JSON Schemas for the SemVer-Trust attestation predicates:
| Predicate type | Schema | Status |
|---|---|---|
https://semver-trust.dev/release/v0.1 |
release-v0.1.json |
historical |
https://semver-trust.dev/review/v0.1 |
review-v0.1.json |
historical |
https://semver-trust.dev/release/v0.2 |
release-v0.2.json |
draft successor |
https://semver-trust.dev/review/v0.2 |
review-v0.2.json |
draft successor |
Both schemas are JSON Schema draft 2020-12 and validate a complete in-toto Statement (envelope plus predicate). See the specification for the normative predicate definitions: release §8.1, review §4.3.
Predicate-type versions freeze at first emission (maintainer decision, 2026-07-06). Predicate v0.1 is historical: it remains verifiable under frozen legacy semantics, but it is not extended and cannot claim v0.5/v0.4 continuity.
Beginning with v0.2, any change that alters validation behavior or interpretation mints a new predicate-type URI and schema file. Additive optional fields inside a closed emitted schema are not a compatibility mechanism, because older vendored validators reject fields they do not know. Prior versions remain in this directory so attestations emitted against them stay verifiable forever.
Schemas in this directory are licensed under Apache 2.0 so implementations may vendor them freely. The specification prose remains CC BY 4.0 — see the repository root for the license map.