[elkampu]

Summary

• add a packable .NET 8 OpenCamInterop alpha library with validated CloudEvents 1.0 contracts
• normalize offline Frigate object messages and ONVIF notifications through bounded, pure adapters
• add versioned JSON Schemas, synthetic fixtures, and an IPCamLapse read-only CloudEvents batch export
• document a fixture-driven EventLab direction and contribution gates without renaming or splitting the repository

Security and privacy

• adapters make no network connections and accept payloads capped at 1 MiB
• JSON duplicate members are rejected; XML DTDs/external resolution and excessive nesting/counts are rejected
• Frigate output is allowlisted, generic ONVIF values are redacted, and ONVIF identifiers are opaque
• IPCamLapse export omits credentials, URLs, storage paths, and raw diagnostic messages

Verification

• dotnet restore IPCamLapse.sln --locked-mode
• dotnet build IPCamLapse.sln --configuration Release --no-restore (0 warnings, 0 errors)
• dotnet test IPCamLapse.sln --configuration Release --no-build --no-restore (90 passed)
• dotnet format IPCamLapse.sln --verify-no-changes --no-restore
• dotnet list IPCamLapse.sln package --vulnerable --include-transitive --no-restore (none found)
• dotnet publish IPCamLapse/IPCamLapse.csproj --configuration Release --no-restore
• dotnet pack OpenCamInterop/OpenCamInterop.csproj --configuration Release --no-restore

The local Docker daemon was unavailable, so the existing PR container workflow is the independent Dockerfile check.

Honest limitations

This is an alpha interoperability contract backed by synthetic fixtures. It is not an ONVIF conformance suite, has no physical-device coverage yet, and makes no adoption claim. Capture/inspect/replay tooling is roadmap work rather than part of this PR.