Case Provenance BOM v1 Schema
Validates one sealed version of an L1 Case Provenance BOM. Shape-only: version monotonicity across seals, corpus completeness, sidecar joins, Fulcio identity comparison and hash recomputation are verifier (adbom-cli) checks. Normative requirements: https://sec.hypermedia.au/standards/case-provenance/v1
Validates the case-provenance standard.Raw schema (JSON).
| Field | Type | Required | Constraints |
|---|---|---|---|
bomFormat | string | yes | one of: CycloneDX |
specVersion | string | yes | = 1.7 |
externalReferences | array | yes | items 1–∞ |
serialNumber | string | yes | pattern ^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ |
version | integer | yes | — |
metadata | object | yes | — |
componentsCPRV-003: every artifact entry in the corpus, each per artifact-entry/v1 | array | yes | — |
dependenciesCPRV-004: derived dependsOn evidence (lineage mirror) | array | — | — |
signature | ref | yes | — |
Also defines: hashEntrypropertyEntrysignature