evidence record schema
RAGE Evidence. Required: evidence_id, content_hash.
Properties
| property | type | required | notes |
|---|---|---|---|
content_hash |
string |
required | |
evidence_id |
string |
required | |
kind |
const |
required |
must be "evidence".
|
captured_at |
string |
optional | format: date-time. |
detail |
object |
optional | |
pointer |
string |
optional | where the raw response lives, if retained |
scope |
any |
optional | |
source |
string |
optional |
the API/collection operation, e.g. azure:role_assignment:list
|
status |
string |
optional | collection outcome: ok/denied/throttled/… |
Additional properties are allowed - RAGE is forward-compatible; unknown fields are ignored.
Raw schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://rage.fail/schemas/0.1/evidence.schema.json",
"title": "RAGE Evidence",
"type": "object",
"required": [
"kind",
"evidence_id",
"content_hash"
],
"additionalProperties": true,
"properties": {
"kind": {
"const": "evidence"
},
"evidence_id": {
"type": "string"
},
"content_hash": {
"type": "string"
},
"source": {
"type": "string",
"description": "the API/collection operation, e.g. azure:role_assignment:list"
},
"status": {
"type": "string",
"description": "collection outcome: ok/denied/throttled/\u2026"
},
"captured_at": {
"type": "string",
"format": "date-time"
},
"scope": {},
"pointer": {
"type": "string",
"description": "where the raw response lives, if retained"
},
"detail": {
"type": "object"
}
}
}