{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "profile": {
      "type": "string",
      "const": "owp-market-local/0.2"
    },
    "round_id": {
      "type": "string",
      "format": "uuid",
      "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
    },
    "box": {
      "type": "object",
      "properties": {
        "enc": {
          "type": "string",
          "pattern": "^[A-Za-z0-9+/]{87}=$"
        },
        "ciphertext": {
          "type": "string",
          "minLength": 24,
          "maxLength": 20000,
          "pattern": "^[A-Za-z0-9+/]+={0,2}$"
        }
      },
      "required": [
        "enc",
        "ciphertext"
      ],
      "additionalProperties": false,
      "description": "HPKE P-256/HKDF-SHA256/AES-256-GCM. Standard padded base64, not base64url. AAD binds profile, instance, agent, session, request, path, target and direction."
    }
  },
  "required": [
    "profile",
    "round_id",
    "box"
  ],
  "additionalProperties": false,
  "title": "ContextPolicyRequest",
  "$comment": "owp-market-local/0.2; fictional loopback market, non-redeemable test credits only."
}