{
  "schema": "resilq.icarus.audit-job/v0.1",
  "method": "POST",
  "path": "/intakes/webhook/pqc-audit",
  "audit": "critical-infra-pilot",
  "targets": [
    "10.0.0.0/24",
    "edge.example.lt"
  ],
  "creds": "vault://prod/ssh",
  "layers": [
    "transit",
    "use",
    "rest"
  ],
  "layer_detail": {
    "transit": [
      "tls",
      "ssh",
      "dnssec",
      "certs",
      "http_headers"
    ],
    "use": [
      "openssl",
      "jwt",
      "hsm",
      "runtime"
    ],
    "rest": [
      "luks",
      "tde",
      "backups",
      "kms"
    ]
  },
  "callback": "https://resilq.example/callback",
  "sla": "72h",
  "idempotency_key": "rqmod:critical-infra-pilot",
  "evidence": {
    "signed": true,
    "outputs": [
      "json",
      "cbom",
      "pdf"
    ]
  },
  "safety": {
    "local_changes": "forbidden",
    "read_only": true
  }
}