{
  "bootstrap_mode": "custody",
  "custodian_age_public_key": "",
  "custodian_age_public_key_confirmed": false,
  "custodian_age_private_key_reference": "",
  "custodian_age_private_key_confirmed": false,
  "credential_label": "platform-root",
  "identity_account_home": "lldap",
  "identity_account_reference": "",
  "identity_account_created": false,
  "identity_group_reference": "net-kingdom-admins",
  "identity_group_confirmed": false,
  "setup_operator": "tegwick",
  "notification_contact": "bernd.worsch@gmail.com",
  "storage_classes": [
    "password-safe",
    "offline-packet"
  ],
  "password_safe_confirmed": false,
  "mfa_class": "totp",
  "mfa_enrolled_confirmed": false,
  "mfa_enrollment_source": "deferred",
  "mfa_enrollment_reference": "",
  "recovery_confirmed": false,
  "custody_packet_prepared": false,
  "no_secret_capture_confirmed": false,
  "king_credential_ready": false,
  "custody_mode": "",
  "custody_mode_approved": false,
  "custody_approved_at": "",
  "custody_approved_by": "",
  "approval_scope": "",
  "oidc_login_verified": false,
  "metadata_updated_at": "",
  "progress_scope": "",
  "openbao_preflight_passed": false,
  "openbao_initialized": false,
  "root_token_disposition": "",
  "restore_drill_passed": false,
  "cleanup_complete": false,
  "platform_reopened": false,
  "review_date": "",
  "notes": "Non-secret metadata only. Do not store passwords, OTP seeds, recovery codes, private keys, OpenBao root tokens, or unseal shares here."
}