{
  "type": "object",
  "additionalProperties": false,
  "required": [
    "version",
    "org",
    "date",
    "feed_checked",
    "assessed_at",
    "inventory",
    "entries",
    "canadian_context",
    "question_for_leadership",
    "human_summary"
  ],
  "properties": {
    "version": {
      "const": "sovereigngrc.report/2"
    },
    "org": {
      "$ref": "#/$defs/text"
    },
    "date": {
      "$ref": "#/$defs/date"
    },
    "feed_checked": {
      "$ref": "#/$defs/timestamp"
    },
    "assessed_at": {
      "$ref": "#/$defs/timestamp"
    },
    "inventory": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "sources",
        "coverage_note"
      ],
      "properties": {
        "sources": {
          "type": "array",
          "items": {
            "type": "object",
            "additionalProperties": false,
            "required": [
              "kind",
              "name",
              "items_read"
            ],
            "properties": {
              "kind": {
                "enum": [
                  "registry",
                  "winget",
                  "dpkg",
                  "rpm",
                  "brew",
                  "lockfile",
                  "sbom",
                  "cmdb",
                  "pasted",
                  "other"
                ]
              },
              "name": {
                "$ref": "#/$defs/text"
              },
              "items_read": {
                "type": "integer",
                "minimum": 0
              }
            }
          },
          "maxItems": 100
        },
        "coverage_note": {
          "$ref": "#/$defs/text"
        }
      }
    },
    "entries": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/entry"
      }
    },
    "canadian_context": {
      "anyOf": [
        {
          "$ref": "#/$defs/text"
        },
        {
          "type": "null"
        }
      ]
    },
    "question_for_leadership": {
      "anyOf": [
        {
          "$ref": "#/$defs/text"
        },
        {
          "type": "null"
        }
      ]
    },
    "human_summary": {
      "$ref": "#/$defs/text"
    }
  },
  "allOf": [
    {
      "$ref": "#/$defs/noTodo"
    }
  ],
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://www.sovereigngrc.com/schemas/agent-report.schema.json",
  "title": "Sovereign GRC daily assessment evidence record v2",
  "$defs": {
    "text": {
      "type": "string",
      "minLength": 1
    },
    "url": {
      "type": "string",
      "format": "uri",
      "pattern": "^https?://"
    },
    "date": {
      "type": "string",
      "format": "date",
      "pattern": "^\\d{4}-\\d{2}-\\d{2}$"
    },
    "timestamp": {
      "type": "string",
      "format": "date-time"
    },
    "noTodo": {
      "anyOf": [
        {
          "type": "string",
          "not": {
            "pattern": "TODO",
            "type": "string"
          }
        },
        {
          "type": "object",
          "propertyNames": {
            "not": {
              "pattern": "TODO",
              "type": "string"
            }
          },
          "additionalProperties": {
            "$ref": "#/$defs/noTodo"
          }
        },
        {
          "type": "array",
          "items": {
            "$ref": "#/$defs/noTodo"
          }
        },
        {
          "type": "number"
        },
        {
          "type": "boolean"
        },
        {
          "type": "null"
        }
      ]
    },
    "asset": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "name",
        "version",
        "version_status",
        "exposure"
      ],
      "properties": {
        "name": {
          "$ref": "#/$defs/text"
        },
        "version": {
          "anyOf": [
            {
              "$ref": "#/$defs/text"
            },
            {
              "type": "null"
            }
          ]
        },
        "version_status": {
          "enum": [
            "affected",
            "not_affected",
            "fixed",
            "unknown"
          ]
        },
        "exposure": {
          "anyOf": [
            {
              "$ref": "#/$defs/text"
            },
            {
              "type": "null"
            }
          ]
        }
      }
    },
    "controls": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "basis",
        "iso27001",
        "nist_csf",
        "cis_v8",
        "itsg33",
        "osfi_b13"
      ],
      "properties": {
        "basis": {
          "enum": [
            "weakness-table",
            "curator",
            "incident-table"
          ]
        },
        "iso27001": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/text"
          },
          "uniqueItems": true
        },
        "nist_csf": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/text"
          },
          "uniqueItems": true
        },
        "cis_v8": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/text"
          },
          "uniqueItems": true
        },
        "itsg33": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/text"
          },
          "uniqueItems": true
        },
        "osfi_b13": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/text"
          },
          "uniqueItems": true
        },
        "reviewed": {
          "$ref": "#/$defs/date"
        }
      }
    },
    "entry": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "entry_id",
        "result",
        "assets",
        "decision",
        "mitigation_status",
        "owner",
        "due",
        "evidence",
        "controls"
      ],
      "properties": {
        "entry_id": {
          "$ref": "#/$defs/text"
        },
        "result": {
          "enum": [
            "affected",
            "not_affected",
            "fixed",
            "unknown",
            "no_match"
          ]
        },
        "assets": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/asset"
          },
          "maxItems": 500
        },
        "decision": {
          "enum": [
            "patch",
            "mitigate",
            "accept",
            "verify",
            "none"
          ]
        },
        "mitigation_status": {
          "enum": [
            "none",
            "planned",
            "applied"
          ]
        },
        "owner": {
          "anyOf": [
            {
              "$ref": "#/$defs/text"
            },
            {
              "type": "null"
            }
          ]
        },
        "due": {
          "anyOf": [
            {
              "$ref": "#/$defs/date"
            },
            {
              "type": "null"
            }
          ]
        },
        "evidence": {
          "type": "array",
          "items": {
            "$ref": "#/$defs/url"
          },
          "minItems": 1,
          "maxItems": 50,
          "uniqueItems": true
        },
        "controls": {
          "anyOf": [
            {
              "$ref": "#/$defs/controls"
            },
            {
              "type": "null"
            }
          ]
        }
      }
    }
  }
}