From 58bd4459977d83a57270e0313c395faf13d87f08 Mon Sep 17 00:00:00 2001
From: Vijay Sarvepalli <vssarvepalli@cert.org>
Date: Tue, 25 Jun 2024 15:07:30 -0400
Subject: [PATCH] Updated Computed schema as feedback from Jay Jacobs #576

---
 data/schema/SSVC_Computed.schema.json         | 17 +++++++++--
 .../Computed-CVE-2014-0751-Coordinator.json   | 30 ++++++-------------
 2 files changed, 24 insertions(+), 23 deletions(-)

diff --git a/data/schema/SSVC_Computed.schema.json b/data/schema/SSVC_Computed.schema.json
index 1fa214c3..97da7e0b 100644
--- a/data/schema/SSVC_Computed.schema.json
+++ b/data/schema/SSVC_Computed.schema.json
@@ -10,10 +10,23 @@
 	    "description": "An optional short vector representation of a SSV computed decision score.  This will be useful in providing permalink and other ways to provide quick read and access to a SSVC decision made"
 
 	},
-	"options": {
-	    "type": "object",
+	"outcomes": {
+	    "description": "These entries provide a list of potential outcomes once a Decision Tree were used to evaluate a vulnerability (or multiple) by a organization/person representing a Role",
+	    "type": "array",
 	    "items": {
 		"type": "string"
+	    }
+	},
+	"options": {
+	    "description": "These entries list the Options that were evaluated by a organization/person representing a Role",
+	    "type": "object",
+	    "patternProperties": {
+		".*" : {
+		    "type": "array",
+		    "items": {
+			"type": "string"
+		    }
+		}
 	    },
 	    "minItems": 1,
 	    "uniqueItems": true		
diff --git a/data/schema_examples/Computed-CVE-2014-0751-Coordinator.json b/data/schema_examples/Computed-CVE-2014-0751-Coordinator.json
index b75aa68b..f6e7da3f 100644
--- a/data/schema_examples/Computed-CVE-2014-0751-Coordinator.json
+++ b/data/schema_examples/Computed-CVE-2014-0751-Coordinator.json
@@ -4,26 +4,14 @@
     "version": "2.0.3",
     "computed": "SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2021-09-29T15:29:44Z/",
     "timestamp": "2021-09-29T15:29:44Z",
-    "options": [
-	{
-	    "Exploitation": "active"
-	},
-	{
-	    "Automatable": "no"
-	},
-	{
-	    "Technical Impact": "total"
-	},
-	{
-	    "Mission Prevalence": "Minimal"
-	},
-	{
-	    "Public Well-being Impact": "Material"
-	},
-	{
-	    "Mission & Well-being": "medium"
-	}
-    ],
-    "$schema": "https://democert.org/ssvc/SSVC_Computed_v2.0.3.schema.json",
+    "options": 	{
+	    "Exploitation": ["active"],
+	    "Automatable": ["no"],
+	    "Technical Impact": ["total"],
+	    "Mission Prevalence": ["Minimal"],
+	    "Public Well-being Impact": ["Material"],
+	    "Mission & Well-being": ["medium"]
+    },
+    "outcomes": ["Act"],
     "decision_tree_url": "https://democert.org/ssvc/CISA-Coordinator-v2.0.3.json"
 }