{
  "relying_party": {
    "name": "MAKNOW Synthetic RP",
    "rp_id": "login.example.test",
    "expected_origin": "https://login.example.test"
  },
  "ceremony_policy": {
    "user_verification": "required",
    "challenge_ttl_seconds": 120,
    "server_generates_challenge": true,
    "challenge_single_use": true,
    "verify_origin": true,
    "verify_rp_id": true
  },
  "synthetic_account": {
    "user_handle": "user-synth-004",
    "credential_id": "cred-synth-001",
    "credential_registered": true,
    "public_key_material": "SYNTHETIC_PUBLIC_KEY_ONLY",
    "private_key_location": "VIRTUAL_AUTHENTICATOR_ONLY_NO_SECRET_EXPORTED"
  },
  "challenges": {
    "registration": {
      "expected": "reg-challenge-004",
      "issued_at": 1000,
      "expires_at": 1120,
      "used": false
    },
    "authentication": {
      "expected": "auth-challenge-004",
      "issued_at": 2000,
      "expires_at": 2120,
      "used": false
    }
  },
  "recovery_policy": {
    "approved_paths": [
      "backup_authenticator",
      "supervised_identity_proofing_reenrollment"
    ],
    "materially_weaker_shortcuts": [
      "email_only_link"
    ],
    "revoke_or_supersede_lost_credential_on_reenrollment": true,
    "risk_based_decision_required": true
  },
  "record_fields": [
    "Ceremony",
    "RP ID",
    "Origin",
    "Challenge State",
    "Credential ID",
    "User Verification Policy",
    "Server Verification Result",
    "Recovery Path",
    "Negative Probe",
    "Evidence",
    "Residual Decision"
  ]
}