blockers 2

docs/airgap/time-anchor-schema.json

@@ -0,0 +1,43 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "StellaOps Time Anchor",
+  "type": "object",
+  "required": ["anchorTime", "source", "format", "tokenDigest"],
+  "properties": {
+    "anchorTime": {
+      "description": "UTC timestamp asserted by the time token (RFC3339/ISO-8601)",
+      "type": "string",
+      "format": "date-time"
+    },
+    "source": {
+      "description": "Logical source of the time token (e.g., roughtime", 
+      "type": "string",
+      "enum": ["roughtime", "rfc3161"]
+    },
+    "format": {
+      "description": "Payload format identifier (e.g., draft-roughtime-v1, rfc3161)",
+      "type": "string"
+    },
+    "tokenDigest": {
+      "description": "SHA-256 of the raw time token bytes, hex-encoded",
+      "type": "string",
+      "pattern": "^[0-9a-fA-F]{64}$"
+    },
+    "signatureFingerprint": {
+      "description": "Fingerprint of the signer key (hex); optional until trust roots finalized",
+      "type": "string",
+      "pattern": "^[0-9a-fA-F]{16,128}$"
+    },
+    "verification": {
+      "description": "Result of local verification (if performed)",
+      "type": "object",
+      "properties": {
+        "status": {"type": "string", "enum": ["unknown", "passed", "failed"]},
+        "reason": {"type": "string"}
+      },
+      "required": ["status"],
+      "additionalProperties": false
+    }
+  },
+  "additionalProperties": false
+}