{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://www.bounder.io/schemas/creedspace-bounder-roundtrip-v1.schema.json",
  "title": "Creed Space to Bounder signed round-trip evidence v1",
  "type": "object",
  "additionalProperties": false,
  "required": [
    "version",
    "generated_at",
    "source_vector_sha256",
    "source_payload_sha256",
    "request",
    "receipt",
    "fleet_audit",
    "audit_public_key"
  ],
  "properties": {
    "version": {
      "const": "creedspace-bounder-roundtrip/v1"
    },
    "generated_at": {
      "$ref": "#/$defs/utcDateTime"
    },
    "source_vector_sha256": {
      "$ref": "#/$defs/sha256"
    },
    "source_payload_sha256": {
      "$ref": "#/$defs/sha256"
    },
    "request": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "action",
        "state",
        "evidence"
      ],
      "properties": {
        "action": {
          "const": "loiter"
        },
        "state": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "gps_fix",
            "battery_percent",
            "altitude_metres",
            "inside_exclusion_zone",
            "civilian_distance_metres",
            "friendly_distance_metres",
            "inside_protected_site",
            "inside_humanitarian_corridor",
            "wind_speed_metres_per_second",
            "visibility_metres",
            "positive_identification",
            "proportionality_satisfied",
            "surrender_observed",
            "incapacitated_observed",
            "human_authorization_confirmed"
          ],
          "properties": {
            "gps_fix": {
              "type": "boolean"
            },
            "battery_percent": {
              "type": "number",
              "minimum": 0,
              "maximum": 100
            },
            "altitude_metres": {
              "type": "number",
              "minimum": 0,
              "maximum": 1000000
            },
            "inside_exclusion_zone": {
              "type": "boolean"
            },
            "civilian_distance_metres": {
              "type": "number",
              "minimum": 0,
              "maximum": 10000000
            },
            "friendly_distance_metres": {
              "type": "number",
              "minimum": 0,
              "maximum": 10000000
            },
            "inside_protected_site": {
              "type": "boolean"
            },
            "inside_humanitarian_corridor": {
              "type": "boolean"
            },
            "wind_speed_metres_per_second": {
              "type": "number",
              "minimum": 0,
              "maximum": 1000
            },
            "visibility_metres": {
              "type": "number",
              "minimum": 0,
              "maximum": 10000000
            },
            "positive_identification": {
              "type": "boolean"
            },
            "proportionality_satisfied": {
              "type": "boolean"
            },
            "surrender_observed": {
              "type": "boolean"
            },
            "incapacitated_observed": {
              "type": "boolean"
            },
            "human_authorization_confirmed": {
              "type": "boolean"
            }
          }
        },
        "evidence": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "mettle_tier",
            "verified_at"
          ],
          "properties": {
            "mettle_tier": {
              "enum": [
                "bronze",
                "silver",
                "gold",
                "platinum"
              ]
            },
            "verified_at": {
              "$ref": "#/$defs/utcDateTime"
            }
          }
        }
      }
    },
    "receipt": {
      "$ref": "#/$defs/receipt"
    },
    "fleet_audit": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "decision",
        "input_hash",
        "policy_version",
        "rationale",
        "dimensions_triggered",
        "certificate",
        "action_type"
      ],
      "properties": {
        "decision": {
          "enum": [
            "allow",
            "block"
          ]
        },
        "input_hash": {
          "type": "string",
          "pattern": "^[0-9a-f]{64}$"
        },
        "policy_version": {
          "type": "string",
          "minLength": 1,
          "maxLength": 320,
          "pattern": "\\S"
        },
        "rationale": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024,
          "pattern": "\\S"
        },
        "dimensions_triggered": {
          "$ref": "#/$defs/receipt"
        },
        "certificate": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "signature",
            "payload",
            "public_key_id"
          ],
          "properties": {
            "signature": {
              "$ref": "#/$defs/signature64"
            },
            "payload": {
              "type": "string",
              "minLength": 1,
              "maxLength": 16384,
              "pattern": "\\S"
            },
            "public_key_id": {
              "type": "string",
              "minLength": 1,
              "maxLength": 128,
              "pattern": "\\S"
            }
          }
        },
        "action_type": {
          "const": "physical_interlock"
        }
      }
    },
    "audit_public_key": {
      "$ref": "#/$defs/publicKey32"
    }
  },
  "$defs": {
    "utcDateTime": {
      "type": "string",
      "maxLength": 64,
      "format": "date-time",
      "pattern": "^(?!0000-)\\d{4}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12]\\d|3[01])T(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d{1,9})?Z$"
    },
    "sha256": {
      "type": "string",
      "pattern": "^sha256:[0-9a-f]{64}$"
    },
    "receipt": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "version",
        "device_id",
        "fleet_id",
        "policy_id",
        "policy_sequence",
        "signing_key_id",
        "action",
        "allowed",
        "code",
        "reason",
        "evaluated_at"
      ],
      "properties": {
        "version": {
          "const": "bounder-creedspace-receipt/v1"
        },
        "device_id": {
          "type": "string",
          "minLength": 1,
          "maxLength": 255,
          "pattern": "\\S"
        },
        "fleet_id": {
          "type": "string",
          "minLength": 1,
          "maxLength": 255,
          "pattern": "\\S"
        },
        "policy_id": {
          "$ref": "#/$defs/sha256"
        },
        "policy_sequence": {
          "type": "integer",
          "minimum": 1,
          "maximum": 9007199254740991
        },
        "signing_key_id": {
          "type": "string",
          "minLength": 1,
          "maxLength": 128,
          "pattern": "\\S"
        },
        "action": {
          "enum": [
            "land",
            "loiter",
            "rtl",
            "intercept"
          ]
        },
        "allowed": {
          "type": "boolean"
        },
        "code": {
          "type": "string",
          "minLength": 1,
          "maxLength": 64,
          "pattern": "^[a-z][a-z0-9_]*$"
        },
        "reason": {
          "type": "string",
          "minLength": 1,
          "maxLength": 1024,
          "pattern": "\\S"
        },
        "evaluated_at": {
          "$ref": "#/$defs/utcDateTime"
        }
      },
      "allOf": [
        {
          "if": {
            "properties": {
              "allowed": {
                "const": true
              }
            },
            "required": [
              "allowed"
            ]
          },
          "then": {
            "properties": {
              "code": {
                "const": "allowed"
              }
            }
          },
          "else": {
            "properties": {
              "code": {
                "not": {
                  "const": "allowed"
                }
              }
            }
          }
        }
      ]
    },
    "signature64": {
      "type": "string",
      "minLength": 88,
      "maxLength": 88,
      "pattern": "^(?:[A-Za-z0-9+/]{4}){21}[A-Za-z0-9+/][AQgw]==$",
      "contentEncoding": "base64"
    },
    "publicKey32": {
      "type": "string",
      "minLength": 44,
      "maxLength": 44,
      "pattern": "^(?:[A-Za-z0-9+/]{4}){10}[A-Za-z0-9+/]{2}[AEIMQUYcgkosw048]=$",
      "contentEncoding": "base64"
    }
  }
}