# Phase 1.0BR: script-entrypoint one-shot gate

Status: `EXACT_SCRIPT_ENTRYPOINT_AUTHORIZED_ONCE_SDL_ONLY`

Date: 2026-07-29

The exact argument-free BQ entrypoint is source-audited and hash bound. It adds
only the repository import root, calls the already bound `run_once` exactly
once and prints JSON. The production output paths remain absent.

BR grants one new materialization attempt through the script path, without an
inline shell expression. This is a separately reviewed permission, not a retry.
Any failure consumes it. No cleanup, resume or automatic retry is permitted.
The scope ends at the retained SDL archive; RetroArch and every PS5 action stay
unauthorized.