CryptOS-PKI v1.0.0 (GOLD) — product-level target. Scope: FM enrollment (slice B), FM write paths/CSR (slice D), pre-GOLD live validation, documentation. Bare-metal + enrollment protocols are post-1.0.