{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://localendpoints.com/schemas/localendpoint.local-control-evidence.schema.json",
  "title": "LocalEndpoint Local Control Evidence",
  "description": "Evidence receipt for an approval-gated local desktop control session.",
  "type": "object",
  "required": [
    "phase",
    "generatedUtc",
    "loopbackOnly",
    "uacBypassUsed",
    "tamperProtectionDisabled",
    "operatorApproved",
    "auditHashSha256",
    "nonClaims"
  ],
  "additionalProperties": false,
  "properties": {
    "phase": {
      "const": "Phase 2.21"
    },
    "generatedUtc": {
      "type": "string",
      "pattern": "Z$"
    },
    "loopbackOnly": {
      "type": "boolean"
    },
    "uacBypassUsed": {
      "const": false
    },
    "tamperProtectionDisabled": {
      "const": false
    },
    "operatorApproved": {
      "type": "boolean"
    },
    "auditHashSha256": {
      "type": "string",
      "pattern": "^[a-f0-9]{64}$"
    },
    "nonClaims": {
      "type": "array",
      "items": {
        "type": "string"
      }
    }
  }
}