{
  "$schema": "https://finance.entelekron.org/schemas/key-ceremony-control-profile.schema.json",
  "schemaVersion": "1.0.0",
  "controlPlaneId": "tvk-group:entelekron-financial-infrastructure",
  "canonicalAssetId": "tvk-group:tvkusd",
  "profileId": "tvkusd-key-ceremony-prelaunch-v1",
  "status": "no-production-key-ceremony",
  "asOf": "2026-08-14T00:00:00Z",
  "keyManagementProvider": null,
  "hsmProvider": null,
  "mpcProvider": null,
  "acceptedEnvironments": [],
  "publicSignerRegistry": [],
  "activeProductionKeyCount": 0,
  "completedCeremonies": [],
  "recoveryShareCount": 0,
  "ceremonyRequirements": {
    "minimumDistinctHumanRoles": 3,
    "minimumIndependentWitnesses": 2,
    "requiredRoles": ["key-custodian", "security-witness", "operations-witness"],
    "approvedFacilityOrRemoteCeremonyStandardRequired": true,
    "providerAndDeviceAttestationRequired": true,
    "readableKeyPurposeRequired": true,
    "environmentAndNetworkScopeRequired": true,
    "quorumAndThresholdApprovalRequired": true,
    "tamperEvidentRecordRequired": true,
    "independentPostCeremonyVerificationRequired": true
  },
  "keyMaterialBoundary": {
    "rawPrivateKeyExportPermitted": false,
    "seedPhraseGenerationPermitted": false,
    "privateKeyInApplicationMemoryPermitted": false,
    "privateKeyInLogsOrEvidencePermitted": false,
    "singleDeviceFullKeyPermitted": false,
    "unencryptedBackupPermitted": false,
    "operatorScreenCapturePermitted": false,
    "publicPrivateKeyMaterialPermitted": false
  },
  "lifecycle": {
    "rotationPolicyApproved": false,
    "rotationIntervalDays": null,
    "revocationProcedureApproved": false,
    "recoveryProcedureApproved": false,
    "destructionProcedureApproved": false,
    "lastRecoveryTestAt": null
  },
  "cryptographicAgility": {
    "algorithmPolicyApproved": false,
    "approvedAlgorithms": [],
    "postQuantumMigrationPlanApproved": false,
    "currentChainsClaimedQuantumSafe": false
  },
  "authority": {
    "aiCanGenerateProductionKey": false,
    "aiCanReceiveRecoveryShare": false,
    "aiCanChangeQuorum": false,
    "singleOperatorCanCreateActivateOrRecoverKey": false,
    "softwareChangeAloneCanActivateSigner": false
  },
  "notice": "No production key, signer, HSM, MPC provider, recovery share or ceremony is represented as existing. This profile publishes controls, never secret key material."
}