Define and validate restored-session setup state

2026-10-25 17:56:08 +01:00
parent 2957524af9
commit 54141e9ccb
7 changed files with 53 additions and 4 deletions
@@ -16,3 +16,11 @@ than in a URL query parameter. The server closes the connection when the frame
 is missing, malformed, or invalid, and sends `connection.ready` only after
 successful validation.

+The restored-session contract has Draft 2020-12 validation for both credential
+replacement states, missing fields, wrong types, and unexpected properties:
+
+```sh
+uv run --with jsonschema==4.26.0 python tests/session_contract.py
+```
+
+This isolated validation dependency is tooling only, not an application dependency.