{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "Durable qualified provider ownership fact",
  "description": "Immutable ownership evidence from an enrolled compatibility writer. It grants no browser or provider access.",
  "type": "object",
  "additionalProperties": false,
  "required": ["iss", "aud", "jti", "correlation_id", "binding_id", "expected_revision", "party_id", "auth_version", "provider", "instance", "external_id", "authentication_evidence_ref", "oidc_issuer", "oidc_subject", "verified_at"],
  "properties": {
    "iss": {"const": "themelio-compat"},
    "aud": {"const": "party_governance.provider_binding.v1"},
    "jti": {"$ref": "#/$defs/UUID"},
    "correlation_id": {"$ref": "#/$defs/UUID"},
    "binding_id": {"$ref": "#/$defs/UUID"},
    "expected_revision": {"type": "integer", "minimum": 0, "maximum": 9007199254740991},
    "party_id": {"$ref": "#/$defs/UUID"},
    "auth_version": {"type": "integer", "minimum": 1, "maximum": 9007199254740991},
    "provider": {"enum": ["gitlab", "waldur"]},
    "instance": {"type": "string", "minLength": 1, "maxLength": 2048},
    "external_id": {"type": "string", "minLength": 1, "maxLength": 2048},
    "authentication_evidence_ref": {"type": "string", "pattern": "^sha256:[0-9a-f]{64}$"},
    "oidc_issuer": {"type": "string", "minLength": 1, "maxLength": 2048},
    "oidc_subject": {"type": "string", "minLength": 1, "maxLength": 2048},
    "verified_at": {"type": "integer", "minimum": 0, "maximum": 9007199254740991}
  },
  "$defs": {
    "UUID": {"type": "string", "format": "uuid", "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$"},
    "ProtectedHeader": {
      "type": "object",
      "additionalProperties": false,
      "required": ["alg", "typ", "kid"],
      "properties": {
        "alg": {"const": "EdDSA"},
        "typ": {"const": "pharos-party-provider-binding-v1+jwt"},
        "kid": {"type": "string", "minLength": 1, "maxLength": 128}
      }
    }
  }
}