Component Trace Policy V1

Source schema: doc/schemas/component-trace-policy.v1.schema.json

Bounded effective capture policy for one node process.

Governing Basis

• doc/project/40-proposals/086-component-communication-observation-and-trace-sessions.md

Project Lineage

Fields

Field	Required	Shape	Description
schema	yes	const: component-trace-policy.v1
schema/v	yes	const: 1
policy/ref	yes	ref: #/$defs/ref
policy/digest	yes	ref: #/$defs/digest
policy/generation	yes	integer
profile	yes	enum: production, development, test, acceptance, operator-debug	Runtime posture selecting the disabled baseline or an explicit bounded capture context.
selectors	yes	ref: #/$defs/selectors
capture/interest	yes	enum: none, metadata, digest, redacted, content	Maximum observation detail requested before boundary and secret-policy intersection.
capture/content	yes	enum: none, inline, artifact
digest/permitted	yes	boolean
record/max-bytes	yes	integer
session/max-bytes	yes	integer
session/ttl-seconds	yes	integer
hard-secret/classes	yes	array
operator/binding-ref	no	ref: #/$defs/ref
expires/at	no	string
reason	yes	string

Definitions

Definition	Shape	Description
ref	string
digest	string
selectors	object

Conditional Rules

Rule 1

When:

{
  "properties": {
    "profile": {
      "const": "production"
    }
  },
  "required": [
    "profile"
  ]
}

Then:

{
  "properties": {
    "capture/interest": {
      "const": "none"
    },
    "capture/content": {
      "const": "none"
    },
    "digest/permitted": {
      "const": false
    }
  },
  "not": {
    "anyOf": [
      {
        "required": [
          "operator/binding-ref"
        ]
      },
      {
        "required": [
          "expires/at"
        ]
      }
    ]
  }
}

Rule 2

When:

{
  "properties": {
    "profile": {
      "const": "operator-debug"
    }
  },
  "required": [
    "profile"
  ]
}

Then:

{
  "required": [
    "operator/binding-ref",
    "expires/at"
  ]
}

Field Semantics

schema

• Required: yes
• Shape: const: component-trace-policy.v1

schema/v

• Required: yes
• Shape: const: 1

policy/ref

• Required: yes
• Shape: ref: #/$defs/ref

policy/digest

• Required: yes
• Shape: ref: #/$defs/digest

policy/generation

• Required: yes
• Shape: integer

profile

• Required: yes
• Shape: enum: production, development, test, acceptance, operator-debug

Runtime posture selecting the disabled baseline or an explicit bounded capture context.

selectors

• Required: yes
• Shape: ref: #/$defs/selectors

capture/interest

• Required: yes
• Shape: enum: none, metadata, digest, redacted, content

Maximum observation detail requested before boundary and secret-policy intersection.

capture/content

• Required: yes
• Shape: enum: none, inline, artifact

digest/permitted

• Required: yes
• Shape: boolean

record/max-bytes

• Required: yes
• Shape: integer

session/max-bytes

• Required: yes
• Shape: integer

session/ttl-seconds

• Required: yes
• Shape: integer

hard-secret/classes

• Required: yes
• Shape: array

operator/binding-ref

• Required: no
• Shape: ref: #/$defs/ref

expires/at

• Required: no
• Shape: string

reason

• Required: yes
• Shape: string

Definition Semantics

$defs.ref

• Shape: string

$defs.digest

• Shape: string

$defs.selectors

• Shape: object