submission_intent_schema_v1.json (2341B)
1 { 2 "schema": "tera.publication_intent.schema_descriptor.v1", 3 "payload_schema": "tera.publication_intent.v1", 4 "schema_version": 1, 5 "encoding": "utf8_json", 6 "unknown_fields": "reject", 7 "payload_fields": ["schema_version", "schema_sha256", "command_id", "scope", "reservation_id", "command_type", "plan_wire_json", "media", "media_policy", "policy"], 8 "bounds": { 9 "payload_bytes": 4194304, 10 "media_items": 20, 11 "media_policy_bytes": 32, 12 "timestamp_ms_max": 9223372036854775807 13 }, 14 "source": "The original immutable composer envelope carried by PrepareFromDraft and the existing reservation; never substitute the reservation for composer CAS.", 15 "plan": "Exact validated shared PlanWire at the reserved author and time, equal to the pure shared preparation.", 16 "media": "Captured byte-verified metadata and complete configuration fingerprint; initial entries are pending. No bytes, credentials, transport or signer handle are serialized.", 17 "policy": "Exact canonical targets, satisfaction, deadline and cancellation captured before commit.", 18 "envelope": { 19 "owner": "AuthoredDraft", 20 "revision": 1, 21 "author": "captured stable account", 22 "scope": "existing composer scope digest", 23 "without_media": "ready_to_sign with the exact prepared operation association", 24 "with_media": "media_preparing with no draft operation association", 25 "timestamps": "equal reserved time no earlier than the original source" 26 }, 27 "identity": { 28 "input": "author_32_bytes followed by random command_id_16_bytes; no content hash or session generation", 29 "derivation": "first 16 bytes of sha256(domain_with_zero_terminator, input); reject zero", 30 "intent_domain": "tera.publication_intent.v1", 31 "operation_domain": "tera.submission_operation.v1", 32 "receipt": "existing PrepareFromDraft::commit_id_for stable account and command key" 33 }, 34 "transaction": "Existing single-owner PrepareFromDraft installs intent, operation, planned artifact, delivery plan and complete association receipts atomically. Exact committed replay precedes source CAS; conflicting replay is rejected.", 35 "authority": "Local immutable intent only. No signer or network inside the transaction; media progress and native operation advancement are separate consumers. Legacy draft mutators reject this distinct schema." 36 }