Base Registry Engine configuration reference

Look up configuration keys for registry.yaml, module.yaml, and runtime.yaml. The tables are generated from Base Registry Engine’s Rust-derived JSON Schemas, including event conditions, webhook destinations, access profiles, and module extensions.

Scope

This reference describes the current configuration grammar, not a frozen contract. Types, required fields, accepted values, defaults, and constraints come from the schemas. Descriptions appear where the Rust definition supplies them. Internal compatibility fields and test-journey documents are outside this reference.

Use author a registry project for worked configurations and deployment steps. A schema-valid document still needs the compiler and runtime checks: bregctl check <project> validates the combined model; bregctl doctor --runtime-config <absolute-file> checks deployment configuration. Cross-field rules and references to other files cannot all be expressed by these tables.

Read the tables

fields[] means an array item; eventDestinations.* means a map entry whose name you choose. Required fields inside an optional object apply when that object is present. Conditional fields depend on the selected variant or another configuration value. Accepted values list the union across variants; constraints separated by or are alternatives. A schema default applies only where that variant declares it. Not specified does not mean that every value is accepted.

For example, hooks[].when.afterEquals.* holds a comparison value for a field you name. The schema permits a scalar or null; the compiler also checks that the value matches the declared field type and that the condition is valid for the event trigger.

Attachment storage

Portable request entities declare attachments[]; deployment storage is selected only in runtime.yaml. Omit attachmentStorage or use {kind: database} to keep content in PostgreSQL without another service. The optional kind: s3 binding requires endpoint, bucket, region, accessKeyIdRef, and secretAccessKeyRef. sessionTokenRef and caBundleRef are optional secret references. pathStyle defaults to true. timeoutMilliseconds defaults to 10,000 and accepts 100 to 60,000. Secret references use the configured file or environment provider; inline credentials are refused.

S3 endpoints are canonical root HTTPS URLs; numeric loopback HTTP is accepted for local development. Virtual-host addressing requires a DNS endpoint. Give the runtime permission to inspect bucket versioning and get, put, and delete objects. Keep bucket versioning disabled throughout operation. Enabled or suspended versioning is refused because a delete marker does not physically erase older object versions. Backup and replication expiry remain the operator’s responsibility.

Give each independent database a distinct identity.databaseId. Content deduplicates by SHA-256 within the database and registry’s storage namespace; request and proposal references remain independent authorization boundaries. Erasing one reference preserves bytes required by another retained reference. External deletions are durably retried, and physical deletion is complete only after confirmation. Use attachment cleanup to retry pending external deletions independently of request retention eligibility. Its pendingExternalDeletions count covers the registry; a scoped request erasure separately reports attachmentReferences. Confirmed S3 deletions retain durable tombstones, reported as externalDeletionTombstones, so later cleanup runs can recheck for a delayed remote write and remove any orphan bytes. These rechecks never restore an erased request reference. The first stored attachment pins the storage and verification bindings for the database and registry. Configure both before that first upload. Changing either binding afterward is unsupported, even after content erasure; rotating secrets preserves the binding.

External attachment verification

attachmentVerification is an operator binding. Omit it or use {kind: disabled} to accept attachments without an external verdict. Use kind: http to quarantine uploads until a verifier approves them. Configure endpoint, authorizationRef, and policyId; timeoutMilliseconds defaults to 10,000 and accepts 100 to 60,000. The endpoint is a full HTTPS URL, with numeric loopback HTTP allowed for local verification. A fixed query is allowed; user information and fragments are refused. The token referenced by authorizationRef is sent as a Bearer credential. policyId is a nonsecret, 1 to 128 character visible-ASCII identifier for the verifier’s rules generation.

The asynchronous worker posts the complete file as raw bytes with its retained Content-Type, Accept: application/json, and lowercase digest in X-Content-SHA256. The verifier must return HTTP 200 with one of these closed JSON responses:

{"verdict":"approved"}

{"verdict":"rejected"}

The response is bounded to 1,024 bytes. Duplicate or unknown members, invalid verdicts, other status codes, timeouts, and unavailable responses leave the file pending for retry. The transport follows no redirects and uses no ambient proxy. The registry enforces the verdict; the external service owns its content inspection rules. The request sends file bytes to that service. Configure its access and retention policy separately: registry erasure does not delete verifier logs or retained copies, and this hook provides no remote copy-deletion operation.

A filled pending or rejected slot blocks both content download and request submission, including optional slots. Approval is reused only for the exact file hash, content type, and policy binding. The binding includes the endpoint and policyId; token rotation and timeout changes preserve it. Storage and verification configuration are pinned on the first upload, so enable verification before storing attachments. Changing the endpoint, policy generation, or enabled/disabled mode afterward is unsupported. Slot metadata reports progress without exposing the verifier URL or credential. Failed attempts retry automatically and emit the value-free operational code attachment_verification.retry_pending. Restore service availability or rotate the credential to recover from transport or authentication failures. Replace rejected content; reuploading identical bytes with the same content type reuses a retained rejection rather than requesting another verdict.

Regeneration

The source schemas live under products/breg/generated/authoring/ and products/breg/generated/runtime/. Their owning generators are the authoring-schema and runtime-schema Rust examples. products/breg/scripts/check-generated.sh checks that they match the source types. Run npm run generate in docs/site to rebuild these tables from those schemas.

bregctl generate schemas <project> --output <directory> has a different purpose: it generates record schemas for that project’s API, not configuration schemas.

• registry.yaml Source preview, pre-1.0, 582 key paths
• modules/<name>/module.yaml Source preview, pre-1.0, 557 key paths
• runtime.yaml Source preview, pre-1.0, 184 key paths

registry.yaml

Source preview, pre-1.0

Generated from products/breg/generated/authoring/registry-project.schema.json. 582 key paths. Explained in docs/site/src/content/docs/configure/breg.mdx.

Key path	Type	Required	Accepted values	Constraints
accessProfiles	array	No	Not specifiedSchema default, where declared: []	None specified
accessProfiles[]Array item	object	No	Not specified	None specified
accessProfiles[].actorKind	null | string	No	agent human service	None specified
accessProfiles[].anonymous	boolean	No	Not specifiedSchema default, where declared: false	None specified
accessProfiles[].default	boolean	No	Not specifiedSchema default, where declared: false	None specified
accessProfiles[].id	string	Yes	Not specified	None specified
accessProfiles[].permissions	array	No	Not specifiedSchema default, where declared: []	None specified
accessProfiles[].permissions[]Array item	object	No	Not specified	None specified
accessProfiles[].permissions[].action	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].allowCount	boolean	Conditional	Not specifiedSchema default, where declared: false	None specified
accessProfiles[].permissions[].allowDataExport	boolean	Conditional	Not specifiedSchema default, where declared: false	None specified
accessProfiles[].permissions[].applyTargets	array	Conditional	Not specifiedSchema default, where declared: []	None specified
accessProfiles[].permissions[].applyTargets[]Array item	object	Conditional	Not specified	None specified
accessProfiles[].permissions[].applyTargets[].entity	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].applyTargets[].rowBoundariesExplicit row reach; an empty array intentionally permits all rows.	array	Conditional	Not specified	None specified
accessProfiles[].permissions[].applyTargets[].rowBoundaries[]Array item	object	Conditional	Not specified	None specified
accessProfiles[].permissions[].applyTargets[].rowBoundaries[].claim	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].applyTargets[].rowBoundaries[].field	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].applyTargets[].rowBoundaries[].operator	string	Conditional	equals in	None specified
accessProfiles[].permissions[].entity	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].filterableFields	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
accessProfiles[].permissions[].filterableFields[]Array item	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].lookups	array	Conditional	Not specifiedSchema default, where declared: []	None specified
accessProfiles[].permissions[].lookups[]Array item	object	Conditional	Not specified	None specified
accessProfiles[].permissions[].lookups[].claimMapping	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
accessProfiles[].permissions[].lookups[].claimMapping.*Map value	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].lookups[].selector	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].lookups[].valueOrigin	string	Conditional	request verified_claim	None specified
accessProfiles[].permissions[].membershipBoundariesCurrent active membership required for each stored reference key.	array	Conditional	Not specified	None specified
accessProfiles[].permissions[].membershipBoundaries[]Array itemA one-hop current membership requirement, combined with every other row boundary. The root field and membership key must reference the same entity. The active field is Boolean, and principalField matches the profile's verified principal.	object	Conditional	Not specified	None specified
accessProfiles[].permissions[].membershipBoundaries[].activeField	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].membershipBoundaries[].field	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].membershipBoundaries[].membershipEntity	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].membershipBoundaries[].membershipKeyField	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].membershipBoundaries[].principalField	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].operations	array	Yes	Not specified	uniqueItems: true
accessProfiles[].permissions[].operations[]Array item	string	No	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
accessProfiles[].permissions[].readPaths	array	Conditional	Not specifiedSchema default, where declared: []	None specified
accessProfiles[].permissions[].readPaths[]Array item	object	Conditional	Not specified	None specified
accessProfiles[].permissions[].readPaths[].allowCount	boolean	Conditional	Not specifiedSchema default, where declared: false	None specified
accessProfiles[].permissions[].readPaths[].filterableFields	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
accessProfiles[].permissions[].readPaths[].filterableFields[]Array item	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].readPaths[].path	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].readPaths[].readableFields	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
accessProfiles[].permissions[].readPaths[].readableFields[]Array item	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].readPaths[].sortableFields	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
accessProfiles[].permissions[].readPaths[].sortableFields[]Array item	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].readableFields	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
accessProfiles[].permissions[].readableFields[]Array item	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].readableRequestFieldsReadable change-request decision detail. Anonymous profiles never receive reason text.	array	Conditional	Not specified	uniqueItems: true
accessProfiles[].permissions[].readableRequestFields[]Array itemFields of request decision metadata governed separately from stored record fields.	string	Conditional	actor_reference reason review_state	None specified
accessProfiles[].permissions[].requestPresence	array	Conditional	Not specifiedSchema default, where declared: []	None specified
accessProfiles[].permissions[].requestPresence[]Array item	object	Conditional	Not specified	None specified
accessProfiles[].permissions[].requestPresence[].requestType	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].requestPresence[].rowBoundariesExplicit row reach; an empty array intentionally permits all rows.	array	Conditional	Not specified	None specified
accessProfiles[].permissions[].requestPresence[].rowBoundaries[]Array item	object	Conditional	Not specified	None specified
accessProfiles[].permissions[].requestPresence[].rowBoundaries[].claim	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].requestPresence[].rowBoundaries[].field	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].requestPresence[].rowBoundaries[].operator	string	Conditional	equals in	None specified
accessProfiles[].permissions[].requestVisibilityExpose only requests created by the current authenticated principal.	null | string	Conditional	owner Schema default, where declared: null	None specified
accessProfiles[].permissions[].requireConsentCurrent subject-issued consent required for each row, ANDed.	array	Conditional	Not specified	None specified
accessProfiles[].permissions[].requireConsent[]Array itemA consent check ANDed into one read permission.	object	Conditional	Not specified	None specified
accessProfiles[].permissions[].requireConsent[].onThe permission entity's field the consent subject references; id is the row's own identity.	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].requireConsent[].recordThe consent-record entity checked.	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].results	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
accessProfiles[].permissions[].results[]Array item	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].revisionAccess	boolean	Conditional	Not specifiedSchema default, where declared: false	None specified
accessProfiles[].permissions[].rowBoundaries	array	Conditional	Not specified	None specified
accessProfiles[].permissions[].rowBoundaries[]Array item	object	Conditional	Not specified	None specified
accessProfiles[].permissions[].rowBoundaries[].claim	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].rowBoundaries[].field	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].rowBoundaries[].operator	string	Conditional	equals in	None specified
accessProfiles[].permissions[].sortableFields	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
accessProfiles[].permissions[].sortableFields[]Array item	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].spatialQueries	null | object	Conditional	Not specifiedSchema default, where declared: null	None specified
accessProfiles[].permissions[].spatialQueries.bbox	null | object	Conditional	Not specified	None specified
accessProfiles[].permissions[].spatialQueries.bbox.maximumLatitudeSpanDegrees	number	Conditional	Not specified	None specified
accessProfiles[].permissions[].spatialQueries.bbox.maximumLongitudeSpanDegrees	number	Conditional	Not specified	None specified
accessProfiles[].permissions[].submitterTargets	array	Conditional	Not specified	uniqueItems: true
accessProfiles[].permissions[].submitterTargets[]Array item	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].targets	array	Conditional	Not specifiedSchema default, where declared: []	None specified
accessProfiles[].permissions[].targets[]Array item	object	Conditional	Not specified	None specified
accessProfiles[].permissions[].targets[].entity	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].targets[].rowBoundariesExplicit row reach; an empty array intentionally permits all rows.	array	Conditional	Not specified	None specified
accessProfiles[].permissions[].targets[].rowBoundaries[]Array item	object	Conditional	Not specified	None specified
accessProfiles[].permissions[].targets[].rowBoundaries[].claim	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].targets[].rowBoundaries[].field	string	Conditional	Not specified	None specified
accessProfiles[].permissions[].targets[].rowBoundaries[].operator	string	Conditional	equals in	None specified
accessProfiles[].permissions[].writableFields	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
accessProfiles[].permissions[].writableFields[]Array item	string	Conditional	Not specified	None specified
accessProfiles[].principalClaim	null | string	No	Not specifiedSchema default, where declared: null	None specified
accessProfiles[].requesterClients	array	No	Not specified	uniqueItems: true
accessProfiles[].requesterClients[]Array item	string	No	Not specified	None specified
accessProfiles[].requiredPurposesThe verified token's purpose must match one listed value. Empty means no purpose restriction.	array	No	Not specifiedSchema default, where declared: []	uniqueItems: true
accessProfiles[].requiredPurposes[]Array item	string	No	Not specified	None specified
accessProfiles[].requiredScopesAll listed scopes must be present in the verified token.	array	No	Not specifiedSchema default, where declared: []	uniqueItems: true
accessProfiles[].requiredScopes[]Array item	string	No	Not specified	None specified
accessProfiles[].taskGrant	null | object	No	Not specified	None specified
accessProfiles[].taskGrant.sourceIssuer	string	Conditional	Not specified	None specified
actions	array	No	Not specified	None specified
actions[]Array item	object	No	Not specified	None specified
actions[].consentIssuerRequired when the action creates consent-record rows.	null | string	No	self steward	None specified
actions[].effects	array	No	Not specifiedSchema default, where declared: []	None specified
actions[].effects[]Array item	object	No	Not specified	None specified
actions[].effects[].clear	array	No	Not specifiedSchema default, where declared: []	uniqueItems: true
actions[].effects[].clear[]Array item	string	No	Not specified	None specified
actions[].effects[].id	null | string	No	Not specified	None specified
actions[].effects[].operation	string	Yes	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
actions[].effects[].set	object	No	Not specifiedSchema default, where declared: {}	None specified
actions[].effects[].set.*Map value	object	No	Not specified	None specified
actions[].effects[].set.*.fromEffect	null | string	No	Not specified	None specified
actions[].effects[].set.*.fromField	null | string	No	Not specified	None specified
actions[].effects[].target	object	Yes	Not specified	None specified
actions[].effects[].target.entity	null | string	No	Not specified	None specified
actions[].effects[].target.fromField	null | string	No	Not specified	None specified
actions[].evidence	array	No	Not specified	None specified
actions[].evidence[]Array item	object	No	Not specified	None specified
actions[].evidence[].id	string	Yes	Not specified	None specified
actions[].evidence[].maximumObservationAgeSeconds	integer	Yes	Not specified	format: uint64 minimum: 0
actions[].evidence[].outputs	array	Yes	Not specified	None specified
actions[].evidence[].outputs[]Array item	string	No	Not specified	None specified
actions[].evidence[].provider	string	Yes	Not specified	None specified
actions[].evidence[].requirement	string	Yes	Not specified	None specified
actions[].evidence[].subjects	object	Yes	Not specified	None specified
actions[].evidence[].subjects.*Map value	object	No	Not specified	None specified
actions[].evidence[].subjects.*.profile	string	Yes	Not specified	None specified
actions[].handlerThe authored action handler: the shared hook handler declaration, with the authorization members a governed action adds. handler is [HookHandlerSource], the same declaration an entity hook carries, so this product spells a handler one way. It is flattened, so the authored member set stays kind, the source reference the kind names, abi, writes, and refusals. writes and refusals are this product's own: they bound what the handler may write and the refusals it may return, and no hook declares them. Two rules narrow the shared declaration to what this path runs. abi is optional there and required here, refused at deserialization, because every backend an action may declare speaks one. The url kind is refused by the compiler at actions[].handler.kind, because an action handler runs inside the triggering transaction and cannot be remote.	null | object	No	Not specified	None specified
actions[].handler.abi	string	Conditional	registry.action-handler/v1 registry.action-handler/v2	None specified
actions[].handler.kindThe authored action-handler backend. The wasm backend is admitted when this build of the compiler carries the wasm cargo feature, which validates a declared WASM handler module against the platform guest ABI at compile time; without that feature a declared WASM handler is refused with the pinned action.handler.wasm_build_unsupported diagnostic.	string	Conditional	rhai wasm	None specified
actions[].handler.moduleThe WASM handler module path, project-local. Declared for wasm handlers only; the compiler enforces the pairing with the declared backend.	null | string	Conditional	Not specified	None specified
actions[].handler.refusals	array	Conditional	Not specifiedSchema default, where declared: []	None specified
actions[].handler.refusals[]Array item	object	Conditional	Not specified	None specified
actions[].handler.refusals[].code	string	Conditional	Not specified	None specified
actions[].handler.refusals[].label	string	Conditional	Not specified	None specified
actions[].handler.scriptThe Rhai handler script path. Declared for rhai handlers only; the compiler enforces the pairing with the declared backend.	null | string	Conditional	Not specified	None specified
actions[].handler.writes	array	Conditional	Not specified	None specified
actions[].handler.writes[]Array item	object	Conditional	Not specified	None specified
actions[].handler.writes[].fields	array	Conditional	Not specified	None specified
actions[].handler.writes[].fields[]Array item	string	Conditional	Not specified	None specified
actions[].handler.writes[].id	string	Conditional	Not specified	None specified
actions[].handler.writes[].operation	string	Conditional	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
actions[].handler.writes[].target	object	Conditional	Not specified	None specified
actions[].handler.writes[].target.entity	null | string	Conditional	Not specified	None specified
actions[].handler.writes[].target.fromField	null | string	Conditional	Not specified	None specified
actions[].id	string	Yes	Not specified	None specified
actions[].inputs	array	No	Not specifiedSchema default, where declared: []	None specified
actions[].inputs[]Array item	object	No	Not specified	None specified
actions[].inputs[].apiName	null | string	No	Not specified	None specified
actions[].inputs[].bbox	null | object	Conditional	Not specified	None specified
actions[].inputs[].bbox.east	string	Conditional	Not specified	None specified
actions[].inputs[].bbox.north	string	Conditional	Not specified	None specified
actions[].inputs[].bbox.south	string	Conditional	Not specified	None specified
actions[].inputs[].bbox.west	string	Conditional	Not specified	None specified
actions[].inputs[].classification	string	Yes	internal public restricted	None specified
actions[].inputs[].id	string	Yes	Not specified	None specified
actions[].inputs[].maxBytes	integer	Conditional	Not specified	format: uint32 minimum: 0
actions[].inputs[].maxLength	integer	Conditional	Not specified	format: uint32 minimum: 0
actions[].inputs[].maximum	null | string	Conditional	Not specified	None specified
actions[].inputs[].minLength	integer	Conditional	Not specifiedSchema default, where declared: 0	format: uint32 minimum: 0
actions[].inputs[].minimum	null | string	Conditional	Not specified	None specified
actions[].inputs[].onDelete	string	Conditional	restrict Schema default, where declared: "restrict"	None specified
actions[].inputs[].precision	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
actions[].inputs[].required	boolean	No	Not specifiedSchema default, where declared: false	None specified
actions[].inputs[].scale	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
actions[].inputs[].target	string	Conditional	Not specified	None specified
actions[].inputs[].type	string	Yes	boolean crs84-point date decimal int64 reference string structured text timestamp uuid vocabulary-code	None specified
actions[].inputs[].values	array	Conditional	Not specifiedSchema default, where declared: []	None specified
actions[].inputs[].values[]Array item	string	Conditional	Not specified	None specified
actions[].inputs[].vocabulary	string	Conditional	Not specified	None specified
actions[].requiresAcceptance-time checks over exact existing reference inputs, combined with AND.	array	No	Not specified	None specified
actions[].requires[]Array item	object	No	Not specified	None specified
actions[].requires[].equalsInput	null | string	No	Not specified	None specified
actions[].requires[].field	string	Yes	Not specified	None specified
actions[].requires[].input	string	Yes	Not specified	None specified
apiVersion	string	Yes	Not specified	None specified
entities	array	No	Not specifiedSchema default, where declared: []	None specified
entities[]Array item	object	No	Not specified	None specified
entities[].accessRequirementsMandatory request-access requirements checked against every profile, including module contributions.	null | object	No	Not specified	None specified
entities[].accessRequirements.allowedPurposesWhen nonempty, every profile must restrict purpose to a nonempty subset of these values. Empty imposes no purpose requirement.	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].accessRequirements.allowedPurposes[]Array item	string	Conditional	Not specified	None specified
entities[].accessRequirements.requiredScopesEvery profile must require all these scopes. Requirements never grant access.	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].accessRequirements.requiredScopes[]Array item	string	Conditional	Not specified	None specified
entities[].accessRequirements.rowBoundariesEvery profile must include these exact field, verified-claim, and operator bindings.	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].accessRequirements.rowBoundaries[]Array item	object	Conditional	Not specified	None specified
entities[].accessRequirements.rowBoundaries[].claim	string	Conditional	Not specified	None specified
entities[].accessRequirements.rowBoundaries[].field	string	Conditional	Not specified	None specified
entities[].accessRequirements.rowBoundaries[].operator	string	Conditional	equals in	None specified
entities[].attachmentsGoverned binary slots on change-request entities, projected under their exact IDs.	array	No	Not specified	None specified
entities[].attachments[]Array item	object	No	Not specified	None specified
entities[].attachments[].classification	string	Yes	internal public restricted	None specified
entities[].attachments[].contentTypes	array	Yes	Not specified	None specified
entities[].attachments[].contentTypes[]Array item	string	No	Not specified	None specified
entities[].attachments[].id	string	Yes	Not specified	None specified
entities[].attachments[].maximumBytes	integer	Yes	Not specified	format: uint32 minimum: 0
entities[].attachments[].required	boolean	Yes	Not specified	None specified
entities[].batch	null | object	No	Not specifiedSchema default, where declared: null	None specified
entities[].batch.maximumBytes	integer	Conditional	Not specified	format: uint32 minimum: 0
entities[].batch.maximumItems	integer	Conditional	Not specified	format: uint16 maximum: 65535 minimum: 0
entities[].changeControl	null | object	No	Not specified	None specified
entities[].changeControl.requiredFor	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].changeControl.requiredFor[]Array item	string	Conditional	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
entities[].changeRequest	null | object	No	Not specified	None specified
entities[].changeRequest.application	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
entities[].changeRequest.application.preconditions	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidenceGoverned Evidence acquisitions required immediately before application.	array	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].id	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].maximumObservationAgeSeconds	integer	Conditional	Not specified	format: uint64 minimum: 0
entities[].changeRequest.application.preconditions.evidence[].provider	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].requirement	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].requires	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].changeRequest.application.preconditions.evidence[].requires[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].requires[].atLeast	integer | null	Conditional	Not specified	format: int64
entities[].changeRequest.application.preconditions.evidence[].requires[].atMost	integer | null	Conditional	Not specified	format: int64
entities[].changeRequest.application.preconditions.evidence[].requires[].equalsFromRequestField	null | string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].requires[].output	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*Map value	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*.profile	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*.selectorsExact governed selector-profile field map. Every profile field must be present exactly once and no undeclared field is admitted.	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*.selectors.*Map value	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*.selectors.*.field	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*.selectors.*.source	string	Conditional	request_field target_field	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*.selectors.*.target	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.requestPredicates over the frozen request intake itself.	array	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.request[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.request[].atLeast	integer | null	Conditional	Not specified	format: int64
entities[].changeRequest.application.preconditions.request[].atMost	integer | null	Conditional	Not specified	format: int64
entities[].changeRequest.application.preconditions.request[].currentDate	null | string	Conditional	on_or_after on_or_before	None specified
entities[].changeRequest.application.preconditions.request[].equalsFromRequestField	null | string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.request[].field	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targetsExisting records read and revision-bound at proposal preparation.	array	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[].entity	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[].fromField	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[].id	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[].requires	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].changeRequest.application.preconditions.targets[].requires[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[].requires[].atLeast	integer | null	Conditional	Not specified	format: int64
entities[].changeRequest.application.preconditions.targets[].requires[].atMost	integer | null	Conditional	Not specified	format: int64
entities[].changeRequest.application.preconditions.targets[].requires[].currentDate	null | string	Conditional	on_or_after on_or_before	None specified
entities[].changeRequest.application.preconditions.targets[].requires[].equalsFromRequestField	null | string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[].requires[].field	string	Conditional	Not specified	None specified
entities[].changeRequest.effects	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].changeRequest.effects[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.effects[].clear	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].changeRequest.effects[].clear[]Array item	string	Conditional	Not specified	None specified
entities[].changeRequest.effects[].id	null | string	Conditional	Not specified	None specified
entities[].changeRequest.effects[].operation	string	Conditional	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
entities[].changeRequest.effects[].set	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
entities[].changeRequest.effects[].set.*Map value	object	Conditional	Not specified	None specified
entities[].changeRequest.effects[].set.*.fromEffect	null | string	Conditional	Not specified	None specified
entities[].changeRequest.effects[].set.*.fromField	null | string	Conditional	Not specified	None specified
entities[].changeRequest.effects[].target	object	Conditional	Not specified	None specified
entities[].changeRequest.effects[].target.entity	null | string	Conditional	Not specified	None specified
entities[].changeRequest.effects[].target.fromField	null | string	Conditional	Not specified	None specified
entities[].changeRequest.onApproved	object	Conditional	Not specifiedSchema default, where declared: {"mode":"manual"}	None specified
entities[].changeRequest.onApproved.executor	null | string	Conditional	Not specified	None specified
entities[].changeRequest.onApproved.mode	string	Conditional	automatic manual Schema default, where declared: "manual"	None specified
entities[].changeRequest.planner	null | object	Conditional	Not specified	None specified
entities[].changeRequest.planner.abi	string	Conditional	Not specified	None specified
entities[].changeRequest.planner.kindThe authored change-request planner backend. The wasm backend is expressible so a declared WASM planner is refused by the compiler with a pinned diagnostic; WASM planners stay unsupported. Retained Rust name for the reviewed change-request authoring contract.	string	Conditional	rhai wasm	None specified
entities[].changeRequest.planner.requestFields	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].changeRequest.planner.requestFields[]Array item	string	Conditional	Not specified	None specified
entities[].changeRequest.planner.script	string	Conditional	Not specified	None specified
entities[].changeRequest.planner.writes	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].changeRequest.planner.writes[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.planner.writes[].fields	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].changeRequest.planner.writes[].fields[]Array item	string	Conditional	Not specified	None specified
entities[].changeRequest.planner.writes[].operation	string	Conditional	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
entities[].changeRequest.planner.writes[].target	object	Conditional	Not specified	None specified
entities[].changeRequest.planner.writes[].target.entity	null | string	Conditional	Not specified	None specified
entities[].changeRequest.planner.writes[].target.fromField	null | string	Conditional	Not specified	None specified
entities[].changeRequest.retention	object	Conditional	Not specifiedSchema default, where declared: {"mode":"retain"}	None specified
entities[].changeRequest.retention.mode	string	Conditional	operator_erase retain Schema default, where declared: "retain"	None specified
entities[].changeRequest.review	object	Conditional	Not specified	None specified
entities[].changeRequest.review.authority	string	Conditional	Not specified	None specified
entities[].changeRequest.review.mode	string	Conditional	none	None specified
entities[].changeRequest.review.policyId	string	Conditional	Not specified	None specified
entities[].classification	string	No	internal public restricted Schema default, where declared: "internal"	None specified
entities[].consentRecordDeclares this entity's rows as subject-issued consent decisions that requireConsent permissions check before returning a subject's row.	null | object	No	Not specified	None specified
entities[].consentRecord.decisionMaps the adopter's decision codes onto the engine's decision sets.	object	Conditional	Not specified	None specified
entities[].consentRecord.decision.field	string	Conditional	Not specified	None specified
entities[].consentRecord.decision.givesCodes that give consent.	array	Conditional	Not specified	None specified
entities[].consentRecord.decision.gives[]Array item	string	Conditional	Not specified	None specified
entities[].consentRecord.decision.refusalsRevoke codes never shown to recipients.	array	Conditional	Not specified	None specified
entities[].consentRecord.decision.refusals[]Array item	string	Conditional	Not specified	None specified
entities[].consentRecord.decision.revokesCodes that supersede every give on the same key ordered no later.	array	Conditional	Not specified	None specified
entities[].consentRecord.decision.revokes[]Array item	string	Conditional	Not specified	None specified
entities[].consentRecord.purposeA vocabulary-code field compared with the verified request purpose.	string	Conditional	Not specified	None specified
entities[].consentRecord.recipientA vocabulary-code field bound to registry-recipients.	string	Conditional	Not specified	None specified
entities[].consentRecord.scopeA vocabulary-code field bound to registry-consent-scopes.	string	Conditional	Not specified	None specified
entities[].consentRecord.subjectA reference field naming the protected subject row.	string	Conditional	Not specified	None specified
entities[].consentRecord.validityValidity of a consent decision. Every give expires within maxDuration.	object	Conditional	Not specified	None specified
entities[].consentRecord.validity.fromA required timestamp field; a give is active only from this time.	string	Conditional	Not specified	None specified
entities[].consentRecord.validity.maxDurationAn ISO 8601 duration such as P365D, at most ten years.	string	Conditional	Not specified	None specified
entities[].consentRecord.validity.untilAn optional timestamp field ending the give earlier than maxDuration.	null | string	Conditional	Not specified	None specified
entities[].constraints	array	No	Not specifiedSchema default, where declared: []	None specified
entities[].constraints[]Array item	object	No	Not specified	None specified
entities[].constraints[].endField	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].constraints[].field	string	Conditional	Not specified	None specified
entities[].constraints[].fields	array	Conditional	Not specified	None specified
entities[].constraints[].fields[]Array item	string	Conditional	Not specified	None specified
entities[].constraints[].id	null | string	No	Not specifiedSchema default, where declared: null	None specified
entities[].constraints[].kind	string	Yes	compare int_range temporal-non-overlap unique vocabulary	None specified
entities[].constraints[].left	string	Conditional	Not specified	None specified
entities[].constraints[].maximum	integer | null	Conditional	Not specifiedSchema default, where declared: null	format: int64
entities[].constraints[].minimum	integer | null	Conditional	Not specifiedSchema default, where declared: null	format: int64
entities[].constraints[].operator	string	Conditional	greater_than greater_than_or_equal less_than less_than_or_equal	None specified
entities[].constraints[].right	string	Conditional	Not specified	None specified
entities[].constraints[].scopeFields	array	Conditional	Not specified	None specified
entities[].constraints[].scopeFields[]Array item	string	Conditional	Not specified	None specified
entities[].constraints[].startField	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].constraints[].values	array	Conditional	Not specified	None specified
entities[].constraints[].values[]Array item	string	Conditional	Not specified	None specified
entities[].constraints[].when	array | null	Conditional	Not specified	None specified
entities[].constraints[].when[]Array item	object	Conditional	Not specified	None specified
entities[].constraints[].when[].field	string	Conditional	Not specified	None specified
entities[].constraints[].when[].kind	string	Conditional	active_lifecycle field_equals field_is_not_null field_is_null	None specified
entities[].derived	array	No	Not specified	None specified
entities[].derived[]Array item	object	No	Not specified	None specified
entities[].derived[].execution	string	No	live Schema default, where declared: "live"	None specified
entities[].derived[].fields	array	No	Not specifiedSchema default, where declared: []	None specified
entities[].derived[].fields[]Array item	object	No	Not specified	None specified
entities[].derived[].fields[].apiName	null | string	No	Not specified	None specified
entities[].derived[].fields[].bbox	null | object	Conditional	Not specified	None specified
entities[].derived[].fields[].bbox.east	string	Conditional	Not specified	None specified
entities[].derived[].fields[].bbox.north	string	Conditional	Not specified	None specified
entities[].derived[].fields[].bbox.south	string	Conditional	Not specified	None specified
entities[].derived[].fields[].bbox.west	string	Conditional	Not specified	None specified
entities[].derived[].fields[].classification	string	Yes	internal public restricted	None specified
entities[].derived[].fields[].id	string	Yes	Not specified	None specified
entities[].derived[].fields[].maxBytes	integer	Conditional	Not specified	format: uint32 minimum: 0
entities[].derived[].fields[].maxLength	integer	Conditional	Not specified	format: uint32 minimum: 0
entities[].derived[].fields[].maximum	null | string	Conditional	Not specified	None specified
entities[].derived[].fields[].minLength	integer	Conditional	Not specifiedSchema default, where declared: 0	format: uint32 minimum: 0
entities[].derived[].fields[].minimum	null | string	Conditional	Not specified	None specified
entities[].derived[].fields[].onDelete	string	Conditional	restrict Schema default, where declared: "restrict"	None specified
entities[].derived[].fields[].precision	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
entities[].derived[].fields[].scale	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
entities[].derived[].fields[].target	string	Conditional	Not specified	None specified
entities[].derived[].fields[].type	string	Yes	boolean crs84-point date decimal int64 reference string structured text timestamp uuid vocabulary-code	None specified
entities[].derived[].fields[].values	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].derived[].fields[].values[]Array item	string	Conditional	Not specified	None specified
entities[].derived[].fields[].vocabulary	string	Conditional	Not specified	None specified
entities[].derived[].id	string	Yes	Not specified	None specified
entities[].derived[].key	string	Yes	Not specified	None specified
entities[].derived[].sql	string	Yes	Not specified	None specified
entities[].fields	array	No	Not specifiedSchema default, where declared: []	None specified
entities[].fields[]Array item	object	No	Not specified	None specified
entities[].fields[].apiName	null | string	No	Not specifiedSchema default, where declared: null	None specified
entities[].fields[].bbox	null | object	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].fields[].bbox.east	string	Conditional	Not specified	None specified
entities[].fields[].bbox.north	string	Conditional	Not specified	None specified
entities[].fields[].bbox.south	string	Conditional	Not specified	None specified
entities[].fields[].bbox.west	string	Conditional	Not specified	None specified
entities[].fields[].classification	string	Yes	internal public restricted	None specified
entities[].fields[].encrypted	boolean	Conditional	Not specifiedSchema default, where declared: false	None specified
entities[].fields[].id	string	Yes	Not specified	None specified
entities[].fields[].lookupThe authored blind-index declaration for an encrypted field. Normalization composes in declared order over the canonical string form of the value; unique requests a unique index over the derived blind-index column.	null | object	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].fields[].lookup.normalization	array	Conditional	Not specifiedSchema default, where declared: []	maxItems: 8
entities[].fields[].lookup.normalization[]Array itemA normalization step applied to the canonical string form of an encrypted value before its blind index is derived. The vocabulary is closed.	string	Conditional	collapse-whitespace lowercase remove-separators trim uppercase	None specified
entities[].fields[].lookup.unique	boolean	Conditional	Not specifiedSchema default, where declared: false	None specified
entities[].fields[].maxBytes	integer	Conditional	Not specified	format: uint32 minimum: 0
entities[].fields[].maxLength	integer	Conditional	Not specified	format: uint32 minimum: 0
entities[].fields[].maximum	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].fields[].minLength	integer	Conditional	Not specifiedSchema default, where declared: 0	format: uint32 minimum: 0
entities[].fields[].minimum	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].fields[].onDelete	string	Conditional	restrict Schema default, where declared: "restrict"	None specified
entities[].fields[].pattern	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].fields[].precision	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
entities[].fields[].required	boolean	No	Not specifiedSchema default, where declared: false	None specified
entities[].fields[].scale	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
entities[].fields[].target	string	Conditional	Not specified	None specified
entities[].fields[].type	string	Yes	boolean crs84-point date decimal int64 reference string structured text timestamp uuid vocabulary-code	None specified
entities[].fields[].validTimeRole	null | string	No	valid_from valid_to Schema default, where declared: null	None specified
entities[].fields[].values	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].fields[].values[]Array item	string	Conditional	Not specified	None specified
entities[].fields[].vocabulary	string	Conditional	Not specified	None specified
entities[].geojson	null | object	No	Not specified	None specified
entities[].geojson.geometryField	string	Conditional	Not specified	None specified
entities[].hooks	array	No	Not specifiedSchema default, where declared: []	None specified
entities[].hooks[]Array itemOne declared hook on an entity. The shape is [registry_platform_hooks::HookDeclaration] with trigger and when closed to the vocabulary this compiler validates, and with handler optional. A hook that declares no handler is still recorded in the outbox and delivered nowhere; production compilation refuses that. Entity hooks run after the triggering transaction commits, so phase is written and the compiler refuses any value it cannot run.	object	No	Not specified	None specified
entities[].hooks[].handlerGoverned, destination-neutral delivery. destinationId is a key in runtime eventDestinations; the project carries no URL or secret, and deployment configuration may tighten the bounds it binds but cannot supply or widen this authority. Production compilation requires it.	null | object	No	Not specified	None specified
entities[].hooks[].handler.abiFor rhai: The handler ABI the script speaks. For wasm: The handler ABI the module speaks.	null | string	Conditional	Not specified	None specified
entities[].hooks[].handler.destinationIdKey in the runtime destination binding.	string	Conditional	Not specified	None specified
entities[].hooks[].handler.kind	string	Conditional	rhai url wasm	None specified
entities[].hooks[].handler.moduleModule path in the project.	string	Conditional	Not specified	None specified
entities[].hooks[].handler.scriptScript path in the project.	string	Conditional	Not specified	None specified
entities[].hooks[].idStable hook contract identifier, sent as ce-type. Use a new identifier for a breaking payload change.	string	Yes	Not specified	None specified
entities[].hooks[].phaseWhen the hook runs relative to the triggering transaction.	string	Yes	after before	None specified
entities[].hooks[].principalThe access profile a proposal from this hook is applied under. Optional: a hook that declares none is a non-proposing hook, and a proposal from one is refused and dead-lettered at delivery time. Declaring none is not an authoring error.	null | string	No	Not specified	None specified
entities[].hooks[].projectionDeclared field identifiers to include in values. System event metadata is included separately.	array	Yes	Not specified	uniqueItems: true
entities[].hooks[].projection[]Array item	string	No	Not specified	None specified
entities[].hooks[].triggerCommitted record change that can produce this hook.	string	Yes	created patched request_lifecycle tombstoned	None specified
entities[].hooks[].whenOptional field tests, combined with AND. Omit to run on every matching trigger.	null | object	No	Not specified	None specified
entities[].hooks[].when.afterEqualsRequired values after the change. Valid with created and patched triggers.	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
entities[].hooks[].when.afterEquals.*Map valueA comparison literal in the closed field-condition language. Objects and arrays are refused during source parsing. The compiler then validates each scalar against the declared Registry field type.	boolean | null | number | string	Conditional	Not specified	None specified
entities[].hooks[].when.beforeEqualsRequired values before the change. Valid with patched and tombstoned triggers.	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
entities[].hooks[].when.beforeEquals.*Map valueA comparison literal in the closed field-condition language. Objects and arrays are refused during source parsing. The compiler then validates each scalar against the declared Registry field type.	boolean | null | number | string	Conditional	Not specified	None specified
entities[].hooks[].when.changedFields whose values must change. Only valid with the patched trigger.	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].hooks[].when.changed[]Array item	string	Conditional	Not specified	None specified
entities[].hooks[].when.kind	string	Conditional	fields request_lifecycle	None specified
entities[].hooks[].when.toStates	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].hooks[].when.toStates[]Array item	string	Conditional	Not specified	None specified
entities[].hooks[].when.transitions	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].hooks[].when.transitions[]Array item	string	Conditional	Not specified	None specified
entities[].id	string	Yes	Not specified	None specified
entities[].indexes	array	No	Not specifiedSchema default, where declared: []	None specified
entities[].indexes[]Array item	object	No	Not specified	None specified
entities[].indexes[].fields	array	Yes	Not specified	None specified
entities[].indexes[].fields[]Array item	string	No	Not specified	None specified
entities[].indexes[].id	string	Yes	Not specified	None specified
entities[].mutationMode	string	Yes	create_only mutable	None specified
entities[].primaryDataset	string	Yes	Not specified	None specified
entities[].readPaths	array	No	Not specified	None specified
entities[].readPaths[]Array item	object	No	Not specified	None specified
entities[].readPaths[].id	string	Yes	Not specified	None specified
entities[].readPaths[].route	string	Yes	Not specified	None specified
entities[].readPaths[].through	string	Yes	Not specified	None specified
entities[].readPaths[].to	string	Yes	Not specified	None specified
entities[].route	string	Yes	Not specified	None specified
entities[].selectorProfiles	array	No	Not specified	None specified
entities[].selectorProfiles[]Array item	object	No	Not specified	None specified
entities[].selectorProfiles[].fields	array	Yes	Not specified	None specified
entities[].selectorProfiles[].fields[]Array item	string	No	Not specified	None specified
entities[].selectorProfiles[].id	string	Yes	Not specified	None specified
entities[].temporal	null | object	No	Not specifiedSchema default, where declared: null	None specified
entities[].temporal.endField	string	Conditional	Not specified	None specified
entities[].temporal.scopeFieldsDeprecated bounded predecessor bridge. New authoring should declare exclusivity only through constraints[].scopeFields.	array	Conditional	Not specified	None specified
entities[].temporal.scopeFields[]Array item	string	Conditional	Not specified	None specified
entities[].temporal.startField	string	Conditional	Not specified	None specified
entities[].tombstone	boolean	No	Not specifiedSchema default, where declared: false	None specified
evidenceProviders	array	No	Not specified	None specified
evidenceProviders[]Array item	object	No	Not specified	None specified
evidenceProviders[].contracts	string	Yes	Not specified	None specified
evidenceProviders[].id	string	Yes	Not specified	None specified
evidenceProviders[].subjectResolution	string	Yes	trusted-provider-exact-selector	None specified
kind	string	Yes	Not specified	None specified
manifestProjection	null | object	No	Not specifiedSchema default, where declared: null	None specified
manifestProjection.accessProfile	string	Conditional	Not specified	None specified
manifestProjection.catalog	object	Conditional	Not specified	None specified
manifestProjection.catalog.applicationProfiles	array	Conditional	Not specifiedSchema default, where declared: []	None specified
manifestProjection.catalog.applicationProfiles[]Array item	object	Conditional	Not specified	None specified
manifestProjection.catalog.applicationProfiles[].id	string	Conditional	Not specified	None specified
manifestProjection.catalog.applicationProfiles[].version	string	Conditional	Not specified	None specified
manifestProjection.catalog.baseUrl	string	Conditional	Not specified	None specified
manifestProjection.catalog.conformsTo	array	Conditional	Not specifiedSchema default, where declared: []	None specified
manifestProjection.catalog.conformsTo[]Array item	string	Conditional	Not specified	None specified
manifestProjection.catalog.description	null | object | string	Conditional	Not specified	None specified
manifestProjection.catalog.description.*Map value	string	Conditional	Not specified	None specified
manifestProjection.catalog.participantId	null | string	Conditional	Not specified	None specified
manifestProjection.catalog.publisher	object	Conditional	Not specified	None specified
manifestProjection.catalog.publisher.authorityType	null | string	Conditional	Not specified	None specified
manifestProjection.catalog.publisher.id	string	Conditional	Not specified	None specified
manifestProjection.catalog.publisher.iri	null | string	Conditional	Not specified	None specified
manifestProjection.catalog.publisher.name	string	Conditional	Not specified	None specified
manifestProjection.catalog.standards	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
manifestProjection.catalog.standards.dcat	null | string	Conditional	Not specified	None specified
manifestProjection.catalog.standards.jsonSchema	null | string	Conditional	Not specified	None specified
manifestProjection.catalog.standards.shacl	null | string	Conditional	Not specified	None specified
manifestProjection.catalog.title	object | string	Conditional	Not specified	None specified
manifestProjection.catalog.title.*Map value	string	Conditional	Not specified	None specified
manifestProjection.classificationCeiling	string	Conditional	internal public restricted	None specified
manifestProjection.dataServices	array	Conditional	Not specified	None specified
manifestProjection.dataServices[]Array item	object	Conditional	Not specified	None specified
manifestProjection.dataServices[].conformsTo	null | string	Conditional	Not specified	None specified
manifestProjection.dataServices[].description	null | object | string	Conditional	Not specified	None specified
manifestProjection.dataServices[].description.*Map value	string	Conditional	Not specified	None specified
manifestProjection.dataServices[].endpointDescription	null | string	Conditional	Not specified	None specified
manifestProjection.dataServices[].endpointUrl	string	Conditional	Not specified	None specified
manifestProjection.dataServices[].id	string	Conditional	Not specified	None specified
manifestProjection.dataServices[].iri	null | string	Conditional	Not specified	None specified
manifestProjection.dataServices[].servesDatasets	array	Conditional	Not specified	None specified
manifestProjection.dataServices[].servesDatasets[]Array item	string	Conditional	Not specified	None specified
manifestProjection.dataServices[].title	object | string	Conditional	Not specified	None specified
manifestProjection.dataServices[].title.*Map value	string	Conditional	Not specified	None specified
manifestProjection.datasets	array	Conditional	Not specified	None specified
manifestProjection.datasets[]Array item	object	Conditional	Not specified	None specified
manifestProjection.datasets[].accessProfile	null | string	Conditional	Not specified	None specified
manifestProjection.datasets[].applicableLegislation	array	Conditional	Not specifiedSchema default, where declared: []	None specified
manifestProjection.datasets[].applicableLegislation[]Array item	string	Conditional	Not specified	None specified
manifestProjection.datasets[].classificationCeiling	null | string	Conditional	internal public restricted	None specified
manifestProjection.datasets[].conformsTo	array	Conditional	Not specifiedSchema default, where declared: []	None specified
manifestProjection.datasets[].conformsTo[]Array item	string	Conditional	Not specified	None specified
manifestProjection.datasets[].description	null | object | string	Conditional	Not specified	None specified
manifestProjection.datasets[].description.*Map value	string	Conditional	Not specified	None specified
manifestProjection.datasets[].id	string	Conditional	Not specified	None specified
manifestProjection.datasets[].iri	null | string	Conditional	Not specified	None specified
manifestProjection.datasets[].owner	null | string	Conditional	Not specified	None specified
manifestProjection.datasets[].spatialCoverage	null | string	Conditional	Not specified	None specified
manifestProjection.datasets[].status	null | string	Conditional	active completed deprecated under_development withdrawn	None specified
manifestProjection.datasets[].title	object | string	Conditional	Not specified	None specified
manifestProjection.datasets[].title.*Map value	string	Conditional	Not specified	None specified
manifestProjection.datasets[].version	null | string	Conditional	Not specified	None specified
manifestProjection.distributions	array	Conditional	Not specified	None specified
manifestProjection.distributions[]Array item	object	Conditional	Not specified	None specified
manifestProjection.distributions[].accessService	null | string	Conditional	Not specified	None specified
manifestProjection.distributions[].accessUrl	null | string	Conditional	Not specified	None specified
manifestProjection.distributions[].dataset	string	Conditional	Not specified	None specified
manifestProjection.distributions[].description	null | object | string	Conditional	Not specified	None specified
manifestProjection.distributions[].description.*Map value	string	Conditional	Not specified	None specified
manifestProjection.distributions[].downloadUrl	null | string	Conditional	Not specified	None specified
manifestProjection.distributions[].format	null | string	Conditional	Not specified	None specified
manifestProjection.distributions[].id	string	Conditional	Not specified	None specified
manifestProjection.distributions[].iri	null | string	Conditional	Not specified	None specified
manifestProjection.distributions[].mediaType	null | string	Conditional	Not specified	None specified
manifestProjection.distributions[].title	null | object | string	Conditional	Not specified	None specified
manifestProjection.distributions[].title.*Map value	string	Conditional	Not specified	None specified
manifestProjection.entities	array	Conditional	Not specifiedSchema default, where declared: []	None specified
manifestProjection.entities[]Array item	object	Conditional	Not specified	None specified
manifestProjection.entities[].conceptUri	null | string	Conditional	Not specified	None specified
manifestProjection.entities[].description	null | object | string	Conditional	Not specified	None specified
manifestProjection.entities[].description.*Map value	string	Conditional	Not specified	None specified
manifestProjection.entities[].fields	array	Conditional	Not specifiedSchema default, where declared: []	None specified
manifestProjection.entities[].fields[]Array item	object	Conditional	Not specified	None specified
manifestProjection.entities[].fields[].concepts	array	Conditional	Not specifiedSchema default, where declared: []	None specified
manifestProjection.entities[].fields[].concepts[]Array item	string	Conditional	Not specified	None specified
manifestProjection.entities[].fields[].id	string	Conditional	Not specified	None specified
manifestProjection.entities[].fields[].language	null | string	Conditional	Not specified	None specified
manifestProjection.entities[].fields[].relationshipConceptUri	null | string	Conditional	Not specified	None specified
manifestProjection.entities[].fields[].relationshipRole	null | string	Conditional	Not specified	None specified
manifestProjection.entities[].fields[].unit	null | string	Conditional	Not specified	None specified
manifestProjection.entities[].id	string	Conditional	Not specified	None specified
manifestProjection.entities[].identifiers	array	Conditional	Not specifiedSchema default, where declared: []	None specified
manifestProjection.entities[].identifiers[]Array item	object	Conditional	Not specified	None specified
manifestProjection.entities[].identifiers[].field	string	Conditional	Not specified	None specified
manifestProjection.entities[].identifiers[].kind	string	Conditional	Not specified	None specified
manifestProjection.entities[].title	null | object | string	Conditional	Not specified	None specified
manifestProjection.entities[].title.*Map value	string	Conditional	Not specified	None specified
manifestProjection.publicService	object	Conditional	Not specified	None specified
manifestProjection.publicService.id	string	Conditional	Not specified	None specified
manifestProjection.publicService.title	object | string	Conditional	Not specified	None specified
manifestProjection.publicService.title.*Map value	string	Conditional	Not specified	None specified
manifestProjection.vocabularies	array	Conditional	Not specifiedSchema default, where declared: []	None specified
manifestProjection.vocabularies[]Array item	object	Conditional	Not specified	None specified
manifestProjection.vocabularies[].concepts	array	Conditional	Not specifiedSchema default, where declared: []	None specified
manifestProjection.vocabularies[].concepts[]Array item	object	Conditional	Not specified	None specified
manifestProjection.vocabularies[].concepts[].code	string	Conditional	Not specified	None specified
manifestProjection.vocabularies[].concepts[].iri	null | string	Conditional	Not specified	None specified
manifestProjection.vocabularies[].concepts[].label	null | object | string	Conditional	Not specified	None specified
manifestProjection.vocabularies[].concepts[].label.*Map value	string	Conditional	Not specified	None specified
manifestProjection.vocabularies[].externalRef	null | string	Conditional	Not specified	None specified
manifestProjection.vocabularies[].id	string	Conditional	Not specified	None specified
manifestProjection.vocabularies[].schemeIri	string	Conditional	Not specified	None specified
manifestProjection.vocabularies[].version	null | string	Conditional	Not specified	None specified
modules	array	No	Not specifiedSchema default, where declared: []	None specified
modules[]Array item	object	No	Not specified	None specified
modules[].digest	null | string	No	Not specifiedSchema default, where declared: null	None specified
modules[].id	string	Yes	Not specified	None specified
modules[].version	string	Yes	Not specified	None specified
package	null | object	No	Not specifiedSchema default, where declared: null	None specified
package.environment	string	Conditional	Not specified	None specified
package.instanceId	string	Conditional	Not specified	None specified
package.sequence	integer	Conditional	Not specified	format: uint64 minimum: 0
package.sourceRevision	string	Conditional	Not specified	None specified
recipientsNamed organizations and frozen groups that consent may be given to.	null | object	No	Not specified	None specified
recipients.groups	array	Conditional	Not specified	None specified
recipients.groups[]Array itemA frozen, named list of declared organizations. Groups do not nest.	object	Conditional	Not specified	None specified
recipients.groups[].id	string	Conditional	Not specified	None specified
recipients.groups[].members	array	Conditional	Not specified	None specified
recipients.groups[].members[]Array item	string	Conditional	Not specified	None specified
recipients.groups[].name	string	Conditional	Not specified	None specified
recipients.organizations	array	Conditional	Not specifiedSchema default, where declared: []	None specified
recipients.organizations[]Array itemOne named organization. Its clients are the verified OAuth clients that act for it; an organization with no clients is retired and keeps its code.	object	Conditional	Not specified	None specified
recipients.organizations[].clients	array	Conditional	Not specified	None specified
recipients.organizations[].clients[]Array item	string	Conditional	Not specified	None specified
recipients.organizations[].contact	string	Conditional	Not specified	None specified
recipients.organizations[].id	string	Conditional	Not specified	None specified
recipients.organizations[].name	string	Conditional	Not specified	None specified
registry	object	Yes	Not specified	None specified
registry.canonicalBaseIri	string	Yes	Not specified	None specified
registry.defaultLanguage	string	Yes	Not specified	None specified
registry.id	string	Yes	Not specified	None specified
registry.version	string	Yes	Not specified	None specified
retiredConsentScopesConsent scope codes of removed gated profiles, kept so existing consent rows still validate. A retired scope matches nothing.	array	No	Not specified	None specified
retiredConsentScopes[]Array item	string	No	Not specified	None specified
vocabularies	array	No	Not specifiedSchema default, where declared: []	None specified
vocabularies[]Array item	object	No	Not specified	None specified
vocabularies[].id	string	Yes	Not specified	None specified
vocabularies[].values	array	Yes	Not specified	None specified
vocabularies[].values[]Array item	string	No	Not specified	None specified

modules/<name>/module.yaml

Source preview, pre-1.0

Generated from products/breg/generated/authoring/registry-module.schema.json. 557 key paths. Explained in docs/site/src/content/docs/configure/breg.mdx.

Key path	Type	Required	Accepted values	Constraints
actionsNamed immediate actions introduced by this module.	array	No	Not specified	None specified
actions[]Array item	object	No	Not specified	None specified
actions[].consentIssuerRequired when the action creates consent-record rows.	null | string	No	self steward	None specified
actions[].effects	array	No	Not specifiedSchema default, where declared: []	None specified
actions[].effects[]Array item	object	No	Not specified	None specified
actions[].effects[].clear	array	No	Not specifiedSchema default, where declared: []	uniqueItems: true
actions[].effects[].clear[]Array item	string	No	Not specified	None specified
actions[].effects[].id	null | string	No	Not specified	None specified
actions[].effects[].operation	string	Yes	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
actions[].effects[].set	object	No	Not specifiedSchema default, where declared: {}	None specified
actions[].effects[].set.*Map value	object	No	Not specified	None specified
actions[].effects[].set.*.fromEffect	null | string	No	Not specified	None specified
actions[].effects[].set.*.fromField	null | string	No	Not specified	None specified
actions[].effects[].target	object	Yes	Not specified	None specified
actions[].effects[].target.entity	null | string	No	Not specified	None specified
actions[].effects[].target.fromField	null | string	No	Not specified	None specified
actions[].evidence	array	No	Not specified	None specified
actions[].evidence[]Array item	object	No	Not specified	None specified
actions[].evidence[].id	string	Yes	Not specified	None specified
actions[].evidence[].maximumObservationAgeSeconds	integer	Yes	Not specified	format: uint64 minimum: 0
actions[].evidence[].outputs	array	Yes	Not specified	None specified
actions[].evidence[].outputs[]Array item	string	No	Not specified	None specified
actions[].evidence[].provider	string	Yes	Not specified	None specified
actions[].evidence[].requirement	string	Yes	Not specified	None specified
actions[].evidence[].subjects	object	Yes	Not specified	None specified
actions[].evidence[].subjects.*Map value	object	No	Not specified	None specified
actions[].evidence[].subjects.*.profile	string	Yes	Not specified	None specified
actions[].handlerThe authored action handler: the shared hook handler declaration, with the authorization members a governed action adds. handler is [HookHandlerSource], the same declaration an entity hook carries, so this product spells a handler one way. It is flattened, so the authored member set stays kind, the source reference the kind names, abi, writes, and refusals. writes and refusals are this product's own: they bound what the handler may write and the refusals it may return, and no hook declares them. Two rules narrow the shared declaration to what this path runs. abi is optional there and required here, refused at deserialization, because every backend an action may declare speaks one. The url kind is refused by the compiler at actions[].handler.kind, because an action handler runs inside the triggering transaction and cannot be remote.	null | object	No	Not specified	None specified
actions[].handler.abi	string	Conditional	registry.action-handler/v1 registry.action-handler/v2	None specified
actions[].handler.kindThe authored action-handler backend. The wasm backend is admitted when this build of the compiler carries the wasm cargo feature, which validates a declared WASM handler module against the platform guest ABI at compile time; without that feature a declared WASM handler is refused with the pinned action.handler.wasm_build_unsupported diagnostic.	string	Conditional	rhai wasm	None specified
actions[].handler.moduleThe WASM handler module path, project-local. Declared for wasm handlers only; the compiler enforces the pairing with the declared backend.	null | string	Conditional	Not specified	None specified
actions[].handler.refusals	array	Conditional	Not specifiedSchema default, where declared: []	None specified
actions[].handler.refusals[]Array item	object	Conditional	Not specified	None specified
actions[].handler.refusals[].code	string	Conditional	Not specified	None specified
actions[].handler.refusals[].label	string	Conditional	Not specified	None specified
actions[].handler.scriptThe Rhai handler script path. Declared for rhai handlers only; the compiler enforces the pairing with the declared backend.	null | string	Conditional	Not specified	None specified
actions[].handler.writes	array	Conditional	Not specified	None specified
actions[].handler.writes[]Array item	object	Conditional	Not specified	None specified
actions[].handler.writes[].fields	array	Conditional	Not specified	None specified
actions[].handler.writes[].fields[]Array item	string	Conditional	Not specified	None specified
actions[].handler.writes[].id	string	Conditional	Not specified	None specified
actions[].handler.writes[].operation	string	Conditional	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
actions[].handler.writes[].target	object	Conditional	Not specified	None specified
actions[].handler.writes[].target.entity	null | string	Conditional	Not specified	None specified
actions[].handler.writes[].target.fromField	null | string	Conditional	Not specified	None specified
actions[].id	string	Yes	Not specified	None specified
actions[].inputs	array	No	Not specifiedSchema default, where declared: []	None specified
actions[].inputs[]Array item	object	No	Not specified	None specified
actions[].inputs[].apiName	null | string	No	Not specified	None specified
actions[].inputs[].bbox	null | object	Conditional	Not specified	None specified
actions[].inputs[].bbox.east	string	Conditional	Not specified	None specified
actions[].inputs[].bbox.north	string	Conditional	Not specified	None specified
actions[].inputs[].bbox.south	string	Conditional	Not specified	None specified
actions[].inputs[].bbox.west	string	Conditional	Not specified	None specified
actions[].inputs[].classification	string	Yes	internal public restricted	None specified
actions[].inputs[].id	string	Yes	Not specified	None specified
actions[].inputs[].maxBytes	integer	Conditional	Not specified	format: uint32 minimum: 0
actions[].inputs[].maxLength	integer	Conditional	Not specified	format: uint32 minimum: 0
actions[].inputs[].maximum	null | string	Conditional	Not specified	None specified
actions[].inputs[].minLength	integer	Conditional	Not specifiedSchema default, where declared: 0	format: uint32 minimum: 0
actions[].inputs[].minimum	null | string	Conditional	Not specified	None specified
actions[].inputs[].onDelete	string	Conditional	restrict Schema default, where declared: "restrict"	None specified
actions[].inputs[].precision	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
actions[].inputs[].required	boolean	No	Not specifiedSchema default, where declared: false	None specified
actions[].inputs[].scale	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
actions[].inputs[].target	string	Conditional	Not specified	None specified
actions[].inputs[].type	string	Yes	boolean crs84-point date decimal int64 reference string structured text timestamp uuid vocabulary-code	None specified
actions[].inputs[].values	array	Conditional	Not specifiedSchema default, where declared: []	None specified
actions[].inputs[].values[]Array item	string	Conditional	Not specified	None specified
actions[].inputs[].vocabulary	string	Conditional	Not specified	None specified
actions[].requiresAcceptance-time checks over exact existing reference inputs, combined with AND.	array	No	Not specified	None specified
actions[].requires[]Array item	object	No	Not specified	None specified
actions[].requires[].equalsInput	null | string	No	Not specified	None specified
actions[].requires[].field	string	Yes	Not specified	None specified
actions[].requires[].input	string	Yes	Not specified	None specified
dependenciesIdentifiers of modules that must be applied before this module.	array	No	Not specifiedSchema default, where declared: []	None specified
dependencies[]Array item	string	No	Not specified	None specified
entitiesEntities introduced by this module.	array	No	Not specifiedSchema default, where declared: []	None specified
entities[]Array item	object	No	Not specified	None specified
entities[].accessRequirementsMandatory request-access requirements checked against every profile, including module contributions.	null | object	No	Not specified	None specified
entities[].accessRequirements.allowedPurposesWhen nonempty, every profile must restrict purpose to a nonempty subset of these values. Empty imposes no purpose requirement.	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].accessRequirements.allowedPurposes[]Array item	string	Conditional	Not specified	None specified
entities[].accessRequirements.requiredScopesEvery profile must require all these scopes. Requirements never grant access.	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].accessRequirements.requiredScopes[]Array item	string	Conditional	Not specified	None specified
entities[].accessRequirements.rowBoundariesEvery profile must include these exact field, verified-claim, and operator bindings.	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].accessRequirements.rowBoundaries[]Array item	object	Conditional	Not specified	None specified
entities[].accessRequirements.rowBoundaries[].claim	string	Conditional	Not specified	None specified
entities[].accessRequirements.rowBoundaries[].field	string	Conditional	Not specified	None specified
entities[].accessRequirements.rowBoundaries[].operator	string	Conditional	equals in	None specified
entities[].attachmentsGoverned binary slots on change-request entities, projected under their exact IDs.	array	No	Not specified	None specified
entities[].attachments[]Array item	object	No	Not specified	None specified
entities[].attachments[].classification	string	Yes	internal public restricted	None specified
entities[].attachments[].contentTypes	array	Yes	Not specified	None specified
entities[].attachments[].contentTypes[]Array item	string	No	Not specified	None specified
entities[].attachments[].id	string	Yes	Not specified	None specified
entities[].attachments[].maximumBytes	integer	Yes	Not specified	format: uint32 minimum: 0
entities[].attachments[].required	boolean	Yes	Not specified	None specified
entities[].batch	null | object	No	Not specifiedSchema default, where declared: null	None specified
entities[].batch.maximumBytes	integer	Conditional	Not specified	format: uint32 minimum: 0
entities[].batch.maximumItems	integer	Conditional	Not specified	format: uint16 maximum: 65535 minimum: 0
entities[].changeControl	null | object	No	Not specified	None specified
entities[].changeControl.requiredFor	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].changeControl.requiredFor[]Array item	string	Conditional	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
entities[].changeRequest	null | object	No	Not specified	None specified
entities[].changeRequest.application	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
entities[].changeRequest.application.preconditions	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidenceGoverned Evidence acquisitions required immediately before application.	array	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].id	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].maximumObservationAgeSeconds	integer	Conditional	Not specified	format: uint64 minimum: 0
entities[].changeRequest.application.preconditions.evidence[].provider	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].requirement	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].requires	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].changeRequest.application.preconditions.evidence[].requires[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].requires[].atLeast	integer | null	Conditional	Not specified	format: int64
entities[].changeRequest.application.preconditions.evidence[].requires[].atMost	integer | null	Conditional	Not specified	format: int64
entities[].changeRequest.application.preconditions.evidence[].requires[].equalsFromRequestField	null | string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].requires[].output	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*Map value	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*.profile	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*.selectorsExact governed selector-profile field map. Every profile field must be present exactly once and no undeclared field is admitted.	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*.selectors.*Map value	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*.selectors.*.field	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*.selectors.*.source	string	Conditional	request_field target_field	None specified
entities[].changeRequest.application.preconditions.evidence[].subjects.*.selectors.*.target	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.requestPredicates over the frozen request intake itself.	array	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.request[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.request[].atLeast	integer | null	Conditional	Not specified	format: int64
entities[].changeRequest.application.preconditions.request[].atMost	integer | null	Conditional	Not specified	format: int64
entities[].changeRequest.application.preconditions.request[].currentDate	null | string	Conditional	on_or_after on_or_before	None specified
entities[].changeRequest.application.preconditions.request[].equalsFromRequestField	null | string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.request[].field	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targetsExisting records read and revision-bound at proposal preparation.	array	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[].entity	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[].fromField	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[].id	string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[].requires	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].changeRequest.application.preconditions.targets[].requires[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[].requires[].atLeast	integer | null	Conditional	Not specified	format: int64
entities[].changeRequest.application.preconditions.targets[].requires[].atMost	integer | null	Conditional	Not specified	format: int64
entities[].changeRequest.application.preconditions.targets[].requires[].currentDate	null | string	Conditional	on_or_after on_or_before	None specified
entities[].changeRequest.application.preconditions.targets[].requires[].equalsFromRequestField	null | string	Conditional	Not specified	None specified
entities[].changeRequest.application.preconditions.targets[].requires[].field	string	Conditional	Not specified	None specified
entities[].changeRequest.effects	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].changeRequest.effects[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.effects[].clear	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].changeRequest.effects[].clear[]Array item	string	Conditional	Not specified	None specified
entities[].changeRequest.effects[].id	null | string	Conditional	Not specified	None specified
entities[].changeRequest.effects[].operation	string	Conditional	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
entities[].changeRequest.effects[].set	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
entities[].changeRequest.effects[].set.*Map value	object	Conditional	Not specified	None specified
entities[].changeRequest.effects[].set.*.fromEffect	null | string	Conditional	Not specified	None specified
entities[].changeRequest.effects[].set.*.fromField	null | string	Conditional	Not specified	None specified
entities[].changeRequest.effects[].target	object	Conditional	Not specified	None specified
entities[].changeRequest.effects[].target.entity	null | string	Conditional	Not specified	None specified
entities[].changeRequest.effects[].target.fromField	null | string	Conditional	Not specified	None specified
entities[].changeRequest.onApproved	object	Conditional	Not specifiedSchema default, where declared: {"mode":"manual"}	None specified
entities[].changeRequest.onApproved.executor	null | string	Conditional	Not specified	None specified
entities[].changeRequest.onApproved.mode	string	Conditional	automatic manual Schema default, where declared: "manual"	None specified
entities[].changeRequest.planner	null | object	Conditional	Not specified	None specified
entities[].changeRequest.planner.abi	string	Conditional	Not specified	None specified
entities[].changeRequest.planner.kindThe authored change-request planner backend. The wasm backend is expressible so a declared WASM planner is refused by the compiler with a pinned diagnostic; WASM planners stay unsupported. Retained Rust name for the reviewed change-request authoring contract.	string	Conditional	rhai wasm	None specified
entities[].changeRequest.planner.requestFields	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].changeRequest.planner.requestFields[]Array item	string	Conditional	Not specified	None specified
entities[].changeRequest.planner.script	string	Conditional	Not specified	None specified
entities[].changeRequest.planner.writes	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].changeRequest.planner.writes[]Array item	object	Conditional	Not specified	None specified
entities[].changeRequest.planner.writes[].fields	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].changeRequest.planner.writes[].fields[]Array item	string	Conditional	Not specified	None specified
entities[].changeRequest.planner.writes[].operation	string	Conditional	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
entities[].changeRequest.planner.writes[].target	object	Conditional	Not specified	None specified
entities[].changeRequest.planner.writes[].target.entity	null | string	Conditional	Not specified	None specified
entities[].changeRequest.planner.writes[].target.fromField	null | string	Conditional	Not specified	None specified
entities[].changeRequest.retention	object	Conditional	Not specifiedSchema default, where declared: {"mode":"retain"}	None specified
entities[].changeRequest.retention.mode	string	Conditional	operator_erase retain Schema default, where declared: "retain"	None specified
entities[].changeRequest.review	object	Conditional	Not specified	None specified
entities[].changeRequest.review.authority	string	Conditional	Not specified	None specified
entities[].changeRequest.review.mode	string	Conditional	none	None specified
entities[].changeRequest.review.policyId	string	Conditional	Not specified	None specified
entities[].classification	string	No	internal public restricted Schema default, where declared: "internal"	None specified
entities[].consentRecordDeclares this entity's rows as subject-issued consent decisions that requireConsent permissions check before returning a subject's row.	null | object	No	Not specified	None specified
entities[].consentRecord.decisionMaps the adopter's decision codes onto the engine's decision sets.	object	Conditional	Not specified	None specified
entities[].consentRecord.decision.field	string	Conditional	Not specified	None specified
entities[].consentRecord.decision.givesCodes that give consent.	array	Conditional	Not specified	None specified
entities[].consentRecord.decision.gives[]Array item	string	Conditional	Not specified	None specified
entities[].consentRecord.decision.refusalsRevoke codes never shown to recipients.	array	Conditional	Not specified	None specified
entities[].consentRecord.decision.refusals[]Array item	string	Conditional	Not specified	None specified
entities[].consentRecord.decision.revokesCodes that supersede every give on the same key ordered no later.	array	Conditional	Not specified	None specified
entities[].consentRecord.decision.revokes[]Array item	string	Conditional	Not specified	None specified
entities[].consentRecord.purposeA vocabulary-code field compared with the verified request purpose.	string	Conditional	Not specified	None specified
entities[].consentRecord.recipientA vocabulary-code field bound to registry-recipients.	string	Conditional	Not specified	None specified
entities[].consentRecord.scopeA vocabulary-code field bound to registry-consent-scopes.	string	Conditional	Not specified	None specified
entities[].consentRecord.subjectA reference field naming the protected subject row.	string	Conditional	Not specified	None specified
entities[].consentRecord.validityValidity of a consent decision. Every give expires within maxDuration.	object	Conditional	Not specified	None specified
entities[].consentRecord.validity.fromA required timestamp field; a give is active only from this time.	string	Conditional	Not specified	None specified
entities[].consentRecord.validity.maxDurationAn ISO 8601 duration such as P365D, at most ten years.	string	Conditional	Not specified	None specified
entities[].consentRecord.validity.untilAn optional timestamp field ending the give earlier than maxDuration.	null | string	Conditional	Not specified	None specified
entities[].constraints	array	No	Not specifiedSchema default, where declared: []	None specified
entities[].constraints[]Array item	object	No	Not specified	None specified
entities[].constraints[].endField	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].constraints[].field	string	Conditional	Not specified	None specified
entities[].constraints[].fields	array	Conditional	Not specified	None specified
entities[].constraints[].fields[]Array item	string	Conditional	Not specified	None specified
entities[].constraints[].id	null | string	No	Not specifiedSchema default, where declared: null	None specified
entities[].constraints[].kind	string	Yes	compare int_range temporal-non-overlap unique vocabulary	None specified
entities[].constraints[].left	string	Conditional	Not specified	None specified
entities[].constraints[].maximum	integer | null	Conditional	Not specifiedSchema default, where declared: null	format: int64
entities[].constraints[].minimum	integer | null	Conditional	Not specifiedSchema default, where declared: null	format: int64
entities[].constraints[].operator	string	Conditional	greater_than greater_than_or_equal less_than less_than_or_equal	None specified
entities[].constraints[].right	string	Conditional	Not specified	None specified
entities[].constraints[].scopeFields	array	Conditional	Not specified	None specified
entities[].constraints[].scopeFields[]Array item	string	Conditional	Not specified	None specified
entities[].constraints[].startField	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].constraints[].values	array	Conditional	Not specified	None specified
entities[].constraints[].values[]Array item	string	Conditional	Not specified	None specified
entities[].constraints[].when	array | null	Conditional	Not specified	None specified
entities[].constraints[].when[]Array item	object	Conditional	Not specified	None specified
entities[].constraints[].when[].field	string	Conditional	Not specified	None specified
entities[].constraints[].when[].kind	string	Conditional	active_lifecycle field_equals field_is_not_null field_is_null	None specified
entities[].derived	array	No	Not specified	None specified
entities[].derived[]Array item	object	No	Not specified	None specified
entities[].derived[].execution	string	No	live Schema default, where declared: "live"	None specified
entities[].derived[].fields	array	No	Not specifiedSchema default, where declared: []	None specified
entities[].derived[].fields[]Array item	object	No	Not specified	None specified
entities[].derived[].fields[].apiName	null | string	No	Not specified	None specified
entities[].derived[].fields[].bbox	null | object	Conditional	Not specified	None specified
entities[].derived[].fields[].bbox.east	string	Conditional	Not specified	None specified
entities[].derived[].fields[].bbox.north	string	Conditional	Not specified	None specified
entities[].derived[].fields[].bbox.south	string	Conditional	Not specified	None specified
entities[].derived[].fields[].bbox.west	string	Conditional	Not specified	None specified
entities[].derived[].fields[].classification	string	Yes	internal public restricted	None specified
entities[].derived[].fields[].id	string	Yes	Not specified	None specified
entities[].derived[].fields[].maxBytes	integer	Conditional	Not specified	format: uint32 minimum: 0
entities[].derived[].fields[].maxLength	integer	Conditional	Not specified	format: uint32 minimum: 0
entities[].derived[].fields[].maximum	null | string	Conditional	Not specified	None specified
entities[].derived[].fields[].minLength	integer	Conditional	Not specifiedSchema default, where declared: 0	format: uint32 minimum: 0
entities[].derived[].fields[].minimum	null | string	Conditional	Not specified	None specified
entities[].derived[].fields[].onDelete	string	Conditional	restrict Schema default, where declared: "restrict"	None specified
entities[].derived[].fields[].precision	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
entities[].derived[].fields[].scale	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
entities[].derived[].fields[].target	string	Conditional	Not specified	None specified
entities[].derived[].fields[].type	string	Yes	boolean crs84-point date decimal int64 reference string structured text timestamp uuid vocabulary-code	None specified
entities[].derived[].fields[].values	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].derived[].fields[].values[]Array item	string	Conditional	Not specified	None specified
entities[].derived[].fields[].vocabulary	string	Conditional	Not specified	None specified
entities[].derived[].id	string	Yes	Not specified	None specified
entities[].derived[].key	string	Yes	Not specified	None specified
entities[].derived[].sql	string	Yes	Not specified	None specified
entities[].fields	array	No	Not specifiedSchema default, where declared: []	None specified
entities[].fields[]Array item	object	No	Not specified	None specified
entities[].fields[].apiName	null | string	No	Not specifiedSchema default, where declared: null	None specified
entities[].fields[].bbox	null | object	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].fields[].bbox.east	string	Conditional	Not specified	None specified
entities[].fields[].bbox.north	string	Conditional	Not specified	None specified
entities[].fields[].bbox.south	string	Conditional	Not specified	None specified
entities[].fields[].bbox.west	string	Conditional	Not specified	None specified
entities[].fields[].classification	string	Yes	internal public restricted	None specified
entities[].fields[].encrypted	boolean	Conditional	Not specifiedSchema default, where declared: false	None specified
entities[].fields[].id	string	Yes	Not specified	None specified
entities[].fields[].lookupThe authored blind-index declaration for an encrypted field. Normalization composes in declared order over the canonical string form of the value; unique requests a unique index over the derived blind-index column.	null | object	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].fields[].lookup.normalization	array	Conditional	Not specifiedSchema default, where declared: []	maxItems: 8
entities[].fields[].lookup.normalization[]Array itemA normalization step applied to the canonical string form of an encrypted value before its blind index is derived. The vocabulary is closed.	string	Conditional	collapse-whitespace lowercase remove-separators trim uppercase	None specified
entities[].fields[].lookup.unique	boolean	Conditional	Not specifiedSchema default, where declared: false	None specified
entities[].fields[].maxBytes	integer	Conditional	Not specified	format: uint32 minimum: 0
entities[].fields[].maxLength	integer	Conditional	Not specified	format: uint32 minimum: 0
entities[].fields[].maximum	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].fields[].minLength	integer	Conditional	Not specifiedSchema default, where declared: 0	format: uint32 minimum: 0
entities[].fields[].minimum	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].fields[].onDelete	string	Conditional	restrict Schema default, where declared: "restrict"	None specified
entities[].fields[].pattern	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
entities[].fields[].precision	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
entities[].fields[].required	boolean	No	Not specifiedSchema default, where declared: false	None specified
entities[].fields[].scale	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
entities[].fields[].target	string	Conditional	Not specified	None specified
entities[].fields[].type	string	Yes	boolean crs84-point date decimal int64 reference string structured text timestamp uuid vocabulary-code	None specified
entities[].fields[].validTimeRole	null | string	No	valid_from valid_to Schema default, where declared: null	None specified
entities[].fields[].values	array	Conditional	Not specifiedSchema default, where declared: []	None specified
entities[].fields[].values[]Array item	string	Conditional	Not specified	None specified
entities[].fields[].vocabulary	string	Conditional	Not specified	None specified
entities[].geojson	null | object	No	Not specified	None specified
entities[].geojson.geometryField	string	Conditional	Not specified	None specified
entities[].hooks	array	No	Not specifiedSchema default, where declared: []	None specified
entities[].hooks[]Array itemOne declared hook on an entity. The shape is [registry_platform_hooks::HookDeclaration] with trigger and when closed to the vocabulary this compiler validates, and with handler optional. A hook that declares no handler is still recorded in the outbox and delivered nowhere; production compilation refuses that. Entity hooks run after the triggering transaction commits, so phase is written and the compiler refuses any value it cannot run.	object	No	Not specified	None specified
entities[].hooks[].handlerGoverned, destination-neutral delivery. destinationId is a key in runtime eventDestinations; the project carries no URL or secret, and deployment configuration may tighten the bounds it binds but cannot supply or widen this authority. Production compilation requires it.	null | object	No	Not specified	None specified
entities[].hooks[].handler.abiFor rhai: The handler ABI the script speaks. For wasm: The handler ABI the module speaks.	null | string	Conditional	Not specified	None specified
entities[].hooks[].handler.destinationIdKey in the runtime destination binding.	string	Conditional	Not specified	None specified
entities[].hooks[].handler.kind	string	Conditional	rhai url wasm	None specified
entities[].hooks[].handler.moduleModule path in the project.	string	Conditional	Not specified	None specified
entities[].hooks[].handler.scriptScript path in the project.	string	Conditional	Not specified	None specified
entities[].hooks[].idStable hook contract identifier, sent as ce-type. Use a new identifier for a breaking payload change.	string	Yes	Not specified	None specified
entities[].hooks[].phaseWhen the hook runs relative to the triggering transaction.	string	Yes	after before	None specified
entities[].hooks[].principalThe access profile a proposal from this hook is applied under. Optional: a hook that declares none is a non-proposing hook, and a proposal from one is refused and dead-lettered at delivery time. Declaring none is not an authoring error.	null | string	No	Not specified	None specified
entities[].hooks[].projectionDeclared field identifiers to include in values. System event metadata is included separately.	array	Yes	Not specified	uniqueItems: true
entities[].hooks[].projection[]Array item	string	No	Not specified	None specified
entities[].hooks[].triggerCommitted record change that can produce this hook.	string	Yes	created patched request_lifecycle tombstoned	None specified
entities[].hooks[].whenOptional field tests, combined with AND. Omit to run on every matching trigger.	null | object	No	Not specified	None specified
entities[].hooks[].when.afterEqualsRequired values after the change. Valid with created and patched triggers.	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
entities[].hooks[].when.afterEquals.*Map valueA comparison literal in the closed field-condition language. Objects and arrays are refused during source parsing. The compiler then validates each scalar against the declared Registry field type.	boolean | null | number | string	Conditional	Not specified	None specified
entities[].hooks[].when.beforeEqualsRequired values before the change. Valid with patched and tombstoned triggers.	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
entities[].hooks[].when.beforeEquals.*Map valueA comparison literal in the closed field-condition language. Objects and arrays are refused during source parsing. The compiler then validates each scalar against the declared Registry field type.	boolean | null | number | string	Conditional	Not specified	None specified
entities[].hooks[].when.changedFields whose values must change. Only valid with the patched trigger.	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].hooks[].when.changed[]Array item	string	Conditional	Not specified	None specified
entities[].hooks[].when.kind	string	Conditional	fields request_lifecycle	None specified
entities[].hooks[].when.toStates	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].hooks[].when.toStates[]Array item	string	Conditional	Not specified	None specified
entities[].hooks[].when.transitions	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
entities[].hooks[].when.transitions[]Array item	string	Conditional	Not specified	None specified
entities[].id	string	Yes	Not specified	None specified
entities[].indexes	array	No	Not specifiedSchema default, where declared: []	None specified
entities[].indexes[]Array item	object	No	Not specified	None specified
entities[].indexes[].fields	array	Yes	Not specified	None specified
entities[].indexes[].fields[]Array item	string	No	Not specified	None specified
entities[].indexes[].id	string	Yes	Not specified	None specified
entities[].mutationMode	string	Yes	create_only mutable	None specified
entities[].primaryDataset	string	Yes	Not specified	None specified
entities[].readPaths	array	No	Not specified	None specified
entities[].readPaths[]Array item	object	No	Not specified	None specified
entities[].readPaths[].id	string	Yes	Not specified	None specified
entities[].readPaths[].route	string	Yes	Not specified	None specified
entities[].readPaths[].through	string	Yes	Not specified	None specified
entities[].readPaths[].to	string	Yes	Not specified	None specified
entities[].route	string	Yes	Not specified	None specified
entities[].selectorProfiles	array	No	Not specified	None specified
entities[].selectorProfiles[]Array item	object	No	Not specified	None specified
entities[].selectorProfiles[].fields	array	Yes	Not specified	None specified
entities[].selectorProfiles[].fields[]Array item	string	No	Not specified	None specified
entities[].selectorProfiles[].id	string	Yes	Not specified	None specified
entities[].temporal	null | object	No	Not specifiedSchema default, where declared: null	None specified
entities[].temporal.endField	string	Conditional	Not specified	None specified
entities[].temporal.scopeFieldsDeprecated bounded predecessor bridge. New authoring should declare exclusivity only through constraints[].scopeFields.	array	Conditional	Not specified	None specified
entities[].temporal.scopeFields[]Array item	string	Conditional	Not specified	None specified
entities[].temporal.startField	string	Conditional	Not specified	None specified
entities[].tombstone	boolean	No	Not specifiedSchema default, where declared: false	None specified
extendEntitiesAdditive contributions to entities already declared by the project or another module.	array	No	Not specifiedSchema default, where declared: []	None specified
extendEntities[]Array item	object	No	Not specified	None specified
extendEntities[].accessRequirementsAdd mandatory requirements only when the entity has none; replacing them is refused.	null | object	No	Not specified	None specified
extendEntities[].accessRequirements.allowedPurposesWhen nonempty, every profile must restrict purpose to a nonempty subset of these values. Empty imposes no purpose requirement.	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
extendEntities[].accessRequirements.allowedPurposes[]Array item	string	Conditional	Not specified	None specified
extendEntities[].accessRequirements.requiredScopesEvery profile must require all these scopes. Requirements never grant access.	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
extendEntities[].accessRequirements.requiredScopes[]Array item	string	Conditional	Not specified	None specified
extendEntities[].accessRequirements.rowBoundariesEvery profile must include these exact field, verified-claim, and operator bindings.	array	Conditional	Not specifiedSchema default, where declared: []	None specified
extendEntities[].accessRequirements.rowBoundaries[]Array item	object	Conditional	Not specified	None specified
extendEntities[].accessRequirements.rowBoundaries[].claim	string	Conditional	Not specified	None specified
extendEntities[].accessRequirements.rowBoundaries[].field	string	Conditional	Not specified	None specified
extendEntities[].accessRequirements.rowBoundaries[].operator	string	Conditional	equals in	None specified
extendEntities[].changeControl	null | object	No	Not specified	None specified
extendEntities[].changeControl.requiredFor	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
extendEntities[].changeControl.requiredFor[]Array item	string	Conditional	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
extendEntities[].changeRequest	null | object	No	Not specified	None specified
extendEntities[].changeRequest.application	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
extendEntities[].changeRequest.application.preconditions	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidenceGoverned Evidence acquisitions required immediately before application.	array	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[]Array item	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].id	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].maximumObservationAgeSeconds	integer	Conditional	Not specified	format: uint64 minimum: 0
extendEntities[].changeRequest.application.preconditions.evidence[].provider	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].requirement	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].requires	array	Conditional	Not specifiedSchema default, where declared: []	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].requires[]Array item	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].requires[].atLeast	integer | null	Conditional	Not specified	format: int64
extendEntities[].changeRequest.application.preconditions.evidence[].requires[].atMost	integer | null	Conditional	Not specified	format: int64
extendEntities[].changeRequest.application.preconditions.evidence[].requires[].equalsFromRequestField	null | string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].requires[].output	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].subjects	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].subjects.*Map value	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].subjects.*.profile	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].subjects.*.selectorsExact governed selector-profile field map. Every profile field must be present exactly once and no undeclared field is admitted.	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].subjects.*.selectors.*Map value	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].subjects.*.selectors.*.field	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].subjects.*.selectors.*.source	string	Conditional	request_field target_field	None specified
extendEntities[].changeRequest.application.preconditions.evidence[].subjects.*.selectors.*.target	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.requestPredicates over the frozen request intake itself.	array	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.request[]Array item	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.request[].atLeast	integer | null	Conditional	Not specified	format: int64
extendEntities[].changeRequest.application.preconditions.request[].atMost	integer | null	Conditional	Not specified	format: int64
extendEntities[].changeRequest.application.preconditions.request[].currentDate	null | string	Conditional	on_or_after on_or_before	None specified
extendEntities[].changeRequest.application.preconditions.request[].equalsFromRequestField	null | string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.request[].field	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.targetsExisting records read and revision-bound at proposal preparation.	array	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.targets[]Array item	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.targets[].entity	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.targets[].fromField	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.targets[].id	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.targets[].requires	array	Conditional	Not specifiedSchema default, where declared: []	None specified
extendEntities[].changeRequest.application.preconditions.targets[].requires[]Array item	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.targets[].requires[].atLeast	integer | null	Conditional	Not specified	format: int64
extendEntities[].changeRequest.application.preconditions.targets[].requires[].atMost	integer | null	Conditional	Not specified	format: int64
extendEntities[].changeRequest.application.preconditions.targets[].requires[].currentDate	null | string	Conditional	on_or_after on_or_before	None specified
extendEntities[].changeRequest.application.preconditions.targets[].requires[].equalsFromRequestField	null | string	Conditional	Not specified	None specified
extendEntities[].changeRequest.application.preconditions.targets[].requires[].field	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.effects	array	Conditional	Not specifiedSchema default, where declared: []	None specified
extendEntities[].changeRequest.effects[]Array item	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.effects[].clear	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
extendEntities[].changeRequest.effects[].clear[]Array item	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.effects[].id	null | string	Conditional	Not specified	None specified
extendEntities[].changeRequest.effects[].operation	string	Conditional	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
extendEntities[].changeRequest.effects[].set	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
extendEntities[].changeRequest.effects[].set.*Map value	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.effects[].set.*.fromEffect	null | string	Conditional	Not specified	None specified
extendEntities[].changeRequest.effects[].set.*.fromField	null | string	Conditional	Not specified	None specified
extendEntities[].changeRequest.effects[].target	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.effects[].target.entity	null | string	Conditional	Not specified	None specified
extendEntities[].changeRequest.effects[].target.fromField	null | string	Conditional	Not specified	None specified
extendEntities[].changeRequest.onApproved	object	Conditional	Not specifiedSchema default, where declared: {"mode":"manual"}	None specified
extendEntities[].changeRequest.onApproved.executor	null | string	Conditional	Not specified	None specified
extendEntities[].changeRequest.onApproved.mode	string	Conditional	automatic manual Schema default, where declared: "manual"	None specified
extendEntities[].changeRequest.planner	null | object	Conditional	Not specified	None specified
extendEntities[].changeRequest.planner.abi	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.planner.kindThe authored change-request planner backend. The wasm backend is expressible so a declared WASM planner is refused by the compiler with a pinned diagnostic; WASM planners stay unsupported. Retained Rust name for the reviewed change-request authoring contract.	string	Conditional	rhai wasm	None specified
extendEntities[].changeRequest.planner.requestFields	array	Conditional	Not specifiedSchema default, where declared: []	None specified
extendEntities[].changeRequest.planner.requestFields[]Array item	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.planner.script	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.planner.writes	array	Conditional	Not specifiedSchema default, where declared: []	None specified
extendEntities[].changeRequest.planner.writes[]Array item	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.planner.writes[].fields	array	Conditional	Not specifiedSchema default, where declared: []	None specified
extendEntities[].changeRequest.planner.writes[].fields[]Array item	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.planner.writes[].operation	string	Conditional	apply_request batch cancel_request create get invoke list lookup patch revise_request revisions snapshot submit_request tombstone	None specified
extendEntities[].changeRequest.planner.writes[].target	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.planner.writes[].target.entity	null | string	Conditional	Not specified	None specified
extendEntities[].changeRequest.planner.writes[].target.fromField	null | string	Conditional	Not specified	None specified
extendEntities[].changeRequest.retention	object	Conditional	Not specifiedSchema default, where declared: {"mode":"retain"}	None specified
extendEntities[].changeRequest.retention.mode	string	Conditional	operator_erase retain Schema default, where declared: "retain"	None specified
extendEntities[].changeRequest.review	object	Conditional	Not specified	None specified
extendEntities[].changeRequest.review.authority	string	Conditional	Not specified	None specified
extendEntities[].changeRequest.review.mode	string	Conditional	none	None specified
extendEntities[].changeRequest.review.policyId	string	Conditional	Not specified	None specified
extendEntities[].constraints	array	No	Not specifiedSchema default, where declared: []	None specified
extendEntities[].constraints[]Array item	object	No	Not specified	None specified
extendEntities[].constraints[].endField	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
extendEntities[].constraints[].field	string	Conditional	Not specified	None specified
extendEntities[].constraints[].fields	array	Conditional	Not specified	None specified
extendEntities[].constraints[].fields[]Array item	string	Conditional	Not specified	None specified
extendEntities[].constraints[].id	null | string	No	Not specifiedSchema default, where declared: null	None specified
extendEntities[].constraints[].kind	string	Yes	compare int_range temporal-non-overlap unique vocabulary	None specified
extendEntities[].constraints[].left	string	Conditional	Not specified	None specified
extendEntities[].constraints[].maximum	integer | null	Conditional	Not specifiedSchema default, where declared: null	format: int64
extendEntities[].constraints[].minimum	integer | null	Conditional	Not specifiedSchema default, where declared: null	format: int64
extendEntities[].constraints[].operator	string	Conditional	greater_than greater_than_or_equal less_than less_than_or_equal	None specified
extendEntities[].constraints[].right	string	Conditional	Not specified	None specified
extendEntities[].constraints[].scopeFields	array	Conditional	Not specified	None specified
extendEntities[].constraints[].scopeFields[]Array item	string	Conditional	Not specified	None specified
extendEntities[].constraints[].startField	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
extendEntities[].constraints[].values	array	Conditional	Not specified	None specified
extendEntities[].constraints[].values[]Array item	string	Conditional	Not specified	None specified
extendEntities[].constraints[].when	array | null	Conditional	Not specified	None specified
extendEntities[].constraints[].when[]Array item	object	Conditional	Not specified	None specified
extendEntities[].constraints[].when[].field	string	Conditional	Not specified	None specified
extendEntities[].constraints[].when[].kind	string	Conditional	active_lifecycle field_equals field_is_not_null field_is_null	None specified
extendEntities[].derived	array	No	Not specified	None specified
extendEntities[].derived[]Array item	object	No	Not specified	None specified
extendEntities[].derived[].execution	string	No	live Schema default, where declared: "live"	None specified
extendEntities[].derived[].fields	array	No	Not specifiedSchema default, where declared: []	None specified
extendEntities[].derived[].fields[]Array item	object	No	Not specified	None specified
extendEntities[].derived[].fields[].apiName	null | string	No	Not specified	None specified
extendEntities[].derived[].fields[].bbox	null | object	Conditional	Not specified	None specified
extendEntities[].derived[].fields[].bbox.east	string	Conditional	Not specified	None specified
extendEntities[].derived[].fields[].bbox.north	string	Conditional	Not specified	None specified
extendEntities[].derived[].fields[].bbox.south	string	Conditional	Not specified	None specified
extendEntities[].derived[].fields[].bbox.west	string	Conditional	Not specified	None specified
extendEntities[].derived[].fields[].classification	string	Yes	internal public restricted	None specified
extendEntities[].derived[].fields[].id	string	Yes	Not specified	None specified
extendEntities[].derived[].fields[].maxBytes	integer	Conditional	Not specified	format: uint32 minimum: 0
extendEntities[].derived[].fields[].maxLength	integer	Conditional	Not specified	format: uint32 minimum: 0
extendEntities[].derived[].fields[].maximum	null | string	Conditional	Not specified	None specified
extendEntities[].derived[].fields[].minLength	integer	Conditional	Not specifiedSchema default, where declared: 0	format: uint32 minimum: 0
extendEntities[].derived[].fields[].minimum	null | string	Conditional	Not specified	None specified
extendEntities[].derived[].fields[].onDelete	string	Conditional	restrict Schema default, where declared: "restrict"	None specified
extendEntities[].derived[].fields[].precision	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
extendEntities[].derived[].fields[].scale	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
extendEntities[].derived[].fields[].target	string	Conditional	Not specified	None specified
extendEntities[].derived[].fields[].type	string	Yes	boolean crs84-point date decimal int64 reference string structured text timestamp uuid vocabulary-code	None specified
extendEntities[].derived[].fields[].values	array	Conditional	Not specifiedSchema default, where declared: []	None specified
extendEntities[].derived[].fields[].values[]Array item	string	Conditional	Not specified	None specified
extendEntities[].derived[].fields[].vocabulary	string	Conditional	Not specified	None specified
extendEntities[].derived[].id	string	Yes	Not specified	None specified
extendEntities[].derived[].key	string	Yes	Not specified	None specified
extendEntities[].derived[].sql	string	Yes	Not specified	None specified
extendEntities[].entity	string	Yes	Not specified	None specified
extendEntities[].fields	array	No	Not specifiedSchema default, where declared: []	None specified
extendEntities[].fields[]Array item	object	No	Not specified	None specified
extendEntities[].fields[].apiName	null | string	No	Not specifiedSchema default, where declared: null	None specified
extendEntities[].fields[].bbox	null | object	Conditional	Not specifiedSchema default, where declared: null	None specified
extendEntities[].fields[].bbox.east	string	Conditional	Not specified	None specified
extendEntities[].fields[].bbox.north	string	Conditional	Not specified	None specified
extendEntities[].fields[].bbox.south	string	Conditional	Not specified	None specified
extendEntities[].fields[].bbox.west	string	Conditional	Not specified	None specified
extendEntities[].fields[].classification	string	Yes	internal public restricted	None specified
extendEntities[].fields[].encrypted	boolean	Conditional	Not specifiedSchema default, where declared: false	None specified
extendEntities[].fields[].id	string	Yes	Not specified	None specified
extendEntities[].fields[].lookupThe authored blind-index declaration for an encrypted field. Normalization composes in declared order over the canonical string form of the value; unique requests a unique index over the derived blind-index column.	null | object	Conditional	Not specifiedSchema default, where declared: null	None specified
extendEntities[].fields[].lookup.normalization	array	Conditional	Not specifiedSchema default, where declared: []	maxItems: 8
extendEntities[].fields[].lookup.normalization[]Array itemA normalization step applied to the canonical string form of an encrypted value before its blind index is derived. The vocabulary is closed.	string	Conditional	collapse-whitespace lowercase remove-separators trim uppercase	None specified
extendEntities[].fields[].lookup.unique	boolean	Conditional	Not specifiedSchema default, where declared: false	None specified
extendEntities[].fields[].maxBytes	integer	Conditional	Not specified	format: uint32 minimum: 0
extendEntities[].fields[].maxLength	integer	Conditional	Not specified	format: uint32 minimum: 0
extendEntities[].fields[].maximum	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
extendEntities[].fields[].minLength	integer	Conditional	Not specifiedSchema default, where declared: 0	format: uint32 minimum: 0
extendEntities[].fields[].minimum	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
extendEntities[].fields[].onDelete	string	Conditional	restrict Schema default, where declared: "restrict"	None specified
extendEntities[].fields[].pattern	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
extendEntities[].fields[].precision	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
extendEntities[].fields[].required	boolean	No	Not specifiedSchema default, where declared: false	None specified
extendEntities[].fields[].scale	integer	Conditional	Not specified	format: uint8 maximum: 255 minimum: 0
extendEntities[].fields[].target	string	Conditional	Not specified	None specified
extendEntities[].fields[].type	string	Yes	boolean crs84-point date decimal int64 reference string structured text timestamp uuid vocabulary-code	None specified
extendEntities[].fields[].validTimeRole	null | string	No	valid_from valid_to Schema default, where declared: null	None specified
extendEntities[].fields[].values	array	Conditional	Not specifiedSchema default, where declared: []	None specified
extendEntities[].fields[].values[]Array item	string	Conditional	Not specified	None specified
extendEntities[].fields[].vocabulary	string	Conditional	Not specified	None specified
extendEntities[].geojson	null | object	No	Not specified	None specified
extendEntities[].geojson.geometryField	string	Conditional	Not specified	None specified
extendEntities[].hooks	array	No	Not specifiedSchema default, where declared: []	None specified
extendEntities[].hooks[]Array itemOne declared hook on an entity. The shape is [registry_platform_hooks::HookDeclaration] with trigger and when closed to the vocabulary this compiler validates, and with handler optional. A hook that declares no handler is still recorded in the outbox and delivered nowhere; production compilation refuses that. Entity hooks run after the triggering transaction commits, so phase is written and the compiler refuses any value it cannot run.	object	No	Not specified	None specified
extendEntities[].hooks[].handlerGoverned, destination-neutral delivery. destinationId is a key in runtime eventDestinations; the project carries no URL or secret, and deployment configuration may tighten the bounds it binds but cannot supply or widen this authority. Production compilation requires it.	null | object	No	Not specified	None specified
extendEntities[].hooks[].handler.abiFor rhai: The handler ABI the script speaks. For wasm: The handler ABI the module speaks.	null | string	Conditional	Not specified	None specified
extendEntities[].hooks[].handler.destinationIdKey in the runtime destination binding.	string	Conditional	Not specified	None specified
extendEntities[].hooks[].handler.kind	string	Conditional	rhai url wasm	None specified
extendEntities[].hooks[].handler.moduleModule path in the project.	string	Conditional	Not specified	None specified
extendEntities[].hooks[].handler.scriptScript path in the project.	string	Conditional	Not specified	None specified
extendEntities[].hooks[].idStable hook contract identifier, sent as ce-type. Use a new identifier for a breaking payload change.	string	Yes	Not specified	None specified
extendEntities[].hooks[].phaseWhen the hook runs relative to the triggering transaction.	string	Yes	after before	None specified
extendEntities[].hooks[].principalThe access profile a proposal from this hook is applied under. Optional: a hook that declares none is a non-proposing hook, and a proposal from one is refused and dead-lettered at delivery time. Declaring none is not an authoring error.	null | string	No	Not specified	None specified
extendEntities[].hooks[].projectionDeclared field identifiers to include in values. System event metadata is included separately.	array	Yes	Not specified	uniqueItems: true
extendEntities[].hooks[].projection[]Array item	string	No	Not specified	None specified
extendEntities[].hooks[].triggerCommitted record change that can produce this hook.	string	Yes	created patched request_lifecycle tombstoned	None specified
extendEntities[].hooks[].whenOptional field tests, combined with AND. Omit to run on every matching trigger.	null | object	No	Not specified	None specified
extendEntities[].hooks[].when.afterEqualsRequired values after the change. Valid with created and patched triggers.	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
extendEntities[].hooks[].when.afterEquals.*Map valueA comparison literal in the closed field-condition language. Objects and arrays are refused during source parsing. The compiler then validates each scalar against the declared Registry field type.	boolean | null | number | string	Conditional	Not specified	None specified
extendEntities[].hooks[].when.beforeEqualsRequired values before the change. Valid with patched and tombstoned triggers.	object	Conditional	Not specifiedSchema default, where declared: {}	None specified
extendEntities[].hooks[].when.beforeEquals.*Map valueA comparison literal in the closed field-condition language. Objects and arrays are refused during source parsing. The compiler then validates each scalar against the declared Registry field type.	boolean | null | number | string	Conditional	Not specified	None specified
extendEntities[].hooks[].when.changedFields whose values must change. Only valid with the patched trigger.	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
extendEntities[].hooks[].when.changed[]Array item	string	Conditional	Not specified	None specified
extendEntities[].hooks[].when.kind	string	Conditional	fields request_lifecycle	None specified
extendEntities[].hooks[].when.toStates	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
extendEntities[].hooks[].when.toStates[]Array item	string	Conditional	Not specified	None specified
extendEntities[].hooks[].when.transitions	array	Conditional	Not specifiedSchema default, where declared: []	uniqueItems: true
extendEntities[].hooks[].when.transitions[]Array item	string	Conditional	Not specified	None specified
extendEntities[].indexes	array	No	Not specifiedSchema default, where declared: []	None specified
extendEntities[].indexes[]Array item	object	No	Not specified	None specified
extendEntities[].indexes[].fields	array	Yes	Not specified	None specified
extendEntities[].indexes[].fields[]Array item	string	No	Not specified	None specified
extendEntities[].indexes[].id	string	Yes	Not specified	None specified
extendEntities[].readPaths	array	No	Not specified	None specified
extendEntities[].readPaths[]Array item	object	No	Not specified	None specified
extendEntities[].readPaths[].id	string	Yes	Not specified	None specified
extendEntities[].readPaths[].route	string	Yes	Not specified	None specified
extendEntities[].readPaths[].through	string	Yes	Not specified	None specified
extendEntities[].readPaths[].to	string	Yes	Not specified	None specified
extendEntities[].selectorProfiles	array	No	Not specified	None specified
extendEntities[].selectorProfiles[]Array item	object	No	Not specified	None specified
extendEntities[].selectorProfiles[].fields	array	Yes	Not specified	None specified
extendEntities[].selectorProfiles[].fields[]Array item	string	No	Not specified	None specified
extendEntities[].selectorProfiles[].id	string	Yes	Not specified	None specified
idStable module identifier, referenced by the project's module lock.	string	Yes	Not specified	None specified
versionModule version recorded alongside its content digest in the project.	string	Yes	Not specified	None specified

runtime.yaml

Source preview, pre-1.0

Generated from products/breg/generated/runtime/runtime.schema.json. 184 key paths. Explained in docs/site/src/content/docs/configure/breg.mdx.

Key path	Type	Required	Accepted values	Constraints
apiVersion	string	Yes	registry.registrystack.org/breg-runtime/v1alpha1	None specified
attachmentStorageDefaults to PostgreSQL; S3 requires a bucket with versioning never enabled.	object	No	Not specifiedSchema default, where declared: {"kind":"database"}	None specified
attachmentStorage.accessKeyIdRef	string	Conditional	Not specified	maxLength: 140 minLength: 1 pattern: ^(secret:env/[A-Z][A-Z0-9_]{0,127}|secret:file/[a-z][a-z0-9._-]{0,127})$
attachmentStorage.bucket	string	Conditional	Not specified	maxLength: 63 minLength: 3
attachmentStorage.caBundleRef	null | string	Conditional	Not specified	maxLength: 140 minLength: 1 pattern: ^(secret:env/[A-Z][A-Z0-9_]{0,127}|secret:file/[a-z][a-z0-9._-]{0,127})$
attachmentStorage.endpoint	string	Conditional	Not specified	maxLength: 2048 minLength: 1
attachmentStorage.kind	string	Yes	database s3	None specified
attachmentStorage.pathStyle	boolean	Conditional	Not specifiedSchema default, where declared: true	None specified
attachmentStorage.region	string	Conditional	Not specified	maxLength: 64 minLength: 1
attachmentStorage.secretAccessKeyRef	string	Conditional	Not specified	maxLength: 140 minLength: 1 pattern: ^(secret:env/[A-Z][A-Z0-9_]{0,127}|secret:file/[a-z][a-z0-9._-]{0,127})$
attachmentStorage.sessionTokenRef	null | string	Conditional	Not specified	maxLength: 140 minLength: 1 pattern: ^(secret:env/[A-Z][A-Z0-9_]{0,127}|secret:file/[a-z][a-z0-9._-]{0,127})$
attachmentStorage.timeoutMilliseconds	integer	Conditional	Not specifiedSchema default, where declared: 10000	format: uint64 maximum: 60000 minimum: 100
attachmentVerificationOptional external verdict hook. Disabled by default.	object	No	Not specifiedSchema default, where declared: {"kind":"disabled"}	None specified
attachmentVerification.authorizationRef	string	Conditional	Not specified	maxLength: 140 minLength: 1 pattern: ^(secret:env/[A-Z][A-Z0-9_]{0,127}|secret:file/[a-z][a-z0-9._-]{0,127})$
attachmentVerification.endpoint	string	Conditional	Not specified	maxLength: 2048 minLength: 1
attachmentVerification.kind	string	Yes	disabled http	None specified
attachmentVerification.policyIdNon-secret identity of the external scanner and rules generation.	string	Conditional	Not specified	maxLength: 128 minLength: 1 pattern: ^[\x21-\x7E]+$
attachmentVerification.timeoutMilliseconds	integer	Conditional	Not specifiedSchema default, where declared: 10000	format: uint64 maximum: 60000 minimum: 100
audit	object	Yes	Not specified	None specified
audit.hashKeyRef	string	Yes	Not specified	maxLength: 140 minLength: 1 pattern: ^(secret:env/[A-Z][A-Z0-9_]{0,127}|secret:file/[a-z][a-z0-9._-]{0,127})$
authentication	object	Yes	Not specified	None specified
authentication.authorityClaims	object	Yes	Not specified	None specified
authentication.authorityClaims.contextual	null | object	No	Not specifiedSchema default, where declared: null	None specified
authentication.authorityClaims.contextual.actorKind	string	Conditional	Not specified	None specified
authentication.authorityClaims.contextual.approver	string	Conditional	Not specified	None specified
authentication.authorityClaims.contextual.grantBounds	string	Conditional	Not specified	None specified
authentication.authorityClaims.contextual.grantClient	string	Conditional	Not specified	None specified
authentication.authorityClaims.contextual.grantExp	string	Conditional	Not specified	None specified
authentication.authorityClaims.contextual.grantId	string	Conditional	Not specified	None specified
authentication.authorityClaims.contextual.grantResource	string	Conditional	Not specified	None specified
authentication.authorityClaims.contextual.grantSourceIssuer	string	Conditional	Not specified	None specified
authentication.authorityClaims.contextual.purpose	string	Conditional	Not specified	None specified
authentication.authorityClaims.principal	string	Yes	Not specified	maxLength: 128 minLength: 1 pattern: ^[\x21-\x7E]+$
authentication.authorityClaims.purpose	null | string	No	Not specified	maxLength: 128 minLength: 1 pattern: ^[\x21-\x7E]+$
authentication.authorityClaims.trustedActors	object	No	Not specifiedSchema default, where declared: {}	None specified
authentication.authorityClaims.trustedActors.*Map value	string	No	Not specified	None specified
authentication.oidc	object	Yes	Not specified	None specified
authentication.oidc.accessTokenTypeThe one admitted access-token typ semantics. Configuring the RFC 9068 access-token media type as at+jwt or application/at+jwt admits both spellings of that one type; any other value (for example JWT) admits only that token type, matched case-insensitively.	string	Yes	Not specified	maxLength: 2048 minLength: 1 pattern: ^[^\s\x00-\x1F\x7F](?:[^\x00-\x1F\x7F]*[^\s\x00-\x1F\x7F])?$
authentication.oidc.allowedAlgorithm	string	Yes	ES256 ES384 EdDSA RS256 RS384	None specified
authentication.oidc.allowedClients	array	No	Not specified	maxItems: 128 uniqueItems: true
authentication.oidc.allowedClients[]Array item	string	No	Not specified	maxLength: 512 minLength: 1 pattern: ^[^\x00-\x20\x7F]+$
authentication.oidc.assertionIssuers	object	No	Not specified	maxProperties: 128
authentication.oidc.assertionIssuers.*Map value	array	No	Not specifiedSchema default, where declared:	maxItems: 128 propertyNames.maxLength: 512 propertyNames.minLength: 1 propertyNames.pattern: ^[^\x00-\x20\x7F]+$ uniqueItems: true
authentication.oidc.assertionIssuers.*[]Array item	string	No	Not specified	maxLength: 512 minLength: 1 pattern: ^[^\x00-\x20\x7F]+$
authentication.oidc.audience	string	Yes	Not specified	maxLength: 2048 minLength: 1 pattern: ^[^\s\x00-\x1F\x7F](?:[^\x00-\x1F\x7F]*[^\s\x00-\x1F\x7F])?$
authentication.oidc.deniedKids	array	No	Not specified	maxItems: 128 uniqueItems: true
authentication.oidc.deniedKids[]Array item	string	No	Not specified	maxLength: 512 minLength: 1 pattern: ^[^\x00-\x20\x7F]+$
authentication.oidc.issuer	string	Yes	Not specified	maxLength: 2048 minLength: 1 pattern: ^[^\s\x00-\x1F\x7F](?:[^\x00-\x1F\x7F]*[^\s\x00-\x1F\x7F])?$
authentication.oidc.jwksCacheOptional JWKS fetch and cache tuning. Defaults to bounded cache behavior.	object	No	Not specifiedSchema default, where declared: {"cacheTtlSeconds":600,"maxDocumentBytes":65536,"negativeCacheTtlSeconds":60,"outageToleranceSeconds":900,"refreshCooldownSeconds":30,"requestTimeoutMilliseconds":5000}	None specified
authentication.oidc.jwksCache.cacheTtlSecondsDefaults to the bounded JWKS cache time-to-live.	integer	No	Not specifiedSchema default, where declared: 600	format: uint64 maximum: 86400 minimum: 1
authentication.oidc.jwksCache.maxDocumentBytesDefaults to the bounded maximum JWKS document size.	integer	No	Not specifiedSchema default, where declared: 65536	format: uint64 maximum: 1048576 minimum: 1
authentication.oidc.jwksCache.negativeCacheTtlSecondsDefaults to the bounded JWKS negative-cache time-to-live.	integer	No	Not specifiedSchema default, where declared: 60	format: uint64 maximum: 3600 minimum: 1
authentication.oidc.jwksCache.outageToleranceSecondsDefaults to the bounded cached-key outage tolerance.	integer	No	Not specifiedSchema default, where declared: 900	format: uint64 maximum: 86400 minimum: 0
authentication.oidc.jwksCache.refreshCooldownSecondsDefaults to the bounded JWKS refresh cooldown.	integer	No	Not specifiedSchema default, where declared: 30	format: uint64 maximum: 3600 minimum: 1
authentication.oidc.jwksCache.requestTimeoutMillisecondsDefaults to the bounded JWKS fetch timeout.	integer	No	Not specifiedSchema default, where declared: 5000	format: uint64 maximum: 30000 minimum: 1
authentication.oidc.jwksSource	null | object	No	Not specified	None specified
authentication.oidc.jwksSource.documentRef	string	Conditional	Not specified	maxLength: 140 minLength: 1 pattern: ^(secret:env/[A-Z][A-Z0-9_]{0,127}|secret:file/[a-z][a-z0-9._-]{0,127})$
authentication.oidc.jwksSource.kind	string	Conditional	discovery static	None specified
authentication.oidc.leewayMilliseconds	integer	Yes	Not specified	format: uint64 maximum: 300000 minimum: 0
authentication.oidc.maxTokenLifetimeSeconds	integer	Yes	Not specified	format: uint64 maximum: 7200 minimum: 1
authentication.oidc.scopeClaim	string	Yes	Not specified	maxLength: 128 minLength: 1 pattern: ^[\x21-\x7E]+$
authentication.oidc.scopeSeparator	string	Yes	Not specified	maxLength: 1 minLength: 1 pattern: ^[^A-Za-z0-9\x00-\x1F\x7F]$
cursor	object	Yes	Not specified	None specified
cursor.maxAgeSecondsDefaults to the bounded cursor validity lifetime.	integer	No	Not specifiedSchema default, where declared: 300	format: uint64 maximum: 86400 minimum: 1
cursor.secretRef	string	Yes	Not specified	maxLength: 140 minLength: 1 pattern: ^(secret:env/[A-Z][A-Z0-9_]{0,127}|secret:file/[a-z][a-z0-9._-]{0,127})$
database	object	Yes	Not specified	None specified
database.migrationUrlRef	string	Yes	Not specified	maxLength: 140 minLength: 1 pattern: ^(secret:env/[A-Z][A-Z0-9_]{0,127}|secret:file/[a-z][a-z0-9._-]{0,127})$
database.pool	object	Yes	Not specified	None specified
database.pool.createTimeoutMillisecondsDefaults to the bounded PostgreSQL pool connection-creation timeout.	integer	No	Not specifiedSchema default, where declared: 30000	format: uint64 maximum: 60000 minimum: 1
database.pool.maxSize	integer	Yes	Not specified	format: uint maximum: 128 minimum: 1
database.pool.recycleTimeoutMillisecondsDefaults to the bounded PostgreSQL pool connection-recycle timeout.	integer	No	Not specifiedSchema default, where declared: 30000	format: uint64 maximum: 60000 minimum: 1
database.pool.waitTimeoutMillisecondsDefaults to the bounded PostgreSQL pool wait timeout.	integer	No	Not specifiedSchema default, where declared: 30000	format: uint64 maximum: 60000 minimum: 1
database.roles	object	Yes	Not specified	None specified
database.roles.migration	string	Yes	Not specified	maxLength: 63 minLength: 1 pattern: ^[_a-z][_a-z0-9]{0,62}$
database.roles.runtime	string	Yes	Not specified	maxLength: 63 minLength: 1 pattern: ^[_a-z][_a-z0-9]{0,62}$
database.runtimeUrlRef	string	Yes	Not specified	maxLength: 140 minLength: 1 pattern: ^(secret:env/[A-Z][A-Z0-9_]{0,127}|secret:file/[a-z][a-z0-9._-]{0,127})$
eventDeliveryOptional event-delivery tuning. Defaults to the server's bounded retention policy.	object	No	Not specifiedSchema default, where declared: {"payloadRetentionDays":7}	None specified
eventDelivery.payloadRetentionDaysDefaults to the bounded retained payload lifetime for pending or dead-letter webhook work.	integer	No	Not specifiedSchema default, where declared: 7	format: uint8 maximum: 30 minimum: 1
eventDestinations	object	No	Not specified	maxProperties: 128
eventDestinations.*Map value	object	No	Not specifiedSchema default, where declared:	propertyNames.pattern: ^[a-z][a-z0-9_-]{0,63}$
eventDestinations.*.allowedPrivateCidrsExplicitly allowed private network ranges in canonical CIDR notation.	array	Yes	Not specified	maxItems: 16 uniqueItems: true
eventDestinations.*.allowedPrivateCidrs[]Array item	string	No	Not specified	None specified
eventDestinations.*.classificationCeilingHighest permitted classification, including fields used only in event conditions.	string	Yes	internal public restricted	None specified
eventDestinations.*.deliveryCeilingsPer-destination limits that may tighten, but never increase, the compiled delivery limits.	object	Yes	Not specified	None specified
eventDestinations.*.deliveryCeilings.attemptTimeoutMillisecondsMaximum time allowed for one attempt, in milliseconds.	integer	Yes	Not specified	format: uint32 maximum: 5000 minimum: 100
eventDestinations.*.deliveryCeilings.maximumAttemptsMaximum total attempts in one delivery generation, including the first attempt.	integer	Yes	Not specified	format: uint8 maximum: 5 minimum: 1
eventDestinations.*.dnsFamilyAddress families to validate when resolving the destination.	string	Yes	dualStackStrict ipv4Only	None specified
eventDestinations.*.hmacSha256KeyRefRuntime secret reference for the receiver's shared HMAC-SHA-256 key.	string	Yes	Not specified	maxLength: 140 minLength: 1 pattern: ^(secret:env/[A-Z][A-Z0-9_]{0,127}|secret:file/[a-z][a-z0-9._-]{0,127})$
eventDestinations.*.networkProfileHTTPS for production, or explicit loopback-only HTTP for local development.	string	Yes	loopbackDevelopmentHttp productionHttps	None specified
eventDestinations.*.originReceiver origin without a path or query, such as https://receiver.example.com.	string	Yes	Not specified	maxLength: 2048 minLength: 1
eventDestinations.*.pathAbsolute request path on the configured origin, such as /events.	string	Yes	Not specified	maxLength: 4096 minLength: 1 pattern: ^/[\x20-\x22\x24\x26-\x3E\x40-\x5B\x5D-\x7E]*$
eventDestinations.*.tlsOptional private CA and client identity secret references for HTTPS.	null | object	No	Not specified	None specified
eventDestinations.*.tls.caBundleRefPEM CA bundle secret reference, when the receiver uses a private certificate authority.	null | string	Conditional	Not specified	maxLength: 140 minLength: 1 pattern: ^(secret:env/[A-Z][A-Z0-9_]{0,127}|secret:file/[a-z][a-z0-9._-]{0,127})$
eventDestinations.*.tls.clientIdentityRefPEM client identity secret reference for mutual TLS.	null | string	Conditional	Not specified	maxLength: 140 minLength: 1 pattern: ^(secret:env/[A-Z][A-Z0-9_]{0,127}|secret:file/[a-z][a-z0-9._-]{0,127})$
evidenceProviders	object	No	Not specifiedSchema default, where declared: {}	None specified
evidenceProviders.*Map value	object	No	Not specified	None specified
evidenceProviders.*.baseUrl	string	Yes	Not specified	None specified
evidenceProviders.*.caBundleRef	null | string	No	Not specified	None specified
evidenceProviders.*.privateKeyJwt	null | object	Conditional	Not specified	None specified
evidenceProviders.*.privateKeyJwt.assertionAudience	null | string	Conditional	Not specified	None specified
evidenceProviders.*.privateKeyJwt.clientId	string	Conditional	Not specified	None specified
evidenceProviders.*.privateKeyJwt.privateKeyRef	string	Conditional	Not specified	None specified
evidenceProviders.*.privateKeyJwt.resource	null | string	Conditional	Not specified	None specified
evidenceProviders.*.privateKeyJwt.scopes	array	Conditional	Not specifiedSchema default, where declared: []	None specified
evidenceProviders.*.privateKeyJwt.scopes[]Array item	string	Conditional	Not specified	None specified
evidenceProviders.*.privateKeyJwt.tokenEndpoint	string	Conditional	Not specified	None specified
evidenceProviders.*.revokedKeyIds	array	No	Not specifiedSchema default, where declared: []	None specified
evidenceProviders.*.revokedKeyIds[]Array item	string	No	Not specified	None specified
evidenceProviders.*.tokenRefCompatibility path for a pre-issued token. Long-running providers should configure privateKeyJwt so expiry triggers a fresh exchange.	null | string	Conditional	Not specified	None specified
evidenceProviders.*.trustBindingId	string	Yes	Not specified	None specified
evidenceProviders.*.trustedJwksRef	string	Yes	Not specified	None specified
fieldEncryptionOptional field-encryption data-key provider. Absent by default, which serves unencrypted entities only.	object	No	Not specifiedSchema default, where declared: {}	None specified
fieldEncryption.providerRaw provider binding; the kind member selects the custodian.	null | object	No	Not specified	None specified
fieldEncryption.provider.dekRef	string	Conditional	Not specified	maxLength: 140 minLength: 1
fieldEncryption.provider.keyName	string	Conditional	Not specified	maxLength: 128 minLength: 1
fieldEncryption.provider.kind	string	Conditional	localFile transit	None specified
fieldEncryption.provider.mount	string	Conditional	Not specified	maxLength: 256 minLength: 1
fieldEncryption.provider.timeoutMilliseconds	integer	Conditional	Not specifiedSchema default, where declared: 5000	format: uint64 maximum: 30000 minimum: 1
fieldEncryption.provider.unixSocketPath	string	Conditional	Not specified	maxLength: 4096 minLength: 2
identity	object	Yes	Not specified	None specified
identity.databaseId	string	Yes	Not specified	maxLength: 256 minLength: 1 pattern: ^[^\s\x00-\x1F\x7F](?:[^\x00-\x1F\x7F]*[^\s\x00-\x1F\x7F])?$
identity.databaseInitializationEnvironment	string	Yes	Not specified	maxLength: 256 minLength: 1 pattern: ^[^\s\x00-\x1F\x7F](?:[^\x00-\x1F\x7F]*[^\s\x00-\x1F\x7F])?$
identity.environment	string	Yes	Not specified	maxLength: 256 minLength: 1 pattern: ^[^\s\x00-\x1F\x7F](?:[^\x00-\x1F\x7F]*[^\s\x00-\x1F\x7F])?$
identity.instanceId	string	Yes	Not specified	maxLength: 256 minLength: 1 pattern: ^[^\s\x00-\x1F\x7F](?:[^\x00-\x1F\x7F]*[^\s\x00-\x1F\x7F])?$
kind	string	Yes	BRegRuntimeConfig	None specified
listener	object	Yes	Not specified	None specified
listener.bind	string	Yes	Not specified	None specified
listener.publicOriginCanonical HTTPS origin (loopback HTTP for local development) for QGIS discovery and pagination. Required when the registry exposes GIS collections.	null | string	No	Not specified	maxLength: 2048 minLength: 1 pattern: ^https?://[^/@?#\s]+/?$
metricsListenerOptional operator-private metrics listener. Absent by default, which serves no metrics surface at all.	null | object	No	Not specifiedSchema default, where declared: null	None specified
metricsListener.bindOperator-private loopback or private numeric address and named port, for example 127.0.0.1:9100.	string	Conditional	Not specified	None specified
operationalTimeoutsOptional operational request, shutdown, locking, and migration timeout tuning.	object	No	Not specifiedSchema default, where declared: {"httpRequestMilliseconds":10000,"migrationLockMilliseconds":30000,"migrationStatementMilliseconds":60000,"recordLockMilliseconds":5000,"shutdownGraceMilliseconds":30000}	None specified
operationalTimeouts.httpRequestMillisecondsDefaults to the bounded per-request HTTP timeout.	integer	No	Not specifiedSchema default, where declared: 10000	format: uint64 maximum: 60000 minimum: 1
operationalTimeouts.migrationLockMillisecondsDefaults to the bounded migration lock timeout.	integer	No	Not specifiedSchema default, where declared: 30000	format: uint64 maximum: 300000 minimum: 1
operationalTimeouts.migrationStatementMillisecondsDefaults to the bounded migration statement timeout.	integer	No	Not specifiedSchema default, where declared: 60000	format: uint64 maximum: 3600000 minimum: 1
operationalTimeouts.recordLockMillisecondsDefaults to the bounded record lock timeout.	integer	No	Not specifiedSchema default, where declared: 5000	format: uint64 maximum: 30000 minimum: 1
operationalTimeouts.shutdownGraceMillisecondsDefaults to the bounded graceful-shutdown timeout.	integer	No	Not specifiedSchema default, where declared: 30000	format: uint64 maximum: 300000 minimum: 1
package	object	Yes	Not specified	None specified
package.activeRevision	string	Yes	Not specified	maxLength: 256 minLength: 1 pattern: ^[^\s\x00-\x1F\x7F](?:[^\x00-\x1F\x7F]*[^\s\x00-\x1F\x7F])?$
package.activeSequence	integer	Yes	Not specified	format: uint64 minimum: 1
package.compilerSourceRevision	string	Yes	Not specified	maxLength: 256 minLength: 1 pattern: ^[^\s\x00-\x1F\x7F](?:[^\x00-\x1F\x7F]*[^\s\x00-\x1F\x7F])?$
package.root	string	Yes	Not specified	maxLength: 512 minLength: 1
package.trustAnchorPath	string	Yes	Not specified	maxLength: 512 minLength: 1
reviewAuthorities	object	No	Not specifiedSchema default, where declared: {}	None specified
reviewAuthorities.*Map value	object	No	Not specified	None specified
reviewAuthorities.*.completionRecipient	null | string	No	Not specifiedSchema default, where declared: null	None specified
reviewAuthorities.*.completionTokenRef	null | string	No	Not specifiedSchema default, where declared: null	None specified
reviewAuthorities.*.endpoint	string	Yes	Not specified	None specified
reviewAuthorities.*.privateKeyJwt	null | object	No	Not specifiedSchema default, where declared: null	None specified
reviewAuthorities.*.privateKeyJwt.assertionAudience	string	Conditional	Not specified	None specified
reviewAuthorities.*.privateKeyJwt.caBundleRef	null | string	Conditional	Not specifiedSchema default, where declared: null	None specified
reviewAuthorities.*.privateKeyJwt.clientAssertionKeyRef	string	Conditional	Not specified	None specified
reviewAuthorities.*.privateKeyJwt.clientIdRef	string	Conditional	Not specified	None specified
reviewAuthorities.*.privateKeyJwt.resource	string	Conditional	Not specified	None specified
reviewAuthorities.*.privateKeyJwt.scopes	array	Conditional	Not specified	None specified
reviewAuthorities.*.privateKeyJwt.scopes[]Array item	string	Conditional	Not specified	None specified
reviewAuthorities.*.privateKeyJwt.tokenEndpoint	string	Conditional	Not specified	None specified
reviewAuthorities.*.producerId	string	Yes	Not specified	None specified
reviewAuthorities.*.profile	string	Yes	Not specified	None specified
reviewAuthorities.*.recoveryDays	integer	Yes	Not specified	format: uint32 maximum: 3650 minimum: 1
reviewAuthorities.*.tokenRef	null | string	No	Not specifiedSchema default, where declared: null	None specified
reviewExecutors	object	No	Not specifiedSchema default, where declared: {}	None specified
reviewExecutors.*Map value	object	No	Not specified	None specified
reviewExecutors.*.accessProfile	string	Yes	Not specified	None specified
reviewExecutors.*.endpoint	string	Yes	Not specified	None specified
reviewExecutors.*.registryId	string	Yes	Not specified	None specified
reviewExecutors.*.tokenRef	string	Yes	Not specified	None specified
secretProviders	object	Yes	Not specified	None specified
secretProviders.environment	null | object	No	Not specified	None specified
secretProviders.file	null | object	No	Not specified	None specified
secretProviders.file.root	string	Conditional	Not specified	maxLength: 512 minLength: 1
taskGrantStatus	array	No	Not specifiedSchema default, where declared: []	None specified
taskGrantStatus[]Array item	object	No	Not specified	None specified
taskGrantStatus[].baseUrl	string	Yes	Not specified	None specified
taskGrantStatus[].caBundleRef	null | string	No	Not specified	None specified
taskGrantStatus[].caseworkResource	string	Yes	Not specified	None specified
taskGrantStatus[].clientAssertionAudience	string	Yes	Not specified	None specified
taskGrantStatus[].clientId	string	Yes	Not specified	None specified
taskGrantStatus[].privateKeyRef	string	Yes	Not specified	None specified
taskGrantStatus[].sourceIssuer	string	Yes	Not specified	None specified
taskGrantStatus[].tokenEndpoint	string	Yes	Not specified	None specified
wasmExecutionOptional WASM handler execution budgets. Parsed in every build; executed only in builds with the wasm cargo feature, on by default.	object	No	Not specifiedSchema default, where declared: {"backend":"pulley","maxGuestMemoryBytes":33554432,"maxModuleBytes":2097152}	None specified
wasmExecution.backendThe backend handler modules are compiled and executed for: pulley (default, the portable interpreter target) or native. Any other value is refused as an invalid wasmExecution section.	string	No	Not specifiedSchema default, where declared: "pulley"	None specified
wasmExecution.maxGuestMemoryBytesDefaults to the platform guest-memory ceiling (32 MiB).	integer	No	Not specifiedSchema default, where declared: 33554432	format: uint64 maximum: 1073741824 minimum: 1048576
wasmExecution.maxModuleBytesDefaults to the default execution-time module ceiling (2 MiB); the structural admission ceiling (5 MiB) is operator-reachable here.	integer	No	Not specifiedSchema default, where declared: 2097152	format: uint64 maximum: 5242880 minimum: 1024

Next

• Author a registry project for models, permissions, and webhooks.
• Events and webhooks for payloads, signatures, retries, and replay.
• Create and query your first registry to try the API.
• How a configured registry works for the product boundaries.