Spaces:
Running
Running
File size: 5,669 Bytes
4ee7081 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 | {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://huggingface.co/datasets/szl-holdings/uds-observability/schemas/receipt_schema.json",
"title": "UDS Governance Receipt (DSSE-Wrapped)",
"description": "A DSSE-wrapped (Dead Simple Signing Envelope, https://github.com/secure-systems-lab/dsse) governance receipt for a UDS span. The receipt attests to the span's provenance using an in-toto attestation predicate (https://github.com/in-toto/attestation) shaped per SLSA Provenance v1.0 (https://slsa.dev/spec/v1.0/provenance). Part of the 5-link SLSA attestation chain in extended-attestations.jsonl at uds-mesh commit 25a7e53.",
"type": "object",
"required": [
"receipt_id",
"span_id",
"trace_id",
"component",
"dsse_envelope",
"issued_at_utc",
"synthetic"
],
"properties": {
"receipt_id": {
"type": "string",
"description": "Unique receipt identifier. Monotonically increasing per component for deterministic pairing with spans.",
"examples": ["att-a11oy-001"]
},
"span_id": {
"type": "string",
"description": "The span_id of the UDS span this receipt attests to. Foreign key into spans_sample.jsonl.",
"pattern": "^[0-9a-f]{16}$"
},
"trace_id": {
"type": "string",
"description": "The trace_id of the trace containing the attested span. Allows receipt-to-trace correlation without needing span data.",
"pattern": "^[0-9a-f]{32}$"
},
"component": {
"type": "string",
"description": "The UDS mesh component that issued this receipt.",
"enum": ["a11oy", "amaru", "rosie", "sentra"]
},
"dsse_envelope": {
"type": "object",
"description": "The DSSE envelope (https://github.com/secure-systems-lab/dsse). Payload is an in-toto attestation statement (https://github.com/in-toto/attestation/blob/main/spec/README.md) with a SLSA Provenance v1.0 predicate (https://slsa.dev/spec/v1.0/provenance). Signatures in this dataset use HMAC-SHA-256 with a dev key (see slsa_dsse_substrate.py §1.5); production deployments should use Ed25519 via cosign.",
"required": ["payload", "payloadType", "signatures"],
"properties": {
"payload": {
"type": "string",
"description": "Base64-encoded in-toto attestation statement JSON. The PAE (Pre-Authentication Encoding) signing input is: 'DSSEv1 SP LEN(payloadType) SP payloadType SP LEN(payload_bytes) SP payload_bytes'.",
"contentEncoding": "base64"
},
"payloadType": {
"type": "string",
"description": "Media type of the payload. Must be 'application/vnd.in-toto+json' per the in-toto attestation spec (https://github.com/in-toto/attestation).",
"const": "application/vnd.in-toto+json"
},
"signatures": {
"type": "array",
"description": "Array of signature objects per the DSSE envelope spec.",
"minItems": 1,
"items": {
"type": "object",
"required": ["keyid", "sig"],
"properties": {
"keyid": {
"type": "string",
"description": "Key identifier, formatted as a DID URL (https://www.w3.org/TR/did-core/) for production or a short string for dev fixtures."
},
"sig": {
"type": "string",
"description": "Base64-encoded signature bytes over the PAE-encoded payload."
}
}
}
}
}
},
"predicate_type": {
"type": "string",
"description": "The in-toto predicate type URI. 'https://slsa.dev/provenance/v1' for SLSA Provenance v1.0 attestations.",
"examples": ["https://slsa.dev/provenance/v1"]
},
"subject_name": {
"type": "string",
"description": "Human-readable subject of the attestation, typically '{component}:{span_id}'.",
"examples": ["a11oy:00f067aa0ba902b7"]
},
"subject_sha256": {
"type": "string",
"description": "SHA-256 digest of the canonical JSON serialization of the attested span. Binds the receipt to the span content per SLSA subject requirements (https://slsa.dev/spec/v1.0/provenance#schema).",
"pattern": "^[0-9a-f]{64}$"
},
"builder_id": {
"type": "string",
"description": "SLSA builder identifier (https://slsa.dev/spec/v1.0/provenance#builderid). Uses the SZL DID method: 'did:web:szlholdings.com:{component}'.",
"examples": ["did:web:szlholdings.com:a11oy"]
},
"slsa_level_claimed": {
"type": "integer",
"description": "The SLSA level claimed by this receipt (https://slsa.dev/spec/v1.0/levels). Verified externally; this dataset does not include a verifier.",
"minimum": 0,
"maximum": 3
},
"issued_at_utc": {
"type": "string",
"format": "date-time",
"description": "ISO 8601 UTC timestamp of receipt issuance."
},
"mesh_commit": {
"type": "string",
"description": "uds-mesh commit SHA at receipt issuance. Canonical: 25a7e53 (uds-v0.2.0).",
"examples": ["25a7e53"]
},
"chain_position": {
"type": ["integer", "null"],
"description": "Position (1-indexed) of this receipt in the 5-link SLSA attestation chain in extended-attestations.jsonl. Null for standalone receipts not part of the chain.",
"minimum": 1,
"maximum": 5
},
"synthetic": {
"type": "boolean",
"description": "True for all records in v0.1.0. All receipts are synthetic fixtures; no live SLSA chain material is included.",
"const": true
}
},
"additionalProperties": false
}
|