{
  "schema_version": "0.1.0",
  "catalogue_status": "discovery_inventory",
  "authority": "Evidence-derived inventory; not a final implementation-governing SSOT. Preserve source modality and consult conflicts.json.",
  "category": "key_types_hierarchy_profiles",
  "description": "Key types, suggested profiles, parent-child minting, and recursive delegation shape.",
  "items": [
    {
      "id": "type.primary",
      "name": "Primary Author",
      "kind": "key_type",
      "description": "Branch administrator/root that may author, issue credentials, manage narrower descendants, and by default mint Secondary, Use, and Keyring Keys.",
      "modality": "suggested_default",
      "sources": [
        {
          "file": "docs/seed/Default_Key_Profiles.txt",
          "lines": "2-37"
        }
      ],
      "defaults": {
        "mint_primary": false,
        "mint_secondary": true,
        "mint_use": true,
        "mint_keyring": true,
        "max_additional_primary": 0,
        "max_active_secondary": 20,
        "max_active_use": 100,
        "max_active_keyring": 10,
        "max_delegation_depth": 3
      }
    },
    {
      "id": "type.secondary",
      "name": "Secondary Author",
      "kind": "key_type",
      "description": "Scoped publisher/issuer with scoped authoring, messaging, sharing, Use/Keyring minting, descendant reading, and direct-child suspension defaults.",
      "modality": "suggested_default",
      "sources": [
        {
          "file": "docs/seed/Default_Key_Profiles.txt",
          "lines": "39-57"
        }
      ],
      "defaults": {
        "mint_primary": false,
        "mint_secondary": false,
        "mint_use": true,
        "mint_keyring": true,
        "max_delegation_depth": 1
      }
    },
    {
      "id": "type.use",
      "name": "Use Key",
      "kind": "key_type",
      "description": "Operational leaf with exact actions/scope, short expiry, and no default delegation, policy administration, descendant audit, or branch suspension.",
      "modality": "suggested_default",
      "sources": [
        {
          "file": "docs/seed/Default_Key_Profiles.txt",
          "lines": "58-75"
        }
      ],
      "suggested_max_lifetime": "30 days"
    },
    {
      "id": "type.keyring",
      "name": "Keyring Key",
      "kind": "key_type",
      "description": "Custody leaf for scoped encrypted packages and metadata, without inherited operational authority.",
      "modality": "suggested_default",
      "sources": [
        {
          "file": "docs/seed/Default_Key_Profiles.txt",
          "lines": "77-87"
        },
        {
          "file": "docs/seed/Permissions_Catalogue.txt",
          "lines": "313-341"
        }
      ]
    },
    {
      "id": "hierarchy.minting",
      "name": "Minting hierarchy",
      "kind": "delegation_model",
      "description": "One-parent recursive hierarchy with no upward minting; defaults disable PA→PA, SA→SA, Use→Use, and Keyring→Keyring unless described exceptions apply.",
      "modality": "recommendation",
      "sources": [
        {
          "file": "docs/seed/Minting_Hierarchy.txt",
          "lines": "1-17"
        },
        {
          "file": "docs/seed/Minimum_Database_Model.txt",
          "lines": "44"
        }
      ],
      "matrix": {
        "Owner": {
          "Primary": "yes",
          "Secondary": "normally_through_primary",
          "Use": "normally_through_primary",
          "Keyring": "normally_through_primary"
        },
        "Primary": {
          "Primary": "optional",
          "Secondary": "yes",
          "Use": "yes",
          "Keyring": "yes"
        },
        "Secondary": {
          "Primary": "no",
          "Secondary": "optional",
          "Use": "yes",
          "Keyring": "yes"
        },
        "Use": {
          "Primary": "no",
          "Secondary": "no",
          "Use": "optional_narrower_but_default_disabled",
          "Keyring": "no"
        },
        "Keyring": {
          "Primary": "no",
          "Secondary": "no",
          "Use": "no",
          "Keyring": "optional_narrower_but_default_disabled"
        }
      }
    }
  ]
}