Publish Chimera GFX source

docs/approvals/phase-0.9-backup-creation-template.md

@@ -0,0 +1,69 @@
+# Phase 0.9 future backup-creation approval template
+
+Status: **TEMPLATE ONLY — NOT AUTHORIZED**.
+
+This template is for one possible future backup-creation change window for one
+component. It cannot authorize observation collection, staging, switch,
+installation, execution, lifecycle, autoload, retry or a second component.
+
+<!-- BEGIN PHASE09_BACKUP_CREATION_TEMPLATE -->
+```json
+{
+  "template_only": true,
+  "template_action": "backup_creation",
+  "authorized": false,
+  "installation_authorized": false,
+  "execution_authorized": false,
+  "transfer_authorized": false,
+  "lifecycle_authorized": false,
+  "automatic_retry": false,
+  "required_fields": {
+    "exact_user_statement": null,
+    "active_task_id": null,
+    "authorization_issued_at": null,
+    "authorization_expires_at": null,
+    "device_identity": null,
+    "firmware_exact": null,
+    "component": null,
+    "exact_action": null,
+    "maximum_action_count": null,
+    "maximum_runtime_ms": null,
+    "live_path": null,
+    "live_mount_id": null,
+    "live_object_id": null,
+    "live_type": null,
+    "live_size": null,
+    "live_sha256": null,
+    "backup_path": null,
+    "backup_mount_id": null,
+    "minimum_free_bytes_and_metadata_reserve": null,
+    "reopen_and_rehash_contract": null,
+    "target_mapping": null,
+    "independent_recovery_executor": null,
+    "second_independent_recovery_path": null,
+    "allowed_persistent_effects": null,
+    "forbidden_effects": null,
+    "cleanup_contract": null,
+    "stop_conditions": null,
+    "revocation_method": null,
+    "reviewer": null
+  },
+  "fixed_exclusions": {
+    "staging": true,
+    "switch": true,
+    "installation": true,
+    "execution": true,
+    "second_component": true,
+    "lifecycle_probe": true,
+    "autoload": true,
+    "automatic_retry": true,
+    "graphics": true,
+    "retroarch": true
+  }
+}
+```
+<!-- END PHASE09_BACKUP_CREATION_TEMPLATE -->
+
+The exact current live identity and separate backup destination must be filled
+from later admissible evidence. A stock reference hash does not fill this
+template. The Payload Manager backup hard gate remains open.