{
  "memo_id": "01K4LOGIN00000000000000001",
  "memo_version": 1,
  "question": "Log into Payroll-Prod as Bernd Worsch in tenant ACME?",
  "requested_act": "login",
  "binding_level": "organizational",
  "brief": "You are entering Payroll-Prod. Sessions are recorded. Privileges at the gate are identity-scoped, not hat-scoped.",
  "locale": "en",
  "ui_release": "informed-decision@0.4.0",
  "packet": [],
  "highlights": [],
  "binding": {
    "principal": {
      "id": "01K4PERSONBERND00000000001",
      "kind": "person",
      "display_name": "Bernd Worsch",
      "role": "employee",
      "identifiers": [
        { "scheme": "email", "value": "bernd.worsch@example.com" },
        { "scheme": "idp:oidc-sub", "value": "auth.example.com|bernd" }
      ]
    },
    "available_identities": [
      {
        "id": "01K4PERSONBERND00000000001",
        "kind": "person",
        "display_name": "Bernd Worsch",
        "identifiers": [
          { "scheme": "idp:oidc-sub", "value": "auth.example.com|bernd" }
        ]
      },
      {
        "id": "01K4PERSONBERNDADMIN000001",
        "kind": "person",
        "display_name": "Bernd Worsch (break-glass)",
        "identifiers": [
          { "scheme": "idp:oidc-sub", "value": "auth.example.com|bernd-bg" }
        ]
      }
    ],
    "target": {
      "kind": "tenant",
      "id": "tenant:acme",
      "label": "ACME Corp",
      "environment": "prod",
      "requires_new_bind": true
    },
    "available_bind_scopes": [
      {
        "kind": "tenant",
        "id": "tenant:acme",
        "label": "ACME Corp",
        "environment": "prod",
        "requires_new_bind": true
      },
      {
        "kind": "tenant",
        "id": "tenant:beta",
        "label": "Beta GmbH",
        "environment": "prod",
        "requires_new_bind": true
      }
    ],
    "granted_at_bind": {
      "roles": ["authenticated"],
      "permissions": ["session.create"]
    },
    "terms": {
      "monitoring": true,
      "consent_code": "LOGIN-PROD-2026"
    }
  }
}