{
  "$schema": "https://finance.entelekron.org/schemas/tvkusd-domain-registry.schema.json",
  "schemaVersion": "1.0.0",
  "canonicalAssetId": "tvk-group:tvkusd",
  "asOf": "2026-08-14T00:00:00Z",
  "canonicalOrigin": "https://finance.entelekron.org",
  "productDomain": {
    "apex": "tvkusd.com",
    "www": "www.tvkusd.com",
    "ownershipStatus": "purchased",
    "deploymentStatus": "not-attached",
    "routingMode": "permanent-redirect-to-canonical-origin",
    "canonicalRoutingTarget": "https://finance.entelekron.org/solutions/stablecoin",
    "emailEnabled": false
  },
  "requiredActivationChecks": [
    { "id": "registrar-lock", "label": "Registrar MFA, recovery and transfer lock verified", "state": "not-satisfied", "evidenceUrl": null },
    { "id": "vercel-attachment", "label": "Apex and www hosts attached to the approved Vercel project", "state": "not-satisfied", "evidenceUrl": null },
    { "id": "dns-validation", "label": "Registrar DNS records match the exact Vercel assignment", "state": "not-satisfied", "evidenceUrl": null },
    { "id": "tls-validation", "label": "Valid TLS certificates and HTTPS redirects verified", "state": "not-satisfied", "evidenceUrl": null },
    { "id": "canonical-routing", "label": "Host redirect and canonical URLs verified without loops", "state": "not-satisfied", "evidenceUrl": null },
    { "id": "security-headers", "label": "Security headers, security.txt and well-known records verified", "state": "not-satisfied", "evidenceUrl": null },
    { "id": "email-authentication", "label": "SPF, DKIM and DMARC verified before any domain email is used", "state": "not-satisfied", "evidenceUrl": null }
  ],
  "securityControls": {
    "registrarMfaRequired": true,
    "registrarTransferLockRequired": true,
    "registryLockPreferredWhenAvailable": true,
    "dnssecRequiredWhenSupported": true,
    "dnsChangesRequireIndependentApproval": true,
    "recoveryCodesStoredOffline": true,
    "emailUseRequiresSpfDkimDmarc": true,
    "wildcardDnsProhibited": true
  },
  "notice": "The domain is purchased but is not yet attached to the approved hosting project. Ownership, DNS or TLS status does not activate TVK USD or any financial service."
}
