{
  "systems": [
    {
      "id": "demo-app",
      "name": "Demo App",
      "client_binding": {
        "issuer": "https://keycape.example/realms/netkingdom",
        "client_id": "demo-app"
      }
    }
  ],
  "subjects": [
    {
      "id": "demo-app-profile",
      "type": "Human",
      "display_name": "Readback contract profile (declares caller-supplied keys)",
      "groups": [
        "app-users"
      ],
      "claims": {
        "assurance": {
          "level": "aal2",
          "mfa": true
        }
      }
    }
  ]
}