Beta V2 Lexicons #

These schemas define the V2 network records described in docs/architecture.md. Existing dev.mainasara.at-run.beta.* records remain V1 and are not rewritten.

Application-level invariants #

Lexicon JSON cannot express all required relationships. Implementations must also enforce:

1. A code blob MIME type is exactly application/<runtimeRecord.cid>.
2. Fetching runtimeRecord.uri returns runtimeRecord.cid.
3. A code blob is a single-root tar and entrypoint is relative to that root.
4. Runtime and addition OCI references are pinned by digest.
5. Runtime launch paths are relative and export paths are safe absolute container paths.
6. A runtime platform matches the Docker daemon OS and architecture.
7. Network-selected OCI images are inspected or extracted but never started.
8. Alias, job, execution, and secrets references point to compatible V2 records.