{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://cezentech.com/schemas/nexus-one/signature-envelope-v1.json",
  "title": "Nexus One AI Detached Signature Envelope",
  "type": "object",
  "additionalProperties": false,
  "required": ["schema", "manifest_digest", "algorithm", "key_id", "signed_at", "signature"],
  "properties": {
    "schema": { "const": "com.cezen.nexus-one.signature-envelope.v1" },
    "manifest_digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
    "algorithm": { "const": "ed25519" },
    "key_id": { "type": "string", "minLength": 8 },
    "signed_at": { "type": "string", "format": "date-time" },
    "policy_version": { "type": "string", "minLength": 1 },
    "signature": { "type": "string", "contentEncoding": "base64" },
    "certificate_chain": {
      "type": "array", "items": { "type": "string", "contentEncoding": "base64" }
    }
  }
}