{
  "version": "1.0.0",
  "skill": "operator-bootstrap",
  "description": "Node A foundation for sovereign EU infrastructure",
  "parameters": {
    "required": [
      "OPERATOR_NAME",
      "OPERATOR_EMAIL",
      "DOMAIN",
      "CF_ACCOUNT_ID"
    ],
    "optional": {
      "NODE_NAME": "node-a",
      "GITOPS_ROOT": "~/infrastructure",
      "SSH_KEY_COMMENT": "node-a-operator",
      "GPG_KEY_SIZE": 4096,
      "GPG_KEY_EXPIRE": "2y",
      "TUNNEL_NAME": "node-a-tunnel",
      "ENABLE_KATE": true
    }
  },
  "phases": {
    "preflight": ["00_preflight.sh"],
    "identity": {
      "plan": ["01_identity_plan.sh"],
      "apply": ["02_identity_apply.sh"],
      "rollback": ["rollback/undo_identity.sh"]
    },
    "secrets": {
      "guide": ["10_secrets_guide.sh"],
      "interactive": true
    },
    "tunnel": {
      "plan": ["20_tunnel_plan.sh"],
      "apply": ["21_tunnel_apply.sh"],
      "rollback": ["rollback/undo_tunnel.sh"]
    },
    "gitops": {
      "plan": ["30_gitops_plan.sh"],
      "apply": ["31_gitops_apply.sh"],
      "rollback": ["rollback/undo_gitops.sh"]
    },
    "editor": ["40_editor_setup.sh"],
    "verify": ["90_verify.sh"],
    "report": ["99_report.sh"]
  },
  "checks": {
    "identity": ["check_gpg.sh", "check_ssh.sh"],
    "secrets": ["check_pass.sh"],
    "tunnel": ["check_tunnel.sh"],
    "gitops": ["check_gitops.sh"]
  },
  "rollback_order": [
    "undo_tunnel.sh",
    "undo_gitops.sh",
    "undo_ssh_config.sh",
    "undo_identity.sh"
  ],
  "eu_compliance": {
    "data_residency": "EU",
    "jurisdiction": "Ireland",
    "gdpr_applicable": true
  }
}