Governance API and Audit Evidence Schemas — Operating Quantum Computers

This appendix provides starting schemas for governance APIs, provider scorecards, legal holds, semantic events, and audit packets.

Admission decision

Illustrative listing · yaml

admission_decision:
  decision_id: dec_2026_000001
  workload_id: wl_abc123
  requester: user@example.com
  policy_bundle: policy_quantum_prod_2026_04_19
  result: allow
  constraints:
    provider_allowlist: [provider_a, provider_b]
    region_allowlist: [us]
    max_cost_usd: 2500
    max_shots: 1000000
    evidence_level: claim_grade
    forbidden_features:
      - unreviewed_pulse_override
  expires_at: 2026-05-19T00:00:00Z
  signature_ref: sig_dec_abc123

Diagram loads as you read

Admission decision · Figure 1

View diagram source

classDiagram
    class AdmissionDecision
    class Constraint
    class PolicyBundle
    class Signature
    AdmissionDecision --> Constraint
    AdmissionDecision --> PolicyBundle
    AdmissionDecision --> Signature

Control evidence mapping

Illustrative listing · yaml

control_evidence:
  control_id: AC-2
  control_source: NIST-SP-800-53
  workload_id: wl_abc123
  evidence:
    - artifact_id: admission_decision_dec_2026_000001
      type: signed_policy_decision
    - artifact_id: identity_context_ctx_991
      type: identity_and_role_snapshot
  status: evidence_collected_pending_assessment
  assessor: automated-control-mapper-v4
  reviewed_at: 2026-04-19T21:00:00Z

Diagram loads as you read

Control evidence mapping · Figure 2

View diagram source

flowchart LR
    Control[Control] --> Requirement[Evidence requirement]
    Requirement --> Artifact[Artifact]
    Artifact --> Status[Status]
    Status --> Packet[Audit packet]

Provider scorecard

Illustrative listing · yaml

provider_scorecard:
  provider: provider_a
  target_class: superconducting_gate_model
  workload_class: vqe_claim_grade
  observation_window: P30D
  trust_tier: production_limited
  scores:
    workload_fit: 0.77
    evidence_completeness: 0.91
    reliability: 0.72
    cost_predictability: 0.66
    support: 0.83
  exceptions:
    - calibration_age_requires_canary_above_12h

Diagram loads as you read

Provider scorecard · Figure 3

View diagram source

flowchart TB
    RawMetrics[Raw metrics] --> Scorecard[Scorecard]
    Exceptions[Exceptions] --> Scorecard
    Scorecard --> TrustTier[Trust tier]
    Scorecard --> Routing[Routing policy]

Legal hold scope

Illustrative listing · yaml

legal_hold:
  hold_id: hold_2026_0007
  reason: customer_dispute
  scope:
    workload_ids: [wl_abc123, wl_def456]
    claim_ids: [claim_materials_042]
    provider_job_ids: [job_789]
    time_window:
      start: 2026-03-01T00:00:00Z
      end: 2026-04-19T23:59:59Z
  preservation_targets:
    - evidence_archive
    - broker_event_log
    - notebook_repository
    - provider_metadata_export
  release_authority: legal
  status: active

Diagram loads as you read

Legal hold scope · Figure 4

View diagram source

stateDiagram-v2
    [*] --> Issued
    Issued --> Acknowledged
    Acknowledged --> Preserved
    Preserved --> Reviewed
    Reviewed --> Released
    Released --> [*]

Semantic event envelope

Illustrative listing · json

{
  "specversion": "1.0",
  "type": "quantum.execution.completed",
  "source": "quantum-broker/prod",
  "id": "evt_2026_000001",
  "time": "2026-04-19T21:00:00Z",
  "subject": "workload/wl_abc123/execution/exe_555",
  "datacontenttype": "application/json",
  "data": {
    "workload_id": "wl_abc123",
    "execution_id": "exe_555",
    "provider": "provider_a",
    "target_snapshot_id": "target_snap_77",
    "calibration_epoch_id": "cal_998",
    "compiler_profile_id": "compiler_prof_41",
    "evidence_package_id": "evpkg_222",
    "status": "completed"
  }
}

Audit packet manifest

Illustrative listing · yaml

audit_packet:
  packet_id: auditpkt_2026_0009
  scope: claim_materials_042
  generated_at: 2026-04-19T21:10:00Z
  controls:
    - AC-2
    - AU-2
    - CM-3
    - RA-3
  artifacts:
    - workload_contract.yaml
    - admission_decision.yaml
    - target_snapshot.json
    - compiler_manifest.json
    - execution_result.parquet
    - statistical_review.md
  exceptions:
    - exception_id: exc_17
      status: approved
      rationale: alternate provider metadata format accepted

Diagram loads as you read

Audit packet manifest · Figure 5

View diagram source

flowchart LR
    Scope[Scope] --> Manifest[Packet manifest]
    Manifest --> Artifacts[Artifacts]
    Manifest --> Controls[Controls]
    Manifest --> Exceptions[Exceptions]
    Artifacts --> Review[Review]
    Controls --> Review
    Exceptions --> Review

Additional technical sources: [R88].