{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://finance.entelekron.org/schemas/key-ceremony-control-profile.schema.json",
  "title": "TVKUSD key ceremony control profile",
  "type": "object",
  "additionalProperties": false,
  "required": ["$schema", "schemaVersion", "controlPlaneId", "canonicalAssetId", "profileId", "status", "asOf", "keyManagementProvider", "hsmProvider", "mpcProvider", "acceptedEnvironments", "publicSignerRegistry", "activeProductionKeyCount", "completedCeremonies", "recoveryShareCount", "ceremonyRequirements", "keyMaterialBoundary", "lifecycle", "cryptographicAgility", "authority", "notice"],
  "properties": {
    "$schema": {"const": "https://finance.entelekron.org/schemas/key-ceremony-control-profile.schema.json"},
    "schemaVersion": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
    "controlPlaneId": {"const": "tvk-group:entelekron-financial-infrastructure"},
    "canonicalAssetId": {"const": "tvk-group:tvkusd"},
    "profileId": {"type": "string", "minLength": 1},
    "status": {"const": "no-production-key-ceremony"},
    "asOf": {"type": "string", "format": "date-time"},
    "keyManagementProvider": {"type": "null"},
    "hsmProvider": {"type": "null"},
    "mpcProvider": {"type": "null"},
    "acceptedEnvironments": {"type": "array", "maxItems": 0},
    "publicSignerRegistry": {"type": "array", "maxItems": 0},
    "activeProductionKeyCount": {"const": 0},
    "completedCeremonies": {"type": "array", "maxItems": 0},
    "recoveryShareCount": {"const": 0},
    "ceremonyRequirements": {
      "type": "object", "additionalProperties": false,
      "required": ["minimumDistinctHumanRoles", "minimumIndependentWitnesses", "requiredRoles", "approvedFacilityOrRemoteCeremonyStandardRequired", "providerAndDeviceAttestationRequired", "readableKeyPurposeRequired", "environmentAndNetworkScopeRequired", "quorumAndThresholdApprovalRequired", "tamperEvidentRecordRequired", "independentPostCeremonyVerificationRequired"],
      "properties": {
        "minimumDistinctHumanRoles": {"type": "integer", "minimum": 3},
        "minimumIndependentWitnesses": {"type": "integer", "minimum": 2},
        "requiredRoles": {"type": "array", "minItems": 3, "uniqueItems": true, "items": {"type": "string", "minLength": 1}},
        "approvedFacilityOrRemoteCeremonyStandardRequired": {"const": true},
        "providerAndDeviceAttestationRequired": {"const": true},
        "readableKeyPurposeRequired": {"const": true},
        "environmentAndNetworkScopeRequired": {"const": true},
        "quorumAndThresholdApprovalRequired": {"const": true},
        "tamperEvidentRecordRequired": {"const": true},
        "independentPostCeremonyVerificationRequired": {"const": true}
      }
    },
    "keyMaterialBoundary": {
      "type": "object", "additionalProperties": false,
      "required": ["rawPrivateKeyExportPermitted", "seedPhraseGenerationPermitted", "privateKeyInApplicationMemoryPermitted", "privateKeyInLogsOrEvidencePermitted", "singleDeviceFullKeyPermitted", "unencryptedBackupPermitted", "operatorScreenCapturePermitted", "publicPrivateKeyMaterialPermitted"],
      "properties": {
        "rawPrivateKeyExportPermitted": {"const": false},
        "seedPhraseGenerationPermitted": {"const": false},
        "privateKeyInApplicationMemoryPermitted": {"const": false},
        "privateKeyInLogsOrEvidencePermitted": {"const": false},
        "singleDeviceFullKeyPermitted": {"const": false},
        "unencryptedBackupPermitted": {"const": false},
        "operatorScreenCapturePermitted": {"const": false},
        "publicPrivateKeyMaterialPermitted": {"const": false}
      }
    },
    "lifecycle": {
      "type": "object", "additionalProperties": false,
      "required": ["rotationPolicyApproved", "rotationIntervalDays", "revocationProcedureApproved", "recoveryProcedureApproved", "destructionProcedureApproved", "lastRecoveryTestAt"],
      "properties": {
        "rotationPolicyApproved": {"const": false},
        "rotationIntervalDays": {"type": "null"},
        "revocationProcedureApproved": {"const": false},
        "recoveryProcedureApproved": {"const": false},
        "destructionProcedureApproved": {"const": false},
        "lastRecoveryTestAt": {"type": "null"}
      }
    },
    "cryptographicAgility": {
      "type": "object", "additionalProperties": false,
      "required": ["algorithmPolicyApproved", "approvedAlgorithms", "postQuantumMigrationPlanApproved", "currentChainsClaimedQuantumSafe"],
      "properties": {
        "algorithmPolicyApproved": {"const": false},
        "approvedAlgorithms": {"type": "array", "maxItems": 0},
        "postQuantumMigrationPlanApproved": {"const": false},
        "currentChainsClaimedQuantumSafe": {"const": false}
      }
    },
    "authority": {
      "type": "object", "additionalProperties": false,
      "required": ["aiCanGenerateProductionKey", "aiCanReceiveRecoveryShare", "aiCanChangeQuorum", "singleOperatorCanCreateActivateOrRecoverKey", "softwareChangeAloneCanActivateSigner"],
      "properties": {
        "aiCanGenerateProductionKey": {"const": false},
        "aiCanReceiveRecoveryShare": {"const": false},
        "aiCanChangeQuorum": {"const": false},
        "singleOperatorCanCreateActivateOrRecoverKey": {"const": false},
        "softwareChangeAloneCanActivateSigner": {"const": false}
      }
    },
    "notice": {"type": "string", "minLength": 1}
  }
}
