/**
 * Privacy module constants — single source of truth (RD-2).
 *
 * idle_timeout_ms is intentionally fixed at 15 minutes (matches banking-app
 * defaults). The privacy_config.idle_timeout_ms column exists in the schema
 * for a future settings UI, but Phase 1 never writes to it — the constant
 * here is what the client reads.
 *
 * Re-open trigger for RD-2: an explicit user request for configurability,
 * or a government RFP mandating a configurable session timeout.
 */

export const PRIVACY_IDLE_TIMEOUT_MS = 15 * 60 * 1000; // 900 000 ms
export const PRIVACY_PBKDF2_ITERATIONS = 600000;
export const PRIVACY_HMAC_LABEL = 'madarx-privacy-v1';
