{
  "lesson_id": "SEC-012",
  "lab_id": "SEC012-LAB1",
  "artifact": "At-Rest Encryption & Key Boundary Record v1",
  "must_preserve_negative_evidence": true,
  "changed_context_transfer_required": true,
  "owner_acceptance_must_be_blank": true,
  "real_key_material_forbidden": true,
  "custom_crypto_forbidden": true,
  "external_target_forbidden": true,
  "network_forbidden": true,
  "external_key_manager_forbidden": true,
  "production_proof_forbidden": true
}