Publish Chimera GFX source

docs/approvals/phase-0.9e-r-y2jb-deployed-use-attestation.md

@@ -0,0 +1,57 @@
+# Phase 0.9E-R Y2JB deployed-use operator attestation
+
+Status: `UNATTESTED_TEMPLATE`
+
+This template records a future operator statement. It is not device evidence,
+runtime verification, permission, or approval. Do not add secrets, PS5
+addresses, account identifiers, signed download URLs, or credentials.
+
+```yaml
+schema_version: 1
+phase: PHASE_0_9E_R_Y2JB_DEPLOYED_USE_ATTESTATION
+attested: false
+attestation_date: null
+operator: null
+
+outer_zip:
+  file_name: null
+  sha256: null
+  size: null
+  obtained_from: null
+  installation_date_exact_or_estimated: null
+  installation_date_is_estimate: null
+  restore_or_install_method: null
+  firmware_at_restore_or_install: null
+
+subsequent_changes:
+  another_y2jb_backup_applied: null
+  download0_dat_replaced_separately: null
+  youtube_or_appdata_changed: null
+  external_autoloader_used: null
+  external_autoloader_identity: null
+
+host_sender:
+  tool_name: null
+  path_or_source: null
+  version_or_commit: null
+  sha256: null
+  default_port: null
+  ports_actually_selected: []
+
+classification_when_completed: OPERATOR_ATTESTED_DEPLOYED_USE
+runtime_verified: false
+
+device_action_authorized: false
+target_build_authorized: false
+execution_authorized: false
+installation_authorized: false
+transfer_authorized: false
+lifecycle_authorized: false
+autoload_authorized: false
+device_write_authorized: false
+automatic_retry: false
+```
+
+An incomplete or completed statement never changes `runtime_verified` and
+never authorizes a device action. Any later use requires a separate review and
+artifact-specific authorization.