Node Extension Posture V1¶
Source schema: doc/schemas/node-extension-posture.v1.schema.json
Signed accountable declaration of one build and extension boundary profile. Self-attestation is not proof of the running binary.
Governing Basis¶
Project Lineage¶
Fields¶
| Field | Required | Shape | Description |
|---|---|---|---|
schema |
yes |
const: node-extension-posture.v1 |
|
schema/v |
yes |
const: 1 |
|
posture/ref |
yes |
string | |
node/id |
yes |
string | |
implementation/profile |
yes |
string | |
build/digest |
yes |
ref: #/$defs/digest |
|
limit-classification/digest |
yes |
ref: #/$defs/digest |
|
boundary-profile/digest |
yes |
ref: #/$defs/digest |
|
baseline/modified |
yes |
boolean | |
attestation/strength |
yes |
enum: self-declared, reproducible-build, measured-boot, third-party |
|
evidence/refs |
yes |
array | |
issued-at |
yes |
string | |
expires-at |
yes |
string | |
signature |
yes |
ref: #/$defs/signature |
Definitions¶
| Definition | Shape | Description |
|---|---|---|
digest |
string | |
signature |
object | |
| ## Field Semantics |
schema¶
- Required:
yes - Shape: const:
node-extension-posture.v1
schema/v¶
- Required:
yes - Shape: const:
1
posture/ref¶
- Required:
yes - Shape: string
node/id¶
- Required:
yes - Shape: string
implementation/profile¶
- Required:
yes - Shape: string
build/digest¶
- Required:
yes - Shape: ref:
#/$defs/digest
limit-classification/digest¶
- Required:
yes - Shape: ref:
#/$defs/digest
boundary-profile/digest¶
- Required:
yes - Shape: ref:
#/$defs/digest
baseline/modified¶
- Required:
yes - Shape: boolean
attestation/strength¶
- Required:
yes - Shape: enum:
self-declared,reproducible-build,measured-boot,third-party
evidence/refs¶
- Required:
yes - Shape: array
issued-at¶
- Required:
yes - Shape: string
expires-at¶
- Required:
yes - Shape: string
signature¶
- Required:
yes - Shape: ref:
#/$defs/signature
Definition Semantics¶
$defs.digest¶
- Shape: string
$defs.signature¶
- Shape: object