{
  "name": "secrets-vault",
  "version": "1.0.0",
  "defaults": {
    "VAULT_ROOT": "~/infrastructure/vault",
    "AGE_KEY_DIR": "~/.config/sops/age",
    "AGE_KEYS_FILE": "~/.config/sops/age/keys.txt",
    "DRY_RUN": "1",
    "REQUIRE_CONFIRM": "1",
    "CONFIRM_PHRASE": "I UNDERSTAND THIS WILL CREATE A SECRETS VAULT"
  },
  "phases": {
    "preflight": [
      "00_preflight.sh"
    ],
    "vault": {
      "plan": [
        "10_plan.sh"
      ],
      "apply": [
        "11_apply.sh"
      ],
      "rollback": [
        "rollback/undo_last_changes.sh"
      ]
    },
    "verify": [
      "90_verify.sh"
    ],
    "report": [
      "99_report.sh"
    ]
  },
  "checks": {
    "tools": [
      "checks/check_tools.sh"
    ],
    "policy": [
      "checks/check_policy.sh"
    ],
    "ciphertext": [
      "checks/check_ciphertext.sh"
    ]
  },
  "eu_compliance": {
    "data_residency": "EU",
    "jurisdiction": "Ireland",
    "gdpr_applicable": true
  }
}