{
  "schema": "hsimc.private-workspace-contract.v0.4",
  "artifact": "HRI-HSIMC-EPERSON-STABLE-LOGIN-P1-005",
  "milestone": "Register once -> Activate once -> Stable Login -> Private Work Space -> Reality Continue -> Reality Compute",
  "human_entry": "https://mail.hsimc.tech/{alias}/",
  "registration_entry": "https://mail.hsimc.tech/registration/",
  "activation_entry": "https://mail.hsimc.tech/activate/",
  "canonical_identity": "HSIMC_EPERSON_ID_PLUS_MAIL_ADDRESS_ID",
  "mailbox_transport": "SEPARATE_FUTURE_BINDING",
  "public_registration_authority": "REQUESTED_ONLY",
  "operator_authority": [
    "ADDRESS_RESERVED",
    "AUTHORIZED_FOR_WORKSPACE",
    "BROWSER_ACTIVATION_CHALLENGE_APPROVAL",
    "LOGIN_CHALLENGE_RECOVERY_APPROVAL",
    "CONTROLLED_WORK_COMPUTATION_IMPORT",
    "REVOKE"
  ],
  "private_session": {
    "access_cookie": "Secure HttpOnly SameSite=Strict",
    "access_hours": 12,
    "refresh_cookie": "Secure HttpOnly SameSite=Strict",
    "refresh_days": 30,
    "refresh_rotation": true,
    "refresh_plaintext_persisted": false,
    "authority": "PRIVATE_ACCESS_ONLY_NOT_WORK_EXECUTION_AUTHORITY"
  },
  "workspace": {
    "required_views": [
      "EPERSON_ADDRESS",
      "MAIL_TRANSPORT_STATE",
      "WORK",
      "REALITY_CONTINUE",
      "REALITY_COMPUTE",
      "AUTHORITY_STATE",
      "EVIDENCE_EVENTS"
    ],
    "mail_inbox_state": "TRANSPORT_PENDING_UNTIL_MAIL_BINDING",
    "reality_continue_state": "CONTINUED_AS_WORK_CANDIDATE",
    "work_authority_state": "UNRESOLVED",
    "work_computation_state": "COMPUTED_CANDIDATE_GRAPH_NOT_EXECUTABLE",
    "work_computation_authority": "UNRESOLVED"
  },
  "canary": {
    "alias": "kickoff001",
    "type": "INTERNAL_NON_PERSON_CANARY",
    "m365_transport": "NONE"
  },
  "boundaries": [
    "NO_M365_EPERSON_MAILBOX_PROVISIONING_REQUIRED_FOR_LOGIN",
    "NO_PASSWORD_LOGIN",
    "NO_BULK_REGISTRATION",
    "PRIVATE_ACCESS_IS_NOT_WORK_AUTHORITY",
    "LOGIN_PROOF_IS_NOT_WORK_AUTHORITY",
    "COMPUTATION_IS_NOT_EXECUTION",
    "NO_AUTOMATIC_WORK_EXECUTION",
    "MAIL_PROOF_ADAPTER_NOT_ENABLED_BY_CORE_DEPLOYMENT"
  ],
  "version": "0.4",
  "activation": {
    "canonical_real_user_path": "ONE_TIME_BROWSER_CHALLENGE_HASH_APPROVAL_REDEEM",
    "browser_secret_server_visibility": "HASH_ONLY_UNTIL_REDEEM",
    "request_status_credential": "NOT_AN_ACTIVATION_AUTHORITY",
    "legacy_one_time_access_token": "CONTROLLED_RECOVERY_ONLY",
    "repeat_login": "NOT_ACTIVATION"
  },
  "work_computation": {
    "schema": "hsimc.work-computation.v0.1",
    "visibility": "PRIVATE_WORKSPACE_ONLY",
    "writer": "CONTROLLED_REVIEWED_IMPORT",
    "readiness": "INDEPENDENT_DIMENSIONS_NO_MAGIC_PERCENTAGE",
    "branch_authority_inheritance": false,
    "execution_allowed": false,
    "public_mcp_projection": false
  },
  "login_entry": "https://mail.hsimc.tech/login/",
  "login": {
    "registration_repeated_on_login": false,
    "activation_repeated_on_login": false,
    "same_browser_path": "ROTATING_DEVICE_REFRESH",
    "no_saved_device_path": "ACTIVE_EPERSON_LOGIN_CHALLENGE",
    "login_challenge_minutes": 10,
    "proof_code_plaintext_persisted": false,
    "reverse_otp_mail_target": "security@hsimc.tech",
    "reverse_otp_mail_proof": "CORE_PREPARED_ADAPTER_NOT_ENABLED",
    "account_identifier": "X@hsimc.tech_STABLE_EPERSON_ADDRESS",
    "authentication_channel": "SEPARATE_BOUND_REVOCABLE_CHANNEL",
    "login_is_authority": false
  }
}