Enforce bounded operation guardrails

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a028de-e2c8-7732-8521-46a7fc5db82f

schemas/event-envelope.json

@@ -1,57 +1,45 @@
 {
-  "description": "Standard internal event envelope. Every event, whether time-fired or\nbroker-delivered, is normalised into this shape before processing.",
+  "description": "Standard internal event envelope. All inbound events (NATS, webhook, cron)\nare normalised into this shape before processing.",
   "properties": {
-    "event_id": {
-      "description": "Stable unique ID. Used for deduplication: if an event with this ID has already been processed, the router skips it.",
-      "title": "Event Id",
+    "id": {
+      "description": "UUID v4 \u2014 stable unique ID for deduplication.",
+      "title": "Id",
       "type": "string"
     },
     "type": {
-      "description": "Dot-namespaced event type, e.g. 'user.created'.",
+      "description": "Dot-namespaced event type, e.g. 'org.repo.registered'.",
       "title": "Type",
       "type": "string"
     },
-    "source": {
-      "description": "Originating service or component, e.g. 'user-service'.",
-      "title": "Source",
+    "version": {
+      "default": "1.0",
+      "description": "Schema version string.",
+      "title": "Version",
       "type": "string"
     },
-    "occurred_at": {
+    "timestamp": {
       "description": "When the event occurred (UTC).",
       "format": "date-time",
-      "title": "Occurred At",
+      "title": "Timestamp",
       "type": "string"
     },
-    "subject": {
-      "description": "Primary resource affected, e.g. 'user/123'.",
-      "title": "Subject",
+    "publisher": {
+      "description": "Originating service, e.g. 'the-custodian/state-hub'.",
+      "title": "Publisher",
       "type": "string"
     },
-    "trace_id": {
-      "description": "Distributed tracing correlation ID.",
-      "title": "Trace Id",
-      "type": "string"
-    },
-    "schema_version": {
-      "default": "1.0",
-      "description": "Schema version string for forward-compatibility.",
-      "title": "Schema Version",
-      "type": "string"
-    },
-    "payload": {
+    "attributes": {
       "additionalProperties": true,
-      "description": "Event-specific data; structure varies by event type.",
-      "title": "Payload",
+      "description": "Event-specific attributes; structure varies by event type.",
+      "title": "Attributes",
       "type": "object"
     }
   },
   "required": [
-    "event_id",
+    "id",
     "type",
-    "source",
-    "occurred_at",
-    "subject",
-    "trace_id"
+    "timestamp",
+    "publisher"
   ],
   "title": "EventEnvelope",
   "type": "object"