Sensorium Virt Backend Capabilities v1¶
Source schema: doc/schemas/sensorium-virt-backend-capabilities.v1.schema.json
Host-attested, closed capability descriptor for one Sensorium Virt backend configuration.
Governing Basis¶
Project Lineage¶
Requirements¶
doc/project/50-requirements/requirements-006-node-networking-mvp.mddoc/project/50-requirements/requirements-010-middleware-executor.mddoc/project/50-requirements/requirements-011-dator-arca-contracts.mddoc/project/50-requirements/requirements-014-resource-opinions.md
Stories¶
doc/project/30-stories/story-001-swarm-node-onboarding.mddoc/project/30-stories/story-004-pod-client-onboarding.mddoc/project/30-stories/story-005-whisper-rumor-intake.mddoc/project/30-stories/story-006-buyer-node-components.mddoc/project/30-stories/story-006-voluntary-swarm-exchange.mddoc/project/30-stories/story-007-settlement-capable-node.mddoc/project/30-stories/story-008-cool-site-comment.mddoc/project/30-stories/story-009-bielik-blog-arca.md
Fields¶
| Field | Required | Shape | Description |
|---|---|---|---|
schema |
yes |
const: sensorium-virt-backend-capabilities.v1 |
|
schema/v |
yes |
const: 1 |
|
capabilities/ref |
yes |
ref: #/$defs/ref |
|
backend/id |
yes |
ref: #/$defs/ref |
|
backend/provider |
yes |
ref: #/$defs/token |
|
backend/version |
yes |
string | |
backend/binary-digest |
yes |
ref: #/$defs/digest |
|
platform/ref |
yes |
ref: #/$defs/ref |
|
locality |
yes |
enum: local-only, remote-sandbox |
|
host/architecture |
yes |
ref: #/$defs/architecture |
|
guest/architecture |
yes |
ref: #/$defs/architecture |
|
isolation/class |
yes |
enum: none, process-sandbox, shared-kernel-container, hardware-vm |
|
system/fidelity |
yes |
enum: filesystem-view, process-runtime, shared-kernel-linux, full-system-linux |
|
control |
yes |
ref: #/$defs/controlSelection |
|
boot/modes |
yes |
ref: #/$defs/bootModes |
|
storage/formats |
yes |
ref: #/$defs/storageFormats |
|
device/classes |
yes |
ref: #/$defs/deviceClasses |
|
console/mode |
yes |
enum: none, diagnostic-output-only |
|
network/profiles |
yes |
ref: #/$defs/networkProfiles |
|
host-filesystem-sharing/mode |
yes |
enum: denied, read-only, read-write |
|
credential-injection/mode |
yes |
enum: denied, explicit-scoped |
|
resource-enforcement/classes |
yes |
ref: #/$defs/resourceClasses |
|
lifecycle/operations |
yes |
ref: #/$defs/lifecycleOperations |
Definitions¶
| Definition | Shape | Description |
|---|---|---|
ref |
string | |
token |
string | |
digest |
string | |
architecture |
enum: x86_64, arm64 |
|
controlSelection |
object | |
bootModes |
array | |
storageFormats |
array | |
deviceClasses |
array | |
networkProfiles |
array | |
resourceClasses |
array | |
lifecycleOperations |
array | |
| ## Field Semantics |
schema¶
- Required:
yes - Shape: const:
sensorium-virt-backend-capabilities.v1
schema/v¶
- Required:
yes - Shape: const:
1
capabilities/ref¶
- Required:
yes - Shape: ref:
#/$defs/ref
backend/id¶
- Required:
yes - Shape: ref:
#/$defs/ref
backend/provider¶
- Required:
yes - Shape: ref:
#/$defs/token
backend/version¶
- Required:
yes - Shape: string
backend/binary-digest¶
- Required:
yes - Shape: ref:
#/$defs/digest
platform/ref¶
- Required:
yes - Shape: ref:
#/$defs/ref
locality¶
- Required:
yes - Shape: enum:
local-only,remote-sandbox
host/architecture¶
- Required:
yes - Shape: ref:
#/$defs/architecture
guest/architecture¶
- Required:
yes - Shape: ref:
#/$defs/architecture
isolation/class¶
- Required:
yes - Shape: enum:
none,process-sandbox,shared-kernel-container,hardware-vm
system/fidelity¶
- Required:
yes - Shape: enum:
filesystem-view,process-runtime,shared-kernel-linux,full-system-linux
control¶
- Required:
yes - Shape: ref:
#/$defs/controlSelection
boot/modes¶
- Required:
yes - Shape: ref:
#/$defs/bootModes
storage/formats¶
- Required:
yes - Shape: ref:
#/$defs/storageFormats
device/classes¶
- Required:
yes - Shape: ref:
#/$defs/deviceClasses
console/mode¶
- Required:
yes - Shape: enum:
none,diagnostic-output-only
network/profiles¶
- Required:
yes - Shape: ref:
#/$defs/networkProfiles
host-filesystem-sharing/mode¶
- Required:
yes - Shape: enum:
denied,read-only,read-write
credential-injection/mode¶
- Required:
yes - Shape: enum:
denied,explicit-scoped
resource-enforcement/classes¶
- Required:
yes - Shape: ref:
#/$defs/resourceClasses
lifecycle/operations¶
- Required:
yes - Shape: ref:
#/$defs/lifecycleOperations
Definition Semantics¶
$defs.ref¶
- Shape: string
$defs.token¶
- Shape: string
$defs.digest¶
- Shape: string
$defs.architecture¶
- Shape: enum:
x86_64,arm64
$defs.controlSelection¶
- Shape: object
$defs.bootModes¶
- Shape: array
$defs.storageFormats¶
- Shape: array
$defs.deviceClasses¶
- Shape: array
$defs.networkProfiles¶
- Shape: array
$defs.resourceClasses¶
- Shape: array
$defs.lifecycleOperations¶
- Shape: array