package hostclaim

import "time"

// SignedRoster preserves the authenticated enrollment key on operation replacement.
// It is the original root-signed envelope, not a console's reconstructed roster.
type RetirementEvidenceRef struct {
	SourceObligationID string    `json:"source_obligation_id,omitempty"`
	InstallationStamp  uint64    `json:"installation_stamp,omitempty"`
	WriterSession      uint64    `json:"writer_session,omitempty"`
	Kind               string    `json:"kind"`
	Box                string    `json:"box"`
	Enrollment         string    `json:"enrollment"`
	OperationID        string    `json:"operation_id"`
	ObligationID       string    `json:"obligation_id"`
	Key                string    `json:"key"`
	SHA256             string    `json:"sha256"`
	SignatureSHA256    string    `json:"signature_sha256,omitempty"`
	SignedRoster       []byte    `json:"signed_roster,omitempty"`
	EvidenceAt         time.Time `json:"evidence_at"`
}