{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "StellaOps Time Anchor",
  "type": "object",
  "required": ["anchorTime", "source", "format", "tokenDigest"],
  "properties": {
    "anchorTime": {
      "description": "UTC timestamp asserted by the time token (RFC3339/ISO-8601)",
      "type": "string",
      "format": "date-time"
    },
    "source": {
      "description": "Logical source of the time token (e.g., roughtime", 
      "type": "string",
      "enum": ["roughtime", "rfc3161"]
    },
    "format": {
      "description": "Payload format identifier (e.g., draft-roughtime-v1, rfc3161)",
      "type": "string"
    },
    "tokenDigest": {
      "description": "SHA-256 of the raw time token bytes, hex-encoded",
      "type": "string",
      "pattern": "^[0-9a-fA-F]{64}$"
    },
    "signatureFingerprint": {
      "description": "Fingerprint of the signer key (hex); optional until trust roots finalized",
      "type": "string",
      "pattern": "^[0-9a-fA-F]{16,128}$"
    },
    "verification": {
      "description": "Result of local verification (if performed)",
      "type": "object",
      "properties": {
        "status": {"type": "string", "enum": ["unknown", "passed", "failed"]},
        "reason": {"type": "string"}
      },
      "required": ["status"],
      "additionalProperties": false
    }
  },
  "additionalProperties": false
}