38 --- /dev/null +++ b/internal/policy/candidate/examples/procurement/consumer-pack.json @@ -0,0 +1,68 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/policy-companion-prototype/procurement/pack", + "version": "1.0.0", + "title": "Procurement — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/procurement/competitiveProcedureDocumented", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/procurement/competitiveProcedureDocumented", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + }, + "applicability": { + "op": "fact", + "path": "/request/kind", + "operator": "equals", + "value": "purchase" + } +} diff --git a/internal/policy/candidate/examples/procurement/fixture.json b/internal/policy/candidate/examples/procurement/fixture.json new file mode 100644 index 0000000..2bb9dd5 --- /dev/null +++ b/internal/policy/candidate/examples/procurement/fixture.json @@ -0,0 +1,58 @@ +{ + "fixtureVersion": "1", + "synthetic": true, + "scenario": "procurement", + "materials": [ + { + "path": "narrative.txt", + "content": { + "bytesDigest": "sha256:993a73c70afdc16c94368982d1e951c85c90838d1f750a7001c2942dc9834b94", + "byteLength": 621, + "mediaType": "text/plain" + } + }, + { + "path": "source.txt", + "content": { + "bytesDigest": "sha256:4681b36d52396d3faef09e4a7c551d829920362beb47a1bfb32c2d6c4d82763b", + "byteLength": 591, + "mediaType": "text/plain" + } + }, + { + "path": "interpretation.txt", + "content": { + "bytesDigest": "sha256:14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "byteLength": 402, + "mediaType": "text/plain" + } + }, + { + "path": "consumer-pack.json", + "content": { + "bytesDigest": "sha256:d810d8b3972a4bbc31cd3deb7ada4de965f1ad59bf753cec6748f943213cbcee", + "byteLength": 1725, + "mediaType": "application/json" + } + }, + { + "path": "policy.json", + "content": { + "bytesDigest": "sha256:539587356d8c0942f6e2c98ec09311e9c55fc4efcc6b9f8845e58db817a8dc58", + "byteLength": 2793, + "mediaType": "application/json" + } + }, + { + "path": "adoption.json", + "content": { + "bytesDigest": "sha256:e9c871b2e7dc7448e46b2d4d347beb504bbe0a691be11df4283a95a693208703", + "byteLength": 3055, + "mediaType": "application/json" + } + } + ], + "policy": "policy.json", + "consumer": "consumer-pack.json", + "adoption": "adoption.json" +} diff --git a/internal/policy/candidate/examples/procurement/interpretation.txt b/internal/policy/candidate/examples/procurement/interpretation.txt new file mode 100644 index 0000000..cc2bd1f --- /dev/null +++ b/internal/policy/candidate/examples/procurement/interpretation.txt @@ -0,0 +1,5 @@ +SYNTHETIC REVIEW BASIS; no person approved this fixture. +The eligible and ineligible rules interpret the competitive-procedure clause. +The applicability condition alone implements purchase scope; it is not a rule ID. +Missing facts need review. Other coverage is stated explicitly. +The selected scope includes eligibility, conflict review, invoice payment and purchase scope; public notice is excluded. diff --git a/internal/policy/candidate/examples/procurement/narrative.txt b/internal/policy/candidate/examples/procurement/narrative.txt new file mode 100644 index 0000000..646937a --- /dev/null +++ b/internal/policy/candidate/examples/procurement/narrative.txt @@ -0,0 +1,16 @@ +SYNTHETIC RFC PROTOTYPE — Procurement + +Competitive procedure +Automated eligibility requires a documented competitive procedure. A missing record requires a procurement reviewer. + +Supplier conflicts +Supplier relationships require a conflict review. The threshold for a material relationship needs clarification. + +Invoice payment +Treasury performs payment reconciliation outside this eligibility interpretation. + +Public notice +Publish the award notice through the separate communications process. + +Purchase scope +This eligibility pack applies only to purchase requests; other requests remain outside this automated path. diff --git a/internal/policy/candidate/examples/procurement/policy.json b/internal/policy/candidate/examples/procurement/policy.json new file mode 100644 index 0000000..00b19b2 --- /dev/null +++ b/internal/policy/candidate/examples/procurement/policy.json @@ -0,0 +1,106 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/procurement/policy", + "version": "1.0.0", + "title": "Procurement — synthetic policy content", + "managementMode": "externally-managed", + "content": { + "bytesDigest": "sha256:993a73c70afdc16c94368982d1e951c85c90838d1f750a7001c2942dc9834b94", + "byteLength": 621, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Competitive procedure", + "anchor": { + "startByte": 41, + "endByte": 181, + "bytesDigest": "sha256:a8d58fa560d792bbc0848b517b47a04d01fa928a4315de4be423d9756745714f" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "conflict-review", + "title": "Supplier conflicts", + "anchor": { + "startByte": 181, + "endByte": 314, + "bytesDigest": "sha256:ed53cc9edccb33c00c4692bcc84593e249117f9dbc4045d57e5e8f85458c7c94" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "invoice-payment", + "title": "Invoice payment", + "anchor": { + "startByte": 314, + "endByte": 413, + "bytesDigest": "sha256:f6803f2ffa7356a3aad889d20987a00614d8145193c521107845092745db9d1d" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + }, + { + "id": "public-notice", + "title": "Public notice", + "anchor": { + "startByte": 413, + "endByte": 497, + "bytesDigest": "sha256:b6d68243578efb748244d55bcfe5f7bb730faa1c939c6a910f4e6e26b79b34f9" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 4" + } + ] + }, + { + "id": "purchase-scope", + "title": "Purchase scope", + "anchor": { + "startByte": 498, + "endByte": 621, + "bytesDigest": "sha256:13498f448247cfd988d4d59046ae766abb0559cf902093cdf8f650543f37ed26" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 5" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "procurement-original" + }, + "sourceRevision": "fictional-revision-a", + "content": { + "bytesDigest": "sha256:4681b36d52396d3faef09e4a7c551d829920362beb47a1bfb32c2d6c4d82763b", + "byteLength": 591, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/examples/procurement/source.txt b/internal/policy/candidate/examples/procurement/source.txt new file mode 100644 index 0000000..c5913ac --- /dev/null +++ b/internal/policy/candidate/examples/procurement/source.txt @@ -0,0 +1,7 @@ +SYNTHETIC ORIGINAL SOURCE; NOT AN APPROVED POLICY + +Clause 1: Automated eligibility requires a documented competitive procedure. A missing record requires a procurement reviewer. +Clause 2: Supplier relationships require a conflict review. The threshold for a material relationship needs clarification. +Clause 3: Treasury performs payment reconciliation outside this eligibility interpretation. +Clause 4: Publish the award notice through the separate communications process. +Clause 5: This eligibility pack applies only to purchase requests; other requests remain outside this automated path. diff --git a/internal/policy/candidate/examples/refunds/adoption.json b/internal/policy/candidate/examples/refunds/adoption.json new file mode 100644 index 0000000..6af1ea9 --- /dev/null +++ b/internal/policy/candidate/examples/refunds/adoption.json @@ -0,0 +1,87 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/refunds/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/refunds/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:2a049f10cd8c5d4fc81200976507a8563d0bc1fca19fa9691fc1601507512e38", + "byteLength": 1924, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20723faedbed6ee066dd3330e4b72848702e92dfbeb68b757f6ed0a95e4a2c5" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/refunds/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:8e3a487de4b15a1bc6c824e6dedd2e1b4fe16f4b3c4430a76b46e943ef2565ff", + "byteLength": 2375, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:e287b7208c0e870d1ee04188bc57f614096210f740d0f95fbf11d1324dc93704" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:63f58f37957f808e98c67db11ac9d835286733336e47ae24f28b974d431b9862", + "byteLength": 301, + "mediaType": "text/plain" + } + }, + { + "sectionId": "damaged-goods", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "fraud-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + }, + { + "sectionId": "damaged-routing", + "status": "implemented", + "consumerElements": [ + { + "kind": "exception", + "id": "damaged-routing" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:63f58f37957f808e98c67db11ac9d835286733336e47ae24f28b974d431b9862", + "byteLength": 301, + "mediaType": "text/plain" + } + } + ] + } + ] +} diff --git a/internal/policy/candidate/examples/refunds/consumer-pack.json b/internal/policy/candidate/examples/refunds/consumer-pack.json new file mode 100644 index 0000000..0732377 --- /dev/null +++ b/internal/policy/candidate/examples/refunds/consumer-pack.json @@ -0,0 +1,76 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/policy-companion-prototype/refunds/pack", + "version": "1.0.0", + "title": "Refunds — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/purchase/withinReturnWindow", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/purchase/withinReturnWindow", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + }, + "exceptions": [ + { + "id": "damaged-routing", + "description": "Route damaged goods to review; this does not perform the manual inspection.", + "when": { + "op": "fact", + "path": "/purchase/damaged", + "operator": "equals", + "value": true + }, + "effect": "escalate", + "onUnknown": "escalate" + } + ] +} diff --git a/internal/policy/candidate/examples/refunds/fixture.json b/internal/policy/candidate/examples/refunds/fixture.json new file mode 100644 index 0000000..e1a86a9 --- /dev/null +++ b/internal/policy/candidate/examples/refunds/fixture.json @@ -0,0 +1,58 @@ +{ + "fixtureVersion": "1", + "synthetic": true, + "scenario": "refunds", + "materials": [ + { + "path": "narrative.txt", + "content": { + "bytesDigest": "sha256:909d57f27b7359c777dfb2ea07d859408a13504bf8dded27807889f7cde52969", + "byteLength": 486, + "mediaType": "text/plain" + } + }, + { + "path": "source.txt", + "content": { + "bytesDigest": "sha256:ae72534013fc75083b184765e7a558b71b5e4674720aa56e8960844fd712c6c0", + "byteLength": 474, + "mediaType": "text/plain" + } + }, + { + "path": "interpretation.txt", + "content": { + "bytesDigest": "sha256:63f58f37957f808e98c67db11ac9d835286733336e47ae24f28b974d431b9862", + "byteLength": 301, + "mediaType": "text/plain" + } + }, + { + "path": "consumer-pack.json", + "content": { + "bytesDigest": "sha256:2a049f10cd8c5d4fc81200976507a8563d0bc1fca19fa9691fc1601507512e38", + "byteLength": 1924, + "mediaType": "application/json" + } + }, + { + "path": "policy.json", + "content": { + "bytesDigest": "sha256:8e3a487de4b15a1bc6c824e6dedd2e1b4fe16f4b3c4430a76b46e943ef2565ff", + "byteLength": 2375, + "mediaType": "application/json" + } + }, + { + "path": "adoption.json", + "content": { + "bytesDigest": "sha256:7c7cd121fc4510fff19b8bcaf120ce1a9cb3f7e60b8e811ce9be917799367bc8", + "byteLength": 2729, + "mediaType": "application/json" + } + } + ], + "policy": "policy.json", + "consumer": "consumer-pack.json", + "adoption": "adoption.json" +} diff --git a/internal/policy/candidate/examples/refunds/interpretation.txt b/internal/policy/candidate/examples/refunds/interpretation.txt new file mode 100644 index 0000000..61258de --- /dev/null +++ b/internal/policy/candidate/examples/refunds/interpretation.txt @@ -0,0 +1,4 @@ +SYNTHETIC REVIEW BASIS; no person approved this fixture. +The eligible and ineligible rules interpret the return-window clause. +The damaged-routing exception alone routes damaged goods to a specialist; physical inspection remains manual. +Missing facts need review. Other coverage is stated explicitly. diff --git a/internal/policy/candidate/examples/refunds/narrative.txt b/internal/policy/candidate/examples/refunds/narrative.txt new file mode 100644 index 0000000..1cf4b90 --- /dev/null +++ b/internal/policy/candidate/examples/refunds/narrative.txt @@ -0,0 +1,13 @@ +SYNTHETIC RFC PROTOTYPE — Refunds + +Return window +The automated path accepts only purchases within the published return window. Missing purchase dates require a returns specialist. + +Damaged goods +A returns specialist handles damaged goods through the manual inspection process. + +Fraud review +Potential repeated-claim abuse needs a separate reviewed implementation. + +Damaged goods routing +Damaged goods bypass automated eligibility and go to a returns specialist for manual inspection. diff --git a/internal/policy/candidate/examples/refunds/policy.json b/internal/policy/candidate/examples/refunds/policy.json new file mode 100644 index 0000000..b3531a2 --- /dev/null +++ b/internal/policy/candidate/examples/refunds/policy.json @@ -0,0 +1,91 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/refunds/policy", + "version": "1.0.0", + "title": "Refunds — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:909d57f27b7359c777dfb2ea07d859408a13504bf8dded27807889f7cde52969", + "byteLength": 486, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Return window", + "anchor": { + "startByte": 37, + "endByte": 183, + "bytesDigest": "sha256:838ea4e242523a398e18a4006aa1488cc2032eb23f503f2c2dc2539339cc757a" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "damaged-goods", + "title": "Damaged goods", + "anchor": { + "startByte": 183, + "endByte": 280, + "bytesDigest": "sha256:ac0263d8b10debc2e8fb9090bb1b55c80a5766a4d192f23f0f640062ba5c82d4" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "fraud-review", + "title": "Fraud review", + "anchor": { + "startByte": 280, + "endByte": 366, + "bytesDigest": "sha256:9117339f1340e981a232894965d79f3f2a9f8116ffc347142c7dc7d9bc2631c3" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + }, + { + "id": "damaged-routing", + "title": "Damaged goods routing", + "anchor": { + "startByte": 367, + "endByte": 486, + "bytesDigest": "sha256:a47d45dfa15bb16514328ff9e1de346be10d045a194597e6c44e1f598ab17ab1" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 4" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "refunds-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:ae72534013fc75083b184765e7a558b71b5e4674720aa56e8960844fd712c6c0", + "byteLength": 474, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/examples/refunds/source.txt b/internal/policy/candidate/examples/refunds/source.txt new file mode 100644 index 0000000..614029e --- /dev/null +++ b/internal/policy/candidate/examples/refunds/source.txt @@ -0,0 +1,6 @@ +SYNTHETIC ORIGINAL SOURCE; NOT AN APPROVED POLICY + +Clause 1: The automated path accepts only purchases within the published return window. Missing purchase dates require a returns specialist. +Clause 2: A returns specialist handles damaged goods through the manual inspection process. +Clause 3: Potential repeated-claim abuse needs a separate reviewed implementation. +Clause 4: Damaged goods bypass automated eligibility and go to a returns specialist for manual inspection. diff --git a/internal/policy/candidate/fixture.schema.json b/internal/policy/candidate/fixture.schema.json new file mode 100644 index 0000000..3d2ec3c --- /dev/null +++ b/internal/policy/candidate/fixture.schema.json @@ -0,0 +1,67 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$id": "urn:jps:proposal:policy-companion:1.0.0:fixture", + "title": "Local synthetic candidate fixture carrier; not a release envelope", + "type": "object", + "additionalProperties": false, + "required": [ + "fixtureVersion", + "synthetic", + "scenario", + "materials", + "policy", + "consumer", + "adoption" + ], + "properties": { + "fixtureVersion": { + "const": "1" + }, + "synthetic": { + "const": true + }, + "scenario": { + "type": "string", + "minLength": 1, + "maxLength": 128 + }, + "materials": { + "type": "array", + "minItems": 1, + "maxItems": 16, + "items": { + "type": "object", + "additionalProperties": false, + "required": [ + "path", + "content" + ], + "properties": { + "path": { + "type": "string", + "minLength": 1, + "maxLength": 128 + }, + "content": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/retainedContent" + } + } + } + }, + "policy": { + "type": "string", + "minLength": 1, + "maxLength": 128 + }, + "consumer": { + "type": "string", + "minLength": 1, + "maxLength": 128 + }, + "adoption": { + "type": "string", + "minLength": 1, + "maxLength": 128 + } + } +} diff --git a/internal/policy/candidate/governing-adoption.schema.json b/internal/policy/candidate/governing-adoption.schema.json new file mode 100644 index 0000000..3b8a520 --- /dev/null +++ b/internal/policy/candidate/governing-adoption.schema.json @@ -0,0 +1,265 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$id": "urn:jps:proposal:policy-companion:1.0.0:governing-adoption", + "title": "PROPOSED DRAFT Policy companion 1.0.0: governing-adoption", + "description": "Immutable interpretation/coverage proposal for one exact pack. No authorization, registration, release envelope, graph support or live eligibility.", + "type": "object", + "additionalProperties": false, + "required": [ + "formatVersion", + "kind", + "id", + "version", + "consumer", + "governingPolicies" + ], + "properties": { + "formatVersion": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/formatVersion" + }, + "kind": { + "const": "governing-adoption" + }, + "id": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/uri" + }, + "version": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/version" + }, + "consumer": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/packReference" + }, + "governingPolicies": { + "type": "array", + "minItems": 1, + "maxItems": 16, + "uniqueItems": true, + "items": { + "type": "object", + "additionalProperties": false, + "required": [ + "policy", + "scope", + "coverage" + ], + "properties": { + "policy": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/policyReference" + }, + "scope": { + "oneOf": [ + { + "type": "object", + "additionalProperties": false, + "required": [ + "kind" + ], + "properties": { + "kind": { + "const": "whole-policy" + } + } + }, + { + "type": "object", + "additionalProperties": false, + "required": [ + "kind", + "sectionIds", + "reviewBasis" + ], + "properties": { + "kind": { + "const": "sections" + }, + "sectionIds": { + "type": "array", + "minItems": 1, + "maxItems": 64, + "uniqueItems": true, + "items": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/localId" + } + }, + "reviewBasis": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/content" + } + } + } + ] + }, + "coverage": { + "type": "array", + "minItems": 1, + "maxItems": 64, + "uniqueItems": true, + "items": { + "oneOf": [ + { + "type": "object", + "additionalProperties": false, + "required": [ + "sectionId", + "status", + "consumerElements", + "reviewBasis" + ], + "properties": { + "sectionId": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/localId" + }, + "status": { + "const": "implemented" + }, + "consumerElements": { + "type": "array", + "minItems": 1, + "maxItems": 64, + "uniqueItems": true, + "items": { + "$ref": "#/$defs/consumerElement" + } + }, + "reviewBasis": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/content" + } + } + }, + { + "type": "object", + "additionalProperties": false, + "required": [ + "sectionId", + "status", + "handoff" + ], + "properties": { + "sectionId": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/localId" + }, + "status": { + "const": "manual" + }, + "handoff": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/text" + } + } + }, + { + "type": "object", + "additionalProperties": false, + "required": [ + "sectionId", + "status", + "explanation" + ], + "properties": { + "sectionId": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/localId" + }, + "status": { + "const": "awaiting-interpretation" + }, + "explanation": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/text" + } + } + }, + { + "type": "object", + "additionalProperties": false, + "required": [ + "sectionId", + "status", + "explanation" + ], + "properties": { + "sectionId": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/localId" + }, + "status": { + "const": "awaiting-implementation" + }, + "explanation": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/text" + } + } + }, + { + "type": "object", + "additionalProperties": false, + "required": [ + "sectionId", + "status", + "rationale" + ], + "properties": { + "sectionId": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/localId" + }, + "status": { + "const": "out-of-scope" + }, + "rationale": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/text" + } + } + } + ] + } + } + } + } + }, + "informationalSources": { + "type": "array", + "minItems": 0, + "maxItems": 16, + "uniqueItems": true, + "items": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/content" + } + } + }, + "$defs": { + "consumerElement": { + "description": "Exact declared Core rule/exception by ID, or the present applicability/fallbackOutcome singleton without a fabricated ID. Other element kinds are unsupported.", + "oneOf": [ + { + "type": "object", + "additionalProperties": false, + "required": [ + "kind", + "id" + ], + "properties": { + "kind": { + "enum": [ + "rule", + "exception" + ] + }, + "id": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/localId" + } + } + }, + { + "type": "object", + "additionalProperties": false, + "required": [ + "kind" + ], + "properties": { + "kind": { + "enum": [ + "applicability", + "fallback" + ] + } + } + } + ] + } + } +} diff --git a/internal/policy/candidate/policy.schema.json b/internal/policy/candidate/policy.schema.json new file mode 100644 index 0000000..c89c647 --- /dev/null +++ b/internal/policy/candidate/policy.schema.json @@ -0,0 +1,147 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$id": "urn:jps:proposal:policy-companion:1.0.0:policy", + "title": "PROPOSED DRAFT Policy companion 1.0.0: policy", + "description": "Immutable content/provenance proposal only. managementMode declares intended publication ownership; no imported approval, lifecycle, ACL or rule semantics. Optional readable structured requirements are deferred; a requirements member is unsupported.", + "type": "object", + "additionalProperties": false, + "required": [ + "formatVersion", + "kind", + "id", + "version", + "title", + "managementMode", + "content", + "sections", + "sourceProvenance" + ], + "properties": { + "formatVersion": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/formatVersion" + }, + "kind": { + "const": "policy" + }, + "id": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/uri" + }, + "version": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/version" + }, + "title": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/text" + }, + "managementMode": { + "enum": [ + "workspace-managed", + "externally-managed" + ] + }, + "content": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/content" + }, + "sections": { + "type": "array", + "minItems": 1, + "maxItems": 64, + "uniqueItems": true, + "items": { + "type": "object", + "additionalProperties": false, + "required": [ + "id", + "title", + "anchor" + ], + "properties": { + "id": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/localId" + }, + "title": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/text" + }, + "anchor": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/anchor" + }, + "sourceRefs": { + "type": "array", + "minItems": 0, + "maxItems": 16, + "uniqueItems": true, + "items": { + "type": "object", + "additionalProperties": false, + "required": [ + "sourceId", + "location" + ], + "properties": { + "sourceId": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/localId" + }, + "location": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/text" + } + } + } + } + } + } + }, + "sourceProvenance": { + "type": "array", + "minItems": 0, + "maxItems": 16, + "uniqueItems": true, + "items": { + "type": "object", + "additionalProperties": false, + "required": [ + "id", + "source", + "sourceRevision", + "content" + ], + "properties": { + "id": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/localId" + }, + "source": { + "type": "object", + "additionalProperties": false, + "required": [ + "provider", + "accountId", + "resourceId" + ], + "properties": { + "provider": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/text" + }, + "accountId": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/text" + }, + "resourceId": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/text" + } + } + }, + "sourceRevision": { + "oneOf": [ + { + "type": "null" + }, + { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/text" + } + ] + }, + "content": { + "$ref": "urn:jps:proposal:policy-companion:1.0.0:common#/$defs/originalContent" + } + } + } + } + } +} diff --git a/internal/policy/candidate/prototype-0.0.2-pin.json b/internal/policy/candidate/prototype-0.0.2-pin.json new file mode 100644 index 0000000..24a7b0e --- /dev/null +++ b/internal/policy/candidate/prototype-0.0.2-pin.json @@ -0,0 +1,33 @@ +{ + "commit": "8a56a95d555c17640d2db4984363b779536b3c2a", + "proposalVersion": "0.0.2", + "files": { + "README.md": "sha256:031cc9fa743c7d3af5cc482a514cfba106d510e16364febe0e58ce8bf9830e16", + "common.schema.json": "sha256:97d25d9c7778c68bdd94506227a0061923a5ef5fc9bc5f0a101f1ac2449d0d33", + "examples/data-access/adoption.json": "sha256:f6cf887488c12b0ba5331a048f5a9661a557021f5abfc5662a95524915ec1529", + "examples/data-access/consumer-pack.json": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "examples/data-access/fixture.json": "sha256:575edeed43ceb0b72a3a204caacbc51ba10e52075b7cbeea134b02876e550ec8", + "examples/data-access/interpretation.txt": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "examples/data-access/narrative.txt": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "examples/data-access/policy.json": "sha256:75a7659ed5086c7728af95db0b56b15fdc914a51982b16627fc884cfc9dca50d", + "examples/data-access/source.txt": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "examples/procurement/adoption.json": "sha256:b5b94a06dba7d12748fe3f854bdb5e5da9c14736aeff8d7416e94946891fd063", + "examples/procurement/consumer-pack.json": "sha256:d810d8b3972a4bbc31cd3deb7ada4de965f1ad59bf753cec6748f943213cbcee", + "examples/procurement/fixture.json": "sha256:241d3fd3f06c0cc0572d5237bcbbae9c88bd688fdfe7b41809bd90497ebfbf4b", + "examples/procurement/interpretation.txt": "sha256:14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "examples/procurement/narrative.txt": "sha256:993a73c70afdc16c94368982d1e951c85c90838d1f750a7001c2942dc9834b94", + "examples/procurement/policy.json": "sha256:e9bbe247d5aa7537aef08c951b88c0881e381046e357abaa05ea255e208ee852", + "examples/procurement/source.txt": "sha256:4681b36d52396d3faef09e4a7c551d829920362beb47a1bfb32c2d6c4d82763b", + "examples/refunds/adoption.json": "sha256:fd474eed584ae6305ea535bf1d044734f8d754fcc907b0d28b65a318b5ea4b5d", + "examples/refunds/consumer-pack.json": "sha256:2a049f10cd8c5d4fc81200976507a8563d0bc1fca19fa9691fc1601507512e38", + "examples/refunds/fixture.json": "sha256:2029192a538db356e9beb137e35377d00db61dda52cb7ba622d3d5e4343b6f22", + "examples/refunds/interpretation.txt": "sha256:63f58f37957f808e98c67db11ac9d835286733336e47ae24f28b974d431b9862", + "examples/refunds/narrative.txt": "sha256:909d57f27b7359c777dfb2ea07d859408a13504bf8dded27807889f7cde52969", + "examples/refunds/policy.json": "sha256:5391763b2d9a72533e7566cce910a43cb5ab740dd0587d7383f3adf153ba9970", + "examples/refunds/source.txt": "sha256:ae72534013fc75083b184765e7a558b71b5e4674720aa56e8960844fd712c6c0", + "governing-adoption.schema.json": "sha256:4108f3ac476b989483affbf0ddfa2e933f7be5c579c472f7b7b3aa976299f779", + "policy.schema.json": "sha256:d653ce7e855dce678aeadebac18de2afbc5bdcb23412fcf52f3d30b5be3d4dbd", + "test_prototype.py": "sha256:bdb05fe954cb75ddc859e58e81ed29c22e7181fb224068dcc55dfb59106858ef", + "verify.py": "sha256:ad6774c7eed831e1a586b9a313c33cb35b471db5cb41ee2212f1643135e27ea0" + } +} diff --git a/internal/policy/candidate/provenance.json b/internal/policy/candidate/provenance.json new file mode 100644 index 0000000..d6bedab --- /dev/null +++ b/internal/policy/candidate/provenance.json @@ -0,0 +1,1029 @@ +{ + "sourceRepository": "https://github.com/Judgment-Pack/judgment-pack-spec", + "sourceRevision": "0852c5fa7726e51b36e574a5b110e7f5e012e03d", + "formatVersion": "1.0.0", + "maturity": "proposed-draft", + "license": "Apache-2.0", + "files": [ + { + "sourcePath": "rfcs/policy-companion-contract/MIGRATION.md", + "path": "MIGRATION.md", + "sha256": "0602a092ae1c6f670e0b440f3df33de1eb4d825bf714af50143151882e674e34", + "byteLength": 3993 + }, + { + "sourcePath": "rfcs/policy-companion-contract/README.md", + "path": "README.md", + "sha256": "21364149bbd76cc7bc2b917b898d0fa79739bd454f94d4af3510e0e1a6ea88f7", + "byteLength": 22250 + }, + { + "sourcePath": "rfcs/policy-companion-contract/capabilities.json", + "path": "capabilities.json", + "sha256": "57977501550cb90de46d9eb88016725949f1eda83be470ff467804e8f393a287", + "byteLength": 1770 + }, + { + "sourcePath": "rfcs/policy-companion-contract/common.schema.json", + "path": "common.schema.json", + "sha256": "a26362280ac4cf0ba7a15a6c382ee8c61df97c78be4ef291f1107db24f28dd06", + "byteLength": 5262 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/data-access/adoption.json", + "path": "examples/data-access/adoption.json", + "sha256": "98294b5df0876cc793f236fa5184380aa37f2e459e1f630a5e613237404c2ec0", + "byteLength": 2352 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/data-access/consumer-pack.json", + "path": "examples/data-access/consumer-pack.json", + "sha256": "c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/data-access/fixture.json", + "path": "examples/data-access/fixture.json", + "sha256": "95575efc4fc7571089f17b7684c9ea66c7f16d52cb5b7032c0c494f3f73c25db", + "byteLength": 1599 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/data-access/interpretation.txt", + "path": "examples/data-access/interpretation.txt", + "sha256": "7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/data-access/narrative.txt", + "path": "examples/data-access/narrative.txt", + "sha256": "801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/data-access/policy.json", + "path": "examples/data-access/policy.json", + "sha256": "6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/data-access/source.txt", + "path": "examples/data-access/source.txt", + "sha256": "9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/procurement/adoption.json", + "path": "examples/procurement/adoption.json", + "sha256": "e9c871b2e7dc7448e46b2d4d347beb504bbe0a691be11df4283a95a693208703", + "byteLength": 3055 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/procurement/consumer-pack.json", + "path": "examples/procurement/consumer-pack.json", + "sha256": "d810d8b3972a4bbc31cd3deb7ada4de965f1ad59bf753cec6748f943213cbcee", + "byteLength": 1725 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/procurement/fixture.json", + "path": "examples/procurement/fixture.json", + "sha256": "bd05d532515eff20322a88c8cbb34899849479f4f4fef8a1f2e3d577a2b96205", + "byteLength": 1599 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/procurement/interpretation.txt", + "path": "examples/procurement/interpretation.txt", + "sha256": "14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "byteLength": 402 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/procurement/narrative.txt", + "path": "examples/procurement/narrative.txt", + "sha256": "993a73c70afdc16c94368982d1e951c85c90838d1f750a7001c2942dc9834b94", + "byteLength": 621 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/procurement/policy.json", + "path": "examples/procurement/policy.json", + "sha256": "539587356d8c0942f6e2c98ec09311e9c55fc4efcc6b9f8845e58db817a8dc58", + "byteLength": 2793 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/procurement/source.txt", + "path": "examples/procurement/source.txt", + "sha256": "4681b36d52396d3faef09e4a7c551d829920362beb47a1bfb32c2d6c4d82763b", + "byteLength": 591 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/refunds/adoption.json", + "path": "examples/refunds/adoption.json", + "sha256": "7c7cd121fc4510fff19b8bcaf120ce1a9cb3f7e60b8e811ce9be917799367bc8", + "byteLength": 2729 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/refunds/consumer-pack.json", + "path": "examples/refunds/consumer-pack.json", + "sha256": "2a049f10cd8c5d4fc81200976507a8563d0bc1fca19fa9691fc1601507512e38", + "byteLength": 1924 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/refunds/fixture.json", + "path": "examples/refunds/fixture.json", + "sha256": "48b47e5ca483e53ee4c943409f9892b518108cd0f94ead4f2715852d25a74d60", + "byteLength": 1595 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/refunds/interpretation.txt", + "path": "examples/refunds/interpretation.txt", + "sha256": "63f58f37957f808e98c67db11ac9d835286733336e47ae24f28b974d431b9862", + "byteLength": 301 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/refunds/narrative.txt", + "path": "examples/refunds/narrative.txt", + "sha256": "909d57f27b7359c777dfb2ea07d859408a13504bf8dded27807889f7cde52969", + "byteLength": 486 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/refunds/policy.json", + "path": "examples/refunds/policy.json", + "sha256": "8e3a487de4b15a1bc6c824e6dedd2e1b4fe16f4b3c4430a76b46e943ef2565ff", + "byteLength": 2375 + }, + { + "sourcePath": "rfcs/policy-companion-contract/examples/refunds/source.txt", + "path": "examples/refunds/source.txt", + "sha256": "ae72534013fc75083b184765e7a558b71b5e4674720aa56e8960844fd712c6c0", + "byteLength": 474 + }, + { + "sourcePath": "rfcs/policy-companion-contract/fixture.schema.json", + "path": "fixture.schema.json", + "sha256": "70f72c813ecbf988087de1de41d0871b24dec340e79af5bfe8e488a51ce9cd1b", + "byteLength": 1421 + }, + { + "sourcePath": "rfcs/policy-companion-contract/governing-adoption.schema.json", + "path": "governing-adoption.schema.json", + "sha256": "2a6a55c0efdb5fc25a52bc645eda33ca67247e7db83a0de21204ef6a28432dcb", + "byteLength": 8325 + }, + { + "sourcePath": "rfcs/policy-companion-contract/policy.schema.json", + "path": "policy.schema.json", + "sha256": "21c2a3a3f9763cecfb9348938e078384a9abbf3e55fb8126704cf8a55555fcd7", + "byteLength": 4261 + }, + { + "sourcePath": "rfcs/policy-companion-contract/prototype-0.0.2-pin.json", + "path": "prototype-0.0.2-pin.json", + "sha256": "48a264397902303c0373c4ae11e2bde9b55474f7ff76b33e1fdc3f919c70bacb", + "byteLength": 3146 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors.schema.json", + "path": "vectors.schema.json", + "sha256": "4843941ad1884306a896f5ced516dede695cb4a3fb8512973f3a54860d4a1a88", + "byteLength": 6012 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/README.md", + "path": "vectors/README.md", + "sha256": "d27b79c1932261d3bf64abb07d5c95ccab0a9016e83412c40a129747fdb8eaec", + "byteLength": 6372 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/aggregate-max.json", + "path": "vectors/documents/aggregate-max.json", + "sha256": "356820def6f85b5a73a1b3520dac185ca3413a17a7d1f269009b3109f789be09", + "byteLength": 683 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/aggregate-over.json", + "path": "vectors/documents/aggregate-over.json", + "sha256": "356820def6f85b5a73a1b3520dac185ca3413a17a7d1f269009b3109f789be09", + "byteLength": 683 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/aggregate-shared-media-counted-once.json", + "path": "vectors/documents/aggregate-shared-media-counted-once.json", + "sha256": "356820def6f85b5a73a1b3520dac185ca3413a17a7d1f269009b3109f789be09", + "byteLength": 683 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/anchor-empty-range.json", + "path": "vectors/documents/anchor-empty-range.json", + "sha256": "f57abd537598b6f2d4f21f5531cc8b287cb8a408174b1699afe23ab862bba431", + "byteLength": 2018 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/anchor-outside-narrative.json", + "path": "vectors/documents/anchor-outside-narrative.json", + "sha256": "aa0fed3939d88597f5a2eab96e1a9305f5671c9d9ffc1140c3a79a0a985d24e9", + "byteLength": 2022 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/anchor-over-bound.json", + "path": "vectors/documents/anchor-over-bound.json", + "sha256": "0f10c69c68a792e43de7b56978bce3073f2baba2ef026607d5c21104e113916f", + "byteLength": 2023 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/anchor-stale-digest.json", + "path": "vectors/documents/anchor-stale-digest.json", + "sha256": "f15662d3349adebe3f37358da15f6c1cbea7a531ead7be55b13a83e6fea865f0", + "byteLength": 2019 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/anchor-utf8-split.json", + "path": "vectors/documents/anchor-utf8-split.json", + "sha256": "dbb8e91eeaaec4ca6afa0b60ed9ab7621fc46b464052181fc15a7207880d8485", + "byteLength": 2019 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/approval-field.json", + "path": "vectors/documents/approval-field.json", + "sha256": "b6d55b494d997d827ceda4f0c7b0ff4c644171928f22b2c64bff7ba049cdaae6", + "byteLength": 2039 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/artifact-build.json", + "path": "vectors/documents/artifact-build.json", + "sha256": "d8e6a2f1de1400d0f93deb768709a79dd2608581a59f3d91c48c0fe46b53da3e", + "byteLength": 2025 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/artifact-independent.json", + "path": "vectors/documents/artifact-independent.json", + "sha256": "b29b0d41f9c53df4ccf45b304e4307848a5aca82f9669ce6a6f532ba9eca7efa", + "byteLength": 2020 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/artifact-leading-zero.json", + "path": "vectors/documents/artifact-leading-zero.json", + "sha256": "9bac870cd83f3ce25b4d02c820d962d084de92ea0ccdefb1b4a86e194ece3be0", + "byteLength": 2020 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/artifact-max-256.json", + "path": "vectors/documents/artifact-max-256.json", + "sha256": "79b1ac4516f3be2234b1a333a09679474c8f0f9d4c8743cf0b552eaaa97ff06c", + "byteLength": 2270 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/artifact-newline.json", + "path": "vectors/documents/artifact-newline.json", + "sha256": "7b398d8f7062dc484dd919271c3cb4d090389604a1504b356892cedf06e29431", + "byteLength": 2021 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/artifact-number.json", + "path": "vectors/documents/artifact-number.json", + "sha256": "4d81f8abe5de7580d5896bc2538dc7c7bb6eca300a7fb3a8dab7bf8ad9525cb1", + "byteLength": 2013 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/artifact-over-256.json", + "path": "vectors/documents/artifact-over-256.json", + "sha256": "eb73ca4e4a698530f0dee89fefdd9a0914ca0af55202c4da478797a9de491278", + "byteLength": 2271 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/artifact-two-components.json", + "path": "vectors/documents/artifact-two-components.json", + "sha256": "9d2d77db996adea115097fd4ef3c4a3ffbe4a08799aaea256d00cf3e94d5969e", + "byteLength": 2017 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/bom.json", + "path": "vectors/documents/bom.json", + "sha256": "aa25e978046d680ef8740d837e6de5bc1e2a2dc6089dbda1012544b538d53f65", + "byteLength": 5 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/companion-float.json", + "path": "vectors/documents/companion-float.json", + "sha256": "eb454acf3392a959782b8b7e53332d65ebd0c6607d77a1f17561f91534987cee", + "byteLength": 33 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/companion-unsafe-integer.json", + "path": "vectors/documents/companion-unsafe-integer.json", + "sha256": "98f3e87d38e17bce0a5e1b2076ae16f78bdf45001dfd192f39be0fe94a50116d", + "byteLength": 46 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/consumer-fallback-unknown-pack.json", + "path": "vectors/documents/consumer-fallback-unknown-pack.json", + "sha256": "8c7a49e4b3b81d1880e64bdee1734c4805a1c4daffc599683ce098d47e0c2011", + "byteLength": 1559 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/consumer-fallback-unknown.json", + "path": "vectors/documents/consumer-fallback-unknown.json", + "sha256": "39fb7ccbef49a24c8f0f2241eb8413c56521df4c4aacd9b75206301718a8aaf4", + "byteLength": 2189 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/consumer-graph.json", + "path": "vectors/documents/consumer-graph.json", + "sha256": "f380c38339a85ab4ef31c23640b319f85bc7783e8e75c41d11ae741196b604d1", + "byteLength": 2353 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/consumer-rule-id-duplicate-pack.json", + "path": "vectors/documents/consumer-rule-id-duplicate-pack.json", + "sha256": "93560dbc1b0537cf834d02b2607dade6b9a6407c5a37caf36954822762f0c312", + "byteLength": 1828 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/consumer-rule-id-duplicate.json", + "path": "vectors/documents/consumer-rule-id-duplicate.json", + "sha256": "4a1285549c9649cbdd756fe836010d1e4e159f36a0bc9cf7a0ad704c38a38b4a", + "byteLength": 2189 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-decimal-raw-pack.json", + "path": "vectors/documents/core-decimal-raw-pack.json", + "sha256": "9a2b3c06074ead90e9b34d3213ad9b5665ad05c548dfa9cc3be57e8e9f23634b", + "byteLength": 1648 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-decimal-raw.json", + "path": "vectors/documents/core-decimal-raw.json", + "sha256": "93a8d631bd4244f3b309451071488b35e064ab3618934a76b0d9ebf46cb5e442", + "byteLength": 2189 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-decimal-requested-canon-pack.json", + "path": "vectors/documents/core-decimal-requested-canon-pack.json", + "sha256": "9a2b3c06074ead90e9b34d3213ad9b5665ad05c548dfa9cc3be57e8e9f23634b", + "byteLength": 1648 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-decimal-requested-canon.json", + "path": "vectors/documents/core-decimal-requested-canon.json", + "sha256": "d4f9c354aaaf6093d5034cf6adcd8c01bb1aa9cbcf32f9ccafdd9aa2790bb737", + "byteLength": 2352 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-exponent-308-pack.json", + "path": "vectors/documents/core-exponent-308-pack.json", + "sha256": "52bd1104aedcc81011f2b0aaac2f5a3e082dc96b7a9c490cf441a005d3e3667e", + "byteLength": 1650 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-exponent-308.json", + "path": "vectors/documents/core-exponent-308.json", + "sha256": "c9275574c422b7520ae07d85bf6491d895b7fc62689308d6338df55180c3cfc0", + "byteLength": 2189 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-exponent-over-pack.json", + "path": "vectors/documents/core-exponent-over-pack.json", + "sha256": "7d593e7fac09abf836b599e7719f33850381bd60d5aa8c078a7cf2d43c494843", + "byteLength": 1650 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-exponent-over.json", + "path": "vectors/documents/core-exponent-over.json", + "sha256": "0cdf2672ddded5c222e3b18c7a9b7041f0175591be323a39b5bddff6672e5763", + "byteLength": 2189 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-number-128-pack.json", + "path": "vectors/documents/core-number-128-pack.json", + "sha256": "0a694f57fa21a82551738a128022578c837b332848866db302da838c70b8e3c7", + "byteLength": 1773 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-number-128.json", + "path": "vectors/documents/core-number-128.json", + "sha256": "5e97a1562791b398a9d7e70533c595a568b889c7966c43ea43eeadf751de6417", + "byteLength": 2189 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-number-over-128-pack.json", + "path": "vectors/documents/core-number-over-128-pack.json", + "sha256": "bceb1d327714090d58fb463516779aeb50168299e0ff0d2a9de21a7ff5421114", + "byteLength": 1774 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-number-over-128.json", + "path": "vectors/documents/core-number-over-128.json", + "sha256": "4372c8016d83883bc944428d5d09510abac11dc10501cc74cbb7d577913a3eec", + "byteLength": 2189 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-unsafe-int-raw-pack.json", + "path": "vectors/documents/core-unsafe-int-raw-pack.json", + "sha256": "2857116756d73d0babfcd3ede480fd8d462ea95bfcbc234c5e80983b3c4b9910", + "byteLength": 1661 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-unsafe-int-raw.json", + "path": "vectors/documents/core-unsafe-int-raw.json", + "sha256": "880c2b146822bd4ca14b5bb79953f706aa770f0b61afc7c76312ed4a23a1d715", + "byteLength": 2189 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-unsafe-int-requested-canon-pack.json", + "path": "vectors/documents/core-unsafe-int-requested-canon-pack.json", + "sha256": "2857116756d73d0babfcd3ede480fd8d462ea95bfcbc234c5e80983b3c4b9910", + "byteLength": 1661 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/core-unsafe-int-requested-canon.json", + "path": "vectors/documents/core-unsafe-int-requested-canon.json", + "sha256": "f0dbc21fab5b69614e11c9948a897a1ec9f7e3dc3d8bb23e41bbd2521220ff9f", + "byteLength": 2352 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/coverage-duplicate.json", + "path": "vectors/documents/coverage-duplicate.json", + "sha256": "5c804382923831378fd72aa6a4a115cefc5c59357c7fd5ff7fb3b57cec158a0d", + "byteLength": 2347 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/coverage-omitted.json", + "path": "vectors/documents/coverage-omitted.json", + "sha256": "4fad299227c43ff3d3fda7cadd881398f7b908bfa6177abb475e50fe2f3e7c65", + "byteLength": 2146 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/coverage-outside.json", + "path": "vectors/documents/coverage-outside.json", + "sha256": "f53966ceab71d7d1577684d064c52d3515f266da03e811e1444408875757cb5d", + "byteLength": 2348 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/depth-32.json", + "path": "vectors/documents/depth-32.json", + "sha256": "4e04cac422d9ecd4a5f6221653eeb4eaf29077cf3f588cd36bf6dc8ead76971f", + "byteLength": 65 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/depth-33.json", + "path": "vectors/documents/depth-33.json", + "sha256": "eac9bf029c22e177c74309fb891e3351dccfb04f055127ea82dc2dc3136cd899", + "byteLength": 67 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/desk-managed-alias-refused.json", + "path": "vectors/documents/desk-managed-alias-refused.json", + "sha256": "5234fd95d7550559cd2c2147bed06f9ff6f905b2e4607e8eeebfef03a778698c", + "byteLength": 2014 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/document-max-bytes.json", + "path": "vectors/documents/document-max-bytes.json", + "sha256": "515b22dea881243654a2c04aacd1fae4079e914bb63c9fd028a21821c0add188", + "byteLength": 262144 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/duplicate-json.json", + "path": "vectors/documents/duplicate-json.json", + "sha256": "e36957f702ac6bd47232355cad2b9a15a1bc3d6a23f0cbd5bb2d7bf4d33e8288", + "byteLength": 49 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/duplicate-policy-identity.json", + "path": "vectors/documents/duplicate-policy-identity.json", + "sha256": "07f804bccb31243a806fa8bf820089bf5b2328cd68a0a267f00056f0f161b2ed", + "byteLength": 4038 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-0.json", + "path": "vectors/documents/format-0.json", + "sha256": "90e517db584be09a68876e0e12e1fdcfa6bca002cfc249e884f76c009e2646b3", + "byteLength": 2019 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-2.json", + "path": "vectors/documents/format-2.json", + "sha256": "8c2a26c5f677e592d86b2e216439d45ce1846fd409c66e0b8bc1e827de18e41d", + "byteLength": 2019 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-before-canon.json", + "path": "vectors/documents/format-before-canon.json", + "sha256": "d945aff06cc556a99fee0d475f16fd5f0fabb96965e74427cb822b465c8b1bf2", + "byteLength": 33 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-before-shape.json", + "path": "vectors/documents/format-before-shape.json", + "sha256": "179cd26a351c7bf45c2fca5bc06ba835aa6eaa1a546cec4aa900706a697598f5", + "byteLength": 51 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-bool.json", + "path": "vectors/documents/format-bool.json", + "sha256": "5dc2e06bd54f5207ecdb5ba27ec2b80f772193a971f06106067aed2ec594bbbd", + "byteLength": 2016 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-int.json", + "path": "vectors/documents/format-int.json", + "sha256": "aff42b4b0a8e641cc5c92c661cdde3537745a2c2466d2b79c7d01e1a6493708b", + "byteLength": 2013 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-leading-zero.json", + "path": "vectors/documents/format-leading-zero.json", + "sha256": "c6a980c290cd29ee4c15883a88e4c80de0f99e4605a5f3e094067bd4a221d3b2", + "byteLength": 2020 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-missing.json", + "path": "vectors/documents/format-missing.json", + "sha256": "4ea51f8934e58095eee944853cc5541124ea94f0b24c09078ac27f465f32d3bc", + "byteLength": 1991 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-newline.json", + "path": "vectors/documents/format-newline.json", + "sha256": "dc41a327f8e1c762c6d2326badcfc829814c970f7afbbbbc54f87d585eea74da", + "byteLength": 2021 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-patch.json", + "path": "vectors/documents/format-patch.json", + "sha256": "dcbac865d354a2865bf1d17a0197c603f5a120326958bb7e8cbd95ca8dc20355", + "byteLength": 2019 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-short.json", + "path": "vectors/documents/format-short.json", + "sha256": "93f0b639cbb98ad9ec64d16c09d58010f951c5664962e8cf1838da5b030a5769", + "byteLength": 2015 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-suffix.json", + "path": "vectors/documents/format-suffix.json", + "sha256": "debe48d95d872019bc1bdfadff03f645e14dfed66dd034d0d77d95520ca10f5c", + "byteLength": 2024 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-unicode.json", + "path": "vectors/documents/format-unicode.json", + "sha256": "e0ba64d6e3ac4e5f72cbcbea04b9dfe5052747d56244950835feaf08c9db041a", + "byteLength": 2020 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/format-v-prefix.json", + "path": "vectors/documents/format-v-prefix.json", + "sha256": "d18d8d65f5126fde63083e1594ef93f0944e092d98e29d54ee3dfe1cc0d8a66a", + "byteLength": 2020 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/informational-max.json", + "path": "vectors/documents/informational-max.json", + "sha256": "569a5b0680eafb6308c2984912e4a702054e6839a6c484bec7eb68ae0fc8aad8", + "byteLength": 2554 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/informational-over.json", + "path": "vectors/documents/informational-over.json", + "sha256": "361db3f18d7640ac7ecaebfe28e45436ca10bc8ebc806fd23f1ac5145ca3c472", + "byteLength": 2554 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/invalid-utf8.json", + "path": "vectors/documents/invalid-utf8.json", + "sha256": "36781faac995a68b69aab7d540747e0c70efed427e66a608cdf64fc4feaaff12", + "byteLength": 9 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/kind-id-confusion.json", + "path": "vectors/documents/kind-id-confusion.json", + "sha256": "d7f690d0ca4b7962916984ee5ee92b70c3b7464016c0e003b0a3bbf4560127c8", + "byteLength": 2357 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/limited-scope-missing-basis.json", + "path": "vectors/documents/limited-scope-missing-basis.json", + "sha256": "9d9a9b30e6bfa07ca3aa059f14f1011bf2b1dcee92e218d8ea6656b8bad65584", + "byteLength": 2854 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/limited-scope-unknown.json", + "path": "vectors/documents/limited-scope-unknown.json", + "sha256": "670a45f40a0ff1b21a12481f962f50ae63618d79fa30932882e45ed645a64bdd", + "byteLength": 3076 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/malformed-over-depth.json", + "path": "vectors/documents/malformed-over-depth.json", + "sha256": "fdc562409aec5a2549f9a1b1f21155ec3b49c71ce76b3ad080c56ba1d0543a76", + "byteLength": 68 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/missing-governing-policy.json", + "path": "vectors/documents/missing-governing-policy.json", + "sha256": "27f20c087c208144a234684ca1719ab9e0013dad914be4ddf507a546e1d216f8", + "byteLength": 686 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/missing-narrative.json", + "path": "vectors/documents/missing-narrative.json", + "sha256": "6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/multiple-json.json", + "path": "vectors/documents/multiple-json.json", + "sha256": "b51f08b698d88d8027a935d9db649774949f5fb41a0c559bfee6a9a13225c72d", + "byteLength": 4 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/multiple-policy-identities.json", + "path": "vectors/documents/multiple-policy-identities.json", + "sha256": "fedf62df6fd02f041a2ea418305804ab5ace22bc0946cd1c876c0063937ce2c5", + "byteLength": 3985 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/narrative-max.json", + "path": "vectors/documents/narrative-max.json", + "sha256": "c1592868007ae1365c18c55e7325d641f82cb4dfcf7ad71ab5cda2fb9a984504", + "byteLength": 1119 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/narrative-over.json", + "path": "vectors/documents/narrative-over.json", + "sha256": "5ec2805842ca8c97450c468d2b78c6063d48c00287a1195da476e23e36c0008f", + "byteLength": 1119 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/nonfinite.json", + "path": "vectors/documents/nonfinite.json", + "sha256": "d5b592c05dc25b5032553f1b27f4139be95e881f73db33b02b05ab20c3f9981e", + "byteLength": 3 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/number-literal-over-128.json", + "path": "vectors/documents/number-literal-over-128.json", + "sha256": "e2eb26c79686e936e6603fbcd49b32881635021917d175c4df147b5e21b44f5c", + "byteLength": 159 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/opaque-original.json", + "path": "vectors/documents/opaque-original.json", + "sha256": "feb70c8c8e2a8f80e634980de161fa1bb092460969707696b5a3b5059ad71df3", + "byteLength": 2023 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/opaque-original.pdf", + "path": "vectors/documents/opaque-original.pdf", + "sha256": "af7777006b9a8e6b9ffd9dbc25f3d4f3c54331e9f74948ba9d1facdf63b1a8be", + "byteLength": 16 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/original-max.json", + "path": "vectors/documents/original-max.json", + "sha256": "78948872a9e1ff6eddff492224fe06858b0f4c0e0f8439553e49d58043abc541", + "byteLength": 2023 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/original-over.json", + "path": "vectors/documents/original-over.json", + "sha256": "990e5847fc18a19f13a1cf7df4dd55b943e6be3c65ba87c25189405ac896c1a0", + "byteLength": 2023 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/permission-field.json", + "path": "vectors/documents/permission-field.json", + "sha256": "87516d167771479d3b14674ddfc747e03e6a3b12175af1a6cbf91daa7ad34069", + "byteLength": 2042 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/policy-canon-stale.json", + "path": "vectors/documents/policy-canon-stale.json", + "sha256": "45fa4fb5f254eeed1037d1374524b49ed6b94bf484a6f7b7af77a28c725c271a", + "byteLength": 2352 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/policy-identity-stale.json", + "path": "vectors/documents/policy-identity-stale.json", + "sha256": "77f758365f4c4b772cde630b45f2045e8434511dc5d5e261c67e41de9db7a78c", + "byteLength": 2320 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/policy-version-ref-stale.json", + "path": "vectors/documents/policy-version-ref-stale.json", + "sha256": "f048ab96431c7a97f44a4339b72dc03a164c0c7747a8d2aa9b95fafa099e4457", + "byteLength": 2352 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/prototype-selector-refused.json", + "path": "vectors/documents/prototype-selector-refused.json", + "sha256": "b537c0a1efb5ebc6e06e8a8e60dca2d0ad3d2c4f5e4eeab091b23c3dff4fa408", + "byteLength": 2152 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/registration-count-16.json", + "path": "vectors/documents/registration-count-16.json", + "sha256": "6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/registration-count-17.json", + "path": "vectors/documents/registration-count-17.json", + "sha256": "6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/requirements-field.json", + "path": "vectors/documents/requirements-field.json", + "sha256": "397484bcb95f136afcc4b2201a6137ef100d9cdc3c8a0b2326dbc1653d2db62c", + "byteLength": 2043 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/review-max.json", + "path": "vectors/documents/review-max.json", + "sha256": "729e84b3a8c8826638b7cf5f9703429658aee12eb9aafa0a5dde82f50f450718", + "byteLength": 2356 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/review-over.json", + "path": "vectors/documents/review-over.json", + "sha256": "9ca0faef44ae60d277c1744c358a55c219400b15a6365f519ba20059d14d153b", + "byteLength": 2356 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/second-policy.json", + "path": "vectors/documents/second-policy.json", + "sha256": "144558275929f298692344329199afd892f5d74f1bc8aa70bea4bda14e98d627", + "byteLength": 1988 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/section-id-duplicate.json", + "path": "vectors/documents/section-id-duplicate.json", + "sha256": "c63007da9f867e07f68f8a91758f2054436e91263ddb7c50b8bd5dee21cf80be", + "byteLength": 2014 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/shared-bytes-multiple-media-types.json", + "path": "vectors/documents/shared-bytes-multiple-media-types.json", + "sha256": "f4d2bc2c621771b30f3ae984ab3fd05a00891827c047d5a746fc44a3ad23ad1a", + "byteLength": 2022 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/signature-field.json", + "path": "vectors/documents/signature-field.json", + "sha256": "fc4064630a3ef93cbfb46969a22600796a2954256ca42876325673e5d2ef49d1", + "byteLength": 2041 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/singleton-with-id.json", + "path": "vectors/documents/singleton-with-id.json", + "sha256": "232d4bbb79ff949aaf6c9e17292c5c70426595d8e761c6fefecb6d225e7d677a", + "byteLength": 2204 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/source-id-unknown.json", + "path": "vectors/documents/source-id-unknown.json", + "sha256": "e93860ee23385cee86b3bca725e14c3fa4f45aadd3c5cb4fa422ee3d008cd3f1", + "byteLength": 2009 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/stale-material-hash.json", + "path": "vectors/documents/stale-material-hash.json", + "sha256": "6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/stale-material-length.json", + "path": "vectors/documents/stale-material-length.json", + "sha256": "6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/standalone-policy.json", + "path": "vectors/documents/standalone-policy.json", + "sha256": "6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/surrogate.json", + "path": "vectors/documents/surrogate.json", + "sha256": "8c0c59dd0d275aadcd462a5fe12eb352cbdfeaf961eae4f85a4660521df7d2f5", + "byteLength": 8 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/unknown-kind-registration-over.json", + "path": "vectors/documents/unknown-kind-registration-over.json", + "sha256": "1e2f99280db3d76fbb608f1c13a53be498d2b4bfc46836b2893383895cf076ab", + "byteLength": 43 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/unknown-rule.json", + "path": "vectors/documents/unknown-rule.json", + "sha256": "b4d8bc7e5745d897cda79f121721b388b4da9e1fe125d782dbe161cddd03aa87", + "byteLength": 2351 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/unregistered-media-type.json", + "path": "vectors/documents/unregistered-media-type.json", + "sha256": "1c816a89de90ad710cfeb4b17bad6f0720515395e0af0b35e0394d539e605b30", + "byteLength": 2022 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/unsupported-element.json", + "path": "vectors/documents/unsupported-element.json", + "sha256": "356114c27d81685231f3e6b7aa32305ae890319cf392e652e69d8ce908f5ca90", + "byteLength": 2201 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-final-lf-pack.json", + "path": "vectors/documents/uri-final-lf-pack.json", + "sha256": "c418f413e2b19f32dcc2f46664717ff2eb81e940fca57315275d39e63037f495", + "byteLength": 1503 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-final-lf.json", + "path": "vectors/documents/uri-final-lf.json", + "sha256": "2f801fd7b06bf34f5c3a42973249a71bf84c421755a1ef372b1bbd4ccd3710c4", + "byteLength": 2297 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-fragment-raw-brackets.json", + "path": "vectors/documents/uri-fragment-raw-brackets.json", + "sha256": "0ef6ed9f582d15475ec9b5358be05194b372f1fbc1935cc3a175e31e6c526736", + "byteLength": 1980 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-invalid.json", + "path": "vectors/documents/uri-invalid.json", + "sha256": "2c8f6c238143c7dfa4381ab81b78365bfd43902a7eea09b872f1ee37ca0789ba", + "byteLength": 1964 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-ipv6-compressed.json", + "path": "vectors/documents/uri-ipv6-compressed.json", + "sha256": "6c59778a6d517c252840226d8a3056280777b04e76bf6759c731343f7d01080b", + "byteLength": 1978 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-ipv6-double-compression.json", + "path": "vectors/documents/uri-ipv6-double-compression.json", + "sha256": "b1be77321cd95c07b4ecf8baaba8751028b831e2787ba8ab6ee2a9c5e884193e", + "byteLength": 1973 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-ipv6-ipv4-tail.json", + "path": "vectors/documents/uri-ipv6-ipv4-tail.json", + "sha256": "2c26026d56fe5564dad671c20ad55b0237d5137a291edf56c455bd217f6340c2", + "byteLength": 1979 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-ipv6-leading-zero-ipv4-tail-pack.json", + "path": "vectors/documents/uri-ipv6-leading-zero-ipv4-tail-pack.json", + "sha256": "0ea4f86f542fcfe5a183050daac17f5d43796995965096773ba7481c5ad93e4e", + "byteLength": 1523 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-ipv6-leading-zero-ipv4-tail.json", + "path": "vectors/documents/uri-ipv6-leading-zero-ipv4-tail.json", + "sha256": "88efbe036d7386812662a46c154cf1521caf9864a9e676d35036038af754a81f", + "byteLength": 2317 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-ipvfuture-invalid-version.json", + "path": "vectors/documents/uri-ipvfuture-invalid-version.json", + "sha256": "399ba24e5ffb43360654f3c641fc002f61d8cb2f920eed0480808912bbccc2ed", + "byteLength": 1964 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-ipvfuture-lowercase-pack.json", + "path": "vectors/documents/uri-ipvfuture-lowercase-pack.json", + "sha256": "ebd7ca932ab1557442af46b391d5e1b980c9398a7213d4682a3308732be4cf5a", + "byteLength": 1504 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-ipvfuture-lowercase.json", + "path": "vectors/documents/uri-ipvfuture-lowercase.json", + "sha256": "13c1a9fff73cddc63b779e619a622cc05e6ffeb4d5eb2d544a43acfe80973bbd", + "byteLength": 2298 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-ipvfuture-uppercase-pack.json", + "path": "vectors/documents/uri-ipvfuture-uppercase-pack.json", + "sha256": "6992d4add7edc8a3dec0679b28dd58a4838d2cf5f218b4f702081583e9cb8c6b", + "byteLength": 1504 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-ipvfuture-uppercase.json", + "path": "vectors/documents/uri-ipvfuture-uppercase.json", + "sha256": "0ce1badc441db3a4290400dab23f2d8e5afee8fc0bf799abdb7cb01140e9ff10", + "byteLength": 2298 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-numeric-regname-leading-zeros.json", + "path": "vectors/documents/uri-numeric-regname-leading-zeros.json", + "sha256": "2ab9c70bc4c613fabe5bcbacd27ca79b73b08803e918f1755b3735ebcd96ca6f", + "byteLength": 1974 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-path-raw-brackets-pack.json", + "path": "vectors/documents/uri-path-raw-brackets-pack.json", + "sha256": "c0e3ef08c4644024d87d26ed4d77a5c14b1b7f46c8ca0a4b0ce7d8157ade7208", + "byteLength": 1518 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-path-raw-brackets.json", + "path": "vectors/documents/uri-path-raw-brackets.json", + "sha256": "b70d9a76a3b38f58a0f2b075c9ecfe6803b6e0a404c2b526000f85a86b244f67", + "byteLength": 2312 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-percent-brackets.json", + "path": "vectors/documents/uri-percent-brackets.json", + "sha256": "52ed06084ad97c026b15ece99674e6d638d26509506b62ce3d5195da7acd5a63", + "byteLength": 1997 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-percent-incomplete.json", + "path": "vectors/documents/uri-percent-incomplete.json", + "sha256": "f8db4efe5972393c15cd0c8ad8cbe88262ac02845d8863781cad83f970fa212b", + "byteLength": 1978 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-percent-nonhex.json", + "path": "vectors/documents/uri-percent-nonhex.json", + "sha256": "4a239d1009d314a9a0e285848fb1eba211a5574e17907253936aa6820f98534b", + "byteLength": 1979 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-percent-regname-pack.json", + "path": "vectors/documents/uri-percent-regname-pack.json", + "sha256": "50e9179933d3bab136e4872f25874e556cc9b1508410dd945ad564a2a3e90daa", + "byteLength": 1518 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-percent-regname.json", + "path": "vectors/documents/uri-percent-regname.json", + "sha256": "86ea9309a59ba683a85c73442c2638d56aa21f2e9e4f020d3954b043ab7c5f06", + "byteLength": 2312 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-percent-unicode.json", + "path": "vectors/documents/uri-percent-unicode.json", + "sha256": "5f062c610d9c546cba55951e3f9921b0de142ac382dac7d4a00e69ba65cf890f", + "byteLength": 1981 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-query-raw-brackets.json", + "path": "vectors/documents/uri-query-raw-brackets.json", + "sha256": "8d24bd52b12805ba9c602f113ca47c0a1dd141fc35577c09e0581c033ee46e24", + "byteLength": 1981 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-raw-unicode.json", + "path": "vectors/documents/uri-raw-unicode.json", + "sha256": "15bf301598d90e8a1e001973df95a1cb04021e1cb7a4385bf3ca0ef8eecebf7a", + "byteLength": 1977 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-rootless-raw-brackets-pack.json", + "path": "vectors/documents/uri-rootless-raw-brackets-pack.json", + "sha256": "a2b8f1d350ac991ebfd9f94ce6e53e40d19485e1f8ec7baaeb91f2ba279418ca", + "byteLength": 1503 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-rootless-raw-brackets.json", + "path": "vectors/documents/uri-rootless-raw-brackets.json", + "sha256": "4143f4d8d6e9df42e8a8ab8e011b9404b719f4e400dcb25d360d2ac80ff2b39d", + "byteLength": 2297 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/documents/uri-userinfo-percent-brackets.json", + "path": "vectors/documents/uri-userinfo-percent-brackets.json", + "sha256": "85c63cc716e50e0020cd419f636caf824afbe22826df6abc135cc7433cf4253f", + "byteLength": 1992 + }, + { + "sourcePath": "rfcs/policy-companion-contract/vectors/manifest.json", + "path": "vectors/manifest.json", + "sha256": "953177df0e844ad78ebe145d21c9f1e760336eda4ed20247331493c44be8eedd", + "byteLength": 223417 + }, + { + "sourcePath": "LICENSE", + "path": "LICENSE", + "sha256": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30", + "byteLength": 11358 + }, + { + "sourcePath": "NOTICE", + "path": "NOTICE", + "sha256": "acdae3bd2771acf3a456db3241e33d514c6cfc4ee9ea9cdb05344b6b7a96836e", + "byteLength": 194 + }, + { + "sourcePath": "rfcs/0023-policy-companion.md", + "path": "0023-policy-companion.md", + "sha256": "9ae28641c548fc541c3379179a6000b05619099382220abc7849ad503f37bb76", + "byteLength": 23233 + } + ] +} diff --git a/internal/policy/candidate/vectors.schema.json b/internal/policy/candidate/vectors.schema.json new file mode 100644 index 0000000..932b619 --- /dev/null +++ b/internal/policy/candidate/vectors.schema.json @@ -0,0 +1,203 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$id": "urn:jps:proposal:policy-companion:1.0.0:vectors", + "title": "Proposed draft agreement-vector carrier; not a release envelope", + "type": "object", + "additionalProperties": false, + "required": [ + "vectorSuiteVersion", + "maturity", + "synthetic", + "cases" + ], + "properties": { + "vectorSuiteVersion": { + "const": "1" + }, + "maturity": { + "const": "proposed-draft" + }, + "synthetic": { + "const": true + }, + "cases": { + "type": "array", + "minItems": 1, + "maxItems": 128, + "items": { + "type": "object", + "additionalProperties": false, + "required": [ + "id", + "document", + "materials", + "expected" + ], + "properties": { + "id": { + "type": "string", + "minLength": 1, + "maxLength": 128, + "pattern": "^[a-z][a-z0-9-]*$" + }, + "document": { + "oneOf": [ + { + "type": "object", + "additionalProperties": false, + "required": [ + "path" + ], + "properties": { + "path": { + "type": "string", + "minLength": 1, + "maxLength": 256 + } + } + }, + { + "type": "object", + "additionalProperties": false, + "required": [ + "repeatByte", + "byteLength" + ], + "properties": { + "repeatByte": { + "type": "integer", + "minimum": 0, + "maximum": 255 + }, + "byteLength": { + "type": "integer", + "minimum": 0, + "maximum": 4194305 + } + } + } + ] + }, + "materials": { + "type": "array", + "maxItems": 17, + "items": { + "type": "object", + "additionalProperties": false, + "required": [ + "source", + "content" + ], + "properties": { + "source": { + "oneOf": [ + { + "type": "object", + "additionalProperties": false, + "required": [ + "path" + ], + "properties": { + "path": { + "type": "string", + "minLength": 1, + "maxLength": 256 + } + } + }, + { + "type": "object", + "additionalProperties": false, + "required": [ + "repeatByte", + "byteLength" + ], + "properties": { + "repeatByte": { + "type": "integer", + "minimum": 0, + "maximum": 255 + }, + "byteLength": { + "type": "integer", + "minimum": 0, + "maximum": 4194305 + } + } + } + ] + }, + "content": { + "type": "object", + "additionalProperties": false, + "required": [ + "bytesDigest", + "byteLength", + "mediaType" + ], + "properties": { + "bytesDigest": { + "type": "string", + "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" + }, + "byteLength": { + "type": "integer", + "minimum": 0, + "maximum": 4194305 + }, + "mediaType": { + "type": "string", + "maxLength": 128, + "pattern": "^[a-z0-9!#$&^_.+-]+/[a-z0-9!#$&^_.+-]+(?![\\s\\S])" + } + }, + "description": "Generic fixture-carrier reference; consuming roles impose their own bounds." + } + } + } + }, + "expected": { + "oneOf": [ + { + "const": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "type": "object", + "additionalProperties": false, + "required": [ + "status", + "code" + ], + "properties": { + "status": { + "const": "refused" + }, + "code": { + "enum": [ + "input-over-bound", + "invalid-json", + "invalid-selector", + "unsupported-format", + "invalid-document", + "missing-material", + "reference-mismatch", + "invalid-anchor", + "invalid-coverage", + "invalid-consumer", + "unsupported-canonical-identity", + "invalid-carrier" + ] + } + } + } + ] + } + } + } + } + } +} diff --git a/internal/policy/candidate/vectors/README.md b/internal/policy/candidate/vectors/README.md new file mode 100644 index 0000000..cc2b7d4 --- /dev/null +++ b/internal/policy/candidate/vectors/README.md @@ -0,0 +1,101 @@ +# Reusable proposed-draft agreement vectors + +[manifest.json](manifest.json) supplies exact candidate inputs and exact expected +results for independent readers to execute. This is synthetic review material, +not an adopted JPS corpus or independent implementation evidence. No case asserts +approval, live authority, complete organizational coverage or permission. + +The manifest is closed under [vectors.schema.json](../vectors.schema.json). It has +`vectorSuiteVersion: "1"`, `maturity: "proposed-draft"`, `synthetic: true` and +`cases`. This carrier version is local test scaffolding, distinct from the +companion `formatVersion` and artifact `version`; it is not a release envelope. +All paths are relative to **rfcs/policy-companion-contract/**, the candidate root, +regardless of the manifest's location. A path must resolve inside that root, +including after resolving symlinks; absolute paths and escaping paths refuse. +NUL-containing paths and path-normalization failures are `invalid-carrier`. +Do not fetch any URI in a document or reference. + +Each case is exactly `{id, document, materials, expected}`: + +- `id` is a unique readable test identifier. +- `document` describes exact root companion bytes using the source grammar below. +- `materials` is an **ordered** array of `{source, content}` registrations. `source` + yields exact retained bytes; `content` independently declares the raw digest, + byte length and media type. Do not repair a mismatching declaration, normalize + bytes, derive a new declaration, or infer an unregistered media type. +- `expected` is the complete result object to compare with the candidate result. + JSON object member order is irrelevant; names, values and absence of any extra + members must agree. Compare both valid and refusal objects, not only exit codes. + +The complete closed source grammar has only two alternatives: + +```json +{"path":"examples/data-access/policy.json"} +{"repeatByte":120,"byteLength":1048576} +``` + +For `path`, read the file's bytes exactly; no text conversion or newline changes. +For `repeatByte`, allocate **exactly** `byteLength` copies of the unsigned byte +`repeatByte` (integer 0–255), with no prefix, suffix or encoding. `byteLength` is an +integer 0–4,194,305. A value of zero generates empty bytes. There are no mutations, +JSON reserialization instructions, interpolation, automatic reference rebinding or +other generators. One byte above a normal maximum is intentionally representable +to test refusal. Static document files already carry every altered field and exact +reference; readers do not need the Python scripts used during authoring. + +To run a case, first measure/parse/select/canonical-domain-check its root bytes as +[contract §5](../README.md#5-resource-limits-and-refusal-classifications) specifies. +Then check the input's registration count (maximum 16), register materials in list +order (acquiring one source immediately before its registration and checking +declarations and distinct-byte budget), and validate the root +schema and its semantic references. Root bytes themselves are subject to the +262,144-byte limit and count toward the distinct-material budget only when +explicitly registered. A referenced Policy or Pack must be retained in materials; +the carrier does not implicitly register the root or fetch a missing digest. +Return the **first** failing phase's bounded result. Carrier preparation errors +such as an invalid path are `invalid-carrier`; an unavailable file is +`missing-material`. These are never successful document readings. + +The compound transport/ordering vectors intentionally name a missing file +(`vectors/intentionally-missing-transport.bin`) or a NUL-containing path. These +are test harness transport inputs, not absent files that a port should create, +repair or fetch. Some earlier root/registration refusals must prevent acquisition +of those later sources. The `vector-carrier-nul-path` case actually reaches its +malformed path and returns `invalid-carrier`. The result for each case includes +these transport refusals; the harness compares them with `expected` and continues +to the next case. Carrier-manifest schema/setup failures remain harness failures. + +The manifest includes one over-bound registration count and one over-bound +original reference; its own carrier schema permits those counterexamples. No +candidate reader must accept them. Aggregate boundary vectors include separately +registered identical bytes under two media types; both resolve, and the bytes +spend the aggregate budget only once. Every role independently applies its size +limit. Raw Core numeric extensions include fractional, exponent and unsafe integer +literals; expected results distinguish optional canonical identity from raw pins. + +The 20 additional URI vectors assert the candidate's scheme-bearing RFC 3986 `URI` +grammar in Policy IDs and consuming-Pack references. They cover complete-string assertion, percent-encoding, +IPv6/IPvFuture, registered names, Unicode and component-specific brackets. Their +expected results describe URI syntax, not URL fetching or a dependency's quirks; +valid query/fragment content remains supported. Original retained materials are +unchanged. The earlier 104 vectors retain their exact inputs and expectations. +Seven cases are complete adoptions whose consuming Pack ID and exact consumer +reference agree. Their retained Pack files change only the ID string token; +every other original Pack byte, including number literals and whitespace, remains +unchanged. Raw digest/length and optional canonical identity are refreshed for +those synthetic candidate bytes. Valid percent-encoded hosts and IPvFuture `v`/`V` +must pass the candidate's consuming-Pack structural checker as well as its +reference grammar; invalid brackets, final LF and leading-zero IPv4 tails refuse. + +Run the reference harness with the repository's pinned dependencies: + +```sh +python rfcs/policy-companion-contract/check_vectors.py +``` + +Successful harness output is exactly +`{"status":"matched","cases":124,"maturity":"proposed-draft"}`; this is harness +agreement, not the result for an individual document or a conformance claim. Each +refusal vector's exact output is retained in the manifest. The harness and schema +are optional conveniences: another language can read these same bytes and the +source grammar directly, without importing Python or mutable prototype helpers. diff --git a/internal/policy/candidate/vectors/documents/aggregate-max.json b/internal/policy/candidate/vectors/documents/aggregate-max.json new file mode 100644 index 0000000..9a63cd4 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/aggregate-max.json @@ -0,0 +1,25 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "all", + "title": "All", + "anchor": { + "startByte": 0, + "endByte": 1, + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881" + } + } + ], + "sourceProvenance": [] +} diff --git a/internal/policy/candidate/vectors/documents/aggregate-over.json b/internal/policy/candidate/vectors/documents/aggregate-over.json new file mode 100644 index 0000000..9a63cd4 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/aggregate-over.json @@ -0,0 +1,25 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "all", + "title": "All", + "anchor": { + "startByte": 0, + "endByte": 1, + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881" + } + } + ], + "sourceProvenance": [] +} diff --git a/internal/policy/candidate/vectors/documents/aggregate-shared-media-counted-once.json b/internal/policy/candidate/vectors/documents/aggregate-shared-media-counted-once.json new file mode 100644 index 0000000..9a63cd4 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/aggregate-shared-media-counted-once.json @@ -0,0 +1,25 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "all", + "title": "All", + "anchor": { + "startByte": 0, + "endByte": 1, + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881" + } + } + ], + "sourceProvenance": [] +} diff --git a/internal/policy/candidate/vectors/documents/anchor-empty-range.json b/internal/policy/candidate/vectors/documents/anchor-empty-range.json new file mode 100644 index 0000000..562186a --- /dev/null +++ b/internal/policy/candidate/vectors/documents/anchor-empty-range.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 41, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/anchor-outside-narrative.json b/internal/policy/candidate/vectors/documents/anchor-outside-narrative.json new file mode 100644 index 0000000..801e4b1 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/anchor-outside-narrative.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 999999, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/anchor-over-bound.json b/internal/policy/candidate/vectors/documents/anchor-over-bound.json new file mode 100644 index 0000000..632c153 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/anchor-over-bound.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 1048577, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/anchor-stale-digest.json b/internal/policy/candidate/vectors/documents/anchor-stale-digest.json new file mode 100644 index 0000000..6213ac8 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/anchor-stale-digest.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/anchor-utf8-split.json b/internal/policy/candidate/vectors/documents/anchor-utf8-split.json new file mode 100644 index 0000000..29ccbc0 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/anchor-utf8-split.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 25, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/approval-field.json b/internal/policy/candidate/vectors/documents/approval-field.json new file mode 100644 index 0000000..c282482 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/approval-field.json @@ -0,0 +1,77 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ], + "approved": true +} diff --git a/internal/policy/candidate/vectors/documents/artifact-build.json b/internal/policy/candidate/vectors/documents/artifact-build.json new file mode 100644 index 0000000..3bdf3da --- /dev/null +++ b/internal/policy/candidate/vectors/documents/artifact-build.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0+build", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/artifact-independent.json b/internal/policy/candidate/vectors/documents/artifact-independent.json new file mode 100644 index 0000000..3ac9ae5 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/artifact-independent.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "7.3.42", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/artifact-leading-zero.json b/internal/policy/candidate/vectors/documents/artifact-leading-zero.json new file mode 100644 index 0000000..a86fd80 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/artifact-leading-zero.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.00.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/artifact-max-256.json b/internal/policy/candidate/vectors/documents/artifact-max-256.json new file mode 100644 index 0000000..202c6a3 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/artifact-max-256.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/artifact-newline.json b/internal/policy/candidate/vectors/documents/artifact-newline.json new file mode 100644 index 0000000..33a0dca --- /dev/null +++ b/internal/policy/candidate/vectors/documents/artifact-newline.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0\n", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/artifact-number.json b/internal/policy/candidate/vectors/documents/artifact-number.json new file mode 100644 index 0000000..3cfddc4 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/artifact-number.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": 1, + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/artifact-over-256.json b/internal/policy/candidate/vectors/documents/artifact-over-256.json new file mode 100644 index 0000000..bf40bfc --- /dev/null +++ b/internal/policy/candidate/vectors/documents/artifact-over-256.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/artifact-two-components.json b/internal/policy/candidate/vectors/documents/artifact-two-components.json new file mode 100644 index 0000000..4a25db3 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/artifact-two-components.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/bom.json b/internal/policy/candidate/vectors/documents/bom.json new file mode 100644 index 0000000..22fdca1 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/bom.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/internal/policy/candidate/vectors/documents/companion-float.json b/internal/policy/candidate/vectors/documents/companion-float.json new file mode 100644 index 0000000..e967560 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/companion-float.json @@ -0,0 +1 @@ +{"formatVersion":"1.0.0","n":1.0} \ No newline at end of file diff --git a/internal/policy/candidate/vectors/documents/companion-unsafe-integer.json b/internal/policy/candidate/vectors/documents/companion-unsafe-integer.json new file mode 100644 index 0000000..ea15b97 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/companion-unsafe-integer.json @@ -0,0 +1 @@ +{"formatVersion":"1.0.0","n":9007199254740992} \ No newline at end of file diff --git a/internal/policy/candidate/vectors/documents/consumer-fallback-unknown-pack.json b/internal/policy/candidate/vectors/documents/consumer-fallback-unknown-pack.json new file mode 100644 index 0000000..a10ed87 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/consumer-fallback-unknown-pack.json @@ -0,0 +1,62 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "unknown", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + } +} diff --git a/internal/policy/candidate/vectors/documents/consumer-fallback-unknown.json b/internal/policy/candidate/vectors/documents/consumer-fallback-unknown.json new file mode 100644 index 0000000..2db4459 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/consumer-fallback-unknown.json @@ -0,0 +1,71 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:8c7a49e4b3b81d1880e64bdee1734c4805a1c4daffc599683ce098d47e0c2011", + "byteLength": 1559, + "mediaType": "application/json" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/consumer-graph.json b/internal/policy/candidate/vectors/documents/consumer-graph.json new file mode 100644 index 0000000..95714df --- /dev/null +++ b/internal/policy/candidate/vectors/documents/consumer-graph.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "graph", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/consumer-rule-id-duplicate-pack.json b/internal/policy/candidate/vectors/documents/consumer-rule-id-duplicate-pack.json new file mode 100644 index 0000000..ef28391 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/consumer-rule-id-duplicate-pack.json @@ -0,0 +1,74 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "different" + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + } +} diff --git a/internal/policy/candidate/vectors/documents/consumer-rule-id-duplicate.json b/internal/policy/candidate/vectors/documents/consumer-rule-id-duplicate.json new file mode 100644 index 0000000..85a16d8 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/consumer-rule-id-duplicate.json @@ -0,0 +1,71 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:93560dbc1b0537cf834d02b2607dade6b9a6407c5a37caf36954822762f0c312", + "byteLength": 1828, + "mediaType": "application/json" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/core-decimal-raw-pack.json b/internal/policy/candidate/vectors/documents/core-decimal-raw-pack.json new file mode 100644 index 0000000..cc3aa16 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-decimal-raw-pack.json @@ -0,0 +1,67 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + }, + "extensions": { + "com.example.candidate": { + "candidate-number": 1.5 + } + } +} diff --git a/internal/policy/candidate/vectors/documents/core-decimal-raw.json b/internal/policy/candidate/vectors/documents/core-decimal-raw.json new file mode 100644 index 0000000..d825392 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-decimal-raw.json @@ -0,0 +1,71 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:9a2b3c06074ead90e9b34d3213ad9b5665ad05c548dfa9cc3be57e8e9f23634b", + "byteLength": 1648, + "mediaType": "application/json" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/core-decimal-requested-canon-pack.json b/internal/policy/candidate/vectors/documents/core-decimal-requested-canon-pack.json new file mode 100644 index 0000000..cc3aa16 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-decimal-requested-canon-pack.json @@ -0,0 +1,67 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + }, + "extensions": { + "com.example.candidate": { + "candidate-number": 1.5 + } + } +} diff --git a/internal/policy/candidate/vectors/documents/core-decimal-requested-canon.json b/internal/policy/candidate/vectors/documents/core-decimal-requested-canon.json new file mode 100644 index 0000000..ba4e122 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-decimal-requested-canon.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:9a2b3c06074ead90e9b34d3213ad9b5665ad05c548dfa9cc3be57e8e9f23634b", + "byteLength": 1648, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/core-exponent-308-pack.json b/internal/policy/candidate/vectors/documents/core-exponent-308-pack.json new file mode 100644 index 0000000..34312ff --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-exponent-308-pack.json @@ -0,0 +1,67 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + }, + "extensions": { + "com.example.candidate": { + "candidate-number": 1e308 + } + } +} diff --git a/internal/policy/candidate/vectors/documents/core-exponent-308.json b/internal/policy/candidate/vectors/documents/core-exponent-308.json new file mode 100644 index 0000000..cf42a30 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-exponent-308.json @@ -0,0 +1,71 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:52bd1104aedcc81011f2b0aaac2f5a3e082dc96b7a9c490cf441a005d3e3667e", + "byteLength": 1650, + "mediaType": "application/json" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/core-exponent-over-pack.json b/internal/policy/candidate/vectors/documents/core-exponent-over-pack.json new file mode 100644 index 0000000..1254843 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-exponent-over-pack.json @@ -0,0 +1,67 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + }, + "extensions": { + "com.example.candidate": { + "candidate-number": 1e309 + } + } +} diff --git a/internal/policy/candidate/vectors/documents/core-exponent-over.json b/internal/policy/candidate/vectors/documents/core-exponent-over.json new file mode 100644 index 0000000..9f9e334 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-exponent-over.json @@ -0,0 +1,71 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:7d593e7fac09abf836b599e7719f33850381bd60d5aa8c078a7cf2d43c494843", + "byteLength": 1650, + "mediaType": "application/json" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/core-number-128-pack.json b/internal/policy/candidate/vectors/documents/core-number-128-pack.json new file mode 100644 index 0000000..c4d31e6 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-number-128-pack.json @@ -0,0 +1,67 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + }, + "extensions": { + "com.example.candidate": { + "candidate-number": 99999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999 + } + } +} diff --git a/internal/policy/candidate/vectors/documents/core-number-128.json b/internal/policy/candidate/vectors/documents/core-number-128.json new file mode 100644 index 0000000..8045ac8 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-number-128.json @@ -0,0 +1,71 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:0a694f57fa21a82551738a128022578c837b332848866db302da838c70b8e3c7", + "byteLength": 1773, + "mediaType": "application/json" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/core-number-over-128-pack.json b/internal/policy/candidate/vectors/documents/core-number-over-128-pack.json new file mode 100644 index 0000000..3fc39e1 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-number-over-128-pack.json @@ -0,0 +1,67 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + }, + "extensions": { + "com.example.candidate": { + "candidate-number": 999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999 + } + } +} diff --git a/internal/policy/candidate/vectors/documents/core-number-over-128.json b/internal/policy/candidate/vectors/documents/core-number-over-128.json new file mode 100644 index 0000000..be3380c --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-number-over-128.json @@ -0,0 +1,71 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:bceb1d327714090d58fb463516779aeb50168299e0ff0d2a9de21a7ff5421114", + "byteLength": 1774, + "mediaType": "application/json" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/core-unsafe-int-raw-pack.json b/internal/policy/candidate/vectors/documents/core-unsafe-int-raw-pack.json new file mode 100644 index 0000000..7257510 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-unsafe-int-raw-pack.json @@ -0,0 +1,67 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + }, + "extensions": { + "com.example.candidate": { + "candidate-number": 9007199254740992 + } + } +} diff --git a/internal/policy/candidate/vectors/documents/core-unsafe-int-raw.json b/internal/policy/candidate/vectors/documents/core-unsafe-int-raw.json new file mode 100644 index 0000000..230eb4d --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-unsafe-int-raw.json @@ -0,0 +1,71 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:2857116756d73d0babfcd3ede480fd8d462ea95bfcbc234c5e80983b3c4b9910", + "byteLength": 1661, + "mediaType": "application/json" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/core-unsafe-int-requested-canon-pack.json b/internal/policy/candidate/vectors/documents/core-unsafe-int-requested-canon-pack.json new file mode 100644 index 0000000..7257510 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-unsafe-int-requested-canon-pack.json @@ -0,0 +1,67 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + }, + "extensions": { + "com.example.candidate": { + "candidate-number": 9007199254740992 + } + } +} diff --git a/internal/policy/candidate/vectors/documents/core-unsafe-int-requested-canon.json b/internal/policy/candidate/vectors/documents/core-unsafe-int-requested-canon.json new file mode 100644 index 0000000..a11d5f7 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/core-unsafe-int-requested-canon.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:2857116756d73d0babfcd3ede480fd8d462ea95bfcbc234c5e80983b3c4b9910", + "byteLength": 1661, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/coverage-duplicate.json b/internal/policy/candidate/vectors/documents/coverage-duplicate.json new file mode 100644 index 0000000..c05cf61 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/coverage-duplicate.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "eligibility", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/coverage-omitted.json b/internal/policy/candidate/vectors/documents/coverage-omitted.json new file mode 100644 index 0000000..b8d4f28 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/coverage-omitted.json @@ -0,0 +1,70 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/coverage-outside.json b/internal/policy/candidate/vectors/documents/coverage-outside.json new file mode 100644 index 0000000..fa81751 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/coverage-outside.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "unknown", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/depth-32.json b/internal/policy/candidate/vectors/documents/depth-32.json new file mode 100644 index 0000000..0d73e24 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/depth-32.json @@ -0,0 +1 @@ +[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[0]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]] \ No newline at end of file diff --git a/internal/policy/candidate/vectors/documents/depth-33.json b/internal/policy/candidate/vectors/documents/depth-33.json new file mode 100644 index 0000000..b9777e0 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/depth-33.json @@ -0,0 +1 @@ +[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[0]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]] \ No newline at end of file diff --git a/internal/policy/candidate/vectors/documents/desk-managed-alias-refused.json b/internal/policy/candidate/vectors/documents/desk-managed-alias-refused.json new file mode 100644 index 0000000..497f394 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/desk-managed-alias-refused.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "desk-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/document-max-bytes.json b/internal/policy/candidate/vectors/documents/document-max-bytes.json new file mode 100644 index 0000000..b50b49e --- /dev/null +++ b/internal/policy/candidate/vectors/documents/document-max-bytes.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] + } diff --git a/internal/policy/candidate/vectors/documents/duplicate-json.json b/internal/policy/candidate/vectors/documents/duplicate-json.json new file mode 100644 index 0000000..27e3b35 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/duplicate-json.json @@ -0,0 +1 @@ +{"formatVersion":"1.0.0","formatVersion":"1.0.0"} \ No newline at end of file diff --git a/internal/policy/candidate/vectors/documents/duplicate-policy-identity.json b/internal/policy/candidate/vectors/documents/duplicate-policy-identity.json new file mode 100644 index 0000000..4aefa2b --- /dev/null +++ b/internal/policy/candidate/vectors/documents/duplicate-policy-identity.json @@ -0,0 +1,128 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + }, + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access. Extra synthetic note." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/format-0.json b/internal/policy/candidate/vectors/documents/format-0.json new file mode 100644 index 0000000..a4f7717 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-0.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "0.0.2", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/format-2.json b/internal/policy/candidate/vectors/documents/format-2.json new file mode 100644 index 0000000..f86d98e --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-2.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "2.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/format-before-canon.json b/internal/policy/candidate/vectors/documents/format-before-canon.json new file mode 100644 index 0000000..a56a64b --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-before-canon.json @@ -0,0 +1 @@ +{"formatVersion":"7.0.0","n":1.5} \ No newline at end of file diff --git a/internal/policy/candidate/vectors/documents/format-before-shape.json b/internal/policy/candidate/vectors/documents/format-before-shape.json new file mode 100644 index 0000000..004c1fc --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-before-shape.json @@ -0,0 +1,4 @@ +{ + "formatVersion": "7.0.0", + "approved": true +} diff --git a/internal/policy/candidate/vectors/documents/format-bool.json b/internal/policy/candidate/vectors/documents/format-bool.json new file mode 100644 index 0000000..d1fe556 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-bool.json @@ -0,0 +1,76 @@ +{ + "formatVersion": true, + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/format-int.json b/internal/policy/candidate/vectors/documents/format-int.json new file mode 100644 index 0000000..be645a9 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-int.json @@ -0,0 +1,76 @@ +{ + "formatVersion": 1, + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/format-leading-zero.json b/internal/policy/candidate/vectors/documents/format-leading-zero.json new file mode 100644 index 0000000..4b3ce9a --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-leading-zero.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "01.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/format-missing.json b/internal/policy/candidate/vectors/documents/format-missing.json new file mode 100644 index 0000000..a8bb3dd --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-missing.json @@ -0,0 +1,75 @@ +{ + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/format-newline.json b/internal/policy/candidate/vectors/documents/format-newline.json new file mode 100644 index 0000000..caf99a6 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-newline.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0\n", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/format-patch.json b/internal/policy/candidate/vectors/documents/format-patch.json new file mode 100644 index 0000000..c915f2d --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-patch.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.1", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/format-short.json b/internal/policy/candidate/vectors/documents/format-short.json new file mode 100644 index 0000000..0e07cff --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-short.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/format-suffix.json b/internal/policy/candidate/vectors/documents/format-suffix.json new file mode 100644 index 0000000..673bade --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-suffix.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0-rc.1", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/format-unicode.json b/internal/policy/candidate/vectors/documents/format-unicode.json new file mode 100644 index 0000000..2db0c46 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-unicode.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "Ù¡.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/format-v-prefix.json b/internal/policy/candidate/vectors/documents/format-v-prefix.json new file mode 100644 index 0000000..1fdc7fa --- /dev/null +++ b/internal/policy/candidate/vectors/documents/format-v-prefix.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "v1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/informational-max.json b/internal/policy/candidate/vectors/documents/informational-max.json new file mode 100644 index 0000000..a51fddb --- /dev/null +++ b/internal/policy/candidate/vectors/documents/informational-max.json @@ -0,0 +1,82 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ], + "informationalSources": [ + { + "bytesDigest": "sha256:8f990ba0b577b51cf009ea049368c16bbda1b21e1b93be07a824758bb253c39b", + "byteLength": 1048576, + "mediaType": "text/plain" + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/informational-over.json b/internal/policy/candidate/vectors/documents/informational-over.json new file mode 100644 index 0000000..efe294e --- /dev/null +++ b/internal/policy/candidate/vectors/documents/informational-over.json @@ -0,0 +1,82 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ], + "informationalSources": [ + { + "bytesDigest": "sha256:154b8ed3c2383ce429058768595935faf7851b5c38db2b1732594be1d88bc05a", + "byteLength": 1048577, + "mediaType": "text/plain" + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/invalid-utf8.json b/internal/policy/candidate/vectors/documents/invalid-utf8.json new file mode 100644 index 0000000..307ff4b --- /dev/null +++ b/internal/policy/candidate/vectors/documents/invalid-utf8.json @@ -0,0 +1 @@ +{"x":"ÿ"} \ No newline at end of file diff --git a/internal/policy/candidate/vectors/documents/kind-id-confusion.json b/internal/policy/candidate/vectors/documents/kind-id-confusion.json new file mode 100644 index 0000000..50f4b41 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/kind-id-confusion.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "exception", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/limited-scope-missing-basis.json b/internal/policy/candidate/vectors/documents/limited-scope-missing-basis.json new file mode 100644 index 0000000..048cb7e --- /dev/null +++ b/internal/policy/candidate/vectors/documents/limited-scope-missing-basis.json @@ -0,0 +1,92 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/procurement/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/procurement/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:d810d8b3972a4bbc31cd3deb7ada4de965f1ad59bf753cec6748f943213cbcee", + "byteLength": 1725, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:205a2afdc68ebd46d5b022256fadec6bd071bc8e34faff481f288c20df008f60" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/procurement/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:539587356d8c0942f6e2c98ec09311e9c55fc4efcc6b9f8845e58db817a8dc58", + "byteLength": 2793, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:f0ef6fe0bb4703eaf6b2c1edf2f12712dffc139e887317c46fc82d83dba71275" + } + }, + "scope": { + "kind": "sections", + "sectionIds": [ + "eligibility", + "conflict-review", + "invoice-payment", + "purchase-scope" + ] + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "byteLength": 402, + "mediaType": "text/plain" + } + }, + { + "sectionId": "conflict-review", + "status": "awaiting-interpretation", + "explanation": "Synthetic open work item: agree the conflict threshold before implementation." + }, + { + "sectionId": "invoice-payment", + "status": "out-of-scope", + "rationale": "This pack assesses eligibility only; treasury payment reconciliation is a separate process." + }, + { + "sectionId": "purchase-scope", + "status": "implemented", + "consumerElements": [ + { + "kind": "applicability" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "byteLength": 402, + "mediaType": "text/plain" + } + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/limited-scope-unknown.json b/internal/policy/candidate/vectors/documents/limited-scope-unknown.json new file mode 100644 index 0000000..84aac04 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/limited-scope-unknown.json @@ -0,0 +1,98 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/procurement/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/procurement/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:d810d8b3972a4bbc31cd3deb7ada4de965f1ad59bf753cec6748f943213cbcee", + "byteLength": 1725, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:205a2afdc68ebd46d5b022256fadec6bd071bc8e34faff481f288c20df008f60" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/procurement/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:539587356d8c0942f6e2c98ec09311e9c55fc4efcc6b9f8845e58db817a8dc58", + "byteLength": 2793, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:f0ef6fe0bb4703eaf6b2c1edf2f12712dffc139e887317c46fc82d83dba71275" + } + }, + "scope": { + "kind": "sections", + "sectionIds": [ + "eligibility", + "conflict-review", + "invoice-payment", + "purchase-scope", + "unknown" + ], + "reviewBasis": { + "bytesDigest": "sha256:14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "byteLength": 402, + "mediaType": "text/plain" + } + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "byteLength": 402, + "mediaType": "text/plain" + } + }, + { + "sectionId": "conflict-review", + "status": "awaiting-interpretation", + "explanation": "Synthetic open work item: agree the conflict threshold before implementation." + }, + { + "sectionId": "invoice-payment", + "status": "out-of-scope", + "rationale": "This pack assesses eligibility only; treasury payment reconciliation is a separate process." + }, + { + "sectionId": "purchase-scope", + "status": "implemented", + "consumerElements": [ + { + "kind": "applicability" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "byteLength": 402, + "mediaType": "text/plain" + } + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/malformed-over-depth.json b/internal/policy/candidate/vectors/documents/malformed-over-depth.json new file mode 100644 index 0000000..bd942c3 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/malformed-over-depth.json @@ -0,0 +1 @@ +ÿ[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[0]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]] \ No newline at end of file diff --git a/internal/policy/candidate/vectors/documents/missing-governing-policy.json b/internal/policy/candidate/vectors/documents/missing-governing-policy.json new file mode 100644 index 0000000..f9d2742 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/missing-governing-policy.json @@ -0,0 +1,21 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [] +} diff --git a/internal/policy/candidate/vectors/documents/missing-narrative.json b/internal/policy/candidate/vectors/documents/missing-narrative.json new file mode 100644 index 0000000..ae2a479 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/missing-narrative.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/multiple-json.json b/internal/policy/candidate/vectors/documents/multiple-json.json new file mode 100644 index 0000000..afcb0c4 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/multiple-json.json @@ -0,0 +1 @@ +{}{} \ No newline at end of file diff --git a/internal/policy/candidate/vectors/documents/multiple-policy-identities.json b/internal/policy/candidate/vectors/documents/multiple-policy-identities.json new file mode 100644 index 0000000..3c1da03 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/multiple-policy-identities.json @@ -0,0 +1,128 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + }, + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/second-policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:144558275929f298692344329199afd892f5d74f1bc8aa70bea4bda14e98d627", + "byteLength": 1988, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:1589cd845a13aa22ceef347d11dcc34d1b7ad27ade2f30c13979a0dc541c0a42" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/narrative-max.json b/internal/policy/candidate/vectors/documents/narrative-max.json new file mode 100644 index 0000000..1654a29 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/narrative-max.json @@ -0,0 +1,40 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:8f990ba0b577b51cf009ea049368c16bbda1b21e1b93be07a824758bb253c39b", + "byteLength": 1048576, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "all", + "title": "All bytes", + "anchor": { + "startByte": 0, + "endByte": 1, + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881" + } + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/narrative-over.json b/internal/policy/candidate/vectors/documents/narrative-over.json new file mode 100644 index 0000000..472bee0 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/narrative-over.json @@ -0,0 +1,40 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:154b8ed3c2383ce429058768595935faf7851b5c38db2b1732594be1d88bc05a", + "byteLength": 1048577, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "all", + "title": "All bytes", + "anchor": { + "startByte": 0, + "endByte": 1, + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881" + } + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/nonfinite.json b/internal/policy/candidate/vectors/documents/nonfinite.json new file mode 100644 index 0000000..b955cad --- /dev/null +++ b/internal/policy/candidate/vectors/documents/nonfinite.json @@ -0,0 +1 @@ +NaN \ No newline at end of file diff --git a/internal/policy/candidate/vectors/documents/number-literal-over-128.json b/internal/policy/candidate/vectors/documents/number-literal-over-128.json new file mode 100644 index 0000000..7f06a63 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/number-literal-over-128.json @@ -0,0 +1 @@ +{"formatVersion":"1.0.0","n":999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999} \ No newline at end of file diff --git a/internal/policy/candidate/vectors/documents/opaque-original.json b/internal/policy/candidate/vectors/documents/opaque-original.json new file mode 100644 index 0000000..de7caf7 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/opaque-original.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:af7777006b9a8e6b9ffd9dbc25f3d4f3c54331e9f74948ba9d1facdf63b1a8be", + "byteLength": 16, + "mediaType": "application/pdf" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/opaque-original.pdf b/internal/policy/candidate/vectors/documents/opaque-original.pdf new file mode 100644 index 0000000..6e5d30d Binary files /dev/null and b/internal/policy/candidate/vectors/documents/opaque-original.pdf differ diff --git a/internal/policy/candidate/vectors/documents/original-max.json b/internal/policy/candidate/vectors/documents/original-max.json new file mode 100644 index 0000000..56fb010 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/original-max.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:baa7a6d36ffa957552df230235c2d51d735f28d49c58a5f3438a3a973a25a37d", + "byteLength": 4194304, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/original-over.json b/internal/policy/candidate/vectors/documents/original-over.json new file mode 100644 index 0000000..11e3bdb --- /dev/null +++ b/internal/policy/candidate/vectors/documents/original-over.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:8d3d3c04baadfd31cbebf771836900097b5f36cc142b74e40747c7b372beab8b", + "byteLength": 4194305, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/permission-field.json b/internal/policy/candidate/vectors/documents/permission-field.json new file mode 100644 index 0000000..40e9fa5 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/permission-field.json @@ -0,0 +1,77 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ], + "permissions": true +} diff --git a/internal/policy/candidate/vectors/documents/policy-canon-stale.json b/internal/policy/candidate/vectors/documents/policy-canon-stale.json new file mode 100644 index 0000000..67f7e99 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/policy-canon-stale.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/policy-identity-stale.json b/internal/policy/candidate/vectors/documents/policy-identity-stale.json new file mode 100644 index 0000000..73a64ea --- /dev/null +++ b/internal/policy/candidate/vectors/documents/policy-identity-stale.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/other-policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/policy-version-ref-stale.json b/internal/policy/candidate/vectors/documents/policy-version-ref-stale.json new file mode 100644 index 0000000..94c7190 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/policy-version-ref-stale.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "2.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/prototype-selector-refused.json b/internal/policy/candidate/vectors/documents/prototype-selector-refused.json new file mode 100644 index 0000000..f234c1f --- /dev/null +++ b/internal/policy/candidate/vectors/documents/prototype-selector-refused.json @@ -0,0 +1,81 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ], + "prototype": { + "profile": "jps-policy-companion-prototype", + "proposalVersion": "0.0.2", + "status": "non-normative" + } +} diff --git a/internal/policy/candidate/vectors/documents/registration-count-16.json b/internal/policy/candidate/vectors/documents/registration-count-16.json new file mode 100644 index 0000000..ae2a479 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/registration-count-16.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/registration-count-17.json b/internal/policy/candidate/vectors/documents/registration-count-17.json new file mode 100644 index 0000000..ae2a479 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/registration-count-17.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/requirements-field.json b/internal/policy/candidate/vectors/documents/requirements-field.json new file mode 100644 index 0000000..f0e9d7d --- /dev/null +++ b/internal/policy/candidate/vectors/documents/requirements-field.json @@ -0,0 +1,77 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ], + "requirements": true +} diff --git a/internal/policy/candidate/vectors/documents/review-max.json b/internal/policy/candidate/vectors/documents/review-max.json new file mode 100644 index 0000000..3dac3cb --- /dev/null +++ b/internal/policy/candidate/vectors/documents/review-max.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:8f990ba0b577b51cf009ea049368c16bbda1b21e1b93be07a824758bb253c39b", + "byteLength": 1048576, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/review-over.json b/internal/policy/candidate/vectors/documents/review-over.json new file mode 100644 index 0000000..0cac455 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/review-over.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:154b8ed3c2383ce429058768595935faf7851b5c38db2b1732594be1d88bc05a", + "byteLength": 1048577, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/second-policy.json b/internal/policy/candidate/vectors/documents/second-policy.json new file mode 100644 index 0000000..8820f84 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/second-policy.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/second-policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/section-id-duplicate.json b/internal/policy/candidate/vectors/documents/section-id-duplicate.json new file mode 100644 index 0000000..4228ff5 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/section-id-duplicate.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "eligibility", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/shared-bytes-multiple-media-types.json b/internal/policy/candidate/vectors/documents/shared-bytes-multiple-media-types.json new file mode 100644 index 0000000..9c137a2 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/shared-bytes-multiple-media-types.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/markdown" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/signature-field.json b/internal/policy/candidate/vectors/documents/signature-field.json new file mode 100644 index 0000000..d59094e --- /dev/null +++ b/internal/policy/candidate/vectors/documents/signature-field.json @@ -0,0 +1,77 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ], + "signatures": true +} diff --git a/internal/policy/candidate/vectors/documents/singleton-with-id.json b/internal/policy/candidate/vectors/documents/singleton-with-id.json new file mode 100644 index 0000000..e8938e9 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/singleton-with-id.json @@ -0,0 +1,68 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "fallback", + "id": "fabricated" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/source-id-unknown.json b/internal/policy/candidate/vectors/documents/source-id-unknown.json new file mode 100644 index 0000000..782bc94 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/source-id-unknown.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "unknown", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/stale-material-hash.json b/internal/policy/candidate/vectors/documents/stale-material-hash.json new file mode 100644 index 0000000..ae2a479 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/stale-material-hash.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/stale-material-length.json b/internal/policy/candidate/vectors/documents/stale-material-length.json new file mode 100644 index 0000000..ae2a479 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/stale-material-length.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/standalone-policy.json b/internal/policy/candidate/vectors/documents/standalone-policy.json new file mode 100644 index 0000000..ae2a479 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/standalone-policy.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/surrogate.json b/internal/policy/candidate/vectors/documents/surrogate.json new file mode 100644 index 0000000..4a1cb1e --- /dev/null +++ b/internal/policy/candidate/vectors/documents/surrogate.json @@ -0,0 +1 @@ +"\ud800" \ No newline at end of file diff --git a/internal/policy/candidate/vectors/documents/unknown-kind-registration-over.json b/internal/policy/candidate/vectors/documents/unknown-kind-registration-over.json new file mode 100644 index 0000000..4bbf520 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/unknown-kind-registration-over.json @@ -0,0 +1 @@ +{"formatVersion":"1.0.0","kind":"unknown"} diff --git a/internal/policy/candidate/vectors/documents/unknown-rule.json b/internal/policy/candidate/vectors/documents/unknown-rule.json new file mode 100644 index 0000000..7e9abe9 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/unknown-rule.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "unknown" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/unregistered-media-type.json b/internal/policy/candidate/vectors/documents/unregistered-media-type.json new file mode 100644 index 0000000..e0406bb --- /dev/null +++ b/internal/policy/candidate/vectors/documents/unregistered-media-type.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/markdown" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/unsupported-element.json b/internal/policy/candidate/vectors/documents/unsupported-element.json new file mode 100644 index 0000000..59055b2 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/unsupported-element.json @@ -0,0 +1,68 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/policy-companion-prototype/data-access/pack", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:d20e694ca1f99d0b3c8e239fdec3e5d1122dc875986ef5ed3651a52b3fba2473" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "outcome", + "id": "eligible" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-final-lf-pack.json b/internal/policy/candidate/vectors/documents/uri-final-lf-pack.json new file mode 100644 index 0000000..a588c5f --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-final-lf-pack.json @@ -0,0 +1,62 @@ +{ + "specVersion": "0.2.0-draft", + "id": "urn:test:x\n", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + } +} diff --git a/internal/policy/candidate/vectors/documents/uri-final-lf.json b/internal/policy/candidate/vectors/documents/uri-final-lf.json new file mode 100644 index 0000000..ccc861b --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-final-lf.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "urn:test:x\n", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c418f413e2b19f32dcc2f46664717ff2eb81e940fca57315275d39e63037f495", + "byteLength": 1503, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:47f2a4f8ac55a8731d5599090cda8396f35520a21414f9af1f91777b3ebaf12f" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-fragment-raw-brackets.json b/internal/policy/candidate/vectors/documents/uri-fragment-raw-brackets.json new file mode 100644 index 0000000..57b4246 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-fragment-raw-brackets.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/#a[b]", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-invalid.json b/internal/policy/candidate/vectors/documents/uri-invalid.json new file mode 100644 index 0000000..4393451 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-invalid.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "relative/path", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-ipv6-compressed.json b/internal/policy/candidate/vectors/documents/uri-ipv6-compressed.json new file mode 100644 index 0000000..68e5dc7 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-ipv6-compressed.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "http://[2001:db8::1]:8080/a", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-ipv6-double-compression.json b/internal/policy/candidate/vectors/documents/uri-ipv6-double-compression.json new file mode 100644 index 0000000..610c293 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-ipv6-double-compression.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "http://[2001::db8::1]/", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-ipv6-ipv4-tail.json b/internal/policy/candidate/vectors/documents/uri-ipv6-ipv4-tail.json new file mode 100644 index 0000000..6ed1cc2 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-ipv6-ipv4-tail.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "http://[::ffff:192.168.1.1]/", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-ipv6-leading-zero-ipv4-tail-pack.json b/internal/policy/candidate/vectors/documents/uri-ipv6-leading-zero-ipv4-tail-pack.json new file mode 100644 index 0000000..b725cf3 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-ipv6-leading-zero-ipv4-tail-pack.json @@ -0,0 +1,62 @@ +{ + "specVersion": "0.2.0-draft", + "id": "http://[::ffff:192.168.001.001]/", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + } +} diff --git a/internal/policy/candidate/vectors/documents/uri-ipv6-leading-zero-ipv4-tail.json b/internal/policy/candidate/vectors/documents/uri-ipv6-leading-zero-ipv4-tail.json new file mode 100644 index 0000000..81c5621 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-ipv6-leading-zero-ipv4-tail.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "http://[::ffff:192.168.001.001]/", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:0ea4f86f542fcfe5a183050daac17f5d43796995965096773ba7481c5ad93e4e", + "byteLength": 1523, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:9128ab46ba265f6e5dff041a4a7f423f803e0c6959879cc570e793609aae1996" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-ipvfuture-invalid-version.json b/internal/policy/candidate/vectors/documents/uri-ipvfuture-invalid-version.json new file mode 100644 index 0000000..6ae88b8 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-ipvfuture-invalid-version.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "foo://[vG.a]/", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-ipvfuture-lowercase-pack.json b/internal/policy/candidate/vectors/documents/uri-ipvfuture-lowercase-pack.json new file mode 100644 index 0000000..480c266 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-ipvfuture-lowercase-pack.json @@ -0,0 +1,62 @@ +{ + "specVersion": "0.2.0-draft", + "id": "foo://[v1.a]/", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + } +} diff --git a/internal/policy/candidate/vectors/documents/uri-ipvfuture-lowercase.json b/internal/policy/candidate/vectors/documents/uri-ipvfuture-lowercase.json new file mode 100644 index 0000000..aa46e52 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-ipvfuture-lowercase.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "foo://[v1.a]/", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:ebd7ca932ab1557442af46b391d5e1b980c9398a7213d4682a3308732be4cf5a", + "byteLength": 1504, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:a0cf145d4d18c2e0259968b41186fb6c241be660e07c7fde7dabf7db304fa140" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-ipvfuture-uppercase-pack.json b/internal/policy/candidate/vectors/documents/uri-ipvfuture-uppercase-pack.json new file mode 100644 index 0000000..2f10f62 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-ipvfuture-uppercase-pack.json @@ -0,0 +1,62 @@ +{ + "specVersion": "0.2.0-draft", + "id": "foo://[V1.a]/", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + } +} diff --git a/internal/policy/candidate/vectors/documents/uri-ipvfuture-uppercase.json b/internal/policy/candidate/vectors/documents/uri-ipvfuture-uppercase.json new file mode 100644 index 0000000..fafba2b --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-ipvfuture-uppercase.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "foo://[V1.a]/", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6992d4add7edc8a3dec0679b28dd58a4838d2cf5f218b4f702081583e9cb8c6b", + "byteLength": 1504, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:c794e18a50ee3b6cc076841ba1f03bbbcbfa7d91f3428aaef9a5b9004967bf21" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-numeric-regname-leading-zeros.json b/internal/policy/candidate/vectors/documents/uri-numeric-regname-leading-zeros.json new file mode 100644 index 0000000..63428d6 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-numeric-regname-leading-zeros.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "http://192.168.001.001/", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-path-raw-brackets-pack.json b/internal/policy/candidate/vectors/documents/uri-path-raw-brackets-pack.json new file mode 100644 index 0000000..23f8928 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-path-raw-brackets-pack.json @@ -0,0 +1,62 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://example.invalid/[x]", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + } +} diff --git a/internal/policy/candidate/vectors/documents/uri-path-raw-brackets.json b/internal/policy/candidate/vectors/documents/uri-path-raw-brackets.json new file mode 100644 index 0000000..92153d8 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-path-raw-brackets.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://example.invalid/[x]", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:c0e3ef08c4644024d87d26ed4d77a5c14b1b7f46c8ca0a4b0ce7d8157ade7208", + "byteLength": 1518, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:10c3750e1583b45caa9a57baa8ffaa4dc2c091651aa1f725fc6618f47bc6425f" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-percent-brackets.json b/internal/policy/candidate/vectors/documents/uri-percent-brackets.json new file mode 100644 index 0000000..718dff4 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-percent-brackets.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "foo://%5Bname%5D/%5Bpath%5D?b=%5Bc%5D#a%5Bb%5D", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-percent-incomplete.json b/internal/policy/candidate/vectors/documents/uri-percent-incomplete.json new file mode 100644 index 0000000..5df792a --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-percent-incomplete.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/a%2", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-percent-nonhex.json b/internal/policy/candidate/vectors/documents/uri-percent-nonhex.json new file mode 100644 index 0000000..b2d545d --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-percent-nonhex.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/a%GG", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-percent-regname-pack.json b/internal/policy/candidate/vectors/documents/uri-percent-regname-pack.json new file mode 100644 index 0000000..7f59236 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-percent-regname-pack.json @@ -0,0 +1,62 @@ +{ + "specVersion": "0.2.0-draft", + "id": "https://%65xample.invalid/a", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + } +} diff --git a/internal/policy/candidate/vectors/documents/uri-percent-regname.json b/internal/policy/candidate/vectors/documents/uri-percent-regname.json new file mode 100644 index 0000000..a0bca65 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-percent-regname.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "https://%65xample.invalid/a", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:50e9179933d3bab136e4872f25874e556cc9b1508410dd945ad564a2a3e90daa", + "byteLength": 1518, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:a638315c0dde2052fb78f3b2282e74f970c1e292221213339817856caadde3ed" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-percent-unicode.json b/internal/policy/candidate/vectors/documents/uri-percent-unicode.json new file mode 100644 index 0000000..20d60f6 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-percent-unicode.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/%C3%A9", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-query-raw-brackets.json b/internal/policy/candidate/vectors/documents/uri-query-raw-brackets.json new file mode 100644 index 0000000..ac7c5b6 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-query-raw-brackets.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/?b=[c]", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-raw-unicode.json b/internal/policy/candidate/vectors/documents/uri-raw-unicode.json new file mode 100644 index 0000000..9d4e50d --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-raw-unicode.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "https://example.invalid/é", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-rootless-raw-brackets-pack.json b/internal/policy/candidate/vectors/documents/uri-rootless-raw-brackets-pack.json new file mode 100644 index 0000000..a228f76 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-rootless-raw-brackets-pack.json @@ -0,0 +1,62 @@ +{ + "specVersion": "0.2.0-draft", + "id": "urn:test:[x]", + "version": "1.0.0", + "title": "Data access — synthetic interpretation", + "description": "Synthetic RFC material only. No operational authorization or external action.", + "decision": { + "intent": "Apply the retained automated eligibility clause.", + "question": "Is this request eligible for the automated path?" + }, + "outcomes": [ + { + "id": "eligible", + "label": "Eligible for review" + }, + { + "id": "ineligible", + "label": "Ineligible" + }, + { + "id": "review", + "label": "Human review needed" + } + ], + "rules": [ + { + "id": "eligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": true + }, + "outcome": "eligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + }, + { + "id": "ineligible", + "when": { + "op": "fact", + "path": "/dataset/deidentified", + "operator": "equals", + "value": false + }, + "outcome": "ineligible", + "onUnknown": "escalate", + "description": "Synthetic interpretation of the retained automated eligibility clause." + } + ], + "fallbackOutcome": "review", + "escalation": { + "triggers": [ + "unknown", + "no-match" + ], + "target": { + "kind": "human-role", + "name": "Synthetic reviewer" + } + } +} diff --git a/internal/policy/candidate/vectors/documents/uri-rootless-raw-brackets.json b/internal/policy/candidate/vectors/documents/uri-rootless-raw-brackets.json new file mode 100644 index 0000000..683f091 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-rootless-raw-brackets.json @@ -0,0 +1,75 @@ +{ + "formatVersion": "1.0.0", + "kind": "governing-adoption", + "id": "https://example.invalid/policy-companion-contract/data-access/adoption", + "version": "1.0.0", + "consumer": { + "kind": "pack", + "id": "urn:test:[x]", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:a2b8f1d350ac991ebfd9f94ce6e53e40d19485e1f8ec7baaeb91f2ba279418ca", + "byteLength": 1503, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:3b4c17543d6b4fd14d6e28b206387dc989cc3a849626cd9bd84c17dabc1dda65" + } + }, + "governingPolicies": [ + { + "policy": { + "kind": "policy", + "id": "https://example.invalid/policy-companion-contract/data-access/policy", + "version": "1.0.0", + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + }, + "canonicalIdentity": { + "profile": "jps-canon", + "canonicalDigest": "sha256:8e9de4d2824a3186354e4ab410f4b0c744afa452796ce089bc0461adee63bce5" + } + }, + "scope": { + "kind": "whole-policy" + }, + "coverage": [ + { + "sectionId": "eligibility", + "status": "implemented", + "consumerElements": [ + { + "kind": "rule", + "id": "eligible" + }, + { + "kind": "rule", + "id": "ineligible" + }, + { + "kind": "fallback" + } + ], + "reviewBasis": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "sectionId": "exception-review", + "status": "manual", + "handoff": "Fictional specialist uses the documented manual review queue; this statement grants no role or access." + }, + { + "sectionId": "audit-review", + "status": "awaiting-implementation", + "explanation": "Synthetic open work item: develop and review a separate implementation." + } + ] + } + ] +} diff --git a/internal/policy/candidate/vectors/documents/uri-userinfo-percent-brackets.json b/internal/policy/candidate/vectors/documents/uri-userinfo-percent-brackets.json new file mode 100644 index 0000000..33f41f3 --- /dev/null +++ b/internal/policy/candidate/vectors/documents/uri-userinfo-percent-brackets.json @@ -0,0 +1,76 @@ +{ + "formatVersion": "1.0.0", + "kind": "policy", + "id": "foo://u%5Bser%5D:p%40ss@example.invalid/a", + "version": "1.0.0", + "title": "Data access — synthetic policy content", + "managementMode": "workspace-managed", + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + }, + "sections": [ + { + "id": "eligibility", + "title": "Automated release", + "anchor": { + "startByte": 41, + "endByte": 215, + "bytesDigest": "sha256:95eac1de35b93fdd947821f9336f8441a4ae4ffd69473e4ee332951b150c3896" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 1" + } + ] + }, + { + "id": "exception-review", + "title": "Restricted requests", + "anchor": { + "startByte": 215, + "endByte": 351, + "bytesDigest": "sha256:d2f664a5c4e515f11a5e05c0a2be36d4de7600b0b2d4f33f81dfafed55b441e8" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 2" + } + ] + }, + { + "id": "audit-review", + "title": "Quarterly audit", + "anchor": { + "startByte": 351, + "endByte": 449, + "bytesDigest": "sha256:7f4e8c2f9f2a9ad8f3276c6610f9e9a140833edfd9b46dbf825a1638ab8b6a6e" + }, + "sourceRefs": [ + { + "sourceId": "retained-original", + "location": "Clause 3" + } + ] + } + ], + "sourceProvenance": [ + { + "id": "retained-original", + "source": { + "provider": "synthetic-fixture", + "accountId": "fictional-organization", + "resourceId": "data-access-original" + }, + "sourceRevision": null, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + } + ] +} diff --git a/internal/policy/candidate/vectors/manifest.json b/internal/policy/candidate/vectors/manifest.json new file mode 100644 index 0000000..a802df4 --- /dev/null +++ b/internal/policy/candidate/vectors/manifest.json @@ -0,0 +1,7446 @@ +{ + "vectorSuiteVersion": "1", + "maturity": "proposed-draft", + "synthetic": true, + "cases": [ + { + "id": "data-access", + "document": { + "path": "examples/data-access/adoption.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "procurement", + "document": { + "path": "examples/procurement/adoption.json" + }, + "materials": [ + { + "source": { + "path": "examples/procurement/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:993a73c70afdc16c94368982d1e951c85c90838d1f750a7001c2942dc9834b94", + "byteLength": 621, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/procurement/source.txt" + }, + "content": { + "bytesDigest": "sha256:4681b36d52396d3faef09e4a7c551d829920362beb47a1bfb32c2d6c4d82763b", + "byteLength": 591, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/procurement/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "byteLength": 402, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/procurement/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:d810d8b3972a4bbc31cd3deb7ada4de965f1ad59bf753cec6748f943213cbcee", + "byteLength": 1725, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/procurement/policy.json" + }, + "content": { + "bytesDigest": "sha256:539587356d8c0942f6e2c98ec09311e9c55fc4efcc6b9f8845e58db817a8dc58", + "byteLength": 2793, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "refunds", + "document": { + "path": "examples/refunds/adoption.json" + }, + "materials": [ + { + "source": { + "path": "examples/refunds/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:909d57f27b7359c777dfb2ea07d859408a13504bf8dded27807889f7cde52969", + "byteLength": 486, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/refunds/source.txt" + }, + "content": { + "bytesDigest": "sha256:ae72534013fc75083b184765e7a558b71b5e4674720aa56e8960844fd712c6c0", + "byteLength": 474, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/refunds/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:63f58f37957f808e98c67db11ac9d835286733336e47ae24f28b974d431b9862", + "byteLength": 301, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/refunds/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:2a049f10cd8c5d4fc81200976507a8563d0bc1fca19fa9691fc1601507512e38", + "byteLength": 1924, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/refunds/policy.json" + }, + "content": { + "bytesDigest": "sha256:8e3a487de4b15a1bc6c824e6dedd2e1b4fe16f4b3c4430a76b46e943ef2565ff", + "byteLength": 2375, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "standalone-policy", + "document": { + "path": "vectors/documents/standalone-policy.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "format-2", + "document": { + "path": "vectors/documents/format-2.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "unsupported-format" + } + }, + { + "id": "format-patch", + "document": { + "path": "vectors/documents/format-patch.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "unsupported-format" + } + }, + { + "id": "format-0", + "document": { + "path": "vectors/documents/format-0.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "unsupported-format" + } + }, + { + "id": "format-int", + "document": { + "path": "vectors/documents/format-int.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-selector" + } + }, + { + "id": "format-bool", + "document": { + "path": "vectors/documents/format-bool.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-selector" + } + }, + { + "id": "format-short", + "document": { + "path": "vectors/documents/format-short.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-selector" + } + }, + { + "id": "format-v-prefix", + "document": { + "path": "vectors/documents/format-v-prefix.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-selector" + } + }, + { + "id": "format-leading-zero", + "document": { + "path": "vectors/documents/format-leading-zero.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-selector" + } + }, + { + "id": "format-newline", + "document": { + "path": "vectors/documents/format-newline.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-selector" + } + }, + { + "id": "format-unicode", + "document": { + "path": "vectors/documents/format-unicode.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-selector" + } + }, + { + "id": "format-suffix", + "document": { + "path": "vectors/documents/format-suffix.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-selector" + } + }, + { + "id": "format-missing", + "document": { + "path": "vectors/documents/format-missing.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-selector" + } + }, + { + "id": "format-before-shape", + "document": { + "path": "vectors/documents/format-before-shape.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "unsupported-format" + } + }, + { + "id": "format-before-canon", + "document": { + "path": "vectors/documents/format-before-canon.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "unsupported-format" + } + }, + { + "id": "prototype-selector-refused", + "document": { + "path": "vectors/documents/prototype-selector-refused.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "desk-managed-alias-refused", + "document": { + "path": "vectors/documents/desk-managed-alias-refused.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "artifact-independent", + "document": { + "path": "vectors/documents/artifact-independent.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "artifact-max-256", + "document": { + "path": "vectors/documents/artifact-max-256.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "artifact-over-256", + "document": { + "path": "vectors/documents/artifact-over-256.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "artifact-number", + "document": { + "path": "vectors/documents/artifact-number.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "artifact-two-components", + "document": { + "path": "vectors/documents/artifact-two-components.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "artifact-leading-zero", + "document": { + "path": "vectors/documents/artifact-leading-zero.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "artifact-build", + "document": { + "path": "vectors/documents/artifact-build.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "artifact-newline", + "document": { + "path": "vectors/documents/artifact-newline.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "duplicate-json", + "document": { + "path": "vectors/documents/duplicate-json.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "invalid-json" + } + }, + { + "id": "bom", + "document": { + "path": "vectors/documents/bom.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "invalid-json" + } + }, + { + "id": "invalid-utf8", + "document": { + "path": "vectors/documents/invalid-utf8.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "invalid-json" + } + }, + { + "id": "surrogate", + "document": { + "path": "vectors/documents/surrogate.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "invalid-json" + } + }, + { + "id": "nonfinite", + "document": { + "path": "vectors/documents/nonfinite.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "invalid-json" + } + }, + { + "id": "multiple-json", + "document": { + "path": "vectors/documents/multiple-json.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "invalid-json" + } + }, + { + "id": "depth-33", + "document": { + "path": "vectors/documents/depth-33.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "depth-32", + "document": { + "path": "vectors/documents/depth-32.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "invalid-selector" + } + }, + { + "id": "number-literal-over-128", + "document": { + "path": "vectors/documents/number-literal-over-128.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "companion-float", + "document": { + "path": "vectors/documents/companion-float.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "companion-unsafe-integer", + "document": { + "path": "vectors/documents/companion-unsafe-integer.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "document-max-bytes", + "document": { + "path": "vectors/documents/document-max-bytes.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "document-over-bytes", + "document": { + "repeatByte": 32, + "byteLength": 262145 + }, + "materials": [], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "approval-field", + "document": { + "path": "vectors/documents/approval-field.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "permission-field", + "document": { + "path": "vectors/documents/permission-field.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "signature-field", + "document": { + "path": "vectors/documents/signature-field.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "requirements-field", + "document": { + "path": "vectors/documents/requirements-field.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "uri-invalid", + "document": { + "path": "vectors/documents/uri-invalid.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "source-id-unknown", + "document": { + "path": "vectors/documents/source-id-unknown.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-anchor" + } + }, + { + "id": "section-id-duplicate", + "document": { + "path": "vectors/documents/section-id-duplicate.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-anchor" + } + }, + { + "id": "anchor-stale-digest", + "document": { + "path": "vectors/documents/anchor-stale-digest.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-anchor" + } + }, + { + "id": "anchor-empty-range", + "document": { + "path": "vectors/documents/anchor-empty-range.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-anchor" + } + }, + { + "id": "anchor-outside-narrative", + "document": { + "path": "vectors/documents/anchor-outside-narrative.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-anchor" + } + }, + { + "id": "anchor-over-bound", + "document": { + "path": "vectors/documents/anchor-over-bound.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "anchor-utf8-split", + "document": { + "path": "vectors/documents/anchor-utf8-split.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-anchor" + } + }, + { + "id": "missing-narrative", + "document": { + "path": "vectors/documents/missing-narrative.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "missing-material" + } + }, + { + "id": "stale-material-length", + "document": { + "path": "vectors/documents/stale-material-length.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 450, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "reference-mismatch" + } + }, + { + "id": "stale-material-hash", + "document": { + "path": "vectors/documents/stale-material-hash.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "reference-mismatch" + } + }, + { + "id": "unregistered-media-type", + "document": { + "path": "vectors/documents/unregistered-media-type.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "reference-mismatch" + } + }, + { + "id": "shared-bytes-multiple-media-types", + "document": { + "path": "vectors/documents/shared-bytes-multiple-media-types.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/markdown" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "opaque-original", + "document": { + "path": "vectors/documents/opaque-original.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "vectors/documents/opaque-original.pdf" + }, + "content": { + "bytesDigest": "sha256:af7777006b9a8e6b9ffd9dbc25f3d4f3c54331e9f74948ba9d1facdf63b1a8be", + "byteLength": 16, + "mediaType": "application/pdf" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "coverage-omitted", + "document": { + "path": "vectors/documents/coverage-omitted.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-coverage" + } + }, + { + "id": "coverage-outside", + "document": { + "path": "vectors/documents/coverage-outside.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-coverage" + } + }, + { + "id": "coverage-duplicate", + "document": { + "path": "vectors/documents/coverage-duplicate.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-coverage" + } + }, + { + "id": "unknown-rule", + "document": { + "path": "vectors/documents/unknown-rule.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-coverage" + } + }, + { + "id": "kind-id-confusion", + "document": { + "path": "vectors/documents/kind-id-confusion.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-coverage" + } + }, + { + "id": "singleton-with-id", + "document": { + "path": "vectors/documents/singleton-with-id.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "unsupported-element", + "document": { + "path": "vectors/documents/unsupported-element.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "consumer-graph", + "document": { + "path": "vectors/documents/consumer-graph.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "missing-governing-policy", + "document": { + "path": "vectors/documents/missing-governing-policy.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "policy-version-ref-stale", + "document": { + "path": "vectors/documents/policy-version-ref-stale.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "reference-mismatch" + } + }, + { + "id": "policy-canon-stale", + "document": { + "path": "vectors/documents/policy-canon-stale.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "reference-mismatch" + } + }, + { + "id": "policy-identity-stale", + "document": { + "path": "vectors/documents/policy-identity-stale.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "reference-mismatch" + } + }, + { + "id": "limited-scope-unknown", + "document": { + "path": "vectors/documents/limited-scope-unknown.json" + }, + "materials": [ + { + "source": { + "path": "examples/procurement/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:993a73c70afdc16c94368982d1e951c85c90838d1f750a7001c2942dc9834b94", + "byteLength": 621, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/procurement/source.txt" + }, + "content": { + "bytesDigest": "sha256:4681b36d52396d3faef09e4a7c551d829920362beb47a1bfb32c2d6c4d82763b", + "byteLength": 591, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/procurement/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "byteLength": 402, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/procurement/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:d810d8b3972a4bbc31cd3deb7ada4de965f1ad59bf753cec6748f943213cbcee", + "byteLength": 1725, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/procurement/policy.json" + }, + "content": { + "bytesDigest": "sha256:539587356d8c0942f6e2c98ec09311e9c55fc4efcc6b9f8845e58db817a8dc58", + "byteLength": 2793, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-coverage" + } + }, + { + "id": "limited-scope-missing-basis", + "document": { + "path": "vectors/documents/limited-scope-missing-basis.json" + }, + "materials": [ + { + "source": { + "path": "examples/procurement/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:993a73c70afdc16c94368982d1e951c85c90838d1f750a7001c2942dc9834b94", + "byteLength": 621, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/procurement/source.txt" + }, + "content": { + "bytesDigest": "sha256:4681b36d52396d3faef09e4a7c551d829920362beb47a1bfb32c2d6c4d82763b", + "byteLength": 591, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/procurement/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:14e401b11a917a3275bc18c2d85f547bfd71cf34a706e160ec54621603b36de2", + "byteLength": 402, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/procurement/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:d810d8b3972a4bbc31cd3deb7ada4de965f1ad59bf753cec6748f943213cbcee", + "byteLength": 1725, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/procurement/policy.json" + }, + "content": { + "bytesDigest": "sha256:539587356d8c0942f6e2c98ec09311e9c55fc4efcc6b9f8845e58db817a8dc58", + "byteLength": 2793, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "multiple-policy-identities", + "document": { + "path": "vectors/documents/multiple-policy-identities.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "vectors/documents/second-policy.json" + }, + "content": { + "bytesDigest": "sha256:144558275929f298692344329199afd892f5d74f1bc8aa70bea4bda14e98d627", + "byteLength": 1988, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "duplicate-policy-identity", + "document": { + "path": "vectors/documents/duplicate-policy-identity.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "vectors/documents/second-policy.json" + }, + "content": { + "bytesDigest": "sha256:144558275929f298692344329199afd892f5d74f1bc8aa70bea4bda14e98d627", + "byteLength": 1988, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-coverage" + } + }, + { + "id": "core-decimal-raw", + "document": { + "path": "vectors/documents/core-decimal-raw.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "vectors/documents/core-decimal-raw-pack.json" + }, + "content": { + "bytesDigest": "sha256:9a2b3c06074ead90e9b34d3213ad9b5665ad05c548dfa9cc3be57e8e9f23634b", + "byteLength": 1648, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "core-decimal-requested-canon", + "document": { + "path": "vectors/documents/core-decimal-requested-canon.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "vectors/documents/core-decimal-requested-canon-pack.json" + }, + "content": { + "bytesDigest": "sha256:9a2b3c06074ead90e9b34d3213ad9b5665ad05c548dfa9cc3be57e8e9f23634b", + "byteLength": 1648, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "unsupported-canonical-identity" + } + }, + { + "id": "core-unsafe-int-raw", + "document": { + "path": "vectors/documents/core-unsafe-int-raw.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "vectors/documents/core-unsafe-int-raw-pack.json" + }, + "content": { + "bytesDigest": "sha256:2857116756d73d0babfcd3ede480fd8d462ea95bfcbc234c5e80983b3c4b9910", + "byteLength": 1661, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "core-unsafe-int-requested-canon", + "document": { + "path": "vectors/documents/core-unsafe-int-requested-canon.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "vectors/documents/core-unsafe-int-requested-canon-pack.json" + }, + "content": { + "bytesDigest": "sha256:2857116756d73d0babfcd3ede480fd8d462ea95bfcbc234c5e80983b3c4b9910", + "byteLength": 1661, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "unsupported-canonical-identity" + } + }, + { + "id": "core-exponent-308", + "document": { + "path": "vectors/documents/core-exponent-308.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "vectors/documents/core-exponent-308-pack.json" + }, + "content": { + "bytesDigest": "sha256:52bd1104aedcc81011f2b0aaac2f5a3e082dc96b7a9c490cf441a005d3e3667e", + "byteLength": 1650, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "core-exponent-over", + "document": { + "path": "vectors/documents/core-exponent-over.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "vectors/documents/core-exponent-over-pack.json" + }, + "content": { + "bytesDigest": "sha256:7d593e7fac09abf836b599e7719f33850381bd60d5aa8c078a7cf2d43c494843", + "byteLength": 1650, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "core-number-128", + "document": { + "path": "vectors/documents/core-number-128.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "vectors/documents/core-number-128-pack.json" + }, + "content": { + "bytesDigest": "sha256:0a694f57fa21a82551738a128022578c837b332848866db302da838c70b8e3c7", + "byteLength": 1773, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "core-number-over-128", + "document": { + "path": "vectors/documents/core-number-over-128.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "vectors/documents/core-number-over-128-pack.json" + }, + "content": { + "bytesDigest": "sha256:bceb1d327714090d58fb463516779aeb50168299e0ff0d2a9de21a7ff5421114", + "byteLength": 1774, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "consumer-fallback-unknown", + "document": { + "path": "vectors/documents/consumer-fallback-unknown.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "vectors/documents/consumer-fallback-unknown-pack.json" + }, + "content": { + "bytesDigest": "sha256:8c7a49e4b3b81d1880e64bdee1734c4805a1c4daffc599683ce098d47e0c2011", + "byteLength": 1559, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-consumer" + } + }, + { + "id": "consumer-rule-id-duplicate", + "document": { + "path": "vectors/documents/consumer-rule-id-duplicate.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "vectors/documents/consumer-rule-id-duplicate-pack.json" + }, + "content": { + "bytesDigest": "sha256:93560dbc1b0537cf834d02b2607dade6b9a6407c5a37caf36954822762f0c312", + "byteLength": 1828, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-consumer" + } + }, + { + "id": "narrative-max", + "document": { + "path": "vectors/documents/narrative-max.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1048576 + }, + "content": { + "bytesDigest": "sha256:8f990ba0b577b51cf009ea049368c16bbda1b21e1b93be07a824758bb253c39b", + "byteLength": 1048576, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "narrative-over", + "document": { + "path": "vectors/documents/narrative-over.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1048577 + }, + "content": { + "bytesDigest": "sha256:154b8ed3c2383ce429058768595935faf7851b5c38db2b1732594be1d88bc05a", + "byteLength": 1048577, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "original-max", + "document": { + "path": "vectors/documents/original-max.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 4194304 + }, + "content": { + "bytesDigest": "sha256:baa7a6d36ffa957552df230235c2d51d735f28d49c58a5f3438a3a973a25a37d", + "byteLength": 4194304, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "original-over", + "document": { + "path": "vectors/documents/original-over.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 4194305 + }, + "content": { + "bytesDigest": "sha256:8d3d3c04baadfd31cbebf771836900097b5f36cc142b74e40747c7b372beab8b", + "byteLength": 4194305, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "review-max", + "document": { + "path": "vectors/documents/review-max.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1048576 + }, + "content": { + "bytesDigest": "sha256:8f990ba0b577b51cf009ea049368c16bbda1b21e1b93be07a824758bb253c39b", + "byteLength": 1048576, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "review-over", + "document": { + "path": "vectors/documents/review-over.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1048577 + }, + "content": { + "bytesDigest": "sha256:154b8ed3c2383ce429058768595935faf7851b5c38db2b1732594be1d88bc05a", + "byteLength": 1048577, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "informational-max", + "document": { + "path": "vectors/documents/informational-max.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1048576 + }, + "content": { + "bytesDigest": "sha256:8f990ba0b577b51cf009ea049368c16bbda1b21e1b93be07a824758bb253c39b", + "byteLength": 1048576, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "informational-over", + "document": { + "path": "vectors/documents/informational-over.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1048577 + }, + "content": { + "bytesDigest": "sha256:154b8ed3c2383ce429058768595935faf7851b5c38db2b1732594be1d88bc05a", + "byteLength": 1048577, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "aggregate-max", + "document": { + "path": "vectors/documents/aggregate-max.json" + }, + "materials": [ + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 0, + "byteLength": 4194304 + }, + "content": { + "bytesDigest": "sha256:bb9f8df61474d25e71fa00722318cd387396ca1736605e1248821cc0de3d3af8", + "byteLength": 4194304, + "mediaType": "application/pdf" + } + }, + { + "source": { + "repeatByte": 1, + "byteLength": 4194304 + }, + "content": { + "bytesDigest": "sha256:5d2bafc266e711ed1e303de871e5b281fea2083d96e579dd504798bba5a34b42", + "byteLength": 4194304, + "mediaType": "application/pdf" + } + }, + { + "source": { + "repeatByte": 2, + "byteLength": 4194304 + }, + "content": { + "bytesDigest": "sha256:e4eb88707af669a2324ae8aad3950ac7b3f7837dec7823c94d4983a99ef13181", + "byteLength": 4194304, + "mediaType": "application/pdf" + } + }, + { + "source": { + "repeatByte": 3, + "byteLength": 4194303 + }, + "content": { + "bytesDigest": "sha256:3b9ba78a58567b74d9420579bdb199d57d92eb434f30ebf6118b2e0ec7f0fb63", + "byteLength": 4194303, + "mediaType": "application/pdf" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "aggregate-shared-media-counted-once", + "document": { + "path": "vectors/documents/aggregate-shared-media-counted-once.json" + }, + "materials": [ + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 0, + "byteLength": 4194304 + }, + "content": { + "bytesDigest": "sha256:bb9f8df61474d25e71fa00722318cd387396ca1736605e1248821cc0de3d3af8", + "byteLength": 4194304, + "mediaType": "application/pdf" + } + }, + { + "source": { + "repeatByte": 1, + "byteLength": 4194304 + }, + "content": { + "bytesDigest": "sha256:5d2bafc266e711ed1e303de871e5b281fea2083d96e579dd504798bba5a34b42", + "byteLength": 4194304, + "mediaType": "application/pdf" + } + }, + { + "source": { + "repeatByte": 2, + "byteLength": 4194304 + }, + "content": { + "bytesDigest": "sha256:e4eb88707af669a2324ae8aad3950ac7b3f7837dec7823c94d4983a99ef13181", + "byteLength": 4194304, + "mediaType": "application/pdf" + } + }, + { + "source": { + "repeatByte": 3, + "byteLength": 4194303 + }, + "content": { + "bytesDigest": "sha256:3b9ba78a58567b74d9420579bdb199d57d92eb434f30ebf6118b2e0ec7f0fb63", + "byteLength": 4194303, + "mediaType": "application/pdf" + } + }, + { + "source": { + "repeatByte": 0, + "byteLength": 4194304 + }, + "content": { + "bytesDigest": "sha256:bb9f8df61474d25e71fa00722318cd387396ca1736605e1248821cc0de3d3af8", + "byteLength": 4194304, + "mediaType": "text/markdown" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "aggregate-over", + "document": { + "path": "vectors/documents/aggregate-over.json" + }, + "materials": [ + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 0, + "byteLength": 4194304 + }, + "content": { + "bytesDigest": "sha256:bb9f8df61474d25e71fa00722318cd387396ca1736605e1248821cc0de3d3af8", + "byteLength": 4194304, + "mediaType": "application/pdf" + } + }, + { + "source": { + "repeatByte": 1, + "byteLength": 4194304 + }, + "content": { + "bytesDigest": "sha256:5d2bafc266e711ed1e303de871e5b281fea2083d96e579dd504798bba5a34b42", + "byteLength": 4194304, + "mediaType": "application/pdf" + } + }, + { + "source": { + "repeatByte": 2, + "byteLength": 4194304 + }, + "content": { + "bytesDigest": "sha256:e4eb88707af669a2324ae8aad3950ac7b3f7837dec7823c94d4983a99ef13181", + "byteLength": 4194304, + "mediaType": "application/pdf" + } + }, + { + "source": { + "repeatByte": 3, + "byteLength": 4194303 + }, + "content": { + "bytesDigest": "sha256:3b9ba78a58567b74d9420579bdb199d57d92eb434f30ebf6118b2e0ec7f0fb63", + "byteLength": 4194303, + "mediaType": "application/pdf" + } + }, + { + "source": { + "repeatByte": 0, + "byteLength": 4194304 + }, + "content": { + "bytesDigest": "sha256:bb9f8df61474d25e71fa00722318cd387396ca1736605e1248821cc0de3d3af8", + "byteLength": 4194304, + "mediaType": "text/markdown" + } + }, + { + "source": { + "repeatByte": 121, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:a1fce4363854ff888cff4b8e7875d600c2682390412a8cf79b37d0b11148b0fa", + "byteLength": 1, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "registration-count-16", + "document": { + "path": "vectors/documents/registration-count-16.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "registration-count-17", + "document": { + "path": "vectors/documents/registration-count-17.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "malformed-over-depth", + "document": { + "path": "vectors/documents/malformed-over-depth.json" + }, + "materials": [], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "unknown-kind-registration-over", + "document": { + "path": "vectors/documents/unknown-kind-registration-over.json" + }, + "materials": [ + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "refused", + "code": "input-over-bound" + } + }, + { + "id": "unknown-kind-stale-length", + "document": { + "path": "vectors/documents/unknown-kind-registration-over.json" + }, + "materials": [ + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 2, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "refused", + "code": "reference-mismatch" + } + }, + { + "id": "unsupported-format-missing-source", + "document": { + "path": "vectors/documents/format-2.json" + }, + "materials": [ + { + "source": { + "path": "vectors/intentionally-missing-transport.bin" + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "refused", + "code": "unsupported-format" + } + }, + { + "id": "early-hash-failure-later-missing-source", + "document": { + "path": "examples/data-access/policy.json" + }, + "materials": [ + { + "source": { + "repeatByte": 120, + "byteLength": 1 + }, + "content": { + "bytesDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000", + "byteLength": 1, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "vectors/intentionally-missing-transport.bin" + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "refused", + "code": "reference-mismatch" + } + }, + { + "id": "vector-carrier-nul-path", + "document": { + "path": "examples/data-access/policy.json" + }, + "materials": [ + { + "source": { + "path": "vectors/private\u0000transport.bin" + }, + "content": { + "bytesDigest": "sha256:2d711642b726b04401627ca9fbac32f5c8530fb1903cc4db02258717921a4881", + "byteLength": 1, + "mediaType": "text/plain" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-carrier" + } + }, + { + "id": "uri-final-lf", + "document": { + "path": "vectors/documents/uri-final-lf.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "vectors/documents/uri-final-lf-pack.json" + }, + "content": { + "bytesDigest": "sha256:c418f413e2b19f32dcc2f46664717ff2eb81e940fca57315275d39e63037f495", + "byteLength": 1503, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "uri-ipv6-leading-zero-ipv4-tail", + "document": { + "path": "vectors/documents/uri-ipv6-leading-zero-ipv4-tail.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "vectors/documents/uri-ipv6-leading-zero-ipv4-tail-pack.json" + }, + "content": { + "bytesDigest": "sha256:0ea4f86f542fcfe5a183050daac17f5d43796995965096773ba7481c5ad93e4e", + "byteLength": 1523, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "uri-raw-unicode", + "document": { + "path": "vectors/documents/uri-raw-unicode.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "uri-percent-unicode", + "document": { + "path": "vectors/documents/uri-percent-unicode.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "uri-percent-incomplete", + "document": { + "path": "vectors/documents/uri-percent-incomplete.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "uri-percent-nonhex", + "document": { + "path": "vectors/documents/uri-percent-nonhex.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "uri-ipv6-compressed", + "document": { + "path": "vectors/documents/uri-ipv6-compressed.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "uri-ipv6-ipv4-tail", + "document": { + "path": "vectors/documents/uri-ipv6-ipv4-tail.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "uri-ipv6-double-compression", + "document": { + "path": "vectors/documents/uri-ipv6-double-compression.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "uri-ipvfuture-lowercase", + "document": { + "path": "vectors/documents/uri-ipvfuture-lowercase.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "vectors/documents/uri-ipvfuture-lowercase-pack.json" + }, + "content": { + "bytesDigest": "sha256:ebd7ca932ab1557442af46b391d5e1b980c9398a7213d4682a3308732be4cf5a", + "byteLength": 1504, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "uri-ipvfuture-uppercase", + "document": { + "path": "vectors/documents/uri-ipvfuture-uppercase.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "vectors/documents/uri-ipvfuture-uppercase-pack.json" + }, + "content": { + "bytesDigest": "sha256:6992d4add7edc8a3dec0679b28dd58a4838d2cf5f218b4f702081583e9cb8c6b", + "byteLength": 1504, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "uri-ipvfuture-invalid-version", + "document": { + "path": "vectors/documents/uri-ipvfuture-invalid-version.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "uri-percent-regname", + "document": { + "path": "vectors/documents/uri-percent-regname.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "vectors/documents/uri-percent-regname-pack.json" + }, + "content": { + "bytesDigest": "sha256:50e9179933d3bab136e4872f25874e556cc9b1508410dd945ad564a2a3e90daa", + "byteLength": 1518, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "uri-userinfo-percent-brackets", + "document": { + "path": "vectors/documents/uri-userinfo-percent-brackets.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "uri-percent-brackets", + "document": { + "path": "vectors/documents/uri-percent-brackets.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + }, + { + "id": "uri-rootless-raw-brackets", + "document": { + "path": "vectors/documents/uri-rootless-raw-brackets.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "vectors/documents/uri-rootless-raw-brackets-pack.json" + }, + "content": { + "bytesDigest": "sha256:a2b8f1d350ac991ebfd9f94ce6e53e40d19485e1f8ec7baaeb91f2ba279418ca", + "byteLength": 1503, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "uri-path-raw-brackets", + "document": { + "path": "vectors/documents/uri-path-raw-brackets.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "vectors/documents/uri-path-raw-brackets-pack.json" + }, + "content": { + "bytesDigest": "sha256:c0e3ef08c4644024d87d26ed4d77a5c14b1b7f46c8ca0a4b0ce7d8157ade7208", + "byteLength": 1518, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "uri-query-raw-brackets", + "document": { + "path": "vectors/documents/uri-query-raw-brackets.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "uri-fragment-raw-brackets", + "document": { + "path": "vectors/documents/uri-fragment-raw-brackets.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "refused", + "code": "invalid-document" + } + }, + { + "id": "uri-numeric-regname-leading-zeros", + "document": { + "path": "vectors/documents/uri-numeric-regname-leading-zeros.json" + }, + "materials": [ + { + "source": { + "path": "examples/data-access/narrative.txt" + }, + "content": { + "bytesDigest": "sha256:801a0d0969c0ffe5b95d12bbdc593c823a995ea28ccdb894b0beb7de370ba172", + "byteLength": 449, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/source.txt" + }, + "content": { + "bytesDigest": "sha256:9a4f335306e2a8e4fbcf73f5a5bad14f45369fa22985756181eeb8ea1ee217dd", + "byteLength": 433, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/interpretation.txt" + }, + "content": { + "bytesDigest": "sha256:7c649cafae58eb11498332c03a107be64fb7d72fcbedebe2c5da32aa801d55f8", + "byteLength": 262, + "mediaType": "text/plain" + } + }, + { + "source": { + "path": "examples/data-access/consumer-pack.json" + }, + "content": { + "bytesDigest": "sha256:c4912216ef58c754473bdda95be7322126ab2970bd75bea9306f342927d974e4", + "byteLength": 1558, + "mediaType": "application/json" + } + }, + { + "source": { + "path": "examples/data-access/policy.json" + }, + "content": { + "bytesDigest": "sha256:6abbd1b965ff006e210b8a98c4a8db6eb0bb795c1f8a995d3be343aa1a984f51", + "byteLength": 2019, + "mediaType": "application/json" + } + } + ], + "expected": { + "status": "valid", + "formatVersion": "1.0.0", + "maturity": "proposed-draft" + } + } + ] +} diff --git a/internal/policy/candidate_review_test.go b/internal/policy/candidate_review_test.go new file mode 100644 index 0000000..6d191cb --- /dev/null +++ b/internal/policy/candidate_review_test.go @@ -0,0 +1,168 @@ +package policy + +import ( + "bytes" + "encoding/json" + "os" + "strings" + "testing" + + "github.com/Judgment-Pack/judgment-pack-runtime/internal/result" + "github.com/Judgment-Pack/judgment-pack-runtime/internal/validation" + "github.com/santhosh-tekuri/jsonschema/v6" +) + +func TestCandidateURIFormatAgreementAndInitSchemaParity(t *testing.T) { + raw, err := os.ReadFile("testdata/candidate-uri-cases.json") + if err != nil { + t.Fatal(err) + } + var cases []struct { + URI string `json:"uri"` + Valid bool `json:"valid"` + } + if err := json.Unmarshal(raw, &cases); err != nil { + t.Fatal(err) + } + schema, exit := Schema("schema", "policy", CandidateVersion) + if exit != 0 { + t.Fatal(schema, exit) + } + compiled, err := compileCandidateSchemas(map[string][]byte{"urn:test:candidate-editing-schema": []byte(schema.Resource.Text)}, "urn:test:candidate-editing-schema") + if err != nil { + t.Fatal(err) + } + f := candidateFixture(t, "refunds") + for _, tc := range cases { + t.Run(tc.URI, func(t *testing.T) { + f.policy["id"] = tc.URI + r, exit := Check("check", mustJSON(t, f.policy), f.wire(t), engine(t)) + if (exit == 0) != tc.Valid || !tc.Valid && r.CandidateResult.Code != "invalid-document" { + t.Fatalf("URI result %+v exit %d expected valid %v", r.CandidateResult, exit, tc.Valid) + } + if (compiled.Validate(f.policy) == nil) != tc.Valid { + t.Fatal("editing schema URI assertion differs") + } + if init, exit := Init("init", "policy", CandidateVersion, tc.URI, "7.3.42"); (exit == 0) != tc.Valid { + t.Fatalf("init URI assertion differs %+v exit %d", init, exit) + } + }) + } + // Candidate compilation must not replace the historical URI assertion used + // by Core/prototype consumers, even within the same process. + if !validURI("urn:test:[x]") { + t.Fatal("prototype URI behavior changed") + } + legacy := loadFixture(t, "refunds") + legacy.policy["id"] = "urn:test:[x]" + if report, exit := Validate("legacy", mustJSON(t, legacy.policy)); exit != 0 { + t.Fatalf("prototype schema URI behavior changed %+v %d", report, exit) + } + consumer := mustMap(t, legacy.raw["consumer-pack.json"]) + consumer["id"] = "urn:test:[x]" + if report, failure := engine(t).Validate(mustJSON(t, consumer), validation.Options{Through: "structural", Limits: limits()}); failure != nil || report.Status != "valid" { + t.Fatalf("Core URI behavior changed %+v %v", report, failure) + } +} + +func TestCandidateURIAssertionsCoverArtifactReferences(t *testing.T) { + for _, member := range []string{"id", "consumer", "policy"} { + f := candidateFixture(t, "refunds") + switch member { + case "id": + f.adoption["id"] = "urn:test:[x]" + case "consumer": + object(f.adoption["consumer"])["id"] = "urn:test:[x]" + case "policy": + object(object(array(f.adoption["governingPolicies"])[0])["policy"])["id"] = "urn:test:[x]" + } + r, exit := Validate("validate", mustJSON(t, f.adoption)) + if exit != result.ExitInvalid || r.refusalCode != "invalid-document" { + t.Fatalf("URI member %s bypassed assertion %+v exit %d", member, r, exit) + } + } +} + +func TestCandidateConsumerURIUsesSameAssertionAndPreservesRawBytes(t *testing.T) { + raw, err := os.ReadFile("testdata/candidate-uri-cases.json") + if err != nil { + t.Fatal(err) + } + var cases []struct { + URI string `json:"uri"` + Valid bool `json:"valid"` + } + if err := json.Unmarshal(raw, &cases); err != nil { + t.Fatal(err) + } + for _, tc := range cases { + t.Run(tc.URI, func(t *testing.T) { + f := candidateFixture(t, "refunds") + reference := object(f.adoption["consumer"]) + pack := bytes.Replace(f.raw["consumer-pack.json"], mustJSON(t, reference["id"]), mustJSON(t, tc.URI), 1) + // An optional Core number outside jps-canon proves that checking the + // candidate URI neither reserializes the Pack nor narrows its numbers. + pack = bytes.Replace(pack, []byte(`"specVersion":`), []byte(`"extensions":{"com.example.uri":1.0},"specVersion":`), 1) + reference["id"] = tc.URI + f.retainConsumer(t, pack) + r, exit := Check("check", mustJSON(t, f.adoption), f.wire(t), engine(t)) + if (exit == 0) != tc.Valid || !tc.Valid && r.CandidateResult.Code != "invalid-document" { + t.Fatalf("consumer URI result %+v exit %d expected valid %v", r.CandidateResult, exit, tc.Valid) + } + if !bytes.Equal(f.raw["consumer-pack.json"], pack) || text(object(reference["content"])["bytesDigest"]) != digest(pack) { + t.Fatal("consumer raw identity changed") + } + }) + } + // Overrides belong to one candidate check, not the caller's shared engine. + f := candidateFixture(t, "refunds") + reference := object(f.adoption["consumer"]) + pack := bytes.Replace(f.raw["consumer-pack.json"], mustJSON(t, reference["id"]), mustJSON(t, "https://%65xample.invalid/a"), 1) + if report, failure := engine(t).Validate(pack, validation.Options{Through: "structural", Limits: limits()}); failure != nil || report.Status != "invalid" { + t.Fatalf("default Core URI behavior changed %+v %v", report, failure) + } +} + +func TestCandidatePrivateWireRegistrationPhaseOrdering(t *testing.T) { + f := candidateFixture(t, "refunds") + validEntry := f.entries[0] + sixteen := make([]wireEntry, 16) + for i := range sixteen { + sixteen[i] = validEntry + } + badDigest := wireEntry{Content: map[string]any{"bytesDigest": "sha256:" + strings.Repeat("0", 64), "byteLength": 1, "mediaType": "text/plain"}, DataBase64: encodeMaterial([]byte("x"))} + for _, tc := range []struct { + name string + entries []wireEntry + code string + exit int + }{ + {"count-before-entry-shape", append(sixteen, wireEntry{Content: nil, DataBase64: nil}), "input-over-bound", result.ExitUnsupported}, + {"earlier-digest-before-later-content-shape", []wireEntry{badDigest, {Content: nil, DataBase64: encodeMaterial([]byte("x"))}}, "reference-mismatch", result.ExitInvalid}, + {"earlier-digest-before-later-base64-type", []wireEntry{badDigest, {Content: validEntry.Content, DataBase64: nil}}, "reference-mismatch", result.ExitInvalid}, + {"reached-invalid-content", []wireEntry{validEntry, {Content: nil, DataBase64: encodeMaterial([]byte("x"))}}, "invalid-carrier", result.ExitInvalid}, + {"reached-invalid-base64-type", []wireEntry{validEntry, {Content: validEntry.Content, DataBase64: nil}}, "invalid-carrier", result.ExitInvalid}, + } { + t.Run(tc.name, func(t *testing.T) { + r, exit := Check("check", f.raw["policy.json"], mustJSON(t, map[string]any{"materials": tc.entries}), engine(t)) + if exit != tc.exit || r.CandidateResult == nil || r.CandidateResult.Code != tc.code { + t.Fatalf("native wire phase result %+v exit %d", r.CandidateResult, exit) + } + }) + } +} + +func TestCandidateURIAssertionDoesNotAddCoreLengthBounds(t *testing.T) { + f := candidateFixture(t, "refunds") + id := "urn:test:" + strings.Repeat("a", 3000) + pack := bytes.Replace(f.raw["consumer-pack.json"], mustJSON(t, object(f.adoption["consumer"])["id"]), mustJSON(t, id), 1) + options := validation.Options{Through: "structural", Limits: limits(), FormatOverrides: []*jsonschema.Format{candidateURIFormat()}} + if report, failure := engine(t).Validate(pack, options); failure != nil || report.Status != "valid" { + t.Fatalf("URI assertion imposed a companion bound on Core %+v %v", report, failure) + } + // The companion schema remains the owner of its separate URI character cap. + f.policy["id"] = id + if report, exit := Validate("validate", mustJSON(t, f.policy)); exit != result.ExitUnsupported || report.refusalCode != "input-over-bound" { + t.Fatalf("companion URI bound missing %+v %d", report, exit) + } +} diff --git a/internal/policy/candidate_schema.go b/internal/policy/candidate_schema.go new file mode 100644 index 0000000..1927d4a --- /dev/null +++ b/internal/policy/candidate_schema.go @@ -0,0 +1,93 @@ +package policy + +import ( + "embed" + "sync" + + "github.com/Judgment-Pack/judgment-pack-runtime/internal/result" + "github.com/Judgment-Pack/judgment-pack-runtime/internal/validation" + "github.com/santhosh-tekuri/jsonschema/v6" +) + +//go:embed candidate +var candidate embed.FS + +const candidateCommonID = "urn:jps:proposal:policy-companion:1.0.0:common" + +var candidateSchemasOnce sync.Once +var candidateSchemas map[string]*jsonschema.Schema +var candidateSchemasError error + +func schemaSource(version string) (embed.FS, string, string, string) { + if version == CandidateVersion { + return candidate, candidateFormat.directory, candidateFormat.commonURI, candidateFormat.revision + } + return prototype, prototypeFormat.directory, prototypeFormat.commonURI, prototypeFormat.revision +} + +func loadCandidateSchemas() (map[string]*jsonschema.Schema, error) { + candidateSchemasOnce.Do(func() { + resources := map[string][]byte{} + for _, name := range []string{"common", "policy", "governing-adoption"} { + raw, err := candidate.ReadFile("candidate/" + name + ".schema.json") + if err != nil { + candidateSchemasError = err + return + } + resources["urn:jps:proposal:policy-companion:1.0.0:"+name] = raw + } + candidateSchemas = map[string]*jsonschema.Schema{} + for name, id := range map[string]string{"common": candidateCommonID, "uri": candidateCommonID + "#/$defs/uri", "policy": "urn:jps:proposal:policy-companion:1.0.0:policy", "governing-adoption": "urn:jps:proposal:policy-companion:1.0.0:governing-adoption"} { + s, err := compileCandidateSchemas(resources, id) + if err != nil { + candidateSchemasError = err + return + } + candidateSchemas[name] = s + } + }) + return candidateSchemas, candidateSchemasError +} + +func compileCandidateSchemas(resources map[string][]byte, id string) (*jsonschema.Schema, error) { + return validation.CompileSchemasWithFormats(resources, id, candidateURIFormat()) +} + +func candidateURIFormat() *jsonschema.Format { + return &jsonschema.Format{Name: "uri", Validate: validateCandidateURI} +} + +func validURIFormat(id, version string) bool { + if version == ProfileVersion { + return validURI(id) + } + s, err := loadCandidateSchemas() + return err == nil && s["uri"].Validate(id) == nil +} + +func candidateSchema(name string, value any) (*issue, int) { + if name != "common" && name != "policy" && name != "governing-adoption" { + return candidateIssue("invalid-document"), result.ExitInvalid + } + schemas, err := loadCandidateSchemas() + if err != nil { + return problem("JPS-POLICY-ARTIFACT", "", "Pinned candidate schemas could not be compiled."), result.ExitIO + } + if err := schemas[name].Validate(value); err != nil { + if schemaBound(err) { + return candidateIssue("input-over-bound"), result.ExitUnsupported + } + return candidateIssue("invalid-document"), result.ExitInvalid + } + return nil, 0 +} + +func candidateLocalCode(doc map[string]any, failure *issue) string { + if doc["kind"] == "policy" { + if failure.code == "JPS-POLICY-DUPLICATE-ID" && len(failure.path) >= len("/sourceProvenance") && failure.path[:len("/sourceProvenance")] == "/sourceProvenance" { + return "invalid-document" + } + return "invalid-anchor" + } + return "invalid-coverage" +} diff --git a/internal/policy/candidate_test.go b/internal/policy/candidate_test.go new file mode 100644 index 0000000..0bfdca3 --- /dev/null +++ b/internal/policy/candidate_test.go @@ -0,0 +1,260 @@ +package policy + +import ( + "bytes" + "crypto/sha256" + "encoding/base64" + "encoding/hex" + "encoding/json" + "io/fs" + "path" + "reflect" + "strings" + "testing" + + "github.com/Judgment-Pack/judgment-pack-runtime/internal/carrier" + "github.com/Judgment-Pack/judgment-pack-runtime/internal/result" + "github.com/Judgment-Pack/judgment-pack-runtime/internal/validation" +) + +func candidateRead(t *testing.T, name string) []byte { + t.Helper() + raw, err := candidate.ReadFile("candidate/" + name) + if err != nil { + t.Fatal(err) + } + return raw +} + +func candidateFixture(t *testing.T, domain string) *fixture { + t.Helper() + base := "examples/" + domain + "/" + manifest := mustMap(t, candidateRead(t, base+"fixture.json")) + f := &fixture{policy: mustMap(t, candidateRead(t, base+"policy.json")), adoption: mustMap(t, candidateRead(t, base+"adoption.json")), raw: map[string][]byte{}} + for _, item := range array(manifest["materials"]) { + entry := object(item) + name := text(entry["path"]) + raw := candidateRead(t, base+name) + f.raw[name] = raw + f.names = append(f.names, name) + f.entries = append(f.entries, wireEntry{Content: object(entry["content"]), DataBase64: encodeMaterial(raw)}) + } + return f +} + +func vectorBytes(source map[string]any) ([]byte, *issue, int) { + if name, ok := source["path"].(string); ok { + if strings.ContainsRune(name, 0) || path.IsAbs(name) || path.Clean(name) != name || strings.HasPrefix(name, "../") { + return nil, candidateIssue("invalid-carrier"), result.ExitInvalid + } + raw, err := candidate.ReadFile("candidate/" + name) + if err != nil { + return nil, candidateIssue("missing-material"), result.ExitInvalid + } + return raw, nil, 0 + } + return bytes.Repeat([]byte{byte(number(source["repeatByte"]))}, number(source["byteLength"])), nil, 0 +} + +func TestCandidatePortableVectors(t *testing.T) { + value, failure := carrier.Decode(candidateRead(t, "vectors/manifest.json"), limits()) + if failure != nil { + t.Fatal(failure) + } + manifest := object(value) + cases := array(manifest["cases"]) + if len(cases) != 124 { + t.Fatalf("unexpected vector count %d", len(cases)) + } + for _, value := range cases { + entry := object(value) + t.Run(text(entry["id"]), func(t *testing.T) { + raw, failure, code := vectorBytes(object(entry["document"])) + if failure != nil { + t.Fatalf("root carrier failed: %v %d", failure, code) + } + + r, doc, exit := parseFormat("vectors", raw, CandidateVersion) + if exit == 0 { + r, exit = checkMaterials(r, doc, func() (materialSet, *issue, int) { + registrations := array(entry["materials"]) + if len(registrations) > MaxMaterials { + return nil, candidateIssue("input-over-bound"), result.ExitUnsupported + } + materials := materialSet{} + for _, value := range registrations { + registration := object(value) + retained, failure, code := vectorBytes(object(registration["source"])) + if failure != nil { + return nil, failure, code + } + if err, code := registerCandidateMaterial(object(registration["content"]), retained, materials); err != nil { + return nil, err, code + } + } + return materials, nil, 0 + }, engine(t)) + } else { + r, exit = finishCandidateCheck(r, exit) + } + + actual := mustMap(t, mustJSON(t, r.CandidateResult)) + if !reflect.DeepEqual(actual, object(entry["expected"])) { + t.Fatalf("result %v want %v; exit %d diagnostics %v", actual, entry["expected"], exit, r.Diagnostics) + } + if (exit == 0) != (actual["status"] == "valid") { + t.Fatal("exit/result disagreement") + } + }) + } +} + +func TestCandidateProvenance(t *testing.T) { + raw := candidateRead(t, "provenance.json") + if digest(raw) != "sha256:f21466b49e2eb95c33f6e97bef74203a2e2255737476be27e72e3c43fc01f971" { + t.Fatal("candidate manifest pin changed") + } + manifest := mustMap(t, raw) + if manifest["sourceRevision"] != CandidateRevision || manifest["formatVersion"] != CandidateVersion || manifest["license"] != "Apache-2.0" || manifest["maturity"] != "proposed-draft" { + t.Fatal("incorrect candidate provenance") + } + expected := map[string]bool{"provenance.json": true} + for _, value := range array(manifest["files"]) { + entry := object(value) + name := text(entry["path"]) + raw := candidateRead(t, name) + sum := sha256.Sum256(raw) + if hex.EncodeToString(sum[:]) != entry["sha256"] || len(raw) != int(entry["byteLength"].(float64)) { + t.Fatalf("candidate vendor mismatch: %s", name) + } + expected[name] = true + } + if err := fs.WalkDir(candidate, "candidate", func(name string, d fs.DirEntry, err error) error { + if err != nil { + return err + } + if !d.IsDir() && !expected[strings.TrimPrefix(name, "candidate/")] { + t.Errorf("unmanifested candidate file %s", name) + } + return nil + }); err != nil { + t.Fatal(err) + } +} + +func TestCandidateRawIdentityAndFormatIsolation(t *testing.T) { + f := candidateFixture(t, "refunds") + raw := f.raw["policy.json"] + r, exit := Canonicalize("canon", raw) + if exit != 0 || r.BytesDigest != digest(raw) || r.CanonicalDigest == r.BytesDigest || r.FormatVersion != CandidateVersion || r.SpecRevision != CandidateRevision || r.CandidateResult != nil { + t.Fatalf("candidate identity %+v exit %d", r, exit) + } + if r.Document == "" { + t.Fatal("canonical bytes missing") + } + prototypePolicy := loadFixture(t, "refunds").raw["policy.json"] + f.replace(t, "policy.json", prototypePolicy) + reference := object(object(array(f.adoption["governingPolicies"])[0])["policy"]) + reference["content"] = f.content(t, "policy.json") + reference["id"], reference["version"] = mustMap(t, prototypePolicy)["id"], mustMap(t, prototypePolicy)["version"] + delete(reference, "canonicalIdentity") + r, exit = Check("check", mustJSON(t, f.adoption), f.wire(t), engine(t)) + if exit != result.ExitInvalid || r.CandidateResult == nil || r.CandidateResult.Code != "invalid-selector" { + t.Fatalf("prototype retained Policy accepted: %+v exit %d", r.CandidateResult, exit) + } +} + +func TestCandidateInitSchemaAndExplicitDiscovery(t *testing.T) { + legacyJSON := mustMap(t, mustJSON(t, Contract("contract"))) + for _, key := range []string{"formatVersion", "candidateResult", "candidateCapabilities", "registryVersion"} { + if _, found := legacyJSON[key]; found { + t.Fatal("legacy contract extended", key) + } + } + registry := AllFormats("contract") + if len(registry.Formats) != 2 || !bytes.Equal(mustJSON(t, registry.Formats[0]), mustJSON(t, Contract("contract"))) { + t.Fatal("registry changed legacy entry") + } + for _, kind := range []string{"policy", "governing-adoption"} { + r, exit := Init("init", kind, CandidateVersion, "urn:test:candidate", "7.3.42") + if exit != 0 || r.FormatVersion != CandidateVersion || !r.StarterTemplate { + t.Fatalf("init %+v %d", r, exit) + } + if v, exit := Validate("validate", []byte(r.Document)); exit != 0 { + t.Fatalf("starter shape %+v %d", v, exit) + } + if kind == "policy" && mustMap(t, []byte(r.Document))["managementMode"] != "workspace-managed" { + t.Fatal("old management spelling") + } + schema, exit := Schema("schema", kind, CandidateVersion) + if exit != 0 || schema.Resource == nil || strings.Contains(schema.Resource.Text, "8a56a95") { + t.Fatal("candidate schema provenance") + } + compiled, err := validation.CompileSchema([]byte(schema.Resource.Text), "urn:test:candidate:"+kind) + if err != nil { + t.Fatal(err) + } + if err := compiled.Validate(mustMap(t, []byte(r.Document))); err != nil { + t.Fatal(err) + } + } + var capabilities map[string]any + if json.Unmarshal(registry.Formats[1].CandidateCapabilities, &capabilities) != nil || capabilities["maturity"] != "proposed-draft" { + t.Fatal("candidate discovery") + } +} + +func encodeMaterial(raw []byte) string { return base64.StdEncoding.EncodeToString(raw) } + +func TestCandidateUnicodeTextAndPrivateTransportBounds(t *testing.T) { + f := candidateFixture(t, "refunds") + f.policy["title"] = strings.Repeat("é", 4096) + if r, exit := Validate("validate", mustJSON(t, f.policy)); exit != 0 { + t.Fatalf("Unicode character maximum refused %+v %d", r, exit) + } + f.policy["title"] = strings.Repeat("é", 4097) + if r, exit := Validate("validate", mustJSON(t, f.policy)); exit != result.ExitUnsupported || r.refusalCode != "input-over-bound" { + t.Fatalf("Unicode character maximum accepted %+v %d", r, exit) + } + r, exit := Check("check", f.raw["policy.json"], bytes.Repeat([]byte{' '}, MaxMaterialsWireBytes+1), engine(t)) + if exit != result.ExitUnsupported || r.CandidateResult == nil || r.CandidateResult.Code != "input-over-bound" || r.Capabilities.MaxMaterialsWireBytes != MaxMaterialsWireBytes { + t.Fatalf("private wire limit changed %+v %d", r, exit) + } +} + +func TestCandidateEnvironmentFailureAndSafeRefusal(t *testing.T) { + f := candidateFixture(t, "refunds") + r, exit := Check("check", f.raw["adoption.json"], f.wire(t), nil) + if exit != result.ExitIO || r.CandidateResult != nil { + t.Fatalf("environment failure became candidate result %+v %d", r, exit) + } + f.policy["kind"] = strings.Repeat("private-provider-prose", 4000) + r, exit = Check("check", mustJSON(t, f.policy), f.wire(t), engine(t)) + if exit != result.ExitInvalid || r.CandidateResult == nil || r.CandidateResult.Code != "invalid-document" || bytes.Contains(mustJSON(t, r), []byte("private-provider-prose")) { + t.Fatalf("unknown kind refusal leaked input or used wrong code %d", exit) + } +} + +func TestCandidateAdoptionValidatesRetainedPolicyGrammar(t *testing.T) { + for _, tc := range []struct { + name string + change func(map[string]any) + code string + }{ + {"unknown-approval", func(doc map[string]any) { doc["approved"] = true }, "invalid-document"}, + {"prototype-management-alias", func(doc map[string]any) { doc["managementMode"] = "desk-managed" }, "invalid-document"}, + {"missing-sections", func(doc map[string]any) { delete(doc, "sections") }, "invalid-document"}, + {"wrong-kind", func(doc map[string]any) { doc["kind"] = "governing-adoption" }, "invalid-document"}, + {"section-bound", func(doc map[string]any) { doc["sections"] = make([]any, 65) }, "input-over-bound"}, + } { + t.Run(tc.name, func(t *testing.T) { + f := candidateFixture(t, "refunds") + tc.change(f.policy) + f.retainPolicy(t) + r, exit := Check("check", mustJSON(t, f.adoption), f.wire(t), engine(t)) + if exit == 0 || r.CandidateResult == nil || r.CandidateResult.Code != tc.code { + t.Fatalf("retained Policy grammar bypassed %+v %d", r.CandidateResult, exit) + } + }) + } +} diff --git a/internal/policy/candidate_uri.go b/internal/policy/candidate_uri.go new file mode 100644 index 0000000..4552cf0 --- /dev/null +++ b/internal/policy/candidate_uri.go @@ -0,0 +1,135 @@ +package policy + +import ( + "errors" + "net/netip" + "strings" +) + +// Candidate URI assertions follow the components in RFC 3986 Appendix A, +// https://www.rfc-editor.org/rfc/rfc3986#appendix-A. This is generic URI syntax, +// with no scheme-specific network, DNS, port-range or publication semantics. +// Core/prototype schemas retain their existing URI predicate. +func validateCandidateURI(value any) error { + uri, ok := value.(string) + if !ok { + return nil + } + if !candidateURI(uri) { + return errors.New("URI does not satisfy the candidate URI format assertion") + } + return nil +} + +func candidateURI(uri string) bool { + scheme, rest, found := strings.Cut(uri, ":") + if !found || scheme == "" || !uriAlpha(scheme[0]) { + return false + } + for i := 1; i < len(scheme); i++ { + if !uriAlpha(scheme[i]) && !uriDigit(scheme[i]) && !strings.ContainsRune("+.-", rune(scheme[i])) { + return false + } + } + // Query and fragment allow pchar, slash and question mark. A second raw + // fragment delimiter is consequently refused by the component grammar. + if body, fragment, found := strings.Cut(rest, "#"); found { + if !uriComponent(fragment, ":@/?", true) { + return false + } + rest = body + } + if body, query, found := strings.Cut(rest, "?"); found { + if !uriComponent(query, ":@/?", true) { + return false + } + rest = body + } + if strings.HasPrefix(rest, "//") { + authority, path, found := strings.Cut(rest[2:], "/") + if !uriAuthority(authority) { + return false + } + if !found { + return true + } + return uriComponent(path, ":@/", true) + } + // Without an authority, a leading double slash is unavailable. The three + // remaining path alternatives are absolute, rootless and empty; each uses + // the same pchar/segment grammar once authority selection is settled. + return uriComponent(rest, ":@/", true) +} + +func uriAuthority(authority string) bool { + if userinfo, host, found := strings.Cut(authority, "@"); found { + if !uriComponent(userinfo, ":", true) { + return false + } + authority = host + } + if strings.HasPrefix(authority, "[") { + literal, suffix, found := strings.Cut(authority[1:], "]") + if !found || !uriIPLiteral(literal) { + return false + } + return suffix == "" || strings.HasPrefix(suffix, ":") && uriPort(suffix[1:]) + } + host, port, found := strings.Cut(authority, ":") + // reg-name includes the textual IPv4 alternative and permits percent + // escapes in host names. It is not restricted to DNS label syntax. + if !uriComponent(host, "", true) { + return false + } + return !found || uriPort(port) +} + +func uriPort(port string) bool { + for i := range port { + if !uriDigit(port[i]) { + return false + } + } + return true +} + +func uriIPLiteral(literal string) bool { + if strings.HasPrefix(literal, "v") || strings.HasPrefix(literal, "V") { + version, address, found := strings.Cut(literal[1:], ".") + if !found || version == "" || address == "" { + return false + } + for i := range version { + if !uriHex(version[i]) { + return false + } + } + return uriComponent(address, ":", false) + } + // Scoped addresses are a later extension, outside the candidate's exact + // RFC 3986 assertion; a plain IPv4 address cannot occupy IP-literal. + address, err := netip.ParseAddr(literal) + return err == nil && address.Is6() && address.Zone() == "" +} + +func uriComponent(value, extra string, escapes bool) bool { + allowed := "-._~!$&'()*+,;=" + extra + for i := 0; i < len(value); i++ { + c := value[i] + if escapes && c == '%' { + if i+2 >= len(value) || !uriHex(value[i+1]) || !uriHex(value[i+2]) { + return false + } + i += 2 + continue + } + if !uriAlpha(c) && !uriDigit(c) && !strings.ContainsRune(allowed, rune(c)) { + return false + } + } + return true +} + +func uriAlpha(c byte) bool { return c >= 'A' && c <= 'Z' || c >= 'a' && c <= 'z' } +func uriDigit(c byte) bool { return c >= '0' && c <= '9' } +func uriHex(c byte) bool { return uriDigit(c) || c >= 'A' && c <= 'F' || c >= 'a' && c <= 'f' } diff --git a/internal/policy/check.go b/internal/policy/check.go index 5e92eea..bd99612 100644 --- a/internal/policy/check.go +++ b/internal/policy/check.go @@ -11,50 +11,94 @@ import ( "github.com/Judgment-Pack/judgment-pack-runtime/internal/jpscanon" "github.com/Judgment-Pack/judgment-pack-runtime/internal/result" "github.com/Judgment-Pack/judgment-pack-runtime/internal/validation" + "github.com/santhosh-tekuri/jsonschema/v6" ) // Check operates only on supplied bytes. The private carrier accepts no paths, // URLs or acquisition instructions. A successful check grants no authority. func Check(command string, data, materialsJSON []byte, engine *validation.Engine) (Report, int) { - r, doc, code := validateDocument(command, data) + return CheckFormat(command, data, materialsJSON, engine, "") +} + +func CheckFormat(command string, data, materialsJSON []byte, engine *validation.Engine, format string) (Report, int) { + r, doc, code := parseFormat(command, data, format) if code != 0 { - return r, code + return finishCandidateCheck(r, code) } - materials, err, code := decodeMaterials(materialsJSON) - if err != nil { - return refused(r, err.code, err.path, err.message, code) + candidateMode := r.FormatVersion == CandidateVersion + if !candidateMode { + r, doc, code = validateDocumentFormat(command, data, ProfileVersion) + if code != 0 { + return r, code + } } - if doc["kind"] == "policy" { - err, code = checkPolicy(doc, materials, "") - } else { - err, code = checkAdoption(doc, materials, engine) + return checkMaterials(r, doc, func() (materialSet, *issue, int) { return decodeMaterialsFormat(materialsJSON, candidateMode) }, engine) +} + +func checkMaterials(r Report, doc map[string]any, load func() (materialSet, *issue, int), engine *validation.Engine) (Report, int) { + candidateMode := r.FormatVersion == CandidateVersion + materials, err, code := load() + if err == nil && candidateMode && r.Kind != "policy" { + err, code = candidateSchema(r.Kind, doc) + } + if err == nil { + if doc["kind"] == "policy" { + err, code = checkPolicy(doc, materials, "", candidateMode) + } else { + err, code = checkAdoption(doc, materials, engine, candidateMode) + } } if err != nil { - return refused(r, err.code, err.path, err.message, code) + if candidateMode && code != result.ExitIO { + r, code = candidateRefused(r, candidateCode(err, code)) + } else { + r, code = refused(r, err.code, err.path, err.message, code) + } + return finishCandidateCheck(r, code) } - r.Status = "references-valid" - r.ValidationScope = r.Capabilities.CheckScope - return r, result.ExitSuccess + r.Status, r.ValidationScope, r.Document = "references-valid", r.Capabilities.CheckScope, "" + return finishCandidateCheck(r, result.ExitSuccess) } -func checkPolicy(doc map[string]any, materials materialSet, base string) (*issue, int) { +func checkPolicy(doc map[string]any, materials materialSet, base string, candidateMode bool) (*issue, int) { + if candidateMode { + if err, code := candidateSchema("policy", doc); err != nil { + return err, code + } + } reference := object(doc["content"]) - if reference["mediaType"] != "text/plain" { + if !candidateMode && reference["mediaType"] != "text/plain" { return problem("JPS-POLICY-NARRATIVE-MEDIA", base+"/content/mediaType", "Policy narrative must be retained as text/plain."), result.ExitInvalid } narrative, err, code := materials.resolve(reference, MaxMaterialBytes, base+"/content") if err != nil { return err, code } + if reference["mediaType"] != "text/plain" { + return candidateIssue("invalid-document"), result.ExitInvalid + } if !utf8.Valid(narrative) { return problem("JPS-POLICY-NARRATIVE-UTF8", base+"/content", "Retained policy narrative must contain valid UTF-8 bytes."), result.ExitInvalid } + var sources map[string]map[string]any + if candidateMode { + var err *issue + sources, err = unique(array(doc["sourceProvenance"]), base+"/sourceProvenance", "source") + if err != nil { + return candidateIssue("invalid-document"), result.ExitInvalid + } + } for i, item := range array(doc["sourceProvenance"]) { _, err, code := materials.resolve(object(object(item)["content"]), MaxOriginalBytes, indexPath(base+"/sourceProvenance", i)+"/content") if err != nil { return err, code } } + if candidateMode { + if _, err := unique(array(doc["sections"]), base+"/sections", "section"); err != nil { + return candidateIssue("invalid-anchor"), result.ExitInvalid + } + } for i, item := range array(doc["sections"]) { section := object(item) anchor := object(section["anchor"]) @@ -69,11 +113,18 @@ func checkPolicy(doc map[string]any, materials materialSet, base string) (*issue if digest(narrative[start:end]) != anchor["bytesDigest"] { return problem("JPS-POLICY-ANCHOR-DIGEST", path+"/bytesDigest", "The exact retained section bytes do not match the anchor digest."), result.ExitInvalid } + if candidateMode { + for _, source := range array(section["sourceRefs"]) { + if _, found := sources[text(object(source)["sourceId"])]; !found { + return candidateIssue("invalid-anchor"), result.ExitInvalid + } + } + } } return nil, result.ExitSuccess } -func checkArtifact(reference map[string]any, kindName string, materials materialSet, path string) (map[string]any, []byte, *issue, int) { +func checkArtifact(reference map[string]any, kindName string, materials materialSet, path string, candidateMode bool) (map[string]any, []byte, *issue, int) { if reference["kind"] != kindName { return nil, nil, problem("JPS-POLICY-ARTIFACT-KIND", path+"/kind", "Retained artifact kind does not match its consuming role."), result.ExitUnsupported } @@ -81,7 +132,7 @@ func checkArtifact(reference map[string]any, kindName string, materials material if content["mediaType"] != "application/json" { return nil, nil, problem("JPS-POLICY-ARTIFACT-MEDIA", path+"/content/mediaType", "Retained artifact documents must use application/json."), result.ExitInvalid } - raw, err, code := materials.resolve(content, MaxMaterialBytes, path+"/content") + raw, err, code := materials.resolve(content, artifactLimit(candidateMode), path+"/content") if err != nil { return nil, nil, err, code } @@ -90,7 +141,17 @@ func checkArtifact(reference map[string]any, kindName string, materials material } var doc map[string]any if kindName == "pack" { - value, failure := carrier.Decode(raw, limits()) + var value any + var failure *carrier.Failure + if candidateMode { + var c string + value, c = candidateJSON(raw) + if c != "" { + return nil, nil, candidateIssue(c), candidateExit(c) + } + } else { + value, failure = carrier.Decode(raw, limits()) + } if failure != nil { code := result.ExitInvalid if failure.Resource { @@ -100,14 +161,29 @@ func checkArtifact(reference map[string]any, kindName string, materials material } doc = object(value) if doc == nil { + if candidateMode { + return nil, nil, candidateIssue("invalid-consumer"), result.ExitInvalid + } return nil, nil, problem("JPS-POLICY-CONSUMER-JSON", path+"/content", "The retained consumer must be a JSON object."), result.ExitInvalid } - if err := coreNumberBounds(value, nil); err != nil { - return nil, nil, prefixed(err, path), result.ExitUnsupported + if !candidateMode { + if err := coreNumberBounds(value, nil); err != nil { + return nil, nil, prefixed(err, path), result.ExitUnsupported + } } } else { - r, parsed, c := validateDocument("retained-policy", raw) + var r Report + var parsed map[string]any + var c int + if candidateMode { + r, parsed, c = parseFormat("retained-policy", raw, CandidateVersion) + } else { + r, parsed, c = validateDocumentFormat("retained-policy", raw, ProfileVersion) + } if c != 0 { + if candidateMode { + return nil, nil, candidateIssue(r.refusalCode), c + } d := r.Diagnostics[0] return nil, nil, problem(d.Code, path+"/content", "Retained Policy does not satisfy the supported closed prototype document and local-reference checks."), c } @@ -167,15 +243,22 @@ func coreNumberBounds(value any, path []string) *issue { return nil } -func checkAdoption(doc map[string]any, materials materialSet, engine *validation.Engine) (*issue, int) { - consumer, raw, err, code := checkArtifact(object(doc["consumer"]), "pack", materials, "/consumer") +func checkAdoption(doc map[string]any, materials materialSet, engine *validation.Engine, candidateMode bool) (*issue, int) { + consumer, raw, err, code := checkArtifact(object(doc["consumer"]), "pack", materials, "/consumer", candidateMode) if err != nil { return err, code } + if candidateMode && consumer["specVersion"] != "0.2.0-draft" { + return candidateIssue("invalid-consumer"), result.ExitInvalid + } if engine == nil { return problem("JPS-POLICY-ENGINE", "/consumer", "A bundled Core structural validation engine is required."), result.ExitIO } - checked, failure := engine.Validate(raw, validation.Options{Through: "structural", Limits: limits()}) + options := validation.Options{Through: "structural", Limits: limits()} + if candidateMode { + options.FormatOverrides = []*jsonschema.Format{candidateURIFormat()} + } + checked, failure := engine.Validate(raw, options) if failure != nil { return problem("JPS-POLICY-CONSUMER-BOUND", "/consumer", "Core structural validation could not complete within supported input bounds."), failure.ExitCode } @@ -188,14 +271,23 @@ func checkAdoption(doc map[string]any, materials materialSet, engine *validation } rules, err := unique(array(consumer["rules"]), "/consumer/rules", "consumer rule") if err != nil { + if candidateMode { + return candidateIssue("invalid-consumer"), result.ExitInvalid + } return err, result.ExitInvalid } exceptions, err := unique(array(consumer["exceptions"]), "/consumer/exceptions", "consumer exception") if err != nil { + if candidateMode { + return candidateIssue("invalid-consumer"), result.ExitInvalid + } return err, result.ExitInvalid } outcomes, err := unique(array(consumer["outcomes"]), "/consumer/outcomes", "consumer outcome") if err != nil { + if candidateMode { + return candidateIssue("invalid-consumer"), result.ExitInvalid + } return err, result.ExitInvalid } if fallback, present := consumer["fallbackOutcome"]; present { @@ -217,16 +309,24 @@ func checkAdoption(doc map[string]any, materials materialSet, engine *validation } } } + policies := map[string]bool{} for i, item := range array(doc["governingPolicies"]) { governing := object(item) base := indexPath("/governingPolicies", i) - policy, _, err, code := checkArtifact(object(governing["policy"]), "policy", materials, base+"/policy") + policy, _, err, code := checkArtifact(object(governing["policy"]), "policy", materials, base+"/policy", candidateMode) if err != nil { return err, code } - if err, code := checkPolicy(policy, materials, base+"/policy"); err != nil { + if err, code := checkPolicy(policy, materials, base+"/policy", candidateMode); err != nil { return err, code } + if candidateMode { + id := text(object(governing["policy"])["id"]) + if policies[id] { + return candidateIssue("invalid-coverage"), result.ExitInvalid + } + policies[id] = true + } sections, err := unique(array(policy["sections"]), base+"/policy/sections", "section") if err != nil { return err, result.ExitInvalid @@ -254,16 +354,22 @@ func checkAdoption(doc map[string]any, materials materialSet, engine *validation row := object(item) path := indexPath(base+"/coverage", j) id := text(row["sectionId"]) - if !selected[id] { + if !selected[id] || candidateMode && covered[id] { return problem("JPS-POLICY-COVERAGE-SCOPE", path+"/sectionId", "Coverage names a section outside the exact selected policy scope."), result.ExitInvalid } covered[id] = true if row["status"] != "implemented" { continue } + elements := map[string]bool{} for k, item := range array(row["consumerElements"]) { element := object(item) elementPath := indexPath(path+"/consumerElements", k) + key := text(element["kind"]) + ":" + text(element["id"]) + if candidateMode && elements[key] { + return candidateIssue("invalid-coverage"), result.ExitInvalid + } + elements[key] = true found := false switch element["kind"] { case "rule": diff --git a/internal/policy/document.go b/internal/policy/document.go index b9af83b..298a39a 100644 --- a/internal/policy/document.go +++ b/internal/policy/document.go @@ -1,5 +1,5 @@ // Package policy supplies bounded offline tools for the explicitly non-normative -// RFC 0023 prototype. It is not a policy authority or an evaluator. +// RFC 0023 prototype and proposed-draft candidate. It is not a policy authority or an evaluator. package policy import ( @@ -7,6 +7,7 @@ import ( "encoding/hex" "encoding/json" "strings" + "unicode/utf8" "github.com/Judgment-Pack/judgment-pack-runtime/internal/artifactversion" "github.com/Judgment-Pack/judgment-pack-runtime/internal/carrier" @@ -33,6 +34,11 @@ const ( ) type Report struct { + FormatVersion string `json:"formatVersion,omitempty"` + CandidateCapabilities json.RawMessage `json:"candidateCapabilities,omitempty"` + CandidateResult *CandidateResult `json:"candidateResult,omitempty"` + refusalCode string + OutputVersion string `json:"outputVersion"` Tool result.Tool `json:"tool"` Command string `json:"command"` @@ -121,7 +127,7 @@ func limits() carrier.Limits { return carrier.Limits{MaxDepth: MaxDepth, MaxNodes: MaxDocumentBytes, MaxStringBytes: MaxDocumentBytes} } -func parse(command string, data []byte) (Report, map[string]any, int) { +func parsePrototype(command string, data []byte) (Report, map[string]any, int) { r := report(command) if len(data) > MaxDocumentBytes { r, c := refused(r, "JPS-POLICY-DOCUMENT-BOUND", "", "Input exceeds this prototype's parsed-document byte support bound.", result.ExitUnsupported) @@ -175,7 +181,7 @@ func parse(command string, data []byte) (Report, map[string]any, int) { // Canonicalize checks strict JSON, the existing canon domain and exact selectors. // Encoded is deliberately distinct from document-valid and references-valid. func Canonicalize(command string, data []byte) (Report, int) { - r, _, code := parse(command, data) + r, _, code := parseFormat(command, data, "") return r, code } func Digest(command string, data []byte) (Report, int) { @@ -188,23 +194,34 @@ func Digest(command string, data []byte) (Report, int) { // placeholders, and the caller must supply its own narrative/pack/policy bytes. func Init(command, kind, profileVersion, id, version string) (Report, int) { r := report(command) + if profileVersion == CandidateVersion { + r = candidateReport(command) + } if code, path, message := selector(kind, profileVersion); code != 0 { return refused(r, "JPS-POLICY-SELECTOR", path, message, code) } if !artifactversion.Valid(version) { return refused(r, "JPS-POLICY-ARTIFACT-VERSION", "/version", "Provide an exact three-component artifact version within the reported byte bound.", result.ExitInvalid) } - if len(id) > 2048 || !validURI(id) { + if (profileVersion == ProfileVersion && len(id) > 2048 || profileVersion == CandidateVersion && utf8.RuneCountInString(id) > 2048) || !validURIFormat(id, profileVersion) { return refused(r, "JPS-POLICY-ID", "/id", "Provide an absolute RFC 3986 URI within the prototype identity bound.", result.ExitInvalid) } content := func(media string) map[string]any { return map[string]any{"bytesDigest": "sha256:" + strings.Repeat("0", 64), "byteLength": 1, "mediaType": media} } proto := map[string]any{"profile": Profile, "proposalVersion": ProfileVersion, "status": "non-normative"} - doc := map[string]any{"prototype": proto, "kind": kind, "id": id, "version": version} + doc := map[string]any{"kind": kind, "id": id, "version": version} + if profileVersion == CandidateVersion { + doc["formatVersion"] = CandidateVersion + } else { + doc["prototype"] = proto + } if kind == "policy" { doc["title"] = "Replace with a policy title" doc["managementMode"] = "desk-managed" + if profileVersion == CandidateVersion { + doc["managementMode"] = "workspace-managed" + } doc["content"] = content("text/plain") doc["sourceProvenance"] = []any{} doc["sections"] = []any{map[string]any{"id": "replace-section", "title": "Replace with a section title", "anchor": map[string]any{"startByte": 0, "endByte": 1, "bytesDigest": "sha256:" + strings.Repeat("0", 64)}}} @@ -229,7 +246,7 @@ func Init(command, kind, profileVersion, id, version string) (Report, int) { } func selector(kind, version string) (int, string, string) { - if version != ProfileVersion { + if version != ProfileVersion && version != CandidateVersion { return result.ExitUnsupported, "/profileVersion", "The exact supported prototype version is 0.0.2." } if kind != "policy" && kind != "governing-adoption" { diff --git a/internal/policy/format.go b/internal/policy/format.go new file mode 100644 index 0000000..bdb3fa1 --- /dev/null +++ b/internal/policy/format.go @@ -0,0 +1,298 @@ +package policy + +import ( + "strings" + "unicode/utf8" + + "github.com/Judgment-Pack/judgment-pack-runtime/internal/artifactversion" + "github.com/Judgment-Pack/judgment-pack-runtime/internal/carrier" + "github.com/Judgment-Pack/judgment-pack-runtime/internal/jpscanon" + "github.com/Judgment-Pack/judgment-pack-runtime/internal/result" +) + +const CandidateVersion = "1.0.0" +const CandidateRevision = "0852c5fa7726e51b36e574a5b110e7f5e012e03d" +const CandidateURL = "https://github.com/Judgment-Pack/judgment-pack-spec/blob/" + CandidateRevision + "/rfcs/policy-companion-contract/README.md" + +type formatDescriptor struct { + version, profile, maturity, revision, url, directory, commonURI string +} + +var prototypeFormat = formatDescriptor{ProfileVersion, Profile, "non-normative", SpecRevision, SpecURL, "prototype", commonID} +var candidateFormat = formatDescriptor{CandidateVersion, "jps-policy-companion", "proposed-draft", CandidateRevision, CandidateURL, "candidate", candidateCommonID} + +// CandidateResult is the complete portable full-check result. It is absent from +// legacy reports and from encoding/local validation, which have narrower scopes. +type CandidateResult struct { + Status string `json:"status"` + Code string `json:"code,omitempty"` + FormatVersion string `json:"formatVersion,omitempty"` + Maturity string `json:"maturity,omitempty"` +} + +// Registry is an explicitly requested discovery surface, separate from the +// unchanged no-argument prototype contract consumed by strict older clients. +type Registry struct { + OutputVersion string `json:"outputVersion"` + Tool result.Tool `json:"tool"` + Command string `json:"command"` + RegistryVersion string `json:"registryVersion"` + Status string `json:"status"` + Formats []Report `json:"formats"` +} + +func AllFormats(command string) Registry { + legacy := Contract(command) + candidate := candidateReport(command) + candidate.Status = "available" + return Registry{result.OutputVersion, result.CurrentTool(), command, "1", "available", []Report{legacy, candidate}} +} + +func ContractFormat(command, version string) (Report, int) { + if version == ProfileVersion { + return Contract(command), 0 + } + r := candidateReport(command) + if !artifactversion.Valid(version) { + return candidateRefused(r, "invalid-selector") + } + if version != CandidateVersion { + return candidateRefused(r, "unsupported-format") + } + r.Status = "available" + return r, 0 +} + +func candidateReport(command string) Report { + r := report(command) + f := candidateFormat + r.Specification, r.SpecRevision = f.url, f.revision + r.Maturity, r.Profile, r.ProfileVersion = f.maturity, f.profile, f.version + r.FormatVersion = f.version + r.Capabilities.ProfileVersions = []string{f.version} + r.Capabilities.Maturity = f.maturity + r.Capabilities.ValidationScope = "closed-candidate-document-and-local-references" + r.Capabilities.CheckScope = "candidate-supplied-exact-bytes-anchors-and-scoped-core-references" + r.CandidateCapabilities, _ = candidate.ReadFile("candidate/capabilities.json") + return r +} + +func candidateRefused(r Report, code string) (Report, int) { + r.refusalCode = code + exit := result.ExitInvalid + if code == "input-over-bound" || code == "unsupported-format" || code == "unsupported-canonical-identity" { + exit = result.ExitUnsupported + } + return refused(r, "JPS-POLICY-CANDIDATE-"+strings.ToUpper(code), "", "Proposed-draft candidate check refused: "+code+".", exit) +} + +// Only a strict object carrying the new selector opts into automatic candidate +// dispatch. Explicit operation format selection also covers malformed/missing +// selector inputs; legacy malformed-input reports remain byte-compatible. +func inputFormat(data []byte) string { + if len(data) <= MaxDocumentBytes { + value, failure := carrier.Decode(data, limits()) + if failure == nil { + if _, named := object(value)["formatVersion"]; named { + return CandidateVersion + } + } + } + return ProfileVersion +} + +func parseFormat(command string, data []byte, format string) (Report, map[string]any, int) { + if format == "" { + format = inputFormat(data) + } + if format == ProfileVersion { + return parsePrototype(command, data) + } + r := candidateReport(command) + refuse := func(code string) (Report, map[string]any, int) { rr, c := candidateRefused(r, code); return rr, nil, c } + if !artifactversion.Valid(format) { + return refuse("invalid-selector") + } + if format != CandidateVersion { + return refuse("unsupported-format") + } + value, code := candidateJSON(data) + if code != "" { + return refuse(code) + } + doc := object(value) + if code := candidateSelector(doc); code != "" { + return refuse(code) + } + var out strings.Builder + if _, ok := jpscanon.Write(&out, value, nil); !ok { + return refuse("invalid-document") + } + kind := text(doc["kind"]) + if kind == "policy" || kind == "governing-adoption" { + r.Kind = kind + } + r.ArtifactID, r.ArtifactVersion = text(doc["id"]), text(doc["version"]) + if utf8.RuneCountInString(r.ArtifactID) > 2048 { + r.ArtifactID = "" + } + if len(r.ArtifactVersion) > artifactversion.MaxVersionBytes { + r.ArtifactVersion = "" + } + r.Document, r.BytesDigest, r.CanonicalDigest = out.String(), digest(data), digest([]byte(out.String())) + return r, doc, 0 +} + +func candidateSelector(doc map[string]any) string { + version, ok := doc["formatVersion"].(string) + if !ok || !artifactversion.Valid(version) { + return "invalid-selector" + } + if version != CandidateVersion { + return "unsupported-format" + } + return "" +} + +// Measure physical bounds before parsing even malformed JSON. Maximal number +// character runs outside strings deliberately match the pinned reader's phase. +func measureCandidate(data []byte, maxBytes, maxDepth int) bool { + if len(data) > maxBytes { + return false + } + depth, inString, escaped := 0, false, false + for i := 0; i < len(data); i++ { + b := data[i] + if inString { + if escaped { + escaped = false + } else if b == '\\' { + escaped = true + } else if b == '"' { + inString = false + } + continue + } + switch b { + case '"': + inString = true + case '[', '{': + depth++ + if depth > maxDepth { + return false + } + case ']', '}': + depth-- + default: + if !numberCharacter(b) { + continue + } + end := i + 1 + for end < len(data) && numberCharacter(data[end]) { + end++ + } + literal := data[i:end] + if len(literal) > 128 { + return false + } + if e := strings.IndexAny(string(literal), "eE"); e >= 0 { + j := e + 1 + if j < len(literal) && (literal[j] == '+' || literal[j] == '-') { + j++ + } + start := j + for j < len(literal) && literal[j] >= '0' && literal[j] <= '9' { + j++ + } + exponent := strings.TrimLeft(string(literal[start:j]), "0") + if len(exponent) > 3 || len(exponent) == 3 && exponent > "308" { + return false + } + } + i = end - 1 + } + } + return true +} + +func numberCharacter(b byte) bool { + return b >= '0' && b <= '9' || b == '+' || b == '-' || b == '.' || b == 'e' || b == 'E' +} + +func candidateJSON(data []byte) (any, string) { + if !measureCandidate(data, MaxDocumentBytes, MaxDepth) { + return nil, "input-over-bound" + } + value, failure := carrier.Decode(data, limits()) + if failure != nil { + if failure.Resource { + return nil, "input-over-bound" + } + return nil, "invalid-json" + } + return value, "" +} + +func CanonicalizeFormat(command string, data []byte, format string) (Report, int) { + r, _, code := parseFormat(command, data, format) + return r, code +} +func DigestFormat(command string, data []byte, format string) (Report, int) { + r, code := CanonicalizeFormat(command, data, format) + r.Document = "" + return r, code +} + +func candidateIssue(code string) *issue { + return &issue{code: "JPS-POLICY-CANDIDATE-" + strings.ToUpper(code), message: "Proposed-draft candidate check refused: " + code + ".", candidateCode: code} +} + +func candidateCode(err *issue, exit int) string { + if err.candidateCode != "" { + return err.candidateCode + } + if err.code == "JPS-POLICY-CANONICAL-DOMAIN" { + return "unsupported-canonical-identity" + } + if exit == result.ExitUnsupported { + return "input-over-bound" + } + switch err.code { + case "JPS-POLICY-MATERIAL-MISSING": + return "missing-material" + case "JPS-POLICY-NARRATIVE-MEDIA", "JPS-POLICY-ARTIFACT-MEDIA": + return "invalid-document" + case "JPS-POLICY-NARRATIVE-UTF8", "JPS-POLICY-ANCHOR-RANGE", "JPS-POLICY-ANCHOR-UTF8", "JPS-POLICY-ANCHOR-DIGEST", "JPS-POLICY-SOURCE-REFERENCE": + return "invalid-anchor" + case "JPS-POLICY-ELEMENT-REFERENCE", "JPS-POLICY-COVERAGE-SCOPE", "JPS-POLICY-COVERAGE-MISSING", "JPS-POLICY-DUPLICATE-POLICY", "JPS-POLICY-DUPLICATE-COVERAGE", "JPS-POLICY-DUPLICATE-ELEMENT", "JPS-POLICY-SCOPE-REFERENCE": + return "invalid-coverage" + case "JPS-POLICY-CONSUMER-STRUCTURE", "JPS-POLICY-FALLBACK-REFERENCE", "JPS-POLICY-EXCEPTION-REFERENCE": + return "invalid-consumer" + } + return "reference-mismatch" +} + +func finishCandidateCheck(r Report, code int) (Report, int) { + if r.FormatVersion == "" { + return r, code + } + if code == 0 { + r.CandidateResult = &CandidateResult{Status: "valid", FormatVersion: CandidateVersion, Maturity: "proposed-draft"} + } else if r.refusalCode != "" { + r.CandidateResult = &CandidateResult{Status: "refused", Code: r.refusalCode} + } + return r, code +} + +func artifactLimit(candidateMode bool) int { + if candidateMode { + return MaxDocumentBytes + } + return MaxMaterialBytes +} +func candidateExit(code string) int { + if code == "input-over-bound" || code == "unsupported-format" || code == "unsupported-canonical-identity" { + return result.ExitUnsupported + } + return result.ExitInvalid +} diff --git a/internal/policy/materials.go b/internal/policy/materials.go index e2074e8..00c1490 100644 --- a/internal/policy/materials.go +++ b/internal/policy/materials.go @@ -19,63 +19,88 @@ type retained struct { type materialSet map[string]*retained func decodeMaterials(data []byte) (materialSet, *issue, int) { + return decodeMaterialsFormat(data, false) +} + +func decodeMaterialsFormat(data []byte, candidateMode bool) (materialSet, *issue, int) { if len(data) > MaxMaterialsWireBytes { return nil, problem("JPS-POLICY-MATERIALS-BOUND", "/materials", "The private Runtime materials JSON exceeds its transport byte support bound."), result.ExitUnsupported } + if candidateMode && !measureCandidate(data, MaxMaterialsWireBytes, MaxDepth) { + return nil, candidateIssue("input-over-bound"), result.ExitUnsupported + } value, failure := carrier.Decode(data, carrier.Limits{MaxDepth: 8, MaxNodes: 1024, MaxStringBytes: base64.StdEncoding.EncodedLen(MaxOriginalBytes)}) if failure != nil { code := result.ExitInvalid if failure.Resource { code = result.ExitUnsupported } + if candidateMode { + if failure.Resource { + return nil, candidateIssue("input-over-bound"), code + } + return nil, candidateIssue("invalid-carrier"), code + } return nil, problem(failure.Diagnostic.Code, "/materials", "Retained-material JSON is malformed or exceeds its support bounds."), code } root := object(value) entries := array(root["materials"]) + if candidateMode { + if root == nil || len(root) != 1 { + return nil, candidateIssue("invalid-carrier"), result.ExitInvalid + } + if _, ok := root["materials"].([]any); !ok { + return nil, candidateIssue("invalid-carrier"), result.ExitInvalid + } + } if len(entries) > MaxMaterials { return nil, problem("JPS-POLICY-MATERIAL-COUNT", "/materials", "The private Runtime carrier supports at most 16 material registrations."), result.ExitUnsupported } // The schema library converts number tokens to arbitrary-precision values. // Refuse unsupported literals throughout this closed carrier first, including // numbers in unknown or wrong-typed members that schema validation will reject. - if failure, code := preflightMaterialNumbers(value, nil); failure != nil { - return nil, failure, code - } - compiled, err := loadSchemas() - if err != nil { - return nil, problem("JPS-POLICY-ARTIFACT", "", "Pinned prototype schemas could not be compiled."), result.ExitIO - } - if err := compiled["materials"].Validate(value); err != nil { - if schemaBound(err) { - return nil, problem("JPS-POLICY-MATERIALS-BOUND", "/materials", "Retained material exceeds the private Runtime carrier support bounds."), result.ExitUnsupported + if !candidateMode { + if failure, code := preflightMaterialNumbers(value, nil); failure != nil { + return nil, failure, code + } + compiled, err := loadSchemas() + if err != nil { + return nil, problem("JPS-POLICY-ARTIFACT", "", "Pinned prototype schemas could not be compiled."), result.ExitIO + } + if err := compiled["materials"].Validate(value); err != nil { + if schemaBound(err) { + return nil, problem("JPS-POLICY-MATERIALS-BOUND", "/materials", "Retained material exceeds the private Runtime carrier support bounds."), result.ExitUnsupported + } + return nil, problem("JPS-POLICY-MATERIALS-SCHEMA", "/materials", "Provide only materials entries containing a retained content reference and a standard padded dataBase64 string."), result.ExitInvalid } - return nil, problem("JPS-POLICY-MATERIALS-SCHEMA", "/materials", "Provide only materials entries containing a retained content reference and a standard padded dataBase64 string."), result.ExitInvalid } // Complete shape, type and encoded-length checks precede any base64 decoding. distinct := map[string]bool{} total := 0 - for i, item := range entries { - entry := object(item) - content := object(entry["content"]) - encoded := text(entry["dataBase64"]) - path := indexPath("/materials", i) + "/dataBase64" - declared := number(content["byteLength"]) - n, valid := base64Length(encoded) - if !valid { - return nil, problem("JPS-POLICY-BASE64", path, "Retained material must use strict standard padded base64 without whitespace."), result.ExitInvalid - } - if n > MaxOriginalBytes { - return nil, problem("JPS-POLICY-ORIGINAL-BOUND", path, "Retained material exceeds the original-source byte support bound."), result.ExitUnsupported - } - if n != declared { - return nil, problem("JPS-POLICY-BYTE-LENGTH", path, "Decoded retained bytes do not match their declared byte length."), result.ExitInvalid - } - key := text(content["bytesDigest"]) - if !distinct[key] { - distinct[key] = true - total += n - if total > MaxTotalMaterialBytes { - return nil, problem("JPS-POLICY-AGGREGATE-BOUND", "/materials", "Distinct retained material exceeds the aggregate byte support bound."), result.ExitUnsupported + if !candidateMode { + for i, item := range entries { + entry := object(item) + content := object(entry["content"]) + encoded := text(entry["dataBase64"]) + path := indexPath("/materials", i) + "/dataBase64" + declared := number(content["byteLength"]) + n, valid := base64Length(encoded) + if !valid { + return nil, problem("JPS-POLICY-BASE64", path, "Retained material must use strict standard padded base64 without whitespace."), result.ExitInvalid + } + if n > MaxOriginalBytes { + return nil, problem("JPS-POLICY-ORIGINAL-BOUND", path, "Retained material exceeds the original-source byte support bound."), result.ExitUnsupported + } + if n != declared { + return nil, problem("JPS-POLICY-BYTE-LENGTH", path, "Decoded retained bytes do not match their declared byte length."), result.ExitInvalid + } + key := text(content["bytesDigest"]) + if !distinct[key] { + distinct[key] = true + total += n + if total > MaxTotalMaterialBytes { + return nil, problem("JPS-POLICY-AGGREGATE-BOUND", "/materials", "Distinct retained material exceeds the aggregate byte support bound."), result.ExitUnsupported + } } } } @@ -83,10 +108,42 @@ func decodeMaterials(data []byte) (materialSet, *issue, int) { for i, item := range entries { entry := object(item) content := object(entry["content"]) + if candidateMode { + if len(entry) != 2 || object(entry["content"]) == nil { + return nil, candidateIssue("invalid-carrier"), result.ExitInvalid + } + if _, ok := entry["dataBase64"].(string); !ok { + return nil, candidateIssue("invalid-carrier"), result.ExitInvalid + } + + if err, c := candidateSchema("common", content); err != nil { + return nil, err, c + } + encoded := text(entry["dataBase64"]) + n, ok := base64Length(encoded) + if !ok { + return nil, candidateIssue("invalid-carrier"), result.ExitInvalid + } + if n > MaxOriginalBytes { + return nil, candidateIssue("input-over-bound"), result.ExitUnsupported + } + if n != number(content["byteLength"]) { + return nil, candidateIssue("reference-mismatch"), result.ExitInvalid + } + } raw, err := base64.StdEncoding.Strict().DecodeString(text(entry["dataBase64"])) if err != nil { + if candidateMode { + return nil, candidateIssue("invalid-carrier"), result.ExitInvalid + } return nil, problem("JPS-POLICY-BASE64", indexPath("/materials", i)+"/dataBase64", "Retained material is not strict standard padded base64."), result.ExitInvalid } + if candidateMode { + if err, code := registerCandidateMaterial(content, raw, material); err != nil { + return nil, err, code + } + continue + } key := text(content["bytesDigest"]) if digest(raw) != key { return nil, problem("JPS-POLICY-BYTES-DIGEST", indexPath("/materials", i)+"/content/bytesDigest", "Retained bytes do not match their exact SHA-256 reference."), result.ExitInvalid @@ -197,5 +254,37 @@ func prefixed(err *issue, prefix string) *issue { if err == nil { return nil } - return &issue{code: err.code, path: prefix + err.path, message: err.message} + return &issue{code: err.code, path: prefix + err.path, message: err.message, candidateCode: err.candidateCode} +} + +// registerCandidateMaterial is shared by the private wire carrier and the +// portable-vector harness. Checks happen in registration order before mutation. +func registerCandidateMaterial(reference map[string]any, raw []byte, material materialSet) (*issue, int) { + if err, code := candidateSchema("common", reference); err != nil { + return err, code + } + if len(raw) > MaxOriginalBytes { + return candidateIssue("input-over-bound"), result.ExitUnsupported + } + key := text(reference["bytesDigest"]) + existing := material[key] + if existing != nil && !bytes.Equal(existing.raw, raw) || len(raw) != number(reference["byteLength"]) || digest(raw) != key { + return candidateIssue("reference-mismatch"), result.ExitInvalid + } + total := 0 + for _, retained := range material { + total += len(retained.raw) + } + if existing == nil { + total += len(raw) + } + if total > MaxTotalMaterialBytes { + return candidateIssue("input-over-bound"), result.ExitUnsupported + } + if existing == nil { + existing = &retained{raw: raw, mediaTypes: map[string]bool{}} + material[key] = existing + } + existing.mediaTypes[text(reference["mediaType"])] = true + return nil, 0 } diff --git a/internal/policy/references.go b/internal/policy/references.go index 9212ae2..190204c 100644 --- a/internal/policy/references.go +++ b/internal/policy/references.go @@ -6,7 +6,7 @@ import ( "strconv" ) -type issue struct{ code, path, message string } +type issue struct{ code, path, message, candidateCode string } func problem(code, path, message string) *issue { return &issue{code: code, path: path, message: message} diff --git a/internal/policy/schema.go b/internal/policy/schema.go index 710d92d..e0a15a2 100644 --- a/internal/policy/schema.go +++ b/internal/policy/schema.go @@ -59,14 +59,18 @@ func validURI(id string) bool { // resources. Vendored source schemas and their provenance hashes stay unchanged. func Schema(command, kindName, version string) (Report, int) { r := report(command) + if version == CandidateVersion { + r = candidateReport(command) + } if code, path, message := selector(kindName, version); code != 0 { return refused(r, "JPS-POLICY-SELECTOR", path, message, code) } - raw, err := prototype.ReadFile("prototype/" + kindName + ".schema.json") + source, directory, commonURI, revision := schemaSource(version) + raw, err := source.ReadFile(directory + "/" + kindName + ".schema.json") if err != nil { return refused(r, "JPS-POLICY-ARTIFACT", "", "The pinned prototype schema is unavailable.", result.ExitIO) } - common, _ := prototype.ReadFile("prototype/common.schema.json") + common, _ := source.ReadFile(directory + "/common.schema.json") var doc, shared map[string]any if json.Unmarshal(raw, &doc) != nil || json.Unmarshal(common, &shared) != nil { return refused(r, "JPS-POLICY-ARTIFACT", "", "The pinned prototype schema is invalid.", result.ExitIO) @@ -75,16 +79,19 @@ func Schema(command, kindName, version string) (Report, int) { delete(shared, "$schema") delete(shared, "$ref") rewriteRefs(shared, "#/$defs/", "#/$defs/common/$defs/") - rewriteRefs(shared, commonID+"#", "#/$defs/common") - rewriteRefs(doc, commonID+"#", "#/$defs/common") + rewriteRefs(shared, commonURI+"#", "#/$defs/common") + rewriteRefs(doc, commonURI+"#", "#/$defs/common") defs, _ := doc["$defs"].(map[string]any) if defs == nil { defs = map[string]any{} doc["$defs"] = defs } defs["common"] = shared - doc["$id"] = "urn:judgmentpack:runtime:experimental-policy:" + ProfileVersion + ":" + kindName + ":authoring-schema:1" - doc["$comment"] = "Runtime self-contained editing copy of non-normative RFC 0023 prototype at Spec commit " + SpecRevision + ". Use experimental policy validate/check; schema acceptance grants no approval, execution authority or conformance." + doc["$id"] = "urn:judgmentpack:runtime:experimental-policy:" + version + ":" + kindName + ":authoring-schema:1" + doc["$comment"] = "Runtime self-contained editing copy of non-normative RFC 0023 prototype at Spec commit " + revision + ". Use experimental policy validate/check; schema acceptance grants no approval, execution authority or conformance." + if version == CandidateVersion { + doc["$comment"] = "Runtime self-contained editing copy of proposed-draft, unadopted Policy contract candidate at Spec commit " + revision + ". Schema acceptance establishes no authority or conformance." + } text, err := json.MarshalIndent(doc, "", " ") if err != nil { return refused(r, "JPS-POLICY-ARTIFACT", "", "The editing schema could not be assembled.", result.ExitIO) @@ -114,10 +121,29 @@ func rewriteRefs(value any, from, to string) { } func validateDocument(command string, data []byte) (Report, map[string]any, int) { - r, doc, code := parse(command, data) + return validateDocumentFormat(command, data, "") +} +func validateDocumentFormat(command string, data []byte, format string) (Report, map[string]any, int) { + r, doc, code := parseFormat(command, data, format) if code != 0 { return r, nil, code } + if r.FormatVersion == CandidateVersion { + if failure, c := candidateSchema(r.Kind, doc); failure != nil { + if c == result.ExitIO { + rr, code := refused(r, failure.code, failure.path, failure.message, c) + return rr, nil, code + } + rr, code := candidateRefused(r, candidateCode(failure, c)) + return rr, nil, code + } + if failure := localReferences(doc); failure != nil { + rr, code := candidateRefused(r, candidateLocalCode(doc, failure)) + return rr, nil, code + } + r.Status, r.ValidationScope, r.Document = "document-valid", r.Capabilities.ValidationScope, "" + return r, doc, 0 + } if failure := referenceSelectors(doc); failure != nil { r, code := refused(r, failure.code, failure.path, failure.message, result.ExitUnsupported) return r, nil, code @@ -151,6 +177,11 @@ func Validate(command string, data []byte) (Report, int) { return r, code } +func ValidateFormat(command string, data []byte, format string) (Report, int) { + r, _, code := validateDocumentFormat(command, data, format) + return r, code +} + func referenceSelectors(doc map[string]any) *issue { if doc["kind"] != "governing-adoption" { return nil diff --git a/internal/policy/testdata/candidate-uri-cases.json b/internal/policy/testdata/candidate-uri-cases.json new file mode 100644 index 0000000..78e55b0 --- /dev/null +++ b/internal/policy/testdata/candidate-uri-cases.json @@ -0,0 +1,250 @@ +[ + { + "uri": "urn:test:plain", + "valid": true + }, + { + "uri": "https://example.invalid/a", + "valid": true + }, + { + "uri": "https://%65xample.invalid/a", + "valid": true + }, + { + "uri": "foo://[v1.a]/", + "valid": true + }, + { + "uri": "https://[2001:db8::1]/a", + "valid": true + }, + { + "uri": "https://[::1]:443/a", + "valid": true + }, + { + "uri": "https://[::ffff:192.0.2.128]/", + "valid": true + }, + { + "uri": "https://[vF.a:b!$&'()*+,;=]/", + "valid": true + }, + { + "uri": "HTTPS://EXAMPLE.INVALID/a", + "valid": true + }, + { + "uri": "https://user:pass@example.invalid/a", + "valid": true + }, + { + "uri": "https://u%40ser:p%3Ass@example.invalid/a", + "valid": true + }, + { + "uri": "https://example.invalid/a%5Bb%5D", + "valid": true + }, + { + "uri": "urn:test:%5Bx%5D", + "valid": true + }, + { + "uri": "urn:test:%C3%A9", + "valid": true + }, + { + "uri": "https://example.invalid/a?b=%5Bc%5D", + "valid": true + }, + { + "uri": "https://example.invalid/#a%5Bb%5D", + "valid": true + }, + { + "uri": "https://exa!mple.invalid:99999/a", + "valid": true + }, + { + "uri": "https://example.invalid:/", + "valid": true + }, + { + "uri": "file:///tmp/example", + "valid": true + }, + { + "uri": "foo://", + "valid": true + }, + { + "uri": "foo:", + "valid": true + }, + { + "uri": "foo:/", + "valid": true + }, + { + "uri": "foo:a/b:c@d", + "valid": true + }, + { + "uri": "foo://@/", + "valid": true + }, + { + "uri": "https://example.invalid/a?x=/a?b#c/d?e", + "valid": true + }, + { + "uri": "https://example.invalid/..?a=1&b=2#part", + "valid": true + }, + { + "uri": "foo://256.999.0.1/", + "valid": true + }, + { + "uri": "urn:test:[x]", + "valid": false + }, + { + "uri": "https://example.invalid/[x]", + "valid": false + }, + { + "uri": "https://example.invalid/a?b=[c]", + "valid": false + }, + { + "uri": "https://example.invalid/#a[b]", + "valid": false + }, + { + "uri": "urn:test:\u00e9", + "valid": false + }, + { + "uri": "urn:test:foo bar", + "valid": false + }, + { + "uri": "urn:test:%", + "valid": false + }, + { + "uri": "urn:test:%GG", + "valid": false + }, + { + "uri": "https://%6xample.invalid/a", + "valid": false + }, + { + "uri": "/relative/path", + "valid": false + }, + { + "uri": "//example.invalid/path", + "valid": false + }, + { + "uri": "1foo:bar", + "valid": false + }, + { + "uri": "foo_:bar", + "valid": false + }, + { + "uri": "https://[x]/", + "valid": false + }, + { + "uri": "https://[]/", + "valid": false + }, + { + "uri": "https://[::1", + "valid": false + }, + { + "uri": "https://[::1]junk/", + "valid": false + }, + { + "uri": "https://[::1]:port/", + "valid": false + }, + { + "uri": "https://[::1%25eth0]/", + "valid": false + }, + { + "uri": "https://[2001:db8:::1]/", + "valid": false + }, + { + "uri": "https://[1:2:3:4:5:6:7:8:9]/", + "valid": false + }, + { + "uri": "https://[127.0.0.1]/", + "valid": false + }, + { + "uri": "https://[v1.]/", + "valid": false + }, + { + "uri": "https://[vG.a]/", + "valid": false + }, + { + "uri": "https://[v1.a%20b]/", + "valid": false + }, + { + "uri": "https://[VF.x:y]/", + "valid": true + }, + { + "uri": "https://foo@@example.invalid/", + "valid": false + }, + { + "uri": "https://[::1]@example.invalid/", + "valid": false + }, + { + "uri": "https://example.invalid:abc/", + "valid": false + }, + { + "uri": "https://example.invalid:1:2/", + "valid": false + }, + { + "uri": "https://example.invalid/#a#b", + "valid": false + }, + { + "uri": "https://example.invalid/\\path", + "valid": false + }, + { + "uri": "urn:test:foo\r\n", + "valid": false + }, + { + "uri": "urn:test:foo\n", + "valid": false + }, + { + "uri": "https://[::ffff:192.168.001.001]/", + "valid": false + } +] diff --git a/internal/validation/validator.go b/internal/validation/validator.go index 58db97e..a458093 100644 --- a/internal/validation/validator.go +++ b/internal/validation/validator.go @@ -25,6 +25,9 @@ type Options struct { ExpectedSpecVersion string SupportedExtensions []string Limits carrier.Limits + // FormatOverrides is explicit companion-scoped structural validation. The + // same bundled schema and input bytes are used; cached defaults are untouched. + FormatOverrides []*jsonschema.Format } type OperationalFailure struct { @@ -70,9 +73,19 @@ func CompileSchema(schemaBytes []byte, resourceID string) (*jsonschema.Schema, e // CompileSchemas resolves only explicitly supplied schema resources, using the // same URI assertions and ECMAScript expressions as bundled Core validation. func CompileSchemas(resources map[string][]byte, resourceID string) (*jsonschema.Schema, error) { + return CompileSchemasWithFormats(resources, resourceID) +} + +// CompileSchemasWithFormats keeps the offline compiler's existing defaults and +// permits an explicit companion contract to override a named format assertion. +// Overrides never affect other compiled schemas or the bundled Core engine. +func CompileSchemasWithFormats(resources map[string][]byte, resourceID string, formats ...*jsonschema.Format) (*jsonschema.Schema, error) { compiler := jsonschema.NewCompiler() compiler.AssertFormat() compiler.RegisterFormat(&jsonschema.Format{Name: "uri", Validate: validateRFC3986URI}) + for _, format := range formats { + compiler.RegisterFormat(format) + } compiler.UseLoader(offlineSchemaLoader{}) compiler.UseRegexpEngine(ecmaRegexpCompile) for id, data := range resources { @@ -223,7 +236,18 @@ func (e *Engine) Validate(data []byte, options Options) (result.Validation, *Ope Provenance: lock.Source.Kind, } - schemaErr := e.schemas[selectedVersion].Validate(value) + schema := e.schemas[selectedVersion] + if len(options.FormatOverrides) != 0 { + rawSchema, err := set.Schema() + if err == nil { + id := "urn:judgmentpack:jps:" + selectedVersion + ":schema" + schema, err = CompileSchemasWithFormats(map[string][]byte{id: rawSchema}, id, options.FormatOverrides...) + } + if err != nil { + return output, &OperationalFailure{Code: "JPS-SCHEMA-FORMAT-OVERRIDE", Message: "The bundled structural schema could not be compiled with explicit format assertions.", ExitCode: result.ExitIO} + } + } + schemaErr := schema.Validate(value) structuralCollector := newDiagnosticCollector() if schemaErr != nil { var validationError *jsonschema.ValidationError