This handbook includes contracts and planned capabilities. Examples do not authorize plugin installation. Capability status remains as described in each page and its acceptance evidence.

Store and OTA v1 schemas

These schemas define the minimal commercial publication surface around the strict CRP v1 archive. CRP v1 itself still accepts exactly manifest.json, one regular artifact/<file>, and signatures/manifest.json; external provenance, review, release, endpoint, sidecar, and CWEDP records are not archive entries.

The schemas are public at store.cheesesec.com/schema/store/v1/. The catalog and OTA indexes are intentionally empty until a release has fixed digests, verified signatures, independent review evidence, and an immutable release record.