{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "VaultMesh Sentinel v1 Event",
  "type": "object",
  "additionalProperties": false,
  "required": [
    "event_id",
    "seq",
    "ts",
    "event_type",
    "actor",
    "cap_hash",
    "op",
    "op_digest",
    "result",
    "trace_id",
    "prev_event_hash",
    "event_hash",
    "payload"
  ],
  "properties": {
    "event_id": { "type": "string", "format": "uuid" },
    "seq": { "type": "integer", "minimum": 0 },
    "ts": {
      "description": "Monotonic + wallclock if available. Accepts ISO-8601 Z or a structured object.",
      "anyOf": [
        { "type": "string" },
        {
          "type": "object",
          "additionalProperties": false,
          "required": ["wall"],
          "properties": {
            "wall": { "type": "string", "format": "date-time" },
            "mono_ns": { "type": "integer", "minimum": 0 }
          }
        }
      ]
    },
    "event_type": {
      "type": "string",
      "enum": [
        "action_intent",
        "policy_decision",
        "action_executed",
        "shadow_receipt",
        "cap_grant",
        "cap_revoke",
        "seal_created",
        "root_published",
        "corruption_detected",
        "tamper_signal",
        "boot_event",
        "health_event"
      ]
    },
    "actor": { "type": "string", "minLength": 1 },
    "cap_hash": { "type": "string", "minLength": 1 },
    "op": { "type": "string", "minLength": 1 },
    "op_digest": { "type": "string", "minLength": 1 },
    "result": { "type": "string", "enum": ["ok", "deny", "error"] },
    "root_before": { "type": "string" },
    "root_after": { "type": "string" },
    "trace_id": { "type": "string", "format": "uuid" },
    "prev_event_hash": { "type": "string", "minLength": 1 },
    "event_hash": { "type": "string" },
    "payload": { "type": "object" }
  }
}