Publication BOM v1 Schema

Validates one L3 Publication BOM version. Shape-only: the finalisation-version check on the catalog pin, the disclosability of composed findings, and the supersedes chain are verifier (adbom-cli) checks. Normative requirements: https://sec.hypermedia.au/standards/publication/v1

Validates the publication standard.Raw schema (JSON).

Field	Type	Required	Constraints
bomFormat	string	yes	one of: CycloneDX
specVersion	string	yes	= 1.7
serialNumber	string	yes	pattern ^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
version	integer	yes	—
metadata	object	yes	—
components PUBL-003: exactly one data component — the rendered report with its SHA-256 hash	array	yes	items 1–1
compositions PUBL-005: aggregate complete; assemblies = the exact finding BOM-Links disclosed	array	yes	items 1–∞
signature	object	yes	—

Also defines: propertyEntry