OptionalgrantedFor install/update only: granted capability set.
Stable event kind.
OptionalpreviousFor update only: the previous version.
Monotonic-ish ID assigned by the log; useful for cursor pagination.
OptionalsignedInstall/update only: whether the bundle envelope carried a verified signature block. Absent on uninstall.
OptionalsignerInstall/update only: display fingerprint of the signer when
signed is true. Stored verbatim so historical audit rows
survive even if the signer rotates keys.
ISO timestamp the log writes; not user-supplied.
OptionalversionOptional version (where relevant).
Extension this event pertains to.