: If a critical service fails under V06.1.1, you can temporarily set an environment variable KEY_DEFINE_COMPAT_MODE=V06.0.0 , which instructs the parser to ignore new fields but log warnings. This is a transitional feature and will be removed in V07.0.0.
keyDefineVersion: "V06.1.1" keyId: "svc-payment-gateway-primary" type: "symmetric" algorithm: "AES-256-GCM" status: "active" createdAt: "2025-03-15T10:00:00Z" expiresAt: "2025-03-18T10:00:00Z" rotationPolicy: intervalHours: 72 overlapMinutes: 30 scope: services: ["payment-api", "fraud-detection"] environments: ["production", "staging"] accessControl: readPrincipals: ["payment-svc@prod.iam", "audit-svc@prod.iam"] writePrincipals: ["key-rotation-cron@prod.iam"] valueEncrypted: "7b3d8f2a9c... (ciphertext)" signature: "sha256=9f2c8e1b4a6d..." Key Define V06.1.1