{
  "status": "INPUT_REQUIRED",
  "unset": [
    "Manager HTTPS origin",
    "Event endpoint (same Manager host)",
    "serverId/account/login password",
    "Manager public CA and approved fingerprint",
    "local PostgreSQL and Redis credentials",
    "Redis reader account and allowed Manager IP",
    "control/relay tokens",
    "TLS key/certificate and enrollment/session files"
  ],
  "approval_required": [
    "proposed disk paths/root SSD use",
    "local sudo for NVIDIA runtime setup and Docker restart",
    "target installation and conversion",
    "Gateway/Redis host port exposure"
  ],
  "notes": [
    "lan_public is only 192.168.30.0/24; clients behind another subnet require explicit review.",
    "Do not copy test ARP rules, login sessions, tokens, certificates, reader passwords or camera registrations."
  ]
}