{
  "lexicon": 1,
  "id": "com.publicdomainrelay.temp.compute.events.guest.secretsApplied",
  "description": "The guest wrote the files of its secrets bundle; sent as the payload of a market.event. Guest-originated only: the guest posts it to its bidder, which signs and publishes it to the requester.",
  "defs": {
    "main": {
      "type": "record",
      "key": "any",
      "record": {
        "type": "object",
        "required": ["via", "createdAt"],
        "properties": {
          "via": {
            "type": "string",
            "knownValues": ["getSecrets", "sealed"],
            "maxLength": 16,
            "description": "The path that delivered the bundle: getSecrets (the requester's route, after a workload identity exchange) or sealed (a compute.events.guest.secrets record, the explicit fallback)."
          },
          "count": { "type": "integer", "minimum": 0, "description": "The number of files written." },
          "createdAt": { "type": "string", "format": "datetime" },
          "signatures": { "type": "ref", "ref": "network.attested.signature#signatures" }
        }
      }
    }
  }
}