Skip to content

Sensorium Virt Environment Plan v1

Source schema: doc/schemas/sensorium-virt-environment-plan.v1.schema.json

Host-normalized immutable allocation plan for a Sensorium Virt environment.

Governing Basis

Project Lineage

Requirements

Stories

Fields

Field Required Shape Description
schema yes const: sensorium-virt-environment-plan.v1
schema/v yes const: 1
plan/ref yes ref: #/$defs/ref
plan/digest yes ref: #/$defs/digest
idempotency/key yes string
environment/ref yes ref: #/$defs/ref
source/generation-ref yes ref: #/$defs/ref
backend/capabilities-ref yes ref: #/$defs/ref
backend/capabilities-digest yes ref: #/$defs/digest
backend/id yes ref: #/$defs/ref
platform/ref yes ref: #/$defs/ref
image/ref yes ref: #/$defs/ref
image/variant-ref yes ref: #/$defs/ref
image/manifest-digest yes ref: #/$defs/digest
locality yes enum: local-only, remote-sandbox
host/architecture yes ref: #/$defs/architecture
guest/architecture yes ref: #/$defs/architecture
isolation/class yes enum: none, process-sandbox, shared-kernel-container, hardware-vm
system/fidelity yes enum: filesystem-view, process-runtime, shared-kernel-linux, full-system-linux
control yes ref: sensorium-virt-backend-capabilities.v1.schema.json#/$defs/controlSelection
boot/mode yes enum: none, efi, direct-kernel
storage/format yes enum: directory-copy, raw, kernel-initrd-rootfs
device/classes yes ref: sensorium-virt-backend-capabilities.v1.schema.json#/$defs/deviceClasses
console/mode yes enum: none, diagnostic-output-only
network/profile yes enum: none, isolated, egress-allowlisted
host-filesystem-sharing/mode yes enum: denied, read-only, read-write
credential-injection/mode yes enum: denied, explicit-scoped
resource-enforcement/classes yes ref: sensorium-virt-backend-capabilities.v1.schema.json#/$defs/resourceClasses
lifecycle/operations yes ref: sensorium-virt-backend-capabilities.v1.schema.json#/$defs/lifecycleOperations
operational/context yes ref: sensorium-operational-context.v1.schema.json
operational/context-candidate-digest yes ref: #/$defs/digest
operational/context-policy-ref yes ref: #/$defs/ref
attached-resource-contexts yes array
limits yes object

Definitions

Definition Shape Description
ref string
digest string
architecture enum: x86_64, arm64
## Field Semantics

schema

  • Required: yes
  • Shape: const: sensorium-virt-environment-plan.v1

schema/v

  • Required: yes
  • Shape: const: 1

plan/ref

  • Required: yes
  • Shape: ref: #/$defs/ref

plan/digest

  • Required: yes
  • Shape: ref: #/$defs/digest

idempotency/key

  • Required: yes
  • Shape: string

environment/ref

  • Required: yes
  • Shape: ref: #/$defs/ref

source/generation-ref

  • Required: yes
  • Shape: ref: #/$defs/ref

backend/capabilities-ref

  • Required: yes
  • Shape: ref: #/$defs/ref

backend/capabilities-digest

  • Required: yes
  • Shape: ref: #/$defs/digest

backend/id

  • Required: yes
  • Shape: ref: #/$defs/ref

platform/ref

  • Required: yes
  • Shape: ref: #/$defs/ref

image/ref

  • Required: yes
  • Shape: ref: #/$defs/ref

image/variant-ref

  • Required: yes
  • Shape: ref: #/$defs/ref

image/manifest-digest

  • Required: yes
  • Shape: ref: #/$defs/digest

locality

  • Required: yes
  • Shape: enum: local-only, remote-sandbox

host/architecture

  • Required: yes
  • Shape: ref: #/$defs/architecture

guest/architecture

  • Required: yes
  • Shape: ref: #/$defs/architecture

isolation/class

  • Required: yes
  • Shape: enum: none, process-sandbox, shared-kernel-container, hardware-vm

system/fidelity

  • Required: yes
  • Shape: enum: filesystem-view, process-runtime, shared-kernel-linux, full-system-linux

control

  • Required: yes
  • Shape: ref: sensorium-virt-backend-capabilities.v1.schema.json#/$defs/controlSelection

boot/mode

  • Required: yes
  • Shape: enum: none, efi, direct-kernel

storage/format

  • Required: yes
  • Shape: enum: directory-copy, raw, kernel-initrd-rootfs

device/classes

  • Required: yes
  • Shape: ref: sensorium-virt-backend-capabilities.v1.schema.json#/$defs/deviceClasses

console/mode

  • Required: yes
  • Shape: enum: none, diagnostic-output-only

network/profile

  • Required: yes
  • Shape: enum: none, isolated, egress-allowlisted

host-filesystem-sharing/mode

  • Required: yes
  • Shape: enum: denied, read-only, read-write

credential-injection/mode

  • Required: yes
  • Shape: enum: denied, explicit-scoped

resource-enforcement/classes

  • Required: yes
  • Shape: ref: sensorium-virt-backend-capabilities.v1.schema.json#/$defs/resourceClasses

lifecycle/operations

  • Required: yes
  • Shape: ref: sensorium-virt-backend-capabilities.v1.schema.json#/$defs/lifecycleOperations

operational/context

  • Required: yes
  • Shape: ref: sensorium-operational-context.v1.schema.json

operational/context-candidate-digest

  • Required: yes
  • Shape: ref: #/$defs/digest

operational/context-policy-ref

  • Required: yes
  • Shape: ref: #/$defs/ref

attached-resource-contexts

  • Required: yes
  • Shape: array

limits

  • Required: yes
  • Shape: object

Definition Semantics

$defs.ref

  • Shape: string

$defs.digest

  • Shape: string

$defs.architecture

  • Shape: enum: x86_64, arm64