Skip to content

Case Provenance BOM v1 Schema

Validates one sealed version of an L1 Case Provenance BOM. Shape-only: version monotonicity across seals, corpus completeness, sidecar joins, Fulcio identity comparison and hash recomputation are verifier (adbom-cli) checks. Normative requirements: https://sec.hypermedia.au/standards/case-provenance/v1

Validates the case-provenance standard.Raw schema (JSON).

FieldTypeRequiredConstraints
bomFormatstringyesone of: CycloneDX
specVersionstringyes= 1.7
serialNumberstringyespattern ^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
versionintegeryes
metadataobjectyes
components
CPRV-003: every artifact entry in the corpus, each per artifact-entry/v1
arrayyes
dependencies
CPRV-004: derived dependsOn evidence (lineage mirror)
array
signaturerefyes

Also defines: propertyEntrysignature