{"banner":"SHIELD/ATLAS Configuration Manager — Centralized Environment Variable Registry","summary":{"total":24,"configured":9,"missingRequired":1,"missingRequiredVars":["AI_INTEGRATIONS_OPENAI_API_KEY"],"configuredPct":38,"byCategory":[{"category":"Database","total":1,"configured":1,"missing":[]},{"category":"Server","total":2,"configured":2,"missing":[]},{"category":"AI Providers","total":4,"configured":3,"missing":["AI_INTEGRATIONS_OPENAI_API_KEY"]},{"category":"Security","total":2,"configured":2,"missing":[]},{"category":"Sensors","total":3,"configured":1,"missing":[]},{"category":"Infrastructure","total":2,"configured":0,"missing":[]},{"category":"Google Cloud","total":4,"configured":0,"missing":[]},{"category":"Hardware","total":1,"configured":0,"missing":[]},{"category":"Performance","total":2,"configured":0,"missing":[]},{"category":"Deployment","total":2,"configured":0,"missing":[]},{"category":"Voice","total":1,"configured":0,"missing":[]}]},"validation":{"valid":false,"errors":["MISSING REQUIRED: AI_INTEGRATIONS_OPENAI_API_KEY — OpenAI GPT-4o API key (primary, US-origin, GSAR 552.239-7001)"],"warnings":["No distributed broker configured (REDIS_URL or KAFKA_BROKERS) — using LocalAdapter (single-node only)","FAA NOTAM credentials not configured — NOTAM ingestion disabled"]},"variables":[{"key":"DATABASE_URL","category":"Database","description":"PostgreSQL connection string","required":true,"sensitive":true,"configured":true,"source":"environment","defaultValue":null,"validValues":null,"currentValue":"***REDACTED***"},{"key":"PORT","category":"Server","description":"HTTP server listen port","required":false,"sensitive":false,"configured":true,"source":"environment","defaultValue":"5000","validValues":null,"currentValue":"5000"},{"key":"NODE_ENV","category":"Server","description":"Runtime environment","required":false,"sensitive":false,"configured":true,"source":"environment","defaultValue":"development","validValues":["development","production","test"],"currentValue":"production"},{"key":"AI_INTEGRATIONS_OPENAI_API_KEY","category":"AI Providers","description":"OpenAI GPT-4o API key (primary, US-origin, GSAR 552.239-7001)","required":true,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"AI_INTEGRATIONS_OPENROUTER_API_KEY","category":"AI Providers","description":"OpenRouter API key for GPT-4o/Gemini/Perplexity","required":true,"sensitive":true,"configured":true,"source":"environment","defaultValue":null,"validValues":null,"currentValue":"***REDACTED***"},{"key":"AI_INTEGRATIONS_OPENROUTER_BASE_URL","category":"AI Providers","description":"OpenRouter API base URL","required":true,"sensitive":false,"configured":true,"source":"environment","defaultValue":null,"validValues":null,"currentValue":"https://openrouter.ai/api/v1"},{"key":"OPENAI_API_KEY","category":"AI Providers","description":"OpenAI API key (direct access)","required":false,"sensitive":true,"configured":true,"source":"environment","defaultValue":null,"validValues":null,"currentValue":"***REDACTED***"},{"key":"ATLAS_JWT_SECRET","category":"Security","description":"JWT signing secret for ATLAS auth","required":true,"sensitive":true,"configured":true,"source":"environment","defaultValue":null,"validValues":null,"currentValue":"***REDACTED***"},{"key":"ATLAS_OWNER_CODES","category":"Security","description":"Comma-separated owner authorization codes","required":false,"sensitive":true,"configured":true,"source":"environment","defaultValue":"FLOOD2026","validValues":null,"currentValue":"***REDACTED***"},{"key":"AIS_STREAM_API_KEY","category":"Sensors","description":"AISStream.io WebSocket API key for global vessel tracking","required":false,"sensitive":true,"configured":true,"source":"environment","defaultValue":null,"validValues":null,"currentValue":"***REDACTED***"},{"key":"FAA_NOTAM_CLIENT_ID","category":"Sensors","description":"FAA NOTAM API client ID","required":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"FAA_NOTAM_CLIENT_SECRET","category":"Sensors","description":"FAA NOTAM API client secret","required":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"REDIS_URL","category":"Infrastructure","description":"Redis connection URL for distributed event bus and state","required":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"KAFKA_BROKERS","category":"Infrastructure","description":"Comma-separated Kafka broker addresses","required":false,"sensitive":false,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"GOOGLE_CLIENT_ID","category":"Google Cloud","description":"Google OAuth2 client ID","required":false,"sensitive":false,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"GOOGLE_CLIENT_SECRET","category":"Google Cloud","description":"Google OAuth2 client secret","required":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"GOOGLE_SERVICE_ACCOUNT_KEY","category":"Google Cloud","description":"Google service account JSON key","required":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"SDR_POLL_INTERVAL_MS","category":"Hardware","description":"SDR USB device polling interval in milliseconds","required":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"3000","validValues":null,"currentValue":"3000"},{"key":"ATLAS_BACKPRESSURE_THRESHOLD","category":"Performance","description":"Query queue backpressure threshold","required":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"50","validValues":null,"currentValue":"50"},{"key":"ATLAS_CACHE_TTL_MS","category":"Performance","description":"Database query cache TTL in milliseconds","required":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"30000","validValues":null,"currentValue":"30000"},{"key":"PRODUCTION_DOMAIN","category":"Deployment","description":"Production domain for CORS and redirects","required":false,"sensitive":false,"configured":false,"source":"default","defaultValue":"secureassure.app","validValues":null,"currentValue":"secureassure.app"},{"key":"ELEVENLABS_API_KEY","category":"Voice","description":"ElevenLabs API key for studio TTS","required":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"GMAIL_REFRESH_TOKEN","category":"Google Cloud","description":"Gmail OAuth refresh token for outbound mail","required":false,"sensitive":true,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null},{"key":"PUBLIC_BASE_URL","category":"Deployment","description":"Public site origin (default https://secureassure.app)","required":false,"sensitive":false,"configured":false,"source":"missing","defaultValue":null,"validValues":null,"currentValue":null}],"secretsManagement":{"current":"Environment variables (EC2 .env / GitHub Actions secrets)","roadmap":"HashiCorp Vault integration planned for FedRAMP High baseline","compliance":"All secrets injected at runtime, never stored in code or version control"}}