refactor: validate generated evidence artifacts

scripts/drill-runbook.ts

@@ -1,4 +1,4 @@
-import { access, mkdir, readFile, writeFile } from "node:fs/promises";
+import { access, mkdir, readFile } from "node:fs/promises";
 import { pathToFileURL } from "node:url";
 
 import { shouldRetry } from "../src/adapters/http/retry-policy.ts";
@@ -15,7 +15,9 @@ import {
 } from "../src/contracts/release-artifacts.ts";
 import { projectTelemetryEvent } from "../src/contracts/telemetry.ts";
 import { EXPECTED_CONTRACT_SET_PACKAGES } from "../src/features/installed-contract-contributions.ts";
+import { runbookRecordArtifactSchema } from "./contracts/release-artifacts.ts";
 import { verifyReleaseRuntimeCoherence } from "./lib/release-runtime-coherence.ts";
+import { writeValidatedJsonArtifact } from "./lib/validated-json-artifact.ts";
 
 type RecoveryAssertion = Readonly<{
   assertion: string;
@@ -354,10 +356,11 @@ async function main(): Promise<void> {
   };
   const artifactDirectory = `artifacts/runbooks/${runbookId}`;
   await mkdir(artifactDirectory, { recursive: true });
-  await writeFile(
-    `${artifactDirectory}/record.json`,
-    `${JSON.stringify(record, null, 2)}\n`,
-  );
+  await writeValidatedJsonArtifact({
+    path: `${artifactDirectory}/record.json`,
+    schema: runbookRecordArtifactSchema,
+    value: record,
+  });
   if (!passed) {
     process.stderr.write(`${runbookId} drill failed.\n`);
     process.exit(1);