{
  "EmbodiedSystem": {
    "fields": [
      "system_id",
      "system_type",
      "embodiment_type",
      "identity",
      "provenance",
      "tenant",
      "capabilities",
      "sensors",
      "actuators",
      "environment",
      "spatial_reference",
      "temporal_reference",
      "policy",
      "authority",
      "risk_state",
      "consequence_profile",
      "runtime_state",
      "attestation",
      "evidence",
      "self_entity"
    ],
    "canonical": true
  },
  "SpatialTemporalState": {
    "fields": [
      "entity_id",
      "timestamp",
      "position",
      "velocity",
      "acceleration",
      "orientation",
      "uncertainty",
      "evidence_class",
      "frame",
      "provenance",
      "source_id",
      "kind",
      "classification",
      "dynamic"
    ],
    "canonical": true
  },
  "SensorEvidence": {
    "fields": [
      "observation_id",
      "sensor_id",
      "source_identity",
      "sensor_type",
      "timestamp",
      "location",
      "coordinate_frame",
      "provenance",
      "confidence",
      "uncertainty",
      "integrity_state",
      "content",
      "signature_b64"
    ],
    "canonical": true
  },
  "SpatialObservation": {
    "fields": [
      "observation_id",
      "sensor_id",
      "source_identity",
      "sensor_type",
      "timestamp",
      "location",
      "coordinate_frame",
      "provenance",
      "confidence",
      "uncertainty",
      "integrity_state",
      "content",
      "signature_b64",
      "entity_id",
      "evidence_class"
    ],
    "canonical": true
  },
  "SensorRegistration": {
    "fields": [
      "sensor_id",
      "source_identity",
      "sensor_type",
      "public_key_b64",
      "system_id",
      "tenant",
      "registered_at"
    ],
    "canonical": true
  },
  "SpatialEntityIdentity": {
    "fields": [
      "entity_id",
      "identity_provenance",
      "source_provenance",
      "classification",
      "observation_history",
      "track_history",
      "confidence",
      "uncertainty",
      "state",
      "tenant"
    ],
    "canonical": true
  },
  "GovernedWorldModel": {
    "fields": [
      "model_id",
      "model_version",
      "model_digest",
      "config_digest",
      "artifact_digest",
      "provenance",
      "model_type",
      "evaluation_evidence",
      "deployment_state",
      "uncertainty"
    ],
    "canonical": true
  },
  "WorldModelOutput": {
    "fields": [
      "output_id",
      "model_id",
      "model_version",
      "model_digest",
      "config_digest",
      "world_state_digest",
      "scenario_digest",
      "timestamp",
      "predictions",
      "uncertainty",
      "claims",
      "evidence_class",
      "binding_signature_b64"
    ],
    "canonical": true
  },
  "GovernedTrajectory": {
    "fields": [
      "trajectory_id",
      "system_id",
      "origin",
      "destination",
      "path",
      "velocity_profile",
      "acceleration_profile",
      "timing",
      "predicted_interactions",
      "constraints",
      "confidence",
      "uncertainty",
      "source_model",
      "decision_binding",
      "capability_binding",
      "consequence_binding",
      "tenant",
      "authorization_state"
    ],
    "canonical": true
  },
  "TrajectoryApproval": {
    "fields": [
      "approval_id",
      "trajectory_id",
      "trajectory_digest",
      "system_id",
      "world_state_digest",
      "inputs_digest",
      "issued_at",
      "expires_at",
      "issuer",
      "signature_b64",
      "revoked"
    ],
    "canonical": true
  },
  "PhysicalConsequenceVector": {
    "fields": [
      "dims",
      "affected_entities",
      "spatial_extent_m",
      "time_to_impact_s",
      "reversibility",
      "uncertainty",
      "unknown_dimensions"
    ],
    "canonical": true
  },
  "SpatialCapabilityBoundary": {
    "fields": [
      "capability_id",
      "principal",
      "tenant",
      "operation",
      "resource",
      "geographic",
      "temporal",
      "environmental",
      "speed_limit",
      "energy_limit",
      "risk_ceiling",
      "system_state_required",
      "parent_digest"
    ],
    "canonical": true
  },
  "PhysicalAuthorityScope": {
    "fields": [
      "principal",
      "tenant",
      "scope",
      "geographic",
      "temporal",
      "environmental",
      "speed_limit",
      "risk_ceiling"
    ],
    "canonical": true
  },
  "PhysicalAuthorizationStep": {
    "fields": [
      "step_id",
      "system_id",
      "trajectory_id",
      "world_state_id",
      "world_version",
      "bindings",
      "scope",
      "issued_at",
      "expires_at",
      "nonce",
      "sequence",
      "issuer",
      "signature_b64"
    ],
    "canonical": true
  },
  "GovernedSafeState": {
    "fields": [
      "safe_state_id",
      "system_id",
      "state",
      "semantics",
      "reason",
      "requested_at"
    ],
    "canonical": true
  },
  "ActuatorCommand": {
    "fields": [
      "command_id",
      "actuator_id",
      "system_id",
      "command_type",
      "parameters",
      "command_schema",
      "action_hash"
    ],
    "canonical": true
  },
  "ExecutionPermit": {
    "fields": [
      "permit_id",
      "command_digest",
      "actuator_id",
      "system_id",
      "action_hash",
      "step_id",
      "authorization_id",
      "issued_at",
      "expires_at",
      "nonce",
      "issuer",
      "signature_b64"
    ],
    "canonical": true
  },
  "PhysicalActionCommit": {
    "fields": [
      "action_id",
      "principal",
      "agent_id",
      "operation",
      "target",
      "parameters",
      "world_state_digest",
      "trajectory_digest",
      "decision_digest",
      "capability_digest",
      "authority_digest",
      "policy_digest",
      "risk_digest",
      "consequence_digest",
      "authorization_digest",
      "risk_snapshot"
    ],
    "canonical": true
  },
  "PhysicalScenario": {
    "fields": [
      "scenario_id",
      "system_domain",
      "parameters",
      "author",
      "parent_digest",
      "mutation"
    ],
    "canonical": true
  },
  "PhysicalAdversarialScenario": {
    "fields": [
      "attack_class",
      "description",
      "scenario",
      "validation",
      "real_world_validation"
    ],
    "canonical": true
  },
  "HumanPrincipal": {
    "fields": [
      "human_id",
      "public_key_b64",
      "roles",
      "tenant",
      "scope",
      "delegated_by"
    ],
    "canonical": true
  },
  "_domains": {
    "D_ACTUATOR": "CAIN42/E15-ACTUATOR-COMMAND/v1",
    "D_ACTUATOR_RESULT": "CAIN42/E15-ACTUATOR-RESULT/v1",
    "D_ADVERSARIAL": "CAIN42/E15-PHYSICAL-ADVERSARIAL/v1",
    "D_AUTH_SCOPE": "CAIN42/E15-PHYSICAL-AUTHORITY-SCOPE/v1",
    "D_AUTONOMY": "CAIN42/E15-EMBODIED-AUTONOMY/v1",
    "D_BINDING": "CAIN42/E15-PHYSICAL-BINDING-COMPONENT/v1",
    "D_BLAST": "CAIN42/E15-PHYSICAL-BLAST-RADIUS/v1",
    "D_CONSISTENCY": "CAIN42/E15-CROSS-MODAL-CONSISTENCY/v1",
    "D_CONT_AUTH": "CAIN42/E15-CONTINUOUS-PHYSICAL-AUTHORIZATION/v1",
    "D_CONVERGENCE": "CAIN42/E15-CONVERGENCE/v1",
    "D_COUNTERFACTUAL": "CAIN42/E15-PHYSICAL-COUNTERFACTUAL/v1",
    "D_DECISION": "CAIN42/E15-PHYSICAL-DECISION/v1",
    "D_DRIFT": "CAIN42/E15-SPATIAL-REALITY-DRIFT/v1",
    "D_EMBODIED": "CAIN42/E15-EMBODIED-SYSTEM/v1",
    "D_ENTITY": "CAIN42/E15-SPATIAL-ENTITY-IDENTITY/v1",
    "D_ENTITY_OP": "CAIN42/E15-SPATIAL-ENTITY-OPERATION/v1",
    "D_EVIDENCE": "CAIN42/E15-PHYSICAL-EVIDENCE/v1",
    "D_FEEDBACK": "CAIN42/E15-REALITY-FEEDBACK/v1",
    "D_HEALTH": "CAIN42/E15-EMBODIED-HEALTH/v1",
    "D_HUMAN": "CAIN42/E15-PHYSICAL-HUMAN-AUTHORITY/v1",
    "D_HUMAN_ACT": "CAIN42/E15-PHYSICAL-HUMAN-ACT/v1",
    "D_MAP": "CAIN42/E15-MAP/v1",
    "D_OBSERVATION": "CAIN42/E15-SPATIAL-OBSERVATION/v1",
    "D_PERMIT": "CAIN42/E15-ACTUATOR-EXECUTION-PERMIT/v1",
    "D_PHYS_COMMIT": "CAIN42/E15-PHYSICAL-ACTION-COMMIT/v1",
    "D_PHYS_CONSEQ": "CAIN42/E15-PHYSICAL-CONSEQUENCE/v1",
    "D_SAFE_STATE": "CAIN42/E15-SAFE-STATE/v1",
    "D_SCENARIO": "CAIN42/E15-PHYSICAL-SCENARIO/v1",
    "D_SENSOR_REG": "CAIN42/E15-SENSOR-REGISTRATION/v1",
    "D_SIMULATOR": "CAIN42/E15-SIMULATOR/v1",
    "D_SIM_EVIDENCE": "CAIN42/E15-SIMULATION-EVIDENCE/v1",
    "D_SIM_GAP": "CAIN42/E15-SIM-REALITY-GAP/v1",
    "D_SPATIAL_CAP": "CAIN42/E15-SPATIAL-CAPABILITY-BOUNDARY/v1",
    "D_SPATIAL_STATE": "CAIN42/E15-SPATIAL-TEMPORAL-STATE/v1",
    "D_TRAJECTORY": "CAIN42/E15-GOVERNED-TRAJECTORY/v1",
    "D_TRAJECTORY_APPROVAL": "CAIN42/E15-TRAJECTORY-APPROVAL/v1",
    "D_TRAJECTORY_DECISION": "CAIN42/E15-TRAJECTORY-DECISION/v1",
    "D_TRAJECTORY_GRAPH": "CAIN42/E15-TRAJECTORY-PREDICTION-GRAPH/v1",
    "D_TWIN": "CAIN42/E15-DIGITAL-TWIN/v1",
    "D_WORLD": "CAIN42/E15-GOVERNED-WORLD-STATE/v1",
    "D_WORLD_HISTORY": "CAIN42/E15-WORLD-STATE-HISTORY/v1",
    "D_WORLD_MODEL": "CAIN42/E15-WORLD-MODEL/v1",
    "D_WORLD_MODEL_BIND": "CAIN42/E15-WORLD-MODEL-BINDING/v1",
    "D_WORLD_MODEL_OUT": "CAIN42/E15-WORLD-MODEL-OUTPUT/v1",
    "D_WORLD_PROV": "CAIN42/E15-WORLD-STATE-PROVENANCE/v1"
  },
  "_enums": {
    "system_domains": [
      "DIGITAL",
      "PHYSICAL",
      "HYBRID"
    ],
    "embodiment_types": [
      "vehicle",
      "robot",
      "drone",
      "industrial_machine",
      "warehouse_system",
      "smart_space",
      "digital_agent",
      "hybrid_agent"
    ],
    "spatial_layers": [
      "OBSERVED",
      "INFERRED",
      "PREDICTED",
      "SIMULATED",
      "UNKNOWN"
    ],
    "sensor_types": [
      "camera",
      "lidar",
      "radar",
      "depth",
      "imu",
      "gnss",
      "map",
      "telemetry",
      "audio",
      "thermal",
      "other"
    ],
    "consistency_states": [
      "CONSISTENT",
      "INCONSISTENT",
      "DEGRADED",
      "AMBIGUOUS",
      "UNKNOWN"
    ],
    "drift_classes": [
      "OBJECT_APPEARANCE",
      "OBJECT_DISAPPEARANCE",
      "UNEXPECTED_MOTION",
      "MAP_MISMATCH",
      "SENSOR_DISAGREEMENT",
      "LOCATION_DRIFT",
      "TEMPORAL_STALENESS",
      "TRAJECTORY_DIVERGENCE",
      "ENVIRONMENT_CHANGE",
      "PREDICTED_OBSERVED_DIVERGENCE"
    ],
    "trajectory_decisions": [
      "APPROVE",
      "DENY",
      "MODIFY",
      "DEFER",
      "REQUIRE_REEVALUATION",
      "SAFE_STATE",
      "UNKNOWN"
    ],
    "revalidation_decisions": [
      "CONTINUE",
      "REAUTHORIZE",
      "MODIFY",
      "STOP"
    ],
    "safe_states": [
      "STOP",
      "HOLD",
      "DISENGAGE",
      "DEGRADE",
      "RETURN",
      "ISOLATE",
      "WAIT_FOR_HUMAN",
      "WAIT_FOR_REAUTHORIZATION"
    ],
    "health_dimensions": [
      "sensor_health",
      "actuator_health",
      "compute_health",
      "communication_health",
      "localization_health",
      "model_health",
      "world_state_health"
    ],
    "health_actions": [
      "CONTINUE",
      "LIMIT",
      "PAUSE",
      "REVOKE",
      "REQUIRE_REAUTHORIZATION"
    ],
    "embodied_states": [
      "DISCOVERED",
      "IDENTIFIED",
      "PERCEIVING",
      "WORLD_STATE_ESTABLISHED",
      "PREDICTING",
      "PLANNING",
      "GOVERNANCE_EVALUATION",
      "AUTHORIZED",
      "EXECUTING",
      "OBSERVING",
      "REVALIDATING",
      "DEGRADED",
      "UNCERTAIN",
      "REVOKED",
      "SAFE_STATE",
      "HUMAN_REVIEW",
      "UNKNOWN"
    ],
    "physical_dimensions": [
      "collision_exposure",
      "human_exposure",
      "environmental_exposure",
      "infrastructure_exposure",
      "financial_exposure",
      "operational_exposure",
      "persistence",
      "propagation"
    ],
    "counterfactual_alternatives": [
      "CONTINUE",
      "STOP",
      "SLOW",
      "YIELD",
      "REROUTE",
      "WAIT",
      "CHANGE_TRAJECTORY",
      "SAFE_STATE"
    ],
    "feedback_stages": [
      "SIMULATION",
      "PREDICTION",
      "REAL_WORLD_OBSERVATION",
      "OUTCOME",
      "ERROR",
      "EVIDENCE",
      "MODEL_POLICY_EVALUATION"
    ],
    "gap_classes": [
      "LOW",
      "MODERATE",
      "HIGH",
      "UNKNOWN"
    ],
    "scenario_mutations": [
      "weather",
      "visibility",
      "traffic",
      "pedestrians",
      "obstacles",
      "vehicle_behavior",
      "robot_behavior",
      "sensor_degradation",
      "communication_loss",
      "environment"
    ],
    "physical_attacks": [
      "sensor_spoofing",
      "sensor_conflict",
      "gps_manipulation",
      "map_corruption",
      "stale_world_state",
      "identity_substitution",
      "trajectory_manipulation",
      "world_model_divergence",
      "communication_loss",
      "latency",
      "actuator_failure",
      "environmental_uncertainty"
    ],
    "status_model": [
      "IMPLEMENTED",
      "TESTED",
      "VERIFIED",
      "REPRODUCIBLE",
      "SIMULATED",
      "UNVERIFIED",
      "UNKNOWN",
      "NOT_IMPLEMENTED",
      "UNCONTROLLED"
    ],
    "binding_fields": [
      "world_state_digest",
      "trajectory_digest",
      "decision_digest",
      "capability_digest",
      "authority_digest",
      "policy_digest",
      "risk_digest",
      "consequence_digest",
      "authorization_digest"
    ],
    "convergence_stages": [
      "IDENTITY",
      "PERCEPTION",
      "EVIDENCE",
      "COGNITION",
      "DECISION",
      "CAPABILITY",
      "SPATIAL_STATE",
      "TRAJECTORY",
      "CONSEQUENCE",
      "AUTHORIZATION",
      "EXECUTION",
      "OBSERVATION",
      "EVIDENCE_OUT"
    ]
  },
  "_embodied_transitions": {
    "DISCOVERED": [
      "IDENTIFIED",
      "REVOKED",
      "UNKNOWN"
    ],
    "IDENTIFIED": [
      "DEGRADED",
      "HUMAN_REVIEW",
      "PERCEIVING",
      "REVOKED",
      "SAFE_STATE",
      "UNCERTAIN",
      "UNKNOWN"
    ],
    "PERCEIVING": [
      "DEGRADED",
      "HUMAN_REVIEW",
      "REVOKED",
      "SAFE_STATE",
      "UNCERTAIN",
      "UNKNOWN",
      "WORLD_STATE_ESTABLISHED"
    ],
    "WORLD_STATE_ESTABLISHED": [
      "DEGRADED",
      "HUMAN_REVIEW",
      "PERCEIVING",
      "PREDICTING",
      "REVOKED",
      "SAFE_STATE",
      "UNCERTAIN",
      "UNKNOWN"
    ],
    "PREDICTING": [
      "DEGRADED",
      "HUMAN_REVIEW",
      "PLANNING",
      "REVOKED",
      "SAFE_STATE",
      "UNCERTAIN",
      "UNKNOWN"
    ],
    "PLANNING": [
      "DEGRADED",
      "GOVERNANCE_EVALUATION",
      "HUMAN_REVIEW",
      "REVOKED",
      "SAFE_STATE",
      "UNCERTAIN",
      "UNKNOWN"
    ],
    "GOVERNANCE_EVALUATION": [
      "AUTHORIZED",
      "DEGRADED",
      "HUMAN_REVIEW",
      "PLANNING",
      "REVOKED",
      "SAFE_STATE",
      "UNCERTAIN",
      "UNKNOWN"
    ],
    "AUTHORIZED": [
      "DEGRADED",
      "EXECUTING",
      "GOVERNANCE_EVALUATION",
      "HUMAN_REVIEW",
      "REVOKED",
      "SAFE_STATE",
      "UNCERTAIN",
      "UNKNOWN"
    ],
    "EXECUTING": [
      "DEGRADED",
      "HUMAN_REVIEW",
      "OBSERVING",
      "REVOKED",
      "SAFE_STATE",
      "UNCERTAIN",
      "UNKNOWN"
    ],
    "OBSERVING": [
      "DEGRADED",
      "HUMAN_REVIEW",
      "REVALIDATING",
      "REVOKED",
      "SAFE_STATE",
      "UNCERTAIN",
      "UNKNOWN"
    ],
    "REVALIDATING": [
      "AUTHORIZED",
      "DEGRADED",
      "GOVERNANCE_EVALUATION",
      "HUMAN_REVIEW",
      "PERCEIVING",
      "PLANNING",
      "REVOKED",
      "SAFE_STATE",
      "UNCERTAIN",
      "UNKNOWN"
    ],
    "DEGRADED": [
      "GOVERNANCE_EVALUATION",
      "HUMAN_REVIEW",
      "PERCEIVING",
      "REVOKED",
      "SAFE_STATE",
      "UNKNOWN"
    ],
    "UNCERTAIN": [
      "GOVERNANCE_EVALUATION",
      "HUMAN_REVIEW",
      "PERCEIVING",
      "REVOKED",
      "SAFE_STATE",
      "UNKNOWN"
    ],
    "SAFE_STATE": [
      "GOVERNANCE_EVALUATION",
      "HUMAN_REVIEW",
      "PERCEIVING",
      "REVOKED",
      "UNKNOWN"
    ],
    "HUMAN_REVIEW": [
      "GOVERNANCE_EVALUATION",
      "REVOKED",
      "SAFE_STATE",
      "UNKNOWN"
    ],
    "REVOKED": [],
    "UNKNOWN": [
      "DISCOVERED",
      "REVOKED",
      "SAFE_STATE"
    ]
  },
  "_limits": {
    "max_step_ttl_s": 5.0,
    "max_permit_ttl_s": 2.0,
    "e8_token_max_ttl_s": 30.0
  }
}