Share-preference toggles exposed to assistant-key callers (the daemon).

Each toggle is accompanied by the version and timestamp of the consent the owner accepted, so the daemon can tell which policy version a preference was recorded against. The versioned legal-consent fields (ToS, privacy policy, AI data sharing) are intentionally excluded — the daemon only needs the share preferences.

Released daemons parse the share toggles as strict booleans, so this projection must stay additive: telemetry is opt-out, so a never-chosen (null) value is coerced to True (enabled by default) and the explicit-choice fact is surfaced separately via the *_chosen fields. PII trace eligibility is unaffected by the coercion: it also requires share_diagnostics_accepted_version, which is reported as "" until an explicit diagnostics value is recorded — even if a version-only write stamped one — so a never-chose owner can never pass the daemon's trace-disclosure gate.