# HUMAN-ONLY AUTHORITATIVE MAP — do not place this file in the agent workspace,
# operations repository, Git history, prompt, chat attachment, or ordinary
# cloud-synced folder. Protect and back it up as recovery material. The human
# uses it to bind model-safe opaque IDs to physical hardware. A local automated
# resolver may use it only after that resolver exists, exposes no arbitrary
# lookup, binds an approved ID to a bounded action, and has been independently
# reviewed.

classification: human-admin-only
owner:
created_at:
last_verified_at:
storage_location:
backup_location:
model_provider_disclosure_default: deny

hosts:
  - opaque_id: node1
    manufacturer_serial:
    management_controller_id:
    provider_account_ids: []

network_interfaces:
  - opaque_id: nic-a
    host: node1
    mac_address:
    physical_port_label:

wan:
  router_observed_address:
  externally_observed_address:
  provider_account_reference:

disks:
  - opaque_id: disk-a
    host: node1
    model:
    serial:
    wwn:
    eui:
    by_id_path:
    physical_bay:
    controller_port:
    cable_label:
    power_path:
    preservation_state: null # allowed: preserve, quarantine, backup-only, cold-spare, pool-candidate

# Grant lifecycle and status live in the separate protected grant store, not in
# this identity map. This map binds identities; it grants no authority.

account_identifiers:
  - opaque_id:
    provider:
    exact_identifier:
    recovery_reference:
