Publish Chimera GFX source

docs/approvals/phase-0.9-one-shot-execution-template.md

@@ -0,0 +1,64 @@
+# Phase 0.9 future one-shot execution approval template
+
+Status: **TEMPLATE ONLY — NOT AUTHORIZED**.
+
+This template can be considered only after a separately approved switch,
+durable post-switch identity verification and human review. It is bound to one
+component and one manual execution. It does not authorize transfer,
+installation, lifecycle-probe execution, autoload, retry or another component.
+
+<!-- BEGIN PHASE09_ONE_SHOT_EXECUTION_TEMPLATE -->
+```json
+{
+  "template_only": true,
+  "template_action": "one_shot_execution",
+  "authorized": false,
+  "installation_authorized": false,
+  "execution_authorized": false,
+  "transfer_authorized": false,
+  "lifecycle_authorized": false,
+  "automatic_retry": false,
+  "required_fields": {
+    "exact_user_statement": null,
+    "active_task_id": null,
+    "authorization_issued_at": null,
+    "authorization_expires_at": null,
+    "device_identity": null,
+    "firmware_exact": null,
+    "component": null,
+    "exact_action": null,
+    "maximum_execution_count": null,
+    "maximum_runtime_ms": null,
+    "live_artifact_id": null,
+    "live_source_commit": null,
+    "live_size": null,
+    "live_sha256": null,
+    "live_mount_id": null,
+    "live_object_id": null,
+    "post_switch_verification_evidence": null,
+    "verified_backup_identity": null,
+    "independent_recovery_executor": null,
+    "success_criteria": null,
+    "stop_conditions": null,
+    "cleanup_contract": null,
+    "reporting_contract": null,
+    "revocation_method": null,
+    "reviewer": null
+  },
+  "fixed_exclusions": {
+    "transfer": true,
+    "installation": true,
+    "second_execution": true,
+    "second_component": true,
+    "lifecycle_probe": true,
+    "autoload": true,
+    "automatic_retry": true,
+    "graphics": true,
+    "retroarch": true
+  }
+}
+```
+<!-- END PHASE09_ONE_SHOT_EXECUTION_TEMPLATE -->
+
+The template itself is not a request and is not permission. Phase 0.9A does
+not ask for execution approval.