{
  "external_nfs": {
    "concerns": {
      "backup": {
        "kind": "disabled",
        "reason": "NFS share contents captured by per-consumer BackupPolicy at workspace level"
      },
      "certs": {
        "kind": "disabled",
        "reason": "no ACME issuer required"
      },
      "dns": {
        "kind": "disabled",
        "reason": "no DNS records owned by this component"
      },
      "observability": {
        "backlog_ref": "OBS-001",
        "kind": "pending",
        "reason": "ObservabilityImpl iteration deferred — surface stub only"
      },
      "security": {
        "backlog_ref": "SEC-001",
        "kind": "pending",
        "reason": "SecurityImpl iteration deferred — surface stub only"
      },
      "tls": {
        "kind": "disabled",
        "reason": "NFS protocol; no TLS termination at this layer"
      }
    },
    "ip": "{{network_private_ip}}",
    "live_check": {
      "scope": "target",
      "service": "nfs-server",
      "strategy": "systemd"
    },
    "mode": "taskserv",
    "net": "$net",
    "operations": {
      "delete": true,
      "health": true,
      "install": true,
      "reinstall": true
    },
    "shared": "/shared"
  }
}