Operator Guard Hook V1

Source schema: doc/schemas/operator-guard-hook.v1.schema.json

Signed local binding of one monotonic guard declaration to a registered host admission anchor.

Governing Basis

• doc/project/40-proposals/085-operator-sovereign-extensibility-and-experiment-packages.md

Project Lineage

Fields

Field	Required	Shape	Description
schema	yes	const: operator-guard-hook.v1
schema/v	yes	const: 1
guard/ref	yes	string
revision/no	yes	integer
anchor	yes	enum: nse-decision-admission, package-activation, capability-use, sensorium-actuation, agent-effect-admission
operation	yes	enum: restrict, narrow, raise-risk
axis	yes	enum: candidate-set, budget, classification, operational-class, output-schema, grant-set
priority	yes	integer
producer/ref	yes	ref: #/$defs/ref
producer/digest	yes	ref: #/$defs/digest
operator/binding-ref	yes	string
issued-at	yes	string
expires-at	yes	string
signature	yes	ref: #/$defs/signature

Definitions

Definition	Shape	Description
ref	string
digest	string
signature	object

Conditional Rules

Rule 1

When:

{
  "properties": {
    "anchor": {
      "const": "agent-effect-admission"
    }
  }
}

Then:

{
  "anyOf": [
    {
      "properties": {
        "operation": {
          "const": "restrict"
        },
        "axis": {
          "const": "grant-set"
        }
      }
    },
    {
      "properties": {
        "operation": {
          "const": "narrow"
        },
        "axis": {
          "const": "budget"
        }
      }
    },
    {
      "properties": {
        "operation": {
          "const": "raise-risk"
        },
        "axis": {
          "const": "operational-class"
        }
      }
    }
  ]
}

Field Semantics

schema

• Required: yes
• Shape: const: operator-guard-hook.v1

schema/v

• Required: yes
• Shape: const: 1

guard/ref

• Required: yes
• Shape: string

revision/no

• Required: yes
• Shape: integer

anchor

• Required: yes
• Shape: enum: nse-decision-admission, package-activation, capability-use, sensorium-actuation, agent-effect-admission

operation

• Required: yes
• Shape: enum: restrict, narrow, raise-risk

axis

• Required: yes
• Shape: enum: candidate-set, budget, classification, operational-class, output-schema, grant-set

priority

• Required: yes
• Shape: integer

producer/ref

• Required: yes
• Shape: ref: #/$defs/ref

producer/digest

• Required: yes
• Shape: ref: #/$defs/digest

operator/binding-ref

• Required: yes
• Shape: string

issued-at

• Required: yes
• Shape: string

expires-at

• Required: yes
• Shape: string

signature

• Required: yes
• Shape: ref: #/$defs/signature

Definition Semantics

$defs.ref

• Shape: string

$defs.digest

• Shape: string

$defs.signature

• Shape: object