|
38 | 38 | }, |
39 | 39 | "coverage": { |
40 | 40 | "schema_count": 7, |
41 | | - "path_count": 1801, |
42 | | - "reference_count": 499, |
| 41 | + "path_count": 1803, |
| 42 | + "reference_count": 500, |
43 | 43 | "by_schema": { |
44 | 44 | "project": 220, |
45 | | - "environment": 198, |
| 45 | + "environment": 200, |
46 | 46 | "integration": 166, |
47 | 47 | "fixture": 62, |
48 | 48 | "entity": 35, |
|
51 | 51 | }, |
52 | 52 | "by_path_kind": { |
53 | 53 | "root": 7, |
54 | | - "property": 1434, |
| 54 | + "property": 1435, |
55 | 55 | "map_key": 26, |
56 | 56 | "map_value": 49, |
57 | | - "array_item": 178, |
| 57 | + "array_item": 179, |
58 | 58 | "branch": 107 |
59 | 59 | }, |
60 | 60 | "by_sensitivity": { |
61 | 61 | "public": 16, |
62 | 62 | "internal": 1168, |
63 | | - "sensitive": 399, |
| 63 | + "sensitive": 401, |
64 | 64 | "secret_reference": 41, |
65 | 65 | "redacted_fixture": 50, |
66 | 66 | "structural": 127 |
67 | 67 | }, |
68 | 68 | "by_intent_source": { |
69 | | - "schema_description": 515, |
| 69 | + "schema_description": 517, |
70 | 70 | "reviewed_override": 261, |
71 | 71 | "structural_taxonomy": 127, |
72 | 72 | "reviewed_profile": 898 |
@@ -26232,6 +26232,209 @@ |
26232 | 26232 | "pointer": "/$defs/relayResource" |
26233 | 26233 | } |
26234 | 26234 | }, |
| 26235 | + { |
| 26236 | + "address": { |
| 26237 | + "schema": "environment", |
| 26238 | + "pointer": "/$defs/oid4vci/properties/registrar_clients", |
| 26239 | + "path_kind": "property" |
| 26240 | + }, |
| 26241 | + "purpose": "Closed OIDC machine-client allow-list for registrar-created credential offers. Each client uses this authorization server and the Notary public base URL as its resource audience; citizen client classification remains separate.", |
| 26242 | + "purpose_source": "schema_description", |
| 26243 | + "semantic_owner": "deployment_security", |
| 26244 | + "human_owner": "security_maintainers", |
| 26245 | + "scope": "Operator-owned deployment, trust, secret-reference, network, caller, state, and product availability bindings.", |
| 26246 | + "field_type": { |
| 26247 | + "schema_types": [ |
| 26248 | + "array" |
| 26249 | + ], |
| 26250 | + "composed": false |
| 26251 | + }, |
| 26252 | + "requiredness": "optional", |
| 26253 | + "null_behavior": "rejected", |
| 26254 | + "empty_behavior": "not_applicable", |
| 26255 | + "default": { |
| 26256 | + "behavior": "schema_default", |
| 26257 | + "schema_value": [] |
| 26258 | + }, |
| 26259 | + "environment_behavior": "narrows_reviewed_authority", |
| 26260 | + "sensitivity": "sensitive", |
| 26261 | + "state": "environment_bound", |
| 26262 | + "products": [ |
| 26263 | + "registryctl", |
| 26264 | + "relay", |
| 26265 | + "notary", |
| 26266 | + "editor", |
| 26267 | + "docs" |
| 26268 | + ], |
| 26269 | + "availability": "published", |
| 26270 | + "stability": "experimental", |
| 26271 | + "validation_stages": [ |
| 26272 | + "json_schema", |
| 26273 | + "rust_deserialization", |
| 26274 | + "cross_file_semantic", |
| 26275 | + "operator_preflight", |
| 26276 | + "product_build" |
| 26277 | + ], |
| 26278 | + "diagnostic": "registryctl.authoring.environment.invalid", |
| 26279 | + "history_status": "not_verified", |
| 26280 | + "introduced_in": null, |
| 26281 | + "version_history": [], |
| 26282 | + "example": { |
| 26283 | + "guidance": "Use non-routable example origins and opaque example secret-reference names, never working credentials or private infrastructure details.", |
| 26284 | + "schema_examples_available": false, |
| 26285 | + "contains_country_values": false |
| 26286 | + }, |
| 26287 | + "migration": "coordinate_deployment", |
| 26288 | + "migration_note": "Coordinate deployment and secret or trust rotation with the environment operator before activating a changed binding.", |
| 26289 | + "consumers": [ |
| 26290 | + "registryctl_authoring", |
| 26291 | + "registry_relay", |
| 26292 | + "registry_notary", |
| 26293 | + "editor_tooling", |
| 26294 | + "docs_generator" |
| 26295 | + ], |
| 26296 | + "generated_artifacts": [ |
| 26297 | + "editor_schemas", |
| 26298 | + "project_build", |
| 26299 | + "relay_config", |
| 26300 | + "notary_config", |
| 26301 | + "field_reference" |
| 26302 | + ], |
| 26303 | + "review_classes": [ |
| 26304 | + "contract", |
| 26305 | + "security", |
| 26306 | + "privacy", |
| 26307 | + "relay", |
| 26308 | + "notary", |
| 26309 | + "compatibility", |
| 26310 | + "documentation" |
| 26311 | + ], |
| 26312 | + "semantic_rules": [ |
| 26313 | + "knowledge_only", |
| 26314 | + "generated_docs_never_load_country_values", |
| 26315 | + "sensitive_operational_metadata" |
| 26316 | + ], |
| 26317 | + "constraints": [ |
| 26318 | + { |
| 26319 | + "keyword": "maxItems", |
| 26320 | + "value": 64 |
| 26321 | + }, |
| 26322 | + { |
| 26323 | + "keyword": "type", |
| 26324 | + "value": "array" |
| 26325 | + }, |
| 26326 | + { |
| 26327 | + "keyword": "uniqueItems", |
| 26328 | + "value": true |
| 26329 | + } |
| 26330 | + ] |
| 26331 | + }, |
| 26332 | + { |
| 26333 | + "address": { |
| 26334 | + "schema": "environment", |
| 26335 | + "pointer": "/$defs/oid4vci/properties/registrar_clients/items", |
| 26336 | + "path_kind": "array_item" |
| 26337 | + }, |
| 26338 | + "purpose": "Bounded visible-ASCII protocol token.", |
| 26339 | + "purpose_source": "schema_description", |
| 26340 | + "semantic_owner": "deployment_security", |
| 26341 | + "human_owner": "security_maintainers", |
| 26342 | + "scope": "Operator-owned deployment, trust, secret-reference, network, caller, state, and product availability bindings.", |
| 26343 | + "field_type": { |
| 26344 | + "schema_types": [ |
| 26345 | + "string" |
| 26346 | + ], |
| 26347 | + "local_reference": "#/$defs/token256", |
| 26348 | + "composed": false |
| 26349 | + }, |
| 26350 | + "requiredness": "not_applicable", |
| 26351 | + "null_behavior": "rejected", |
| 26352 | + "empty_behavior": "rejected", |
| 26353 | + "default": { |
| 26354 | + "behavior": "no_schema_default" |
| 26355 | + }, |
| 26356 | + "environment_behavior": "narrows_reviewed_authority", |
| 26357 | + "sensitivity": "sensitive", |
| 26358 | + "state": "environment_bound", |
| 26359 | + "products": [ |
| 26360 | + "registryctl", |
| 26361 | + "relay", |
| 26362 | + "notary", |
| 26363 | + "editor", |
| 26364 | + "docs" |
| 26365 | + ], |
| 26366 | + "availability": "published", |
| 26367 | + "stability": "experimental", |
| 26368 | + "validation_stages": [ |
| 26369 | + "json_schema", |
| 26370 | + "rust_deserialization", |
| 26371 | + "cross_file_semantic", |
| 26372 | + "operator_preflight", |
| 26373 | + "product_build" |
| 26374 | + ], |
| 26375 | + "diagnostic": "registryctl.authoring.environment.invalid", |
| 26376 | + "history_status": "not_verified", |
| 26377 | + "introduced_in": null, |
| 26378 | + "version_history": [], |
| 26379 | + "example": { |
| 26380 | + "guidance": "Use non-routable example origins and opaque example secret-reference names, never working credentials or private infrastructure details.", |
| 26381 | + "schema_examples_available": false, |
| 26382 | + "contains_country_values": false |
| 26383 | + }, |
| 26384 | + "migration": "coordinate_deployment", |
| 26385 | + "migration_note": "Coordinate deployment and secret or trust rotation with the environment operator before activating a changed binding.", |
| 26386 | + "consumers": [ |
| 26387 | + "registryctl_authoring", |
| 26388 | + "registry_relay", |
| 26389 | + "registry_notary", |
| 26390 | + "editor_tooling", |
| 26391 | + "docs_generator" |
| 26392 | + ], |
| 26393 | + "generated_artifacts": [ |
| 26394 | + "editor_schemas", |
| 26395 | + "project_build", |
| 26396 | + "relay_config", |
| 26397 | + "notary_config", |
| 26398 | + "field_reference" |
| 26399 | + ], |
| 26400 | + "review_classes": [ |
| 26401 | + "contract", |
| 26402 | + "security", |
| 26403 | + "privacy", |
| 26404 | + "relay", |
| 26405 | + "notary", |
| 26406 | + "compatibility", |
| 26407 | + "documentation" |
| 26408 | + ], |
| 26409 | + "semantic_rules": [ |
| 26410 | + "knowledge_only", |
| 26411 | + "generated_docs_never_load_country_values", |
| 26412 | + "sensitive_operational_metadata", |
| 26413 | + "array_items_share_element_contract" |
| 26414 | + ], |
| 26415 | + "constraints": [ |
| 26416 | + { |
| 26417 | + "keyword": "maxLength", |
| 26418 | + "value": 256 |
| 26419 | + }, |
| 26420 | + { |
| 26421 | + "keyword": "minLength", |
| 26422 | + "value": 1 |
| 26423 | + }, |
| 26424 | + { |
| 26425 | + "keyword": "pattern", |
| 26426 | + "value": "^[!-~]+$" |
| 26427 | + }, |
| 26428 | + { |
| 26429 | + "keyword": "type", |
| 26430 | + "value": "string" |
| 26431 | + } |
| 26432 | + ], |
| 26433 | + "local_reference": { |
| 26434 | + "schema": "environment", |
| 26435 | + "pointer": "/$defs/token256" |
| 26436 | + } |
| 26437 | + }, |
26235 | 26438 | { |
26236 | 26439 | "address": { |
26237 | 26440 | "schema": "environment", |
|
0 commit comments