{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://chimera-gfx.invalid/schemas/artifact-denylist-v1.json",
  "title": "Chimera GFX permanent artifact denylist",
  "type": "object",
  "additionalProperties": false,
  "required": ["schema_version", "hash_algorithm", "fail_closed", "entries"],
  "properties": {
    "$schema": {"type": "string", "minLength": 1},
    "schema_version": {"const": 1},
    "hash_algorithm": {"const": "sha256"},
    "fail_closed": {"const": true},
    "entries": {
      "type": "array",
      "minItems": 1,
      "uniqueItems": true,
      "items": {
        "type": "object",
        "additionalProperties": false,
        "required": [
          "sha256",
          "artifact_id",
          "status",
          "permanent",
          "execution_eligible",
          "added_on",
          "reason_codes"
        ],
        "properties": {
          "sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
          "artifact_id": {"type": "string", "minLength": 1},
          "status": {"const": "BLOCKED"},
          "permanent": {"const": true},
          "execution_eligible": {"const": false},
          "added_on": {"type": "string", "format": "date"},
          "reason_codes": {
            "type": "array",
            "minItems": 1,
            "uniqueItems": true,
            "items": {"type": "string", "pattern": "^[A-Z0-9_]+$"}
          }
        }
      }
    }
  }
}