CyberBench License Envelope v1 Schema

Validates a .cblicense file. The signature covers the exact payload bytes carried here — verification never re-serializes the payload, so canonical-JSON ambiguity cannot arise. payload and signature are STANDARD base64 (not base64url). The algorithm field is self-description only: a verifier takes the authoritative algorithm from its trusted key and rejects a mismatch. Normative requirements: https://sec.hypermedia.au/standards/license-envelope/v1

Validates the license-envelope standard.Raw schema (JSON).

Field	Type	Required	Constraints
schema	string	yes	= cyberbench/license-envelope/v1
keyId	string	yes	—
algorithm	string	yes	one of: ml-dsa-87
payload	string	yes	—
signature	string	yes	—