A local copy of:
current policies
revocation flags
key usage limits
validity windows
session-key constraints
This allows offline execution.
Root hash →
policies_root
.