alexmandClaude
8c8b51cc3f
- Add tools/validate.py: validates packages, and with --correction runs proposed corrections through the gate against a package without writing anything (spec/11 §11.4). The gate now refuses a proposal that fails the correction schema, rule correction.schema. - tools/load.py validates every package before loading, and with --bundle --built-from builds a scienting-bundle/1 with the FTS5 search index and bundle_meta (spec/13 §13.5). Search rows are defined per unit (sentence, cell, equation outside a sentence, figure-text) with the parent kind as context. - Roster keys carry a role, and a key with the role owner may revoke any receipt (spec/08 §8.7, spec/20); roster schema, store table and the fixture roster updated. The checker signs a trial revocation to prove the rule both ways. - A qa: receipt raises the nodes it sampled except those in its errors (spec/08 §8.2); the example paper's fidelity counts become 27 F3, 13 F2, 4 F1 and 1 F0. - The destination chooses the keyed scheme, not the text policy: hmac-team between the team's machines, hkdf-pages outside the team (spec/05 §5.8, spec/12 §12.5). - A TextQuoteSelector must repeat the anchor's plain quote and is absent for hashed or keyed anchors (spec/18 §18.3). - Add fixtures/records/suspect.json, a scienting-suspect/1 record. - Oracle: hashes are kept incrementally and checked after every correction against a full recomputation; load and write refuse unsafe manifest paths; Ed25519, HKDF and schema validation come from the cryptography and jsonschema packages; canonical JSON uses the built-in encoder with an exact RFC 8785 fallback. - The tools need Python 3.14 with cryptography and jsonschema; the py310 CI environment is dropped and the workflow runs the default only. - Resolve every [CHECK] note in the docs, READMEs and context; add CONTRIBUTING.md; every tool answers --help and refuses unknown options. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
111 lines
2.6 KiB
JSON
111 lines
2.6 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"$id": "https://scient.ing/ns/schemas/roster.schema.json",
|
|
"title": "Roster",
|
|
"description": "scienting-roster/1: the keys that may sign; spec/08-fidelity.md.",
|
|
"type": "object",
|
|
"properties": {
|
|
"format": {
|
|
"const": "scienting-roster/1"
|
|
},
|
|
"store": {
|
|
"$ref": "common.schema.json#/$defs/key"
|
|
},
|
|
"keys": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"properties": {
|
|
"id": {
|
|
"$ref": "common.schema.json#/$defs/key"
|
|
},
|
|
"person": {
|
|
"type": "object",
|
|
"properties": {
|
|
"name": {
|
|
"type": "string",
|
|
"minLength": 1
|
|
},
|
|
"orcid": {
|
|
"type": "string",
|
|
"pattern": "^[0-9]{4}-[0-9]{4}-[0-9]{4}-[0-9]{3}[0-9X]$"
|
|
},
|
|
"email": {
|
|
"type": "string",
|
|
"minLength": 1
|
|
}
|
|
},
|
|
"required": [
|
|
"name"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
"role": {
|
|
"description": "The holder's role in the team that keeps the roster; a key with the role owner may revoke any receipt (spec/08 §8.7).",
|
|
"enum": [
|
|
"owner",
|
|
"editor",
|
|
"reader",
|
|
"guest"
|
|
]
|
|
},
|
|
"scheme": {
|
|
"enum": [
|
|
"ed25519",
|
|
"ssh",
|
|
"gpg",
|
|
"sigstore"
|
|
]
|
|
},
|
|
"public": {
|
|
"type": "string",
|
|
"minLength": 1
|
|
},
|
|
"purposes": {
|
|
"type": "array",
|
|
"items": {
|
|
"enum": [
|
|
"sign",
|
|
"spot-check",
|
|
"export"
|
|
]
|
|
},
|
|
"minItems": 1,
|
|
"uniqueItems": true
|
|
},
|
|
"registered_at": {
|
|
"$ref": "common.schema.json#/$defs/time"
|
|
},
|
|
"revoked_at": {
|
|
"anyOf": [
|
|
{
|
|
"$ref": "common.schema.json#/$defs/time"
|
|
},
|
|
{
|
|
"type": "null"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"required": [
|
|
"id",
|
|
"person",
|
|
"role",
|
|
"scheme",
|
|
"public",
|
|
"purposes",
|
|
"registered_at",
|
|
"revoked_at"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
}
|
|
},
|
|
"required": [
|
|
"format",
|
|
"store",
|
|
"keys"
|
|
],
|
|
"additionalProperties": false
|
|
}
|