Add SourceOS policy and grant v1.1 schemas

examples/policy_decision_admitted_v1_1.json

@@ -0,0 +1 @@
+{"schema_version":"1.1.0","decision_kind":"policy-fabric-decision","decision_id":"pd-001","ts_decided":"2026-05-12T10:00:00Z","event_ref":{"event_id":"e-001","event_class":"microbeat","event_content_sha256":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"},"policy_ref":{"policy_id":"p-001","policy_content_sha256":"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb","policy_epoch":1},"decision_family":"replicate_event","outcome":"allow","verdict_status":"admitted","payload_mode":"inline-bounded","decision_authority":{"authority_id":"policy-engine","authority_kind":"service_account","authority_layer":"institutional_truth"}}

examples/policy_decision_partial_v1_1.json

@@ -0,0 +1 @@
+{"schema_version":"1.1.0","decision_kind":"policy-fabric-decision","decision_id":"pd-002","ts_decided":"2026-05-12T10:01:00Z","event_ref":{"event_id":"e-002","event_class":"microbeat","event_content_sha256":"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"},"policy_ref":{"policy_id":"p-001","policy_content_sha256":"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb","policy_epoch":1},"decision_family":"export_artifact","outcome":"summary_only","verdict_status":"partial","followup_required":{"followup_kind":"human_consent"},"payload_mode":"summary","decision_authority":{"authority_id":"policy-engine","authority_kind":"service_account","authority_layer":"institutional_truth"}}

examples/policy_decision_undecided_v1_1.json

@@ -0,0 +1 @@
+{"schema_version":"1.1.0","decision_kind":"policy-fabric-decision","decision_id":"pd-003","ts_decided":"2026-05-12T10:02:00Z","event_ref":{"event_id":"e-003","event_class":"microbeat","event_content_sha256":"dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"},"policy_ref":{"policy_id":"p-001","policy_content_sha256":"bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb","policy_epoch":1},"decision_family":"hydrate_context","outcome":"ref_only","verdict_status":"undecided","followup_required":{"followup_kind":"curator_review"},"payload_mode":"ref-only","decision_authority":{"authority_id":"policy-engine","authority_kind":"service_account","authority_layer":"grounded_schema"},"explanation":"Insufficient evidence for admission."}

schemas/agent-grant.v1.1.json

@@ -0,0 +1,21 @@
+{
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
+ "$id": "https://sourceos.dev/schemas/agent-grant.v1.1.json",
+ "title": "Agent Registry Grant v1.1",
+ "type": "object",
+ "additionalProperties": true,
+ "required": ["schema_version", "grant_kind", "grant_id", "ts_granted", "grantor", "grantee", "grant_scope", "grant_authority_layer", "expires_at"],
+ "properties": {
+ "schema_version": {"const": "1.1.0"},
+ "grant_kind": {"const": "agent-registry-grant"},
+ "grant_id": {"type": "string"},
+ "ts_granted": {"type": "string", "format": "date-time"},
+ "grantor": {"type": "object", "required": ["grantor_id", "grantor_authority_kind"], "properties": {"grantor_id": {"type": "string"}, "grantor_authority_kind": {"enum": ["role", "individual", "service_account", "quorum"]}}},
+ "grantee": {"type": "object", "required": ["grantee_id", "grantee_class"], "properties": {"grantee_id": {"type": "string"}, "grantee_class": {"enum": ["H", "M", "X"]}}},
+ "grant_scope": {"type": "object", "required": ["grant_types", "endpoint_refs"], "properties": {"grant_types": {"type": "array", "minItems": 1, "items": {"enum": ["event-read", "event-write", "memory-recall", "memory-writeback", "redaction-request", "redaction-execute", "bridge-export", "service-endpoint"]}}, "endpoint_refs": {"type": "array", "items": {"type": "string"}}, "domain_scope": {"type": "array", "items": {"type": "string"}}, "topology_scope": {"type": "array", "items": {"enum": ["solo-local", "active-multi-agent-room", "multi-room-workroom", "enterprise-bridge", "offline-fog"]}}}},
+ "grant_authority_layer": {"enum": ["institutional_truth", "grounded_schema", "commonsense_prior"]},
+ "reputation_requirement": {"type": ["object", "null"]},
+ "expires_at": {"type": "string", "format": "date-time"},
+ "revocation_ref": {"type": ["object", "null"]}
+ }
+}

schemas/policy-decision.v1.1.json

@@ -0,0 +1,25 @@
+{
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
+ "$id": "https://sourceos.dev/schemas/policy-decision.v1.1.json",
+ "title": "Policy Fabric Decision v1.1",
+ "type": "object",
+ "additionalProperties": true,
+ "required": ["schema_version", "decision_kind", "decision_id", "ts_decided", "event_ref", "policy_ref", "decision_family", "outcome", "verdict_status", "payload_mode", "decision_authority"],
+ "properties": {
+ "schema_version": {"const": "1.1.0"},
+ "decision_kind": {"const": "policy-fabric-decision"},
+ "decision_id": {"type": "string"},
+ "ts_decided": {"type": "string", "format": "date-time"},
+ "event_ref": {"type": "object", "required": ["event_id", "event_class", "event_content_sha256"], "properties": {"event_id": {"type": "string"}, "event_class": {"type": "string"}, "event_content_sha256": {"$ref": "#/$defs/sha256"}}},
+ "policy_ref": {"type": "object", "required": ["policy_id", "policy_content_sha256", "policy_epoch"], "properties": {"policy_id": {"type": "string"}, "policy_content_sha256": {"$ref": "#/$defs/sha256"}, "policy_epoch": {"type": "integer", "minimum": 0}}},
+ "decision_family": {"type": "string", "enum": ["replicate_event", "hydrate_context", "write_memory", "redact_event", "bridge_event", "export_artifact", "browser_event_export", "receipt_event_export"]},
+ "outcome": {"type": "string", "enum": ["allow", "deny", "summary_only", "ref_only", "redaction_required"]},
+ "verdict_status": {"type": "string", "enum": ["admitted", "partial", "rejected", "undecided"]},
+ "followup_required": {"type": ["object", "null"]},
+ "payload_mode": {"type": "string", "enum": ["metadata-only", "summary", "ref-only", "inline-bounded", "redacted"]},
+ "decision_authority": {"type": "object", "required": ["authority_id", "authority_kind", "authority_layer"], "properties": {"authority_id": {"type": "string"}, "authority_kind": {"enum": ["role", "individual", "service_account", "quorum"]}, "authority_layer": {"enum": ["institutional_truth", "grounded_schema", "commonsense_prior"]}}},
+ "explanation": {"type": "string"},
+ "evidence_refs": {"type": "array", "items": {"type": "string"}}
+ },
+ "$defs": {"sha256": {"type": "string", "pattern": "^[a-f0-9]{64}$"}}
+}