false, 'workspace_enabled' => false, 'client_package' => null, 'client_package_sha256' => null, // Explicit, separately approved source tenant ->8085 principal/target scope. No automatic mappings. 'connections' => [], ];