{
  "schema": "router-step-release-v1",
  "step_id": "STEP_050M07P23D_R02_VM121_PRODUCTION_CREDENTIAL_KEY_BOUNDARY",
  "revision": "R02",
  "workflow_contract_version": 2,
  "canonical_zip_required": true,
  "classification": "class_b_vm121_production_credential_key_boundary",
  "functional_stage": "p2_3d_production_credential_master_key_foundation",
  "source_of_truth": "VM121 Machine Git ae3248d60c77b588918f1d330cc53b8f32d886c8 tree 4083cc0983b9ecf3549ad334fa939b0559467d56 file_count 45 plus PASS P23D R01 retained runtime facts",
  "source_changed": true,
  "runtime_impact": true,
  "live_database_written": false,
  "database_schema_changed": false,
  "runtime_provisioning_active": false,
  "external_onboarding_active": false,
  "production_master_key_created": true,
  "production_secret_path_selected": true,
  "reboot_required": false,
  "snapshot_required": false,
  "worker_entry": "scripts/run-step.sh",
  "exact_worker_fixture": "tests/exact-worker.sh",
  "mandatory_fixture_count": 6,
  "target_package_path": "payload/p23d-r02-target-package.tar.gz",
  "target_package_sha256": "67ab0a7e45033ac6fefbccce1d77c0d071d59ae984c45981298cbcaa4e10662b",
  "expected_installer_sha256": "4b15cd6a015c9affb366340f942be349637b001dfccacf56597be966211774a0",
  "target_environment_matrix": "reference/target-environment.tsv",
  "path_ownership_manifest": "reference/path-ownership.tsv",
  "vm121_base_commit": "ae3248d60c77b588918f1d330cc53b8f32d886c8",
  "vm121_base_tree": "4083cc0983b9ecf3549ad334fa939b0559467d56",
  "vm121_expected_tree": "86e95cd2009466266a338a548cea5e3b6122a2bd",
  "vm121_base_file_count": 45,
  "vm121_expected_file_count": 46,
  "keyring_path": "/opt/wg-access/runtime/credential-keyring.json",
  "keyring_schema": "wg-paid-credential-keyring-v1",
  "protected_backup_root": "/root/router-ops-backups/p23d-credential-keyring",
  "next_action": "P23E wire the installed production keyring loader into credential service; no public onboarding yet"
}