{
  "$id": "https://stella-ops.org/schemas/events/advisoryai.evidence.bundle@0.json",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "title": "AdvisoryAI evidence bundle (draft v0)",
  "type": "object",
  "additionalProperties": false,
  "required": ["bundleId", "advisoryId", "tenant", "generatedAt", "observations"],
  "properties": {
    "bundleId": {"type": "string", "description": "Deterministic bundle identifier (UUID or ULID)."},
    "advisoryId": {"type": "string", "description": "Upstream advisory identifier (vendor or CVE-style)."},
    "tenant": {"type": "string", "description": "Owning tenant."},
    "generatedAt": {"type": "string", "format": "date-time", "description": "UTC timestamp when bundle was assembled."},
    "schemaVersion": {"type": "integer", "default": 0},
    "observations": {
      "type": "array",
      "minItems": 1,
      "items": {
        "type": "object",
        "additionalProperties": false,
        "required": ["observationId", "source"],
        "properties": {
          "observationId": {"type": "string"},
          "source": {"type": "string", "description": "Publisher or feed name."},
          "purl": {"type": "string", "description": "Optional package URL."},
          "cve": {"type": "string"},
          "severity": {"type": "string", "description": "Publisher-reported severity label."},
          "cvss": {
            "type": "object",
            "additionalProperties": false,
            "properties": {
              "vector": {"type": "string"},
              "score": {"type": "number"}
            }
          },
          "summary": {"type": "string"},
          "evidence": {
            "type": "object",
            "description": "Raw upstream statement or excerpt.",
            "additionalProperties": true
          }
        }
      }
    },
    "signatures": {
      "type": "array",
      "items": {
        "type": "object",
        "additionalProperties": false,
        "required": ["signature", "keyId"],
        "properties": {
          "signature": {"type": "string", "description": "Base64 signature over canonical JSON."},
          "keyId": {"type": "string"},
          "algorithm": {"type": "string"}
        }
      }
    }
  }
}