{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://govoplan.add-ideas.de/schemas/runtime-distribution-keyring-v1.json",
  "title": "GovOPlaN runtime distribution trust keyring",
  "type": "object",
  "additionalProperties": false,
  "required": ["schema_version", "purpose", "keys"],
  "properties": {
    "schema_version": { "const": "1" },
    "purpose": { "const": "govoplan-runtime-distribution" },
    "keys": {
      "type": "array",
      "minItems": 1,
      "items": {
        "type": "object",
        "additionalProperties": false,
        "required": [
          "key_id",
          "algorithm",
          "status",
          "public_key_pem",
          "not_before",
          "expires_at"
        ],
        "properties": {
          "key_id": { "type": "string", "minLength": 1, "maxLength": 128 },
          "algorithm": { "const": "ed25519" },
          "status": { "enum": ["active", "retired", "revoked"] },
          "public_key_pem": { "type": "string", "minLength": 1, "maxLength": 8192 },
          "not_before": { "type": "string", "format": "date-time" },
          "expires_at": { "type": "string", "format": "date-time" }
        }
      }
    }
  }
}