StellaOps:
  Crypto:
    Registry:
      ActiveProfile: cn-soft
      PreferredProviders:
        - cn.sm.soft
      Profiles:
        cn-soft:
          PreferredProviders:
            - cn.sm.soft
    SmSoft:
      RequireEnvironmentGate: true
      # Optional seed keys (PKCS#8 DER/PEM)
      Keys: []
    # Note: This SM profile is software-only (non-certified). Set SM_SOFT_ALLOWED=1 to enable.