This commit is contained in:
@@ -0,0 +1,15 @@
|
||||
# Phase 1.0BR: script-entrypoint one-shot gate
|
||||
|
||||
Status: `EXACT_SCRIPT_ENTRYPOINT_AUTHORIZED_ONCE_SDL_ONLY`
|
||||
|
||||
Date: 2026-07-29
|
||||
|
||||
The exact argument-free BQ entrypoint is source-audited and hash bound. It adds
|
||||
only the repository import root, calls the already bound `run_once` exactly
|
||||
once and prints JSON. The production output paths remain absent.
|
||||
|
||||
BR grants one new materialization attempt through the script path, without an
|
||||
inline shell expression. This is a separately reviewed permission, not a retry.
|
||||
Any failure consumes it. No cleanup, resume or automatic retry is permitted.
|
||||
The scope ends at the retained SDL archive; RetroArch and every PS5 action stay
|
||||
unauthorized.
|
||||
Reference in New Issue
Block a user