{
  "operator": "ap-federation",
  "operatorRole": "the AKCS operator (`akcs operator …` on the CVM via `az vm run-command`) — one holder today, the owner; a second holder is a posture item (spec 407 D10)",
  "repo": "agentictrustlabs/faithkms",
  "backend": "akcs",
  "host": "akcs-pilot.faithnet.io",
  "hostPlanned": "kms.faithnet.io",
  "probe": "https://akcs-pilot.faithnet.io/healthz",
  "attestation": null,
  "azureResources": [
    "/subscriptions/5a656e13-849d-4b56-9101-53f987cf971b/resourceGroups/RG-AKCS-PILOT-WESTUS/providers/Microsoft.Compute/virtualMachines/vm-akcs-pilot-0",
    "/subscriptions/5a656e13-849d-4b56-9101-53f987cf971b/resourceGroups/RG-AKCS-PILOT-WESTUS/providers/Microsoft.Compute/virtualMachines/vm-akcs-tunnel-pilot"
  ],
  "platformRoots": [
    {
      "provider": "azure-key-vault",
      "vault": "kv-akcs-pilot-vrw42jcwx4",
      "key": "akcs-platform-root-wrap",
      "state": "ACTIVE",
      "billable": true
    }
  ],
  "billableKeyBudget": 2,
  "evidence": {
    "checked": "2026-10-14",
    "logicalKeys": 433,
    "byProtection": {
      "CVM_WRAPPED": 433
    },
    "keyVaultCostMonthToDate": "5.00 USD — one Premium HSM-protected advanced key; key operations 0.00 USD",
    "note": "the Azure spend that month-to-date (323.85 USD) is compute, Bastion, Postgres, the registry and disks, not keys"
  },
  "protectionLevels": [
    "CVM_WRAPPED",
    "CVM_DERIVED"
  ],
  "costRule": "a couple of HSM root keys are the whole Azure spend; every agent key derives from them for free. AZURE_HSM_DIRECT is a billable Key Vault HSM key per key and is never bound by default — a caller that needs one names the estate that pays (billedTo).",
  "tenants": [
    {
      "tenant": "faithnet",
      "estate": "faithnet",
      "town": "faithchain",
      "backend": "akcs",
      "callers": [
        {
          "subject": "demo-a2a-faithnet",
          "worker": "demo-a2a-faithnet",
          "operations": [
            "*"
          ],
          "protectionLevels": [
            "CVM_WRAPPED"
          ]
        },
        {
          "subject": "skills-a2a-faithnet",
          "worker": "skills-a2a",
          "operations": [
            "key-public-key",
            "key-sign"
          ],
          "protectionLevels": [
            "CVM_WRAPPED"
          ]
        },
        {
          "subject": "field-a2a-faithnet",
          "worker": "field-a2a-faithnet",
          "operations": [
            "key-public-key",
            "key-sign"
          ],
          "protectionLevels": [
            "CVM_WRAPPED"
          ]
        },
        {
          "subject": "gather27-a2a-faithnet",
          "worker": "gather27-a2a-faithnet",
          "operations": [
            "key-public-key",
            "key-sign"
          ],
          "protectionLevels": [
            "CVM_WRAPPED"
          ]
        },
        {
          "subject": "gather27-a2a-churchglobal",
          "worker": "gather27-a2a-churchglobal",
          "operations": [
            "key-public-key",
            "key-sign"
          ],
          "protectionLevels": [
            "CVM_WRAPPED"
          ]
        },
        {
          "subject": "demo-bible-mcp-faithnet",
          "worker": "demo-bible-mcp-faithnet",
          "operations": [
            "key-public-key",
            "key-sign"
          ],
          "protectionLevels": [
            "CVM_WRAPPED"
          ]
        },
        {
          "subject": "scripture-validator",
          "operations": [
            "key-public-key",
            "key-sign"
          ],
          "protectionLevels": [
            "CVM_WRAPPED"
          ]
        },
        {
          "subject": "coach-a2a-faithnet",
          "worker": "coach-a2a-faithnet",
          "operations": [
            "key-public-key",
            "key-sign"
          ],
          "protectionLevels": [
            "CVM_WRAPPED"
          ]
        }
      ],
      "sharedCredential": true,
      "note": "demo-a2a-faithnet is bound with operations * — re-bind it per operation (runbook step 2) and disable it; gather27-churchglobal-faithnet is already DISABLED and not listed"
    },
    {
      "tenant": "impact",
      "estate": "impact",
      "town": "base-sepolia",
      "backend": "akcs",
      "callers": [
        {
          "subject": "engage-a2a-production",
          "operations": [
            "key-public-key",
            "key-sign"
          ],
          "protectionLevels": [
            "CVM_WRAPPED"
          ]
        },
        {
          "subject": "field-a2a-production",
          "operations": [
            "key-public-key",
            "key-sign"
          ],
          "protectionLevels": [
            "CVM_WRAPPED"
          ]
        },
        {
          "subject": "gather27-a2a-production",
          "operations": [
            "key-public-key",
            "key-sign"
          ],
          "protectionLevels": [
            "CVM_WRAPPED"
          ]
        }
      ],
      "note": "3 logical keys (service-agent delegates); the town is retired — disable or keep is the owner's call"
    },
    {
      "tenant": "imb",
      "estate": "imbnet",
      "town": "faithchain",
      "backend": "akcs",
      "callers": [
        {
          "subject": "imb-vault-2",
          "worker": "imb-vault",
          "operations": [
            "data-key-generate",
            "data-key-unwrap",
            "mac-generate",
            "key-create"
          ],
          "protectionLevels": [
            "CVM_WRAPPED",
            "CVM_DERIVED"
          ],
          "since": "2026-10-11"
        },
        {
          "subject": "imb-runtime-2",
          "worker": "imb-runtime",
          "operations": [
            "mac-generate"
          ],
          "protectionLevels": [
            "CVM_WRAPPED",
            "CVM_DERIVED"
          ],
          "since": "2026-10-11"
        }
      ],
      "note": "bound with --audiences urn:mcp:server:person --purposes '*' (one KEK purpose per person); the -2 subjects replaced imb-vault / imb-runtime, which are DISABLED on the CVM; 7 logical keys"
    }
  ],
  "conditions": [
    {
      "id": 1,
      "condition": "No shared caller credential — one least-privilege bind-caller per Worker per estate (closes spec 407 D10)",
      "status": "open",
      "detail": "imbnet met (two callers, 2026-10-11); faithnet's pilot credential is still shared across its Workers — close before a third estate binds"
    },
    {
      "id": 2,
      "condition": "One tenant per estate; a tenant is never shared and an estate never has two",
      "status": "met",
      "detail": "checked by scripts/check-federation.mts over this record"
    },
    {
      "id": 3,
      "condition": "CVM protection levels only; AZURE_HSM_DIRECT never bound without a named payer",
      "status": "met",
      "detail": "protectionLevels above; the check refuses a caller with AZURE_HSM_DIRECT and no billedTo"
    },
    {
      "id": 4,
      "condition": "The CVM attestation document is published at the operator host and linked from this record",
      "status": "open",
      "detail": "operator action — spec 440 A5 step 4"
    }
  ],
  "probeResult": {
    "ok": true,
    "status": 200,
    "ms": 269,
    "body": {
      "status": "alive"
    }
  },
  "attestationResult": {
    "ok": false,
    "error": "not published yet (spec 440 A5 step 4)"
  },
  "holds": "no key, token, seed or caller credential appears here; the operator's record on the CVM is authoritative"
}