protobuf schema audit derived

{
  "input": {
    "body": {
      "proto": "package shop;\n\nenum Channel {\n  WEB = 1;\n  APP = 2;\n}\n\nmessage Cart {\n  required string cart_id = 1;\n  repeated string skus = 16;\n  map<float, int32> weights = 3;\n  int32 legacy = 19000;\n}\n"
    },
    "type": "http",
    "method": "POST",
    "bodyType": "json"
  },
  "output": {
    "type": "json",
    "example": {
      "valid": false,
      "limits": {
        "maxFindings": 500,
        "maxSdlBytes": 262144,
        "maxVersions": 25,
        "maxAvroBytes": 262144,
        "maxConsumers": 50,
        "maxProtoBytes": 262144,
        "maxPathsPerConsumer": 200
      },
      "passed": false,
      "syntax": null,
      "package": "shop",
      "complete": true,
      "findings": [
        {
          "code": "SYNTAX_NOT_DECLARED",
          "detail": "The file declares no syntax, so protobuf treats it as proto2, where an unlabelled field is optional with explicit presence rather than proto3 implicit presence. That is rarely what was intended."
        },
        {
          "code": "REQUIRED_FIELD",
          "field": "cart_id",
          "detail": "shop.Cart.cart_id is required. A required field can never be removed and never be made optional without breaking readers, which is why proto3 removed the label.",
          "number": 1,
          "message": "shop.Cart"
        },
        {
          "code": "MAP_KEY_NOT_PERMITTED",
          "field": "weights",
          "detail": "shop.Cart.weights uses float as a map key. Only integral, bool and string keys are allowed.",
          "number": 3,
          "message": "shop.Cart"
        }
      ],
      "enum_count": 1,
      "request_id": "example-request",
      "service_id": "protobuf_schema_audit",
      "assumptions": [
        "The findings are about what the file makes possible later as well as what protobuf rejects now. A required field, an enum without a zero value and a repeated field numbered above 15 are each legal in ...",
        "Tag size is reported because a field number above 15 costs two tag bytes per occurrence, which a repeated field pays per element for the life of the schema.",
        "A type this file does not define is reported as not audited rather than assumed sound. Services, extensions and groups are recognised and listed as not modelled."
      ],
      "limitations": [
        "One .proto source, as a documented subset. Imports are recorded and not followed, so a field whose type comes from another file is named and not checked.",
        "valid is true only when nothing above applied and nothing was left unaudited. This is not a certification and not a style review."
      ],
      "observed_at": "2026-10-02T00:00:00.000Z",
      "import_count": 0,
      "not_examined": [],
      "finding_count": 6,
      "message_count": 1,
      "service_version": "1.0.0",
      "findings_by_code": {
        "REQUIRED_FIELD": 1,
        "SYNTAX_NOT_DECLARED": 1,
        "MAP_KEY_NOT_PERMITTED": 1,
        "ENUM_WITHOUT_ZERO_VALUE": 1,
        "IMPLEMENTATION_RESERVED_NUMBER": 1,
        "REPEATED_FIELD_ABOVE_ONE_BYTE_TAG": 1
      },
      "unspecified_zero_checked": true
    }
  }
}