{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://flex-auth.netkingdom/schemas/readback_response.schema.json",
  "title": "ReadbackResponse",
  "description": "Advisory: no row is an enforcement decision. One row per requested system, in request order; none omitted.",
  "type": "object",
  "additionalProperties": false,
  "required": [
    "registry_snapshot_digest",
    "results"
  ],
  "properties": {
    "registry_snapshot_digest": {
      "type": "string",
      "pattern": "^sha256:[0-9a-f]{64}$"
    },
    "results": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/result"
      }
    }
  },
  "$defs": {
    "result": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "system",
        "effect"
      ],
      "properties": {
        "system": {
          "type": "string",
          "minLength": 1
        },
        "effect": {
          "enum": [
            "allow",
            "deny",
            "not_applicable"
          ]
        },
        "reason": {
          "type": "string"
        },
        "decision_id": {
          "type": "string"
        },
        "lifetime": {
          "type": "object",
          "required": [
            "kind",
            "expires_at"
          ],
          "properties": {
            "kind": {
              "type": "string"
            },
            "ttl": {
              "type": "string"
            },
            "not_before": {
              "type": "string"
            },
            "expires_at": {
              "type": "string"
            }
          }
        },
        "revocation_visibility": {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          }
        },
        "policy_package": {
          "type": "string"
        },
        "policy_package_digest": {
          "type": "string"
        }
      }
    }
  }
}