# MODEL-SAFE VIEW — suitable for the agent-readable operations repository.
# Use stable opaque IDs here. Never place the mapping to serials, WWNs, MACs,
# WAN addresses, household identities, or provider account IDs in an
# agent-readable directory or Git history. Keep that mapping in the separate
# human-only hardware-identity-map.yaml. Exact identifiers may be disclosed to
# a model provider only after explicit owner consent to that provider's data
# handling, or resolved locally by a separately reviewed enforcement mechanism.

data_boundary:
  classification: model-safe
  authoritative_raw_location_reference:
  opaque_id_mapping_location_reference:
  provider_and_data_controls_reviewed_at:
  explicitly_consented_exact_fields: []

authority_requirements:
  grant_lifecycle_record_reference: grant-matrix.csv
  live_enforcement_verification_required: true
  note: This inventory carries no individual grant status and grants no authority. Resolve any mutation grant from the protected independent store and verify issuer, integrity, window, target, actions, and live enforcement.

observed_at:
observer:

hosts:
  - id:
    role:
    service_tiers: []
    chassis:
      form_factor:
      body_depth_mm:
      installed_envelope_mm:
      rack_support:
    board:
      vendor:
      model:
      firmware:
      management_controller:
    cpu:
    memory:
    pcie_slots: []
    network:
      interfaces:
        - id: nic-a
          link_speed:
          driver:
      reserved_ipv4:
      ipv6:
      overlay_name:
    power:
      idle_watts:
      peak_watts:
      ups_outlet:
      return_after_power_loss:
    access:
      local_console:
      recovery_account_reference:
      agent_roles: []
    rebuild:
      desired_state_revision:
      last_rehearsed:
    unknowns: []

disks:
  - id:
    host:
    physical_bay:
    identity_map_reference: human-only:disk-a
    model:
    transport:
    controller:
    controller_port:
    cable_label:
    power_path:
    capacity_bytes:
    logical_sector_bytes:
    physical_sector_bytes:
    rotational:
    recording_technology: unknown # allowed: CMR, SMR, unknown, not-applicable
    firmware:
    warranty_status:
    power_on_hours:
    smart:
      observed_at:
      overall_assessment:
      temperature_idle_c:
      temperature_under_load_c:
      media_or_data_integrity_errors:
      reallocated_sectors:
      pending_sectors:
      nvme_critical_warnings: []
      endurance_used_percent:
      self_test_history: []
    existing_layout:
      partition_table:
      signatures: []
      filesystems: []
      labels: []
      uuids: []
      mounts: []
      encryption:
      raid_membership:
      known_contents:
    prior_use:
    data_class:
    pool:
    proposed_pool:
    proposed_vdev:
    proposed_ashift:
    ashift_evidence: []
    ashift_reviewed_by:
    ashift_verified_after_creation:
    preservation:
      only_copy:
      disposition: null # allowed: preserve, quarantine, backup-only, cold-spare, pool-candidate
    replacement_compatible:
    replacement_compatibility_basis:

network:
  wan:
    router_observed_address_class: unknown # allowed: public, private, unknown
    externally_observed_address_matches_router: unknown # allowed: true, false, unknown
    cgnat_or_double_nat:
    ipv6_delegation:
  edge_path: []
  dhcp_provider:
  dns_resolvers: []
  overlay:
  public_listeners: []
  unmanaged_unknowns: []
