{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://bare-os.local/schemas/bare-os-audit-line.schema.json",
  "title": "Bare OS append-only audit log (one NDJSON line)",
  "type": "object",
  "required": ["auditSchemaVersion", "type", "ts"],
  "properties": {
    "auditSchemaVersion": { "type": "integer", "const": 1 },
    "type": {
      "type": "string",
      "description": "Event category (e.g. vfs, ipc, httpFetch, extension)"
    },
    "ts": { "type": "integer", "description": "Unix ms" },
    "sessionId": { "type": "string" },
    "path": { "type": "string" },
    "effect": { "type": "string", "enum": ["allow", "deny", "audit"] },
    "detail": { "type": "object", "additionalProperties": true }
  },
  "additionalProperties": true
}