Orbiplex Acceptance Storage Policy v1

Source schema: doc/schemas/orbiplex-acceptance-storage-policy.v1.schema.json

Host-local, run-scoped opt-in policy for shared or removable acceptance storage. This private import contract may contain local paths and principal ids and must not be retained in aggregate reports.

Fields

Field	Required	Shape	Description
schema	yes	const: orbiplex-acceptance-storage-policy.v1
schema/v	yes	const: 1
policy/ref	yes	string
posture	yes	enum: operator-authorized-shared, operator-trusted-shared-managed
scope	yes	ref: #/$defs/scope
bindings	yes	array
trust/assertion	yes	const: trusted-non-adversarial
risk/acknowledgement	no	const: shared-managed-toctou-v1

Definitions

Definition	Shape	Description
digest	string
rawDigest	string
token	string
scope	object
binding	object

Conditional Rules

Rule 1

When:

{
  "properties": {
    "posture": {
      "const": "operator-trusted-shared-managed"
    }
  },
  "required": [
    "posture"
  ]
}

Then:

{
  "required": [
    "risk/acknowledgement"
  ],
  "properties": {
    "bindings": {
      "contains": {
        "properties": {
          "storage/role": {
            "const": "model-managed-store"
          }
        },
        "required": [
          "storage/role"
        ]
      }
    }
  }
}

Field Semantics

schema

• Required: yes
• Shape: const: orbiplex-acceptance-storage-policy.v1

schema/v

• Required: yes
• Shape: const: 1

policy/ref

• Required: yes
• Shape: string

posture

• Required: yes
• Shape: enum: operator-authorized-shared, operator-trusted-shared-managed

scope

• Required: yes
• Shape: ref: #/$defs/scope

bindings

• Required: yes
• Shape: array

trust/assertion

• Required: yes
• Shape: const: trusted-non-adversarial

risk/acknowledgement

• Required: no
• Shape: const: shared-managed-toctou-v1

Definition Semantics

$defs.digest

• Shape: string

$defs.rawDigest

• Shape: string

$defs.token

• Shape: string

$defs.scope

• Shape: object

$defs.binding

• Shape: object