Implement authorization import and revocation checks (T-503)

schemas/installed-app.schema.json

@@ -45,6 +45,15 @@
     "min_os": {
       "enum": ["windows-7-sp1", "windows-10", "windows-11"]
     },
+    "product_id": {
+      "type": "string",
+      "pattern": "^[a-z0-9-]+$",
+      "$comment": "Optional for pre-T-503 records; new installations persist the verified app.json product_id for launch authorization."
+    },
+    "supports_trial": {
+      "type": "boolean",
+      "$comment": "Optional for pre-T-503 records; absence means false and never grants a local trial."
+    },
     "requires_admin": {
       "type": "boolean"
     },

schemas/revocation-list.schema.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://softbox.local/schemas/revocation-list-v1.json",
+  "title": "SoftBox Revocation List v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "generated_at", "expires_at", "revoked_license_ids", "signature"],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "generated_at": { "type": "string", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}Z$" },
+    "expires_at": { "type": "string", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}Z$" },
+    "revoked_license_ids": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": { "type": "string", "pattern": "^lic-[a-z0-9][a-z0-9-]{0,59}$" }
+    },
+    "signature": { "type": "string", "pattern": "^[A-Za-z0-9+/]{86}==$" }
+  }
+}