Variable: SetupKeyStoreAnswers

const SetupKeyStoreAnswers: TObject<{ expectedManufacturer: TOptional<TString>; expectedModel: TOptional<TString>; }>

Defined in: packages/contracts/src/setup-answers.ts:518

The keyStore section: what the operator asserts about the security module, and nothing else (.claude/plans/setup-wizard.md, DW24). The key-store step sends it in its probe, and credential compares it with what its own token reports. Under production at least one of the two is required, or the step's session check fails.

What it is not: a description of the module. The library, the token and the PIN are credential's own configuration (keyCustodian.pkcs11), which is what the step proves; the setup service loads no library and holds no PIN, so the answers name neither. No step of the wizard writes this section (SETUP_STEPS): the installer's file holds it.