Operator Resource Envelope v1¶
Source schema: doc/schemas/operator-resource-envelope.v1.schema.json
Signed append-only operator revision binding one organ-owned typed resource profile. It bounds already-authorized work and grants no capability or effect authority.
Governing Basis¶
Project Lineage¶
Fields¶
| Field | Required | Shape | Description |
|---|---|---|---|
schema |
yes |
const: operator-resource-envelope.v1 |
|
schema/v |
yes |
const: 1 |
|
envelope/id |
yes |
ref: #/$defs/envelope-ref |
|
revision/no |
yes |
integer | |
supersedes/ref |
no |
ref: #/$defs/envelope-ref |
|
scope |
yes |
object | |
experiment/classes |
yes |
array | |
profile/schema |
yes |
const: inquirium-resource-profile.v1 |
|
profile/digest |
yes |
ref: #/$defs/hex-digest |
|
profile |
yes |
ref: inquirium-resource-profile.v1.schema.json |
|
operator/binding-ref |
yes |
string | |
reason |
yes |
string | |
issued-at |
yes |
string | |
expires-at |
yes |
string | |
signature |
yes |
ref: #/$defs/signature |
Definitions¶
| Definition | Shape | Description |
|---|---|---|
token |
string | |
envelope-ref |
string | |
hex-digest |
string | |
signature |
object |
Conditional Rules¶
Rule 1¶
When:
{
"properties": {
"revision/no": {
"const": 1
}
},
"required": [
"revision/no"
]
}
Then:
{
"not": {
"required": [
"supersedes/ref"
]
}
}
Field Semantics¶
schema¶
- Required:
yes - Shape: const:
operator-resource-envelope.v1
schema/v¶
- Required:
yes - Shape: const:
1
envelope/id¶
- Required:
yes - Shape: ref:
#/$defs/envelope-ref
revision/no¶
- Required:
yes - Shape: integer
supersedes/ref¶
- Required:
no - Shape: ref:
#/$defs/envelope-ref
scope¶
- Required:
yes - Shape: object
experiment/classes¶
- Required:
yes - Shape: array
profile/schema¶
- Required:
yes - Shape: const:
inquirium-resource-profile.v1
profile/digest¶
- Required:
yes - Shape: ref:
#/$defs/hex-digest
profile¶
- Required:
yes - Shape: ref:
inquirium-resource-profile.v1.schema.json
operator/binding-ref¶
- Required:
yes - Shape: string
reason¶
- Required:
yes - Shape: string
issued-at¶
- Required:
yes - Shape: string
expires-at¶
- Required:
yes - Shape: string
signature¶
- Required:
yes - Shape: ref:
#/$defs/signature
Definition Semantics¶
$defs.token¶
- Shape: string
$defs.envelope-ref¶
- Shape: string
$defs.hex-digest¶
- Shape: string
$defs.signature¶
- Shape: object