# Published JSON Schemas (`docs/schemas/`)

Machine-readable contracts for boot policy, lifecycle telemetry, and kernel extension manifests. **Guest and host** code may emit or validate lines against these schemas; see [developer-guide — Privacy, telemetry, and PII](../../developer-guide/13-privacy-telemetry-pii.md) for scrubbing and non-secret posture.

| Schema file | Purpose |
| --- | --- |
| [boot.policy.schema.json](boot.policy.schema.json) | Optional **`/etc/bare-os/boot.policy.json`** and related boot gating |
| [boot-trace-line.schema.json](boot-trace-line.schema.json) | Structured boot trace / lifecycle NDJSON lines |
| [telemetry-ndjson-record.schema.json](telemetry-ndjson-record.schema.json) | Guest/host NDJSON telemetry mirrors |
| [otel-bare-os-jsonl.schema.json](otel-bare-os-jsonl.schema.json) | OpenTelemetry JSONL mapping for Bare OS |
| [mbr-layout.schema.json](mbr-layout.schema.json) | Seeder `bare_os.mbr_layout` RPC payload (MBR key slots, failover hints) |
| [kernel-extension-manifest.schema.json](kernel-extension-manifest.schema.json) | Extension drop-in manifests under **`kernel.ext.d`** |
| [kernel-extensions.registry.schema.json](kernel-extensions.registry.schema.json) | Extension registry aggregation |
| [bare-os-security-posture.schema.json](bare-os-security-posture.schema.json) | **`peerAdmission`** env pointers for optional NDJSON audit (**`/proc/bare_os/security_posture.json`**) |

**Related:** [kernel-extensions.md](../reference/kernel-extensions.md) · [observability-contracts.md](../reference/observability-contracts.md) · [compatibility-matrix.md](../reference/compatibility-matrix.md) · [scripts/README.md](../../scripts/README.md) (verifiers that touch schema examples).