677 B
677 B
Phase 1.0BR: script-entrypoint one-shot gate
Status: EXACT_SCRIPT_ENTRYPOINT_AUTHORIZED_ONCE_SDL_ONLY
Date: 2026-07-29
The exact argument-free BQ entrypoint is source-audited and hash bound. It adds
only the repository import root, calls the already bound run_once exactly
once and prints JSON. The production output paths remain absent.
BR grants one new materialization attempt through the script path, without an inline shell expression. This is a separately reviewed permission, not a retry. Any failure consumes it. No cleanup, resume or automatic retry is permitted. The scope ends at the retained SDL archive; RetroArch and every PS5 action stay unauthorized.