Publish Chimera GFX source

docs/approvals/phase-0.9b-observer-execution-template.md

@@ -0,0 +1,76 @@
+# Phase 0.9B future observer execution template
+
+Status: **TEMPLATE ONLY — NOT AUTHORIZED — BLOCKED**.
+
+This file cannot authorize an action. There is no observer artifact to bind,
+and the startup/exit and output-channel gates are blocked. Every
+request-specific value is deliberately empty. Editing, signing, copying,
+committing or pushing this template does not grant permission.
+
+<!-- BEGIN PHASE09B_OBSERVER_EXECUTION_TEMPLATE -->
+```json
+{
+  "template_only": true,
+  "phase": "0.9B",
+  "action": "one_shot_observer_execution",
+  "status": "BLOCKED",
+  "authorized": false,
+  "transfer_authorized": false,
+  "execution_authorized": false,
+  "installation_authorized": false,
+  "lifecycle_authorized": false,
+  "autoload_authorized": false,
+  "backup_creation_authorized": false,
+  "automatic_retry": false,
+  "observer_only": true,
+  "required_fields": {
+    "exact_user_statement": null,
+    "active_task_id": null,
+    "authorization_issued_at": null,
+    "authorization_expires_at": null,
+    "device_identity": null,
+    "firmware_exact": null,
+    "firmware_source_one": null,
+    "firmware_source_two": null,
+    "observer_build_id": null,
+    "observer_source_commit": null,
+    "observer_size": null,
+    "observer_sha256": null,
+    "toolchain_identity": null,
+    "runtime_path": null,
+    "allowed_observations": null,
+    "allowed_read_paths": null,
+    "output_channel": null,
+    "maximum_runtime_ms": null,
+    "maximum_execution_count": null,
+    "stop_criteria": null,
+    "reviewer": null
+  },
+  "fixed_exclusions": {
+    "device_address": true,
+    "installation": true,
+    "lifecycle": true,
+    "autoload": true,
+    "automatic_retry": true,
+    "backup_creation": true,
+    "file_mutation": true,
+    "process_or_service_mutation": true,
+    "listener_creation": true,
+    "kernelwrite": true,
+    "graphics": true,
+    "sdl": true,
+    "retroarch": true
+  },
+  "blocking_facts": [
+    "OBSERVER_STARTUP_OR_EXIT_ABI_UNPROVEN",
+    "NO_PROVEN_NON_PERSISTENT_OUTPUT_CHANNEL",
+    "OBSERVER_ARTIFACT_ABSENT"
+  ]
+}
+```
+<!-- END PHASE09B_OBSERVER_EXECUTION_TEMPLATE -->
+
+A future request would need a new active-task authorization bound to one exact
+artifact, device, firmware, output channel, observation plan, runtime,
+one execution and expiration. That later request still could not authorize
+installation, lifecycle, backup creation, autoload or retry.