the config that turns it on, as a LIKE prefix over config.name; null needs none
the module or runtime feature
what a reader calls it
what the project intends; the audit compares it against what is there
Optionalreasonrequired whenever the posture is dormant-by-design; this is the decision being recorded
Optionaltowhat an operator would have to do to activate it, shown on the ops surface
one capability and the decision recorded about it