whitehat-security/schemas/run-report.schema.json

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "whitehat-run/v1",
  "type": "object",
  "additionalProperties": false,
  "required": [
    "schema_version", "run_id", "evidence_class", "engagement_id", "authorization_id",
    "target", "target_revision", "posture_claim", "attacker_model", "started_at", "ended_at",
    "outcome", "attempted_operations", "cleanup", "credential_revocation", "probes",
    "limitations", "assurance_statement"
  ],
  "properties": {
    "schema_version": {"const": "whitehat-run/v1"},
    "evidence_class": {"enum": ["fixture", "target", "abort"]},
    "outcome": {"enum": ["pass", "finding", "inconclusive", "aborted"]},
    "attempted_operations": {"type": "integer", "minimum": 0},
    "probes": {"type": "array"},
    "limitations": {"type": "array", "items": {"type": "string"}},
    "assurance_statement": {"type": "string", "minLength": 1}
  }
}