chimera-gfx-Public/docs/approvals/phase-0.9-staging-template.md

Phase 0.9 future staging approval template

Status: TEMPLATE ONLY — NOT AUTHORIZED.

This template could bind one future inactive candidate-staging action. It cannot authorize a live switch, installation, execution, lifecycle, autoload, retry or a second component.

{
  "template_only": true,
  "template_action": "staging",
  "authorized": false,
  "installation_authorized": false,
  "execution_authorized": false,
  "transfer_authorized": false,
  "lifecycle_authorized": false,
  "automatic_retry": false,
  "required_fields": {
    "exact_user_statement": null,
    "active_task_id": null,
    "authorization_issued_at": null,
    "authorization_expires_at": null,
    "device_identity": null,
    "firmware_exact": null,
    "component": null,
    "exact_action": null,
    "maximum_action_count": null,
    "maximum_runtime_ms": null,
    "candidate_artifact_id": null,
    "candidate_source_commit": null,
    "candidate_size": null,
    "candidate_sha256": null,
    "staging_path": null,
    "staging_mount_id": null,
    "staging_inactive_proof": null,
    "verified_backup_identity": null,
    "verified_backup_sha256": null,
    "candidate_reopen_and_rehash_contract": null,
    "allowed_persistent_effects": null,
    "forbidden_effects": null,
    "cleanup_contract": null,
    "stop_conditions": null,
    "revocation_method": null,
    "reviewer": null
  },
  "fixed_exclusions": {
    "live_switch": true,
    "installation": true,
    "execution": true,
    "second_component": true,
    "lifecycle_probe": true,
    "autoload": true,
    "automatic_retry": true,
    "graphics": true,
    "retroarch": true
  }
}

A candidate hash or offline build record alone never authorizes staging.