{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://xcim.invalid/ietf/p1/schemas/protected.schema.json",
  "title": "P1 protected JWS header; no unprotected security headers",
  "type": "object", "additionalProperties": false,
  "required": ["alg", "kid", "typ"],
  "properties": {
    "alg": {"const": "Ed25519"},
    "kid": {"$ref": "common.schema.json#/$defs/kid"},
    "typ": {"enum": ["application/xcim-recipient-binding-p1+json", "application/xcim-message-signer-authorization-p1+json", "application/xcim-message-presentation-p1+json"]}
  },
  "$comment": "Verifier must select the exact typ for the expected object; this enum alone does not establish it. Names are not IANA registration claims."
}