Publish Chimera GFX source

docs/approvals/phase-1.0n-write-free-one-shot-template.md

@@ -0,0 +1,39 @@
+# Phase 1.0N one-shot approval template — inactive
+
+This is a review checklist, not authorization. Its tracked JSON companion is
+permanently inactive and contains no device address, port or run ID.
+
+Current state:
+
+```text
+authorized=false
+consumed=false
+ps5_connection_authorized=false
+device_transfer_authorized=false
+device_execution_authorized=false
+result_receive_authorized=false
+installation_authorized=false
+autoload_authorized=false
+device_write_authorized=false
+automatic_retry=false
+protocol_activation_authorized=false
+run_id=null
+target=null
+port=null
+```
+
+Any later approval must be newly issued by Jens and bind exactly:
+
+- `retroarch_ps5_write_diag.elf`;
+- size `1845208`;
+- SHA-256 `c99a0856309a357ad2667d89b4924e4063ad214cae09c8a419457b0732f583cd`;
+- firmware `9.60`;
+- protocol `CHD10J01`, version 1, 64-byte frames;
+- scope `EXACT_ONE_SHOT_PHASE_1_0N`;
+- one explicit target, port, timeout and unique run ID;
+- exactly one connection, transfer, execution and result reception.
+
+It must keep installation, autoload, device write, retry, reconnect, resume and
+automatic reboot false. The approval must remain outside tracked repository
+paths and agree with a separately reviewed active manifest. This template
+grants nothing; consumed Phase-1.0K and all earlier permissions do not carry.