FreeWheel callbacks check SDK template fields.

Template-completeness advisories for the explicit cn/et callback profile on the exact MRM /ad/l/1 route. The public SDK and gallery producer establish these fields on network-host callbacks. Opaque s-only transports remain outside this profile; event vocabularies, issued-token validity and session attribution are not verified.

What this pack matches

Hosts: v.fwmrm.net
Paths: /ad/l/1
Vendor docs: vi.freewheel.tv/static/api_docs/html5/

Rules

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field	Required	What it checks	Rule ids	Source
`cn`	recommended	EventCallback.getUrl retains an event name in cn and the public gallery VAST templates populate it. This is a source-template completeness advisory. New event names are not rejected. Presence diagnostic severity: warning.	`vendor.freewheel-callback.param.cn.missing` `vendor.freewheel-callback.param.cn.empty`	docs
`et`	recommended	EventCallback.getUrl writes the event-type field and the public gallery response emits it. Its value vocabulary is not closed by this profile. Presence diagnostic severity: warning.	`vendor.freewheel-callback.param.et.missing` `vendor.freewheel-callback.param.et.empty`	docs
`s`	recommended	The reviewed public gallery callbacks retain this nonempty opaque field. Presence is observed template completeness, not a signature-validity, delivery or vendor mandatory-field claim. Presence diagnostic severity: warning.	`vendor.freewheel-callback.param.s.missing` `vendor.freewheel-callback.param.s.empty`	docs

Validate a payload

pixellint validate url "$ARTIFACT" --rulepack vendor/freewheel-callback

Try this failing payload in the playground. An example with a validation finding.

https://g1.v.fwmrm.net/ad/l/1?et=i&s=x

cargo install pixellint · npm install pixellint