The configured HSM adapter (a simulator until a validated device is wired)

Verified bank staff with cards:read observe the registry; opening a ceremony, entering a component, personalising a card and unlocking a PIN take the narrow cards:security:write and a step-up in the last five minutes, never cards:write. Approving another member of staff's ceremony adds cards:security:approve. The maker never approves their own ceremony and never enters a component. Both HSM adapters are simulators and are refused in prod. Both adapters identify themselves as simulators.