Portable Asset Manifest

Every asset Sweep preserves or moves gets a Portable Asset Manifest (manifestVersion: "1.0"), available at GET /v1/assets/{id}/manifest, GET /v1/vault/objects/{id} and in bulk at GET /v1/vault/manifests/export.

It uses standard primitives (ISO-8601 timestamps, SHA-256, IANA media types, JSON) inside a narrow Trusty envelope:

Section	Contents
source	provider, opaque source reference, object id, parent, version/revision, path, containers (labels/folders), original timestamps, provider metadata
content	kind, name, size, media type, SHA-256 (per-part hashes for multipart)
message	for mail: from/to/cc, subject, date, thread, list headers
permissions	sharing principals and roles, with preservedAtDestination after moves
vault	Vault object id, storage key, hash, size, storage class, verification method and time
transformations	raw MIME capture, attachment extraction, text extraction, OCR, thumbnails, format normalization, repackaging, each with lossy
destinations	where copies/moves/restores were written, mode, execution id, verification and lossiness
lineage	edges: originated_from, preserved_as, derived_from, moved_to, copied_to, restored_to, duplicated_by
restore	whether and how the asset can be restored (vault_to_original, vault_to_destination, provider_untrash)
hash	deterministic hash over the whole manifest

The JSON Schema is published at https://developers.trustysweep.com/schemas/PortableAssetManifest.json.