{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://clean-architecture-frontend.local/schemas/supply-chain-verification.schema.json",
  "type": "object",
  "additionalProperties": false,
  "required": [
    "schemaVersion",
    "localStatus",
    "promotionStatus",
    "lockfileSha256",
    "sourceSetSha256",
    "distSha256",
    "sbomSha256",
    "dependencyDiff",
    "highRiskReview",
    "vulnerabilityStatus",
    "provenanceAttestationStatus",
    "failures"
  ],
  "properties": {
    "schemaVersion": { "const": 1 },
    "localStatus": { "enum": ["PASS", "FAIL"] },
    "promotionStatus": {
      "enum": ["PASS", "FAIL_UNVERIFIED"]
    },
    "lockfileSha256": {
      "type": "string",
      "pattern": "^[a-f0-9]{64}$"
    },
    "sourceSetSha256": {
      "type": "string",
      "pattern": "^[a-f0-9]{64}$"
    },
    "distSha256": {
      "type": "string",
      "pattern": "^[a-f0-9]{64}$"
    },
    "sbomSha256": {
      "type": "string",
      "pattern": "^[a-f0-9]{64}$"
    },
    "dependencyDiff": { "type": "object" },
    "highRiskReview": { "type": "array" },
    "vulnerabilityStatus": {
      "enum": ["PASS", "FAIL", "FAIL_UNVERIFIED"]
    },
    "provenanceAttestationStatus": {
      "enum": ["PASS", "FAIL_UNVERIFIED"]
    },
    "failures": {
      "type": "array",
      "items": { "type": "string" }
    }
  }
}