{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "Service identities and token handling evaluation inputs",
  "description": "Evaluate token metadata and permission checks independently of any real token value.",
  "type": "object",
  "required": [
    "issuer_trusted",
    "audience",
    "expires_in",
    "scopes"
  ],
  "properties": {
    "issuer_trusted": {
      "type": "boolean",
      "description": "Whether validation resolves a trusted issuer."
    },
    "audience": {
      "type": "string",
      "description": "Resource audience carried by the grant."
    },
    "expires_in": {
      "type": "number",
      "description": "Seconds remaining before expiry."
    },
    "scopes": {
      "type": "array",
      "description": "Action scopes established by token validation.",
      "items": {
        "type": "string"
      }
    }
  },
  "additionalProperties": false
}