| 1 | { |
| 2 | "scope": "Complete supported maintenance dispatch needed by Oficina provisioning; no live invocation until all approved launch gates are implemented and reviewed", |
| 3 | "base": "006e7825", |
| 4 | "current_slice": "Strict private launch codec and inert Linux subprocess supervisor; no worker mounting", |
| 5 | "authority": "Decoded context is metadata only. It cannot construct a retained lease, executor, lifecycle claim, approval or trusted invocation.", |
| 6 | "remaining": [ |
| 7 | "Native cgroup/lease integration evidence for reviewed subprocess supervisor", |
| 8 | "Retained worker lease/executor and closed-checkpoint preparation proof", |
| 9 | "Home startup adapter binding signed input, image, descriptors and opened database", |
| 10 | "Owner-reviewed prepare/approval/status/result/retry/resume CLI and console workflow", |
| 11 | "Private encrypted request/result publication with authenticated worker provenance", |
| 12 | "Integrated native tests and Fable review before worker mounting", |
| 13 | "Preview owner-approved provisioning, restore drill, and public gateway cutover" |
| 14 | ], |
| 15 | "verification": [ |
| 16 | "Required closed fields and exact numeric ranges", |
| 17 | "Canonical timestamps, identifiers and binding digests", |
| 18 | "UTF-8 and surrogate validity", |
| 19 | "8KiB hard limit and overflow detection", |
| 20 | "Nested v2 checkpoint evidence bindings", |
| 21 | "No command mounting or execution authority from decoded bytes", |
| 22 | "Focused race tests for descendants, expired-lease termination, exact private input and descriptor/environment isolation", |
| 23 | "Fable approved codec at 01b82bde; supervisor refusal preserved and fixes awaiting re-review" |
| 24 | ] |
| 25 | } |
| 26 | |