{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "media_type": {
      "type": "string",
      "const": "application/owp-encrypted+json"
    },
    "box": {
      "type": "object",
      "properties": {
        "enc": {
          "type": "string",
          "pattern": "^[A-Za-z0-9+/]{87}=$"
        },
        "ciphertext": {
          "type": "string",
          "minLength": 24,
          "maxLength": 20000,
          "pattern": "^[A-Za-z0-9+/]+={0,2}$"
        }
      },
      "required": [
        "enc",
        "ciphertext"
      ],
      "additionalProperties": false,
      "description": "HPKE P-256/HKDF-SHA256/AES-256-GCM. Standard padded base64, not base64url. AAD binds profile, instance, agent, session, request, path, target and direction."
    }
  },
  "required": [
    "media_type",
    "box"
  ],
  "additionalProperties": false,
  "description": "Weather submissions are encrypted to the context adapter. The requested deliverable format is inside the box.",
  "title": "EncryptedContent",
  "$comment": "owp-market-local/0.2; fictional loopback market, non-redeemable test credits only."
}