diff --git a/schemas/trust-verification/README.md b/schemas/trust-verification/README.md index cbc3bf8..2b43b53 100644 --- a/schemas/trust-verification/README.md +++ b/schemas/trust-verification/README.md @@ -70,14 +70,14 @@ Every receipt references the shared proof schema: - `../_shared/proof.schema.json` -Shared proof fields: - -- `canonicalization` -- `hash` -- `signature_alg` -- `signature` -- `key_id` -- `signer` +Shared proof fields (as defined in `_shared/proof.schema.json`): + +- `canonical` — canonicalization algorithm identifier (const: `json.sorted_keys.v1`) +- `hash` — SHA-256 hash of the canonical payload (pattern: `sha256:<64 hex chars>`) +- `alg` — signature algorithm (enum: `ed25519`) +- `signature` — the cryptographic signature value +- `kid` — key identifier +- `signer_id` — identifier of the signing party These fields provide a common cryptographic envelope model across all verb receipts. diff --git a/schemas/trust-verification/authenticate/authenticate.receipt.schema.json b/schemas/trust-verification/authenticate/authenticate.receipt.schema.json index 3bb1e6d..eb9650c 100644 --- a/schemas/trust-verification/authenticate/authenticate.receipt.schema.json +++ b/schemas/trust-verification/authenticate/authenticate.receipt.schema.json @@ -1,7 +1,7 @@ { "$schema": "https://json-schema.org/draft/2020-12/schema", - "$id": "https://schemas.commandlayer.org/schemas/v1.0.0/trust-verification/authenticate/authenticate.receipt.schema.json", - "title": "CLAS Trust Verification Authenticate Receipt", + "$id": "https://schemas.commandlayer.org/schemas/v1.0.0/trust/authenticate/authenticate.receipt.schema.json", + "title": "CLAS Trust Authenticate Receipt", "description": "A signed receipt proving that an authentication action was performed.", "type": "object", "additionalProperties": false, @@ -17,7 +17,7 @@ ], "properties": { "version": { "const": "1.0.0" }, - "family": { "const": "trust-verification" }, + "family": { "const": "trust" }, "verb": { "const": "authenticate" }, "receipt_id": { "type": "string", diff --git a/schemas/trust-verification/authenticate/authenticate.request.schema.json b/schemas/trust-verification/authenticate/authenticate.request.schema.json index 9b26b09..1e95619 100644 --- a/schemas/trust-verification/authenticate/authenticate.request.schema.json +++ b/schemas/trust-verification/authenticate/authenticate.request.schema.json @@ -1,14 +1,14 @@ { "$schema": "https://json-schema.org/draft/2020-12/schema", - "$id": "https://schemas.commandlayer.org/schemas/v1.0.0/trust-verification/authenticate/authenticate.request.schema.json", - "title": "CLAS Trust Verification Authenticate Request", + "$id": "https://schemas.commandlayer.org/schemas/v1.0.0/trust/authenticate/authenticate.request.schema.json", + "title": "CLAS Trust Authenticate Request", "description": "A request to authenticate the identity of an actor, signer, service, key, agent, or caller.", "type": "object", "additionalProperties": false, "required": ["version", "family", "verb", "subject"], "properties": { "version": { "const": "1.0.0" }, - "family": { "const": "trust-verification" }, + "family": { "const": "trust" }, "verb": { "const": "authenticate" }, "subject": { "type": "object", diff --git a/schemas/trust-verification/authenticate/examples/tampered.receipt.json b/schemas/trust-verification/authenticate/examples/tampered.receipt.json index 01cb5b8..ba29359 100644 --- a/schemas/trust-verification/authenticate/examples/tampered.receipt.json +++ b/schemas/trust-verification/authenticate/examples/tampered.receipt.json @@ -1,11 +1,11 @@ { "version": "1.0.0", - "family": "trust-verification", + "family": "trust", "verb": "authenticate", "receipt_id": "rcpt-authenticate-20260510-0001", "request": { "version": "1.0.0", - "family": "trust-verification", + "family": "trust", "verb": "authenticate", "subject": { "type": "agent_signer", @@ -29,11 +29,11 @@ } }, "authentication": { - "status": "authenticated", + "status": "unauthenticated", "subject_id": "agent.build-bot-17", "method": "did-sig-challenge", - "confidence": 0.41, - "reason": "Challenge response verified against DID document.", + "confidence": 0.0, + "reason": "TAMPERED: status changed from authenticated to unauthenticated after signing.", "expires_at": "2026-05-10T15:00:00Z" }, "ts": "2026-05-10T12:05:00Z", diff --git a/schemas/trust-verification/authenticate/examples/valid.receipt.json b/schemas/trust-verification/authenticate/examples/valid.receipt.json index 6038f5b..5106358 100644 --- a/schemas/trust-verification/authenticate/examples/valid.receipt.json +++ b/schemas/trust-verification/authenticate/examples/valid.receipt.json @@ -1,11 +1,11 @@ { "version": "1.0.0", - "family": "trust-verification", + "family": "trust", "verb": "authenticate", "receipt_id": "rcpt-authenticate-20260510-0001", "request": { "version": "1.0.0", - "family": "trust-verification", + "family": "trust", "verb": "authenticate", "subject": { "type": "agent_signer", diff --git a/schemas/trust-verification/authenticate/examples/valid.request.json b/schemas/trust-verification/authenticate/examples/valid.request.json index 0170fcd..c9adaf4 100644 --- a/schemas/trust-verification/authenticate/examples/valid.request.json +++ b/schemas/trust-verification/authenticate/examples/valid.request.json @@ -1,6 +1,6 @@ { "version": "1.0.0", - "family": "trust-verification", + "family": "trust", "verb": "authenticate", "subject": { "type": "agent_signer", diff --git a/schemas/v1.0.0/trust-verification/verify/v1/receipt.schema.json b/schemas/v1.0.0/trust-verification/verify/v1/receipt.schema.json index f74e9e0..4c1311e 100644 --- a/schemas/v1.0.0/trust-verification/verify/v1/receipt.schema.json +++ b/schemas/v1.0.0/trust-verification/verify/v1/receipt.schema.json @@ -15,7 +15,7 @@ "minLength": 1 }, "request": { - "$ref": "https://schemas.commandlayer.org/schemas/v1.0.0/trust-verification/verify/v1/request.schema.json" + "$ref": "./request.schema.json" }, "result": { "type": "object", @@ -47,7 +47,7 @@ "format": "date-time" }, "proof": { - "$ref": "https://schemas.commandlayer.org/schemas/trust-verification/_shared/proof.schema.json" + "$ref": "../../../../trust-verification/_shared/proof.schema.json" } } }