schema: 1
host_id:
updated_at:
owner:

platform_decision:
  deployment: null # allowed: bare-metal, virtual-machine
  operating_system:
  release:
  support_end:
  reason:
  virtualization_deferred_until:

hardware:
  firmware_version:
  boot_mode:
  secure_boot_state:
  memory_test_result:
  network_interface:
  boot_device_id:
  data_devices_preserved: []
  preservation:
    owner_decision_reference:
    model_safe_source_references: []
    opaque_destination_reference:
    destination_outside_erase_target: unverified
    destination_outside_shared_failure_target: unverified
    destination_will_survive_installation: unverified
    completeness_method:
    completeness_evidence_reference:
    independent_copy_evidence_reference:
    representative_read_back_evidence_reference:
    result: unverified
    intentional_discard_owner_decision_reference:
  destructive_authorization_reference:
  destructive_authorization_live_verification_result: unverified

installation:
  image_source:
  image_checksum_verified:
  installed_at:
  boot_layout:
  encryption_policy:
  recovery_key_reference:
  authority_note: This model-safe record uses opaque references. Its preservation and authorization status fields are descriptive evidence, not grants. It contains no exact sensitive path or device-identity mapping and grants no permission to erase or install. Preservation proof and erase-target identity verification are separate gates. After preservation is complete, the owner or a reviewed local protected mechanism must independently resolve and verify the current human-protected destructive authorization against live device identity, signatures, contents, operation, expiry, and maintenance window before installation.

base_configuration:
  hostname:
  canonical_name:
  recovery_ipv4:
  timezone:
  time_sync:
  update_policy:
  update_discovery_source:
  automatic_security_updates:
  reboot_policy:
  pending_reboot_evidence:
  maintenance_window:
  package_sources_and_pins: []
  third_party_source_owners: []
  previous_kernel_or_boot_entry:
  recovery_media_reference:
  update_recovery_methods: []
  firewall_policy_reference:
  log_retention:

identities:
  human_recovery_account:
  agent_observer_account:
  agent_mutation_account:
  ssh_host_key_fingerprints: []

agent_boundary:
  allowed_read_only_actions: []
  consolidated_human_actions: []
  future_independently_reviewed_fixed_actions: []
  explicitly_denied:
    - general sudo
    - root shell
    - arbitrary package installation
    - SSH or privilege-policy changes
    - raw disk writes

execution_artifacts:
  - change_id:
    absolute_path:
    format_or_language:
    sha256:
    exact_one_line_invocation:
    host_account_shell_working_directory:
    package_binary_script_config_closure: []
    sealed_paths_and_digests: []
    bash_python_checks: []
    regex_fixtures: []
    native_pre_and_post_validators: []
    live_postconditions: []
    consumer_and_denial_tests: []
    evidence_capture:
    success_only_after_all_checks: true
    failure_exits_nonzero_without_followup_cleanup: true

validation:
  executed_by_referenced_artifact: true
  local_console_login:
  direct_ip_ssh:
  agent_observer_login:
  forbidden_action_tests:
  reboot_return:
  ac_power_return:
  time_and_dns:
  firewall_allowed_and_denied:
  clean_reinstall_rehearsed:
  package_manager_health:
  post_update_native_tests: []
  post_update_consumer_tests: []
  owner_unplanned_upgrade_reconciliation:

desired_state_revision:
remaining_manual_steps: []
unknowns: []
