Variable: KeyStoreModuleFacts

const KeyStoreModuleFacts: TObject<{ library: TOptional<TObject<{ loadMs: TInteger; path: TString; }>>; session: TOptional<TObject<{ slot: TOptional<TString>; tokenLabel: TString; }>>; token: TOptional<TObject<{ firmware: TOptional<TString>; manufacturer: TString; model: TString; serial: TString; }>>; }>

Defined in: packages/contracts/src/schemas/key-store.ts:240

What a key-store run learnt of the module, as facts rather than sentences: the library, the token credential holds its session on, and the token's identity (SetupStepRun.module). The engine copies them from the probe's reply so that the console shows a path or a label without reading them back out of a check's evidence, which is prose and free to change.

What it is not: a verdict. Whether the session may be used, and whether the identity is the one asserted, are the checks' to say. Each member is absent when the reply did not carry it, and the whole is absent when credential did not answer.