{
  "democratic_csi": {
    "access_mode": "ReadWriteMany",
    "allow_volume_expansion": false,
    "concerns": {
      "backup": {
        "kind": "disabled",
        "reason": "state in K8s API + NFS server backend; PVCs captured by per-component policies"
      },
      "certs": {
        "kind": "disabled",
        "reason": "no ACME issuer required"
      },
      "dns": {
        "kind": "disabled",
        "reason": "no DNS records owned by this component"
      },
      "observability": {
        "backlog_ref": "OBS-001",
        "kind": "pending",
        "reason": "ObservabilityImpl iteration deferred — surface stub only"
      },
      "security": {
        "backlog_ref": "SEC-001",
        "kind": "pending",
        "reason": "SecurityImpl iteration deferred — surface stub only"
      },
      "tls": {
        "kind": "disabled",
        "reason": "controller-level RBAC, not TLS endpoint"
      }
    },
    "live_check": {
      "scope": "cp_only",
      "strategy": "k8s_pods"
    },
    "nfs_server": "",
    "nfs_share_base_path": "/shared",
    "operations": {
      "delete": true,
      "health": true,
      "install": true,
      "reinstall": true
    },
    "reclaim_policy": "Retain",
    "storage_class_name": "democratic-csi-nfs",
    "version": "0.14.6"
  }
}