Interface ConfigProvenanceEntry

One minimized provenance record for one approved configuration key alias.

Every string is an application-approved display alias — never a raw key name, never a file path, and never a value. origin names the producer of the final value; sourceAlias is present only when the origin is file AND the configured file path was explicitly approved. expanded reports that the key's already-loaded raw string contained the ${NAME} expansion grammar; referenceAliases carries the approved aliases of the keys it referenced (references with unapproved endpoints are omitted, never named). overriddenSourceAliases carries the approved aliases of the sources this key's value displaced, in displacement order. No field ever carries a value, a value hash, a value length, or an absolute path.