Skip to content

Commit 10691cb

Browse files
fix(schema): re-sync the two revocation mirrors as well
The parity job guards three published schemas as a set, and all three had drifted. Cleaning only trace-v0.2.json left the job red for the other two, which is both a broken check and a half-fix: the revocation schemas are published at the same $id pattern and fetched by the same verifiers. The drift is three "maximum": 9007199254740991 constraints, the safe-integer bounds upstream added alongside the ones in trace-v0.2.json. Until now the published copies accepted revocation records carrying integers no JSON parser round-trips reliably. No dashes in either file, which is why the original sweep did not reach them. Re-synced from upstream rather than hand-patched, for the reason in the previous commit: parity is a byte comparison and a partially-updated mirror is not a mirror. Both $id values verified unchanged. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014NL8o3PXq6kfs2SdmBv6ak
1 parent 09bbcb5 commit 10691cb

2 files changed

Lines changed: 3 additions & 0 deletions

File tree

schema/trace-revocation-bundle-v1.json

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,11 +27,13 @@
2727
"issued_at": {
2828
"type": "integer",
2929
"minimum": 1700000000,
30+
"maximum": 9007199254740991,
3031
"description": "When the bundle was assembled, Unix epoch seconds."
3132
},
3233
"valid_until": {
3334
"type": "integer",
3435
"minimum": 1700000000,
36+
"maximum": 9007199254740991,
3537
"description": "The horizon this bundle may be relied on to. Past it, a verifier reports the record as unverified for revocation rather than verified: an expired bundle is not evidence a key is still trusted, and spec section 3.2.3 forbids reporting it as an affirming appraisal."
3638
},
3739
"statements": {

schema/trace-revocation-v1.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,7 @@
5151
"revoked_at": {
5252
"type": "integer",
5353
"minimum": 1700000000,
54+
"maximum": 9007199254740991,
5455
"description": "When the revocation was issued, Unix epoch seconds. Informational only. It is deliberately NOT the boundary: see the description of this schema."
5556
},
5657
"revocation_key_id": {

0 commit comments

Comments
 (0)