{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "uri": {
      "type": "string",
      "maxLength": 2048,
      "pattern": "^https:\\/\\/",
      "description": "Draft HTTPS artifact reference; fetching still requires authorization and destination checks."
    },
    "media_type": {
      "type": "string",
      "minLength": 1,
      "maxLength": 120
    },
    "sha256": {
      "type": "string",
      "pattern": "^[a-f0-9]{64}$",
      "description": "SHA-256, lowercase hexadecimal. Encoding is a draft choice."
    }
  },
  "required": [
    "uri",
    "media_type",
    "sha256"
  ],
  "additionalProperties": false,
  "description": "Draft artifact descriptor; no bearer credentials or inline private content.",
  "title": "Attachment",
  "$comment": "owp-docs-draft/0.1: proposed documentation shape only. Source: https://app.notion.com/p/338ed9cb3201819d96e9fc7b8e88594a §6.3 · §8.7. No production conformance claim."
}