{
  "mandate_id": "<FILL: your id>",
  "request_id": "<FILL: copy from request>",
  "action": "<FILL: copy exactly from request>",
  "resource": "<FILL: copy exactly from request>",
  "ttl_minutes": "<FILL: integer 1-60, not above request>",
  "issued_at": "<FILL: UTC YYYY-MM-DDTHH:MM:SSZ>",
  "expires_at": "<FILL: UTC, issued_at + ttl at most>",
  "nonce": "<FILL: fresh random string, never reused>",
  "one_time": true,
  "signer_role": "<FILL: your human role, e.g. security_owner>",
  "signer_name": "<FILL: your name>",
  "signed_by_human": "<FILL: true only if YOU, a human, decided>",
  "signature_note": "<FILL: how you signed/approved, e.g. ticket id or out-of-band confirmation>"
}