😏

2026-08-24 08:11:59 -07:00
commit 53df0eed10
275 changed files with 133056 additions and 0 deletions
@@ -0,0 +1,48 @@
+{
+  "title": "Empirical security finding validation",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "finding_id": {"type": "string", "minLength": 1},
+    "verdict": {"type": "string", "enum": ["confirmed", "refuted", "inconclusive", "blocked"]},
+    "commands": {
+      "type": "array",
+      "maxItems": 30,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "command": {"type": "string", "minLength": 1},
+          "exit_code": {"type": "integer"},
+          "observation": {"type": "string", "minLength": 1}
+        },
+        "required": ["command", "exit_code", "observation"]
+      }
+    },
+    "artifacts": {
+      "type": "array",
+      "maxItems": 30,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "relative_path": {"type": "string", "minLength": 1},
+          "sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"}
+        },
+        "required": ["relative_path", "sha256"]
+      }
+    },
+    "limitations": {"type": "array", "items": {"type": "string"}, "maxItems": 30}
+  },
+  "required": ["finding_id", "verdict", "commands", "artifacts", "limitations"],
+  "allOf": [
+    {
+      "if": {"properties": {"verdict": {"enum": ["confirmed", "refuted"]}}, "required": ["verdict"]},
+      "then": {"properties": {"commands": {"minItems": 1}}}
+    },
+    {
+      "if": {"properties": {"verdict": {"const": "blocked"}}, "required": ["verdict"]},
+      "then": {"properties": {"limitations": {"minItems": 1}}}
+    }
+  ]
+}
@@ -0,0 +1,46 @@
+{
+  "title": "Candidate vulnerability report",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "status": {"type": "string", "enum": ["candidates", "no_findings", "blocked"]},
+    "scope": {"type": "string", "minLength": 1},
+    "findings": {
+      "type": "array",
+      "maxItems": 50,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "id": {"type": "string", "minLength": 1},
+          "severity": {"type": "string", "enum": ["critical", "high", "medium", "low", "informational"]},
+          "location": {"type": "string", "minLength": 1},
+          "preconditions": {"type": "string", "minLength": 1},
+          "evidence": {"type": "string", "minLength": 1},
+          "impact": {"type": "string", "minLength": 1},
+          "falsification_or_reproduction": {"type": "string", "minLength": 1},
+          "confidence": {"type": "string", "enum": ["low", "medium", "high"]},
+          "empirically_confirmed": {"const": false}
+        },
+        "required": ["id", "severity", "location", "preconditions", "evidence", "impact", "falsification_or_reproduction", "confidence", "empirically_confirmed"]
+      }
+    },
+    "tested_negative_controls": {"type": "array", "items": {"type": "string"}, "maxItems": 30},
+    "limitations": {"type": "array", "items": {"type": "string"}, "maxItems": 30}
+  },
+  "required": ["status", "scope", "findings", "tested_negative_controls", "limitations"],
+  "allOf": [
+    {
+      "if": {"properties": {"status": {"const": "candidates"}}, "required": ["status"]},
+      "then": {"properties": {"findings": {"minItems": 1}}}
+    },
+    {
+      "if": {"properties": {"status": {"const": "no_findings"}}, "required": ["status"]},
+      "then": {"properties": {"findings": {"maxItems": 0}, "tested_negative_controls": {"minItems": 1}}}
+    },
+    {
+      "if": {"properties": {"status": {"const": "blocked"}}, "required": ["status"]},
+      "then": {"properties": {"limitations": {"minItems": 1}}}
+    }
+  ]
+}