chimera-gfx-Public/docs/approvals/phase-0.9b-observer-execution-template.md

Phase 0.9B future observer execution template

Status: TEMPLATE ONLY — NOT AUTHORIZED — BLOCKED.

This file cannot authorize an action. There is no observer artifact to bind, and the startup/exit and output-channel gates are blocked. Every request-specific value is deliberately empty. Editing, signing, copying, committing or pushing this template does not grant permission.

{
  "template_only": true,
  "phase": "0.9B",
  "action": "one_shot_observer_execution",
  "status": "BLOCKED",
  "authorized": false,
  "transfer_authorized": false,
  "execution_authorized": false,
  "installation_authorized": false,
  "lifecycle_authorized": false,
  "autoload_authorized": false,
  "backup_creation_authorized": false,
  "automatic_retry": false,
  "observer_only": true,
  "required_fields": {
    "exact_user_statement": null,
    "active_task_id": null,
    "authorization_issued_at": null,
    "authorization_expires_at": null,
    "device_identity": null,
    "firmware_exact": null,
    "firmware_source_one": null,
    "firmware_source_two": null,
    "observer_build_id": null,
    "observer_source_commit": null,
    "observer_size": null,
    "observer_sha256": null,
    "toolchain_identity": null,
    "runtime_path": null,
    "allowed_observations": null,
    "allowed_read_paths": null,
    "output_channel": null,
    "maximum_runtime_ms": null,
    "maximum_execution_count": null,
    "stop_criteria": null,
    "reviewer": null
  },
  "fixed_exclusions": {
    "device_address": true,
    "installation": true,
    "lifecycle": true,
    "autoload": true,
    "automatic_retry": true,
    "backup_creation": true,
    "file_mutation": true,
    "process_or_service_mutation": true,
    "listener_creation": true,
    "kernelwrite": true,
    "graphics": true,
    "sdl": true,
    "retroarch": true
  },
  "blocking_facts": [
    "OBSERVER_STARTUP_OR_EXIT_ABI_UNPROVEN",
    "NO_PROVEN_NON_PERSISTENT_OUTPUT_CHANNEL",
    "OBSERVER_ARTIFACT_ABSENT"
  ]
}

A future request would need a new active-task authorization bound to one exact artifact, device, firmware, output channel, observation plan, runtime, one execution and expiration. That later request still could not authorize installation, lifecycle, backup creation, autoload or retry.