{
  "description": "Bounded credential-free record page aligned with the pin-records attribute. Echo the query correlation token in the message header.",
  "type": "object",
  "properties": {
    "items": {
      "type": "array",
      "maxItems": 100,
      "items": {
        "description": "Endpoint-scoped PIN metadata without credentials. TEMPORARY requires both validity timestamps; PERMANENT forbids them. Provisioning status is distinct from observation freshness.",
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "minLength": 1
          },
          "name": {
            "type": "string"
          },
          "kind": {
            "type": "string",
            "enum": [
              "PERMANENT",
              "TEMPORARY"
            ]
          },
          "validFrom": {
            "type": "string",
            "format": "date-time"
          },
          "validUntil": {
            "type": "string",
            "format": "date-time"
          },
          "provisioningStatus": {
            "type": "string",
            "enum": [
              "PENDING",
              "APPLIED",
              "FAILED"
            ]
          }
        },
        "required": [
          "id",
          "name",
          "kind",
          "provisioningStatus"
        ],
        "additionalProperties": false,
        "title": "SecurityPinRecord"
      }
    },
    "nextToken": {
      "type": "string",
      "minLength": 1,
      "description": "Opaque continuation bound to endpoint, caller and query; omitted on the final page."
    }
  },
  "required": [
    "items"
  ],
  "additionalProperties": false
}