VC-I-3 — Software fallback issuer key (PEM file) readable

Component: vc Platform. Mitigations: Plaintext at rest; documented risk. Action: Prohibit software fallback keys in production; require HSM mode per GEN-7.5-02

Property	Value
Section	Information Disclosure
Owner	platform

Mapped Controls

Control	Title
SID-KEY-02	IACA Certificate Management

---

Source: STRIDE analysis (April 2026), architecture/stride-threat-model.md