Spaces:
Running
Running
| { | |
| "$schema": "http://json-schema.org/draft-07/schema#", | |
| "$id": "https://doctrine-v6.ai/schemas/a11oy-knowledge.schema.json", | |
| "title": "A11oy Knowledge Vertical Policy Schema", | |
| "description": "JSON Schema for Doctrine v6 R3 vertical governance policy YAML files. Validates all 10 vertical policy documents defining regulatory-clause → Λ-axis mappings. Version 1.0.0.", | |
| "type": "object", | |
| "required": [ | |
| "schema_version", | |
| "vertical", | |
| "regime", | |
| "effective_date", | |
| "jurisdiction", | |
| "meta", | |
| "regulatory_clauses", | |
| "compliance_thresholds", | |
| "receipt_chain" | |
| ], | |
| "additionalProperties": false, | |
| "properties": { | |
| "schema_version": { | |
| "type": "string", | |
| "description": "Semantic version of this schema (must match policy document schema_version).", | |
| "pattern": "^\\d+\\.\\d+\\.\\d+$", | |
| "examples": ["1.0.0"] | |
| }, | |
| "vertical": { | |
| "type": "string", | |
| "description": "Regulated vertical industry identifier.", | |
| "enum": [ | |
| "healthcare", | |
| "financial", | |
| "defense", | |
| "aviation", | |
| "automotive", | |
| "pharmaceutical", | |
| "energy", | |
| "maritime", | |
| "legaltech", | |
| "academic" | |
| ] | |
| }, | |
| "regime": { | |
| "type": "string", | |
| "description": "Primary regulatory regime identifier (slash-delimited for compound regimes).", | |
| "minLength": 3, | |
| "maxLength": 128, | |
| "examples": ["HIPAA/HITECH", "SOX/Dodd-Frank/SR11-7", "CMMC-L3/NIST-SP-800-171"] | |
| }, | |
| "effective_date": { | |
| "type": "string", | |
| "description": "ISO 8601 date this policy version takes effect.", | |
| "pattern": "^\\d{4}-\\d{2}-\\d{2}$" | |
| }, | |
| "jurisdiction": { | |
| "type": "string", | |
| "description": "Jurisdiction scope of this policy.", | |
| "minLength": 2, | |
| "examples": ["US-Federal", "EU-EEA", "IMO-International", "US-FAA/EASA"] | |
| }, | |
| "meta": { | |
| "type": "object", | |
| "description": "Human-readable metadata for this policy document.", | |
| "required": ["title", "description", "authority", "receipt_chain_required", "merkle_root_algorithm"], | |
| "additionalProperties": true, | |
| "properties": { | |
| "title": { | |
| "type": "string", | |
| "minLength": 10, | |
| "maxLength": 256 | |
| }, | |
| "description": { | |
| "type": "string", | |
| "minLength": 20 | |
| }, | |
| "authority": { | |
| "type": "string", | |
| "description": "Canonical citation of primary legal authority.", | |
| "minLength": 5 | |
| }, | |
| "receipt_chain_required": { | |
| "type": "boolean", | |
| "description": "Whether this vertical mandates Merkle DAG receipt chaining." | |
| }, | |
| "merkle_root_algorithm": { | |
| "type": "string", | |
| "description": "Hash algorithm for Merkle DAG root computation.", | |
| "enum": ["SHA3-256", "SHA-256", "BLAKE3", "SHA3-512"] | |
| }, | |
| "classification_ceiling": { | |
| "type": "string", | |
| "description": "Maximum data classification level (defense contexts).", | |
| "enum": ["UNCLASSIFIED", "CUI", "SECRET", "TOP-SECRET"] | |
| }, | |
| "design_assurance_level": { | |
| "type": "string", | |
| "description": "DO-178C Design Assurance Level (aviation contexts).", | |
| "enum": ["DAL-A", "DAL-B", "DAL-C", "DAL-D", "DAL-E"] | |
| }, | |
| "asil_level": { | |
| "type": "string", | |
| "description": "ISO 26262 Automotive Safety Integrity Level.", | |
| "enum": ["QM", "ASIL-A", "ASIL-B", "ASIL-C", "ASIL-D"] | |
| }, | |
| "bes_impact": { | |
| "type": "string", | |
| "description": "NERC CIP BES Cyber System impact classification.", | |
| "enum": ["LOW", "MEDIUM", "HIGH"] | |
| }, | |
| "maritime_security_level": { | |
| "type": "string", | |
| "description": "ISPS Code Maritime Security Level.", | |
| "enum": ["MARSEC-1", "MARSEC-2", "MARSEC-3"] | |
| }, | |
| "data_subject_jurisdiction": { | |
| "type": "string", | |
| "description": "Data subject protection jurisdiction." | |
| }, | |
| "irb_oversight": { | |
| "type": "string", | |
| "description": "IRB oversight requirement level.", | |
| "enum": ["required", "exempt", "expedited", "full-board"] | |
| }, | |
| "gxp_category": { | |
| "type": "string", | |
| "description": "GxP category for pharmaceutical/biotech contexts." | |
| } | |
| } | |
| }, | |
| "regulatory_clauses": { | |
| "type": "array", | |
| "description": "Array of regulatory clause → Λ-axis mappings. Must contain 8–12 entries.", | |
| "minItems": 8, | |
| "maxItems": 12, | |
| "items": { | |
| "$ref": "#/definitions/RegulatoryClause" | |
| } | |
| }, | |
| "compliance_thresholds": { | |
| "type": "object", | |
| "description": "Quantitative compliance thresholds for this vertical.", | |
| "required": ["minimum_lambda_coverage", "mandatory_axes", "receipt_retention_days"], | |
| "additionalProperties": true, | |
| "properties": { | |
| "minimum_lambda_coverage": { | |
| "type": "integer", | |
| "description": "Minimum number of distinct Λ-axes that must be covered.", | |
| "minimum": 1, | |
| "maximum": 10 | |
| }, | |
| "mandatory_axes": { | |
| "type": "array", | |
| "description": "List of Λ-axes that are always required for this vertical.", | |
| "items": { | |
| "type": "string", | |
| "pattern": "^Λ(10|[1-9])$" | |
| }, | |
| "minItems": 1, | |
| "maxItems": 10, | |
| "uniqueItems": true | |
| }, | |
| "receipt_retention_days": { | |
| "type": "integer", | |
| "description": "Minimum receipt chain retention period in days.", | |
| "minimum": 365 | |
| } | |
| } | |
| }, | |
| "receipt_chain": { | |
| "type": "object", | |
| "description": "Merkle DAG receipt chain configuration for this vertical.", | |
| "required": ["algorithm", "chaining", "quorum", "nodes"], | |
| "additionalProperties": true, | |
| "properties": { | |
| "algorithm": { | |
| "type": "string", | |
| "enum": ["SHA3-256", "SHA-256", "BLAKE3", "SHA3-512"], | |
| "description": "Hash algorithm for receipt chain nodes." | |
| }, | |
| "chaining": { | |
| "type": "string", | |
| "enum": ["merkle_dag", "merkle_tree", "hash_chain"], | |
| "description": "Chaining topology for receipt nodes." | |
| }, | |
| "quorum": { | |
| "type": "string", | |
| "pattern": "^\\d+-of-\\d+$", | |
| "description": "Quorum specification for receipt validation (e.g., '2-of-3')." | |
| }, | |
| "nodes": { | |
| "type": "array", | |
| "description": "Named receipt chain node roles.", | |
| "items": { "type": "string" }, | |
| "minItems": 2, | |
| "maxItems": 7 | |
| }, | |
| "der_signed": { "type": "boolean" }, | |
| "hardware_security_module": { "type": "boolean" }, | |
| "enclave_attestation": { "type": "boolean" }, | |
| "air_gapped_backup": { "type": "boolean" }, | |
| "satellite_sync": { "type": "boolean" }, | |
| "qualified_electronic_signature": { "type": "boolean" }, | |
| "irb_signed": { "type": "boolean" }, | |
| "data_residency": { "type": "string" } | |
| } | |
| } | |
| }, | |
| "definitions": { | |
| "LambdaAxis": { | |
| "type": "string", | |
| "description": "Doctrine v6 Λ-axis identifier.", | |
| "enum": ["Λ1", "Λ2", "Λ3", "Λ4", "Λ5", "Λ6", "Λ7", "Λ8", "Λ9", "Λ10"] | |
| }, | |
| "LambdaAxisLabel": { | |
| "type": "string", | |
| "description": "Human-readable label for the Λ-axis.", | |
| "enum": [ | |
| "Transparency", | |
| "Accountability", | |
| "Privacy", | |
| "Fairness", | |
| "Safety", | |
| "Security", | |
| "Auditability", | |
| "Robustness", | |
| "Explainability", | |
| "Sovereignty" | |
| ] | |
| }, | |
| "EnforcementLevel": { | |
| "type": "string", | |
| "enum": ["mandatory", "recommended", "informational"], | |
| "description": "Enforcement level: mandatory (legally required), recommended (best practice), informational (advisory)." | |
| }, | |
| "AxisMapping": { | |
| "type": "object", | |
| "description": "Mapping from a regulatory clause to a single Doctrine v6 Λ-axis.", | |
| "required": ["axis", "label", "weight", "enforcement"], | |
| "additionalProperties": false, | |
| "properties": { | |
| "axis": { | |
| "$ref": "#/definitions/LambdaAxis" | |
| }, | |
| "label": { | |
| "$ref": "#/definitions/LambdaAxisLabel" | |
| }, | |
| "weight": { | |
| "type": "number", | |
| "description": "Compliance weight in [0.0, 1.0]. 1.0 = fully determinative.", | |
| "minimum": 0.0, | |
| "maximum": 1.0 | |
| }, | |
| "enforcement": { | |
| "$ref": "#/definitions/EnforcementLevel" | |
| }, | |
| "rationale": { | |
| "type": "string", | |
| "description": "Natural language rationale for this axis mapping.", | |
| "minLength": 20 | |
| } | |
| } | |
| }, | |
| "RegulatoryClause": { | |
| "type": "object", | |
| "description": "A single regulatory clause with its Doctrine v6 Λ-axis mappings.", | |
| "required": ["clause_id", "title", "citation", "full_ref", "lambda_axes"], | |
| "additionalProperties": false, | |
| "properties": { | |
| "clause_id": { | |
| "type": "string", | |
| "description": "Machine-readable clause identifier (e.g., HIPAA-PR-164.502 or HIPAA-SR-164.312a2i). Lowercase subsection letters are permitted because regulatory citations encode them (21 CFR 11.10(a), HIPAA 164.312(a)(2)(i)).", | |
| "pattern": "^[A-Za-z0-9][A-Za-z0-9\\-\\.]+$", | |
| "minLength": 5, | |
| "maxLength": 64 | |
| }, | |
| "title": { | |
| "type": "string", | |
| "description": "Short human-readable clause title.", | |
| "minLength": 5, | |
| "maxLength": 256 | |
| }, | |
| "citation": { | |
| "type": "string", | |
| "description": "Short citation string (CFR section, statute, etc.).", | |
| "minLength": 5 | |
| }, | |
| "full_ref": { | |
| "type": "string", | |
| "description": "Full legal reference including long-form citation.", | |
| "minLength": 20 | |
| }, | |
| "lambda_axes": { | |
| "type": "array", | |
| "description": "Array of Λ-axis mappings for this clause. Typically 2 axes per clause.", | |
| "minItems": 1, | |
| "maxItems": 4, | |
| "items": { | |
| "$ref": "#/definitions/AxisMapping" | |
| } | |
| } | |
| } | |
| } | |
| } | |
| } | |