{
  "incident_id": "KEYCAPE-EXPOSURE-20260823-01",
  "status": "pending",
  "secret_ref": {
    "namespace": "sso",
    "name": "keycape-config",
    "uid": "2e94519d-1550-41c7-9701-2efe47fe1fd3",
    "resource_version": "51326531"
  },
  "runtime_anchor": {
    "deployment": "keycape",
    "generation": 25,
    "observed_generation": 25,
    "ready": 1,
    "available": 1,
    "image": "key-cape:mfa-client-20260809",
    "issuer": "https://kc.coulomb.social",
    "jwks_kid": "key-1",
    "jwks_sha256": "8e3237da6030c6af91c5005d0112a149204bc549f67d2234939c5581fdb95a32"
  },
  "strategy": {
    "signing": "pending-keycape-ack",
    "predecessor_jwt": "reject-after-cutover",
    "forward_only": true
  },
  "post_rotation_observation": {
    "jwks_kid": "key-1",
    "jwks_sha256": "c6faac5dfeef2453daf9cfc14671f62b535dd321befdf6014e3ee5c2cf1f1156",
    "observed_at": "2026-08-23",
    "source_revision_binding": "93704fd2424503007c20b458b62a7f7d994bb288",
    "downstream_refresh_confirmation": "keycape-authelia-lldap-privacyidea-identity-provisioner-ready-1-1"
  },
  "revisions": {
    "key_cape": "93704fd2424503007c20b458b62a7f7d994bb288",
    "net_kingdom": "REQUIRED",
    "railiance_platform": "453fed3"
  },
  "window": {
    "starts_at": "2026-08-23T15:00:00+02:00",
    "ends_at": "2026-08-23T15:30:00+02:00",
    "max_minutes": 30
  },
  "operators": {
    "driver": "user",
    "abort": "root-admin"
  },
  "acknowledgements": {
    "key_cape_message_id": "05b49688-76a8-4be9-a00d-95408c798697",
    "net_kingdom_message_id": "71b1008a-7fd7-4500-85c6-e8893a6d80d4"
  },
  "authorization": {
    "human_go": true,
    "provider_writes": false,
    "secret_apply": false,
    "predecessor_revocation": false
  }
}