A record discovered through a configured provider; executable recovery options require validation.
Configured provider's display name.
Provider and record identifiers, without a signing secret.