evidence: close live activation hardening candidate

governance: harden single-owner live activation
feat(governance): add fail-closed live activation
2026-07-29 12:30:10 +08:00 · 2026-07-29 12:28:37 +08:00 · 2026-07-29 11:27:04 +08:00 · 2026-07-29 04:00:00 +08:00
64 changed files with 3512 additions and 5311 deletions
@@ -1,83 +0,0 @@
-{
-  "approval_request_branch": "governance/request/integration-refresh-control-plane-deployment-20260728T093428Z",
-  "approval_type": "CONTROL_PLANE_DEPLOYMENT_APPROVAL_REQUEST",
-  "authorization_lineage": {
-    "execution_renewal_merge_oid": "3a22c3c7d86930efd4bd93ac05d80ad322050cb9",
-    "grant_id": "grant-11354281aafdd074df5899a3925dd2a0370cffa9edb06f5c7d7227ce8de00d91",
-    "source_mapping_approval_merge_oid": "9514062cf33e45941abe4a8c98377e0713b0b3f6"
-  },
-  "deployment_status": "NOT_EXECUTED",
-  "evidence": {
-    "control_plane_artifact": {
-      "path": "/var/lib/aios-integration-refresh-source-writer-v2/artifacts/control-plane-patch-112d995545e3e79126a062b2643a9f0c17ae7bd4.tar",
-      "sha256": "bf101ade1aaf956f40c0bba74ed4b347f5f38d0de6a0c1b7694ae107c4b43c14",
-      "size_bytes": 13363200
-    },
-    "rendered_systemd_config_sha256": "182a3cba48e752798cf24323a8c0249c53d7386371388a8db0435a29c43dc969",
-    "rollback_artifact": {
-      "path": "/var/lib/aios-gitops/runtime/tasks/AIOS-INTEGRATION-REFRESH-PROVISIONER-IMPLEMENTATION-20260726/implementation/rollback-to-85426f4f570e4d40b212318d47e52e4aed5cb06a.tar",
-      "sha256": "f12a2a95e475da5d02eaff99e93615cb0186019ca30edae013ab054a2c6418ce"
-    },
-    "source_map": {
-      "path": "docs/autonomous-release/INTEGRATION_REFRESH_SOURCE_MAP_20260728.json",
-      "sha256": "01ddd56cfa2a525559e2d174cf7df117a9465ffce44ef25bc7a15b8e74d06bf5"
-    },
-    "test_evidence": {
-      "collection_errors": 0,
-      "path": "/var/lib/aios-gitops/runtime/tasks/AIOS-INTEGRATION-REFRESH-PROVISIONER-IMPLEMENTATION-20260726/implementation/test-evidence.json",
-      "sha256": "d8933553f56462a3f1b3040dec989ff0adf717a17728d55ba0fe9e127d93c206",
-      "tests_failed": 0,
-      "tests_passed": 41
-    }
-  },
-  "execution_conditions": {
-    "candidate_only": true,
-    "integration_unchanged": true,
-    "main_unchanged": true,
-    "no_credentials_or_secrets_in_request": true,
-    "production_baseline_unchanged": true,
-    "registry_unchanged": true
-  },
-  "expected_governance_base_oid": "3a22c3c7d86930efd4bd93ac05d80ad322050cb9",
-  "expires_at": "2026-07-28T21:34:28Z",
-  "implementation": {
-    "commit_oid": "112d995545e3e79126a062b2643a9f0c17ae7bd4",
-    "tree_oid": "4ed88399fb8e7e4c235413ebbd783c9b6ad3c624"
-  },
-  "implementation_branch": "patch/integration-refresh-grant-provisioner-20260726",
-  "issued_at": "2026-07-28T09:34:28Z",
-  "prohibited_operations": [
-    "production-baseline.write",
-    "production-tag.write",
-    "main.write",
-    "integration.write",
-    "registry.write",
-    "force-push",
-    "direct-main-push",
-    "direct-tag-write"
-  ],
-  "repository": "aios/aios",
-  "request_status": "PENDING_HUMAN_APPROVAL",
-  "requested_operations": [
-    "control-plane.candidate.deploy",
-    "control-plane.candidate.verify",
-    "control-plane.candidate.rollback"
-  ],
-  "required_controls": [
-    "Two distinct human approvals, one Codex and one GPT, both APPROVED against the same current approval-request PR head.",
-    "Re-verify artifact, test evidence, source map, rendered systemd configuration, and rollback artifact paths and SHA-256 digests immediately before execution.",
-    "AIOS_GITOPS_WRITES_ENABLED=false throughout candidate deployment, verification, and rollback.",
-    "No force push, direct main write, or direct tag write."
-  ],
-  "required_reviewers": [
-    "codex",
-    "gpt"
-  ],
-  "schema": "aios.control-plane-deployment-approval-request/v1",
-  "target_governance": {
-    "approved_base_oid": "3a22c3c7d86930efd4bd93ac05d80ad322050cb9",
-    "binding_rule": "Human approvals must bind to the same approval-request PR head; its first parent must equal the active governance base."
-  },
-  "task_id": "AIOS-INTEGRATION-REFRESH-PROVISIONER-IMPLEMENTATION-20260726",
-  "validity_hours": 12
-}
@@ -1 +0,0 @@
-{"approved_evidence_ref":{"commit":"015185d7e5191d18c5c1596160807ac228782a0a","observed_at":"2026-08-08T10:46:49Z","path":"approvals/governance-policy/AIOS-AUTONOMOUS-MERGE-GOVERNANCE-SCOPE-EXTENSION-V1.preapproval-evidence.json"},"approved_semantic_digest":"ba15d512ed8c1f43e5f72c84125a3a71a7347ef59e18000bbfca24d6e69f1b19","approved_transport_digest":"8b3370add21cd23c2b4f41d8d84d3eaaa09ddf0451549b72c7941bbd92d5d60a","classification":"SNAPSHOT_SCHEMA_DRIFT","drift_source":"UNKNOWN","field_diff_artifact":"/var/lib/aios-gitops/runtime/tasks/AIOS-PROTECTION-SNAPSHOT-DRIFT-FORENSICS-V1/protection-drift/semantic-analysis.json","governance":{"direct_gitea_db_write":false,"force_push":false,"new_scope":false,"owner_pat_used":false,"protection_mutation":false},"legacy_schema":{"created_unix":"server_metadata","merge_whitelist_user_i_ds":"JSON_STRING_ARRAY","status_check_contexts":"JSON_STRING_ARRAY","updated_unix":"server_metadata"},"live_schema":{"created_at":"server_metadata","merge_whitelist_usernames":"TYPED_ARRAY","status_check_contexts":"TYPED_ARRAY","updated_at":"server_metadata"},"observed_semantic_digest":"ba15d512ed8c1f43e5f72c84125a3a71a7347ef59e18000bbfca24d6e69f1b19","observed_transport_digest":"d4d3652cbdf012b57d7e24a066325a4d0ca779a8ca24255e0d578c1bb0276d10","production":{"unchanged":true,"version":"V2R1C7"},"protection_identity":{"branch":"main","id":2},"repository_identity":{"repo_id":1,"repository":"aios/aios"},"request_id":"AIOS-PROTECTION-SEMANTIC-SNAPSHOT-RECONCILIATION-V1","schema":"aios.semantic-governance-reconciliation-evidence.v1","security_relevant_field_diff":"none","semantic_equal":true}
@@ -1 +0,0 @@
-{"existing_operation_rebindings":{"stage1":{"operation":"ADD_EXISTING_MACHINE_TO_MAIN_MERGE_WHITELIST","subject_user_id":153},"stage2":{"operation":"MIGRATE_LEGACY_OWNER_APPROVAL_GATE_TO_CAMPAIGN_APPROVAL_GATE"}},"new_governance_scope":false,"operation":"SEMANTIC_RECONCILIATION_REQUEST","original_governance_scope":{"pr54":{"head":"015185d7e5191d18c5c1596160807ac228782a0a","manifest_sha256":"1b11ee42d53a9f6c1646e5f5ddd8ce5b7ecf301483b9f3d47a068290d541ba4b","number":54,"owner_id":2,"review_id":104},"pr55":{"head":"9f98e15d37371af755c644d70575354099d21f76","number":55,"review_id":106}},"purpose":"migrate_execution_binding_schema_only","repository":"aios/aios","request_branch":"governance/request/protection-semantic-reconciliation-v1-20260808","request_id":"AIOS-PROTECTION-SEMANTIC-SNAPSHOT-RECONCILIATION-V1","schema":"aios.semantic-governance-reconciliation-manifest.v1","snapshot_reconciliation":{"approved_semantic_digest":"ba15d512ed8c1f43e5f72c84125a3a71a7347ef59e18000bbfca24d6e69f1b19","approved_transport_digest":"8b3370add21cd23c2b4f41d8d84d3eaaa09ddf0451549b72c7941bbd92d5d60a","canonicalizer_version":1,"classification":"SNAPSHOT_SCHEMA_DRIFT","drift_source":"UNKNOWN","observed_semantic_digest":"ba15d512ed8c1f43e5f72c84125a3a71a7347ef59e18000bbfca24d6e69f1b19","observed_transport_digest":"d4d3652cbdf012b57d7e24a066325a4d0ca779a8ca24255e0d578c1bb0276d10","protection_identity":{"id":2},"repository_identity":{"repo_id":1},"security_relevant_field_diff":"none","semantic_equal":true,"semantic_schema":"aios.semantic-protection.v1"},"stage1_predicate":{"branch":"main","mutation":{"add_merge_whitelist_user_id":153},"preserve_all_other_security_fields":true,"repository":"aios/aios","require":{"can_force_push":false,"can_push":false,"enable_status_check":true,"merge_whitelist_contains":[2],"merge_whitelist_not_contains":[153],"required_approvals":0},"semantic_precondition_digest":"ba15d512ed8c1f43e5f72c84125a3a71a7347ef59e18000bbfca24d6e69f1b19"},"stage2_predicate":{"mutation":{"add_required_context":"campaign-approval-gate","remove_required_context":"owner-approval-gate"},"preserve_all_other_security_fields":true,"require":{"campaign_active":true,"campaign_revoked":false,"can_force_push":false,"can_push":false,"merge_whitelist_contains":[2,153],"required_contexts_contains":["owner-approval-gate"],"required_contexts_not_contains":["campaign-approval-gate"]}},"target_branch":"governance/approvals"}
@@ -1,127 +0,0 @@
-{
-  "schema": "aios.governance-approval/v1",
-  "approval_type": "TASK_SCOPED_GOVERNANCE_BOOTSTRAP_POLICY_ACTIVATION",
-  "approval_plan_id": "AIOS-TSG-BS-PHASE-A-RENEWAL-20260731T081147Z",
-  "task_id": "AIOS-V2R1C4-TWO-STAGE-OWNER-CAMPAIGN-V2-PHASE-A-RENEWAL",
-  "repository": "aios/aios",
-  "issued_at": "2026-07-31T08:11:47Z",
-  "expires_at": "2026-07-31T20:11:47Z",
-  "expected_governance_base_oid": "ebd74398743e36523b593fcc395b73945d4924c5",
-  "expected_governance_base_tree_oid": "ad1255a1127204fad1d1208d8f31dc94fa64e6e1",
-  "approval_request_branch": "governance/request/two-stage-owner-campaign-v2-phase-a-renewal-20260731T081147Z",
-  "request_head_binding": "GITEA_EXACT_HEAD_REVIEW_POST_COMMIT",
-  "human_authorizer": "owner",
-  "authorization_mode": "GITEA_EXACT_HEAD_REVIEW",
-  "required_human_approvals": 1,
-  "allowed_human_approvers": [
-    "owner"
-  ],
-  "require_latest_head_approval": true,
-  "dismiss_stale_approvals": true,
-  "auto_merge_after_machine_gates": true,
-  "phase_a_scope": {
-    "schema_id": "TASK_SCOPED_GOVERNANCE_BOOTSTRAP",
-    "schema_version": 1,
-    "activate_schema_and_validator_only": true,
-    "phase_b_release_authorized": false,
-    "publisher_authorized": false,
-    "writer_authorized": false,
-    "credential_projection_authorized": false,
-    "tag_authorized": false,
-    "registry_authorized": false,
-    "baseline_authorized": false,
-    "production_deployment_authorized": false
-  },
-  "content_bindings": {
-    "schema_document": {
-      "path": "services/aios-single-owner-governance/task-scoped-governance-bootstrap-v1.schema.json",
-      "blob_oid": "9b117667c0d98f995ac059b0e1b5ffed06ca6444",
-      "sha256": "6ec912a96c8bac5c0d3c0a017abc078cb9567ed54dcb20bb0eadb5926ac54fdd"
-    },
-    "validator_policy": {
-      "path": "services/aios-single-owner-governance/aios_single_owner_governance/task_scoped_bootstrap.py",
-      "blob_oid": "c18d15f31340f19fc5da87944901bdfb867ab6dc",
-      "sha256": "de11123b5cd9ccdad4961f1d5d084a8c4a1b2270ce793652ab9c50bb95694eac"
-    },
-    "evidence_manifest": {
-      "path": "evidence/governance-policy/AIOS-TWO-STAGE-OWNER-CAMPAIGN-V2-PHASE-A-20260730T023551Z.json",
-      "blob_oid": "c3d215b3ea525a25de514c32c5aad91d47e140b4",
-      "sha256": "1b0a993940b41a4b16724b557f6abd8b6cebb56dc64cc8f813bd605b6a3399c2"
-    },
-    "checksums_manifest": {
-      "path": "evidence/governance-policy/AIOS-TWO-STAGE-OWNER-CAMPAIGN-V2-PHASE-A-20260730T023551Z.sha256",
-      "blob_oid": "45ed084234dae6a00e69a41cd4f716f46a97d9fb",
-      "sha256": "51c4b029c0792dc98d41f754e484ba3861cf7604443d9c5f289b3b0af768a41a"
-    }
-  },
-  "offline_candidate_bindings": {
-    "schema_seed_commit_oid": "8da47545a507cb798d3d6ab30ff8552a2d0a5ecf",
-    "schema_seed_tree_oid": "991e68577a469657c1c4996814b6634ce5ed752f",
-    "implementation_commit_oid": "a637a9dbb6e0021cb7dcf0d6b0ca00dfe10dce38",
-    "implementation_tree_oid": "bf6e0c16fcad7515465bec4aefdd2e77b1e9bef0",
-    "evidence_closure_commit_oid": "1e4885197f508f7921b148d71e545b3de0029b0a",
-    "evidence_closure_tree_oid": "e55cf9ef19d1c6804f161de54fd3395a06149807",
-    "source_diff_sha256": "c06d002db06da6cbf16f9c8321f1acbfd431f009b5127a13fd2cb5d63b278867",
-    "source_pathset_sha256": "5061402d516c0e9413208ce64e2b52f77d224e6eec1f7b07c5b3a10b58df5eaf",
-    "implementation_bundle_sha256": "15711b225b9ef41cca0588d21b2b95d7a95ac155efc27fcb8772c435fcdab147",
-    "evidence_bundle_sha256": "ec97b8460151fc0e7e7ea9ae044ca13a1543c4b79c41a437ef087d3b1c271857"
-  },
-  "runtime_dependency_bindings": {
-    "handoff_zip_sha256": "668239a549b4a2b2094fe9b5104b84703fe8ed75011fd8ed71ed3958a6dc0706",
-    "installed_wheel_sha256": "abbf616366eb3467d4e651bb5306e22ae5e931b613df5362a0892935c4a1c0c7",
-    "anchor_service": "aios-campaign-anchor.service",
-    "anchor_uid": 988,
-    "runner_uid": 986,
-    "anchor_database": "/var/lib/aios-campaign-anchor/anchor.sqlite3",
-    "anchor_socket": "/run/aios-campaign-anchor/anchor.sock",
-    "AIOS_GITOPS_WRITES_ENABLED": false
-  },
-  "required_machine_status_contexts": [
-    "governance/schema-contract",
-    "governance/validator-security",
-    "governance/fault-injection",
-    "governance/runtime-isolation",
-    "governance/authority-mirror"
-  ],
-  "allowed_operations_after_exact_head_owner_approval": [
-    "observe_governance_pr",
-    "wait_governance_gates",
-    "observe_governance_merge",
-    "observe_validator_activation",
-    "complete_policy_activation"
-  ],
-  "denied_operations": [
-    "main.write",
-    "integration.write",
-    "tag.write",
-    "registry.write",
-    "baseline.write",
-    "production.deploy",
-    "force_push",
-    "history_rewrite",
-    "governance.direct_push",
-    "approval.impersonate",
-    "publisher.create",
-    "writer.create",
-    "credential.project",
-    "phase_b.execute"
-  ],
-  "merge_constraints": {
-    "allowed_modes": [
-      "FAST_FORWARD_TO_APPROVED_HEAD",
-      "EXACT_TWO_PARENT_MERGE_WITH_APPROVED_TREE"
-    ],
-    "force": false,
-    "plus_refspec": false,
-    "tags": false,
-    "prune": false
-  },
-  "governance_declarations": {
-    "AIOS_GITOPS_WRITES_ENABLED": false,
-    "force_push_used": false,
-    "tag_rewritten": false,
-    "direct_main_push": false,
-    "secrets_committed": false,
-    "owner_approval_respected": true
-  }
-}
@@ -1,185 +0,0 @@
-{
-  "approval_type": "TASK_STATUS_MERGE_BROKER_BOOTSTRAP_RFC3339_FIX",
-  "schema_version": 2,
-  "repository": "aios/aios",
-  "expected_governance_base_oid": "8814dff20222625b60454c613b61ccf15fa20e51",
-  "request_branch": "patch/codex/AIOS-V2R1C4-BOOTSTRAP-RFC3339-OFFSET-FIX",
-  "target_ref": "refs/heads/governance/approvals",
-  "issued_at": "2026-08-01T02:50:00Z",
-  "expires_at": "2026-08-01T14:50:00Z",
-  "required_human_approvals": 1,
-  "allowed_human_approvers": ["owner"],
-  "require_latest_head_approval": true,
-  "approval_scopes": [
-    "BOOTSTRAP_FIX_APPROVAL",
-    "GITEA_INTERNAL_TOKEN_ROTATION_APPROVAL"
-  ],
-  "supersedes": {
-    "pr_number": 37,
-    "head_oid": "57697d81cf3d1fef23798ec390418efe8b64f4e9",
-    "tree_oid": "b58af1925318a0eefa6cc709e8d52ba57bb20d7f",
-    "reason": "APPROVED_BOOTSTRAP_RUNTIME_CONTRACT_MISMATCH",
-    "old_review_reusable": false,
-    "old_pr_immutable": true
-  },
-  "exact_head_binding": {
-    "method": "GITEA_EXACT_HEAD_OWNER_REVIEW_AND_PR_METADATA",
-    "head_oid_resolved_after_commit": true,
-    "tree_oid_resolved_after_commit": true,
-    "manifest_blob_oid_resolved_after_commit": true,
-    "manifest_sha256_resolved_after_commit": true,
-    "head_change_invalidates_review": true
-  },
-  "timestamp_contract": {
-    "id": "RFC3339_OFFSET_AWARE_V2",
-    "canonical_timezone": "UTC",
-    "raw_timestamp_preserved": true,
-    "naive_datetime_allowed": false,
-    "accepted_timezone_forms": ["Z", "+HH:MM", "-HH:MM"],
-    "fractional_seconds_allowed": true,
-    "lowercase_z_allowed": false,
-    "expiry_boundary": "REVIEW_MUST_BE_STRICTLY_BEFORE_EXPIRY"
-  },
-  "internal_token_rotation": {
-    "secret_class": "GITEA_INTERNAL_TOKEN",
-    "old_secret_fingerprint_algorithm": "SHA256",
-    "old_secret_fingerprint": "42e2af774700405ae32d55c98ca010fdb5da890b08f9e12e77372133c68e0562",
-    "old_secret_reference": "gitea-config://security/INTERNAL_TOKEN",
-    "affected_consumers": [
-      "gitea-config-residue:/data/aios-gitops/runtime/gitea-bin/custom/conf/app.ini.bak-20260706-auth-gitops",
-      "gitea-config:/data/aios-gitops/runtime/gitea-bin/custom/conf/app.ini",
-      "systemd-service:aios-gitea.service"
-    ],
-    "replacement_secret_reference": "systemd-credential-encrypted://gitea-internal-token-v2",
-    "rotation_method": "ATOMIC_REPLACE_THEN_REVOKE",
-    "rollback_plan_path": "evidence/governance/bootstrap-rfc3339-fix-20260801/ROLLBACK_PLAN.json",
-    "rollback_plan_sha256": "3283f4c3d6bb7f34ac893789f7e9f5df6c68b7807203e6f471ad92e8e007ff3f",
-    "audit_window_start": "2026-08-01T00:00:00Z",
-    "allowed_operations": [
-      "generate_replacement_internal_token_to_encrypted_runtime_credential",
-      "validate_replacement_internal_token_without_logging_plaintext",
-      "atomically_replace_exact_gitea_internal_token_config_value",
-      "restart_exact_aios_gitea_service",
-      "verify_exact_consumers_healthy",
-      "verify_old_internal_token_authentication_rejected",
-      "remove_or_redact_exact_old_secret_config_residue",
-      "audit_exposure_window",
-      "write_immutable_security_event_receipt"
-    ],
-    "access_token_table_exception_applicable": false,
-    "plaintext_secret_in_manifest_allowed": false,
-    "plaintext_secret_in_argv_allowed": false,
-    "plaintext_secret_in_logs_allowed": false,
-    "plaintext_secret_in_git_allowed": false
-  },
-  "phase_b": {
-    "approval_mode": "TWO_STAGE_REQUIRED",
-    "reason": "CURRENT_SCHEMAS_DO_NOT_ATOMICALLY_BIND_BOOTSTRAP_ACTIVATION_AND_FULL_TASK_SCOPED_RELEASE_PAYLOAD",
-    "old_pr_number": 36,
-    "old_head_oid": "a8644fc172bd8ebbba17a16e6bf586c93fd1e793",
-    "old_approval_reusable": false,
-    "successor_required_after_bootstrap_activation": true,
-    "frozen_release_objects_unchanged": true
-  },
-  "frozen_release_objects": {
-    "source_commit_oid": "1857b88690cd1c0119df984534c260b6f217a21a",
-    "source_tree_oid": "17c153de2338f570f70cb7407e7dda3c596b524b",
-    "evidence_closure_oid": "057f5923f72cdb8d002ae40bc0cd584961825801",
-    "evidence_tree_oid": "30be66d153fe9d3758f5fdba89ca4169beab38f8",
-    "git_bundle_sha256": "762e280e240988282bc2c2e65fafecedd596400ab6829016947e84559508a015",
-    "tag_oid": "7f82d77cf7702a6d695b4f0b74da7a9a9ecd7fa3",
-    "peeled_target_oid": "057f5923f72cdb8d002ae40bc0cd584961825801",
-    "release_artifact_sha256": "39523caa48f39b33e5e5df785bb568e0381d8b20301746c280442f73f294f2b2",
-    "rollback_artifact_sha256": "dd0dbbe21db14722996636347ea1d22917436c688d5f0b7055b5bfb1776c4d95",
-    "release_root_sha256": "16e4e881287cef4a02525a6a5b337d3e12995e510832fe04fea2ac196885f3ef",
-    "evidence_manifest_sha256": "3b0b72af400997385e817e9bec677942288f422b69c2d2b52a8a00407fc395e0"
-  },
-  "allowed_status_contexts": [
-    "aios/branch-protection",
-    "aios/evidence-closure",
-    "aios/secret-scan",
-    "aios/state-machine",
-    "aios/validator"
-  ],
-  "allowed_identities": ["codex", "gpt"],
-  "allowed_operations": [
-    "install_exact_approved_bootstrap_files",
-    "sign_task_grant_after_owner_exact_head_review",
-    "issue_task_status_credential",
-    "issue_task_merge_credential",
-    "publish_exact_five_statuses",
-    "fast_forward_only_merge",
-    "readback_status_and_ref",
-    "revoke_task_credentials",
-    "remove_credential_projection",
-    "sweep_completed_or_expired_task_credentials"
-  ],
-  "operation_limits": {
-    "maximum_status_writes_per_grant": 5,
-    "maximum_merges_per_grant": 1,
-    "maximum_grant_lifetime_seconds": 43200,
-    "automatic_revocation_required": true
-  },
-  "denied_operations": [
-    "branch_push_outside_request_branch",
-    "main_push",
-    "tag_write",
-    "registry_write",
-    "baseline_write",
-    "production_write",
-    "branch_protection_change",
-    "force_push",
-    "squash",
-    "rebase",
-    "merge_commit",
-    "approval_impersonation",
-    "commit_status_database_write",
-    "database_write_outside_exact_task_access_token_revocation",
-    "reuse_pr36_or_pr37_review",
-    "plaintext_secret_persistence"
-  ],
-  "runtime_controls": {
-    "global_gitops_writes_enabled": false,
-    "systemd_encrypted_credentials_required": true,
-    "systemd_projection_mode": "0440_ROOT_ROOT_CREDENTIALS_DIRECTORY_ONLY",
-    "systemd_gitea_token_embedded_name": "gitea-token",
-    "sqlite_parent_directory_metadata_write_required": true,
-    "sqlite_sibling_paths_read_only": true,
-    "sqlite_quota_journal_mode": "WAL",
-    "sqlite_quota_synchronous": "FULL",
-    "status_evidence_digest_bound_in_signed_grant": true,
-    "merge_method": "fast-forward-only",
-    "commit_status_database_write_allowed": false
-  },
-  "approved_files": {
-    "deploy/systemd/aios-task-credential-broker@.service": "95f8da02600b3c908013ffa723d79f6fca0c7a4332a077a7b673e97ce35bcd69",
-    "deploy/systemd/aios-task-credential-expiry-sweeper.service": "72a336523983b2486300c4e52f2f01dce392aaf6ffd953041c209d204df85717",
-    "deploy/systemd/aios-task-credential-expiry-sweeper.timer": "49ff9c80cbd0b44fd584dc7d29f4db0d042e33f325b1ed7af81a5be42f1cd011",
-    "deploy/systemd/aios-task-merge-broker@.service": "4e6b8fcf541f225e58ea080107fc30deb0c4ac9eac70217ff9e57081245c106a",
-    "deploy/systemd/aios-task-status-broker@.service": "378a2e8f658cb56cac5dcc151772ec6a00d86f6c1ce3106509b9aa87549dc9da",
-    "evidence/governance/bootstrap-rfc3339-fix-20260801/ROLLBACK_PLAN.json": "3283f4c3d6bb7f34ac893789f7e9f5df6c68b7807203e6f471ad92e8e007ff3f",
-    "evidence/governance/bootstrap-rfc3339-fix-20260801/TEST_SUMMARY.json": "c7d28139fddb9666e60fd62a9a27803dd00a1ebbccbbb75a5121cd8ed3d20fc2",
-    "services/aios-single-owner-governance/aios_single_owner_governance/task_credential_broker.py": "3b2fbbf2698a2d8385a2bf9eccdebbea629642908cbc7a1e8251476475e0d647",
-    "services/aios-single-owner-governance/aios_single_owner_governance/task_credential_expiry_sweeper.py": "8d383768eb0322c84a35282c126bee26a3e6419b125780424ffc7793a504efdf",
-    "services/aios-single-owner-governance/aios_single_owner_governance/task_status_merge_broker.py": "697d8deccdf2fec902dab38a0436075d78a95c1c5b410e115ee74cf79f477e63",
-    "services/aios-single-owner-governance/task-status-merge-grant-v1.schema.json": "34472624261203b5c1a215c141887ea3fed5d68fb3c503c7db2ad9a717862597",
-    "tests/single_owner_governance/test_task_status_merge_broker.py": "af1c5844ee0f7d6907f8cb68d5f503f3bdbd59bb05150e5364eaf7bf2b37be1a"
-  },
-  "aggregate_bindings": {
-    "broker_module_set_sha256": "c73ccaf8f60cf2446a5d4c0b4baf5456cb77961fda682285cb0a4f509ed49caa",
-    "systemd_definition_set_sha256": "3591be96f1717e7a0a57957aafbb233eec2b1617a8fb938889ccd312d812d066",
-    "grant_schema_sha256": "34472624261203b5c1a215c141887ea3fed5d68fb3c503c7db2ad9a717862597",
-    "test_summary_sha256": "c7d28139fddb9666e60fd62a9a27803dd00a1ebbccbbb75a5121cd8ed3d20fc2",
-    "python_executable_sha256": "e1efa562c2cc2e35521a5c9c9b9939921001ff8ca9708a13ef15ace68cc2ccd7"
-  },
-  "machine_gate_requirements": {
-    "compileall": "PASS",
-    "unit_tests": "PASS",
-    "rfc3339_offset_tests": "PASS",
-    "json_schema": "PASS",
-    "systemd_validation": "PASS",
-    "changed_path_secret_scan": "PASS",
-    "fault_injection": "PASS",
-    "scope_boundary_tests": "PASS"
-  }
-}
@@ -1,79 +0,0 @@
-{
-  "AIOS_GITOPS_WRITES_ENABLED": false,
-  "acknowledges_pr30_owner_approval_was_missing": true,
-  "activation_prerequisites_artifact_sha256": "729077800c6510bf8930c97a78781218d1bce9ec40157aa99fc2bd205466e895",
-  "activation_prerequisites_commit_oid": "fa038d17b29001e26f1ac88019a407a4b3ebaa7e",
-  "activation_prerequisites_rollback_artifact_sha256": "00e40eace10a0aae1731eb98851fec71a0c13c48e1e6e5a113e30a4356c2086f",
-  "activation_prerequisites_tree_oid": "d5ff67f848807ef2c7a695c05cdd0bb5f2644fc2",
-  "approval_request_branch": "governance/request/single-owner-atomic-activation-owner-ratification-20260729T014918Z-e503d96665ee",
-  "approval_type": "SINGLE_OWNER_GOVERNANCE_ATOMIC_ACTIVATION_OWNER_RATIFICATION",
-  "branch_protection_adapter_sha256": "2706dc6095ff639838f72c91a66c1f80711893c8c0498555b388feaacf2db569",
-  "denied_operations": [
-    "main.write",
-    "integration.write",
-    "tag.write",
-    "registry.write",
-    "baseline.write",
-    "production.deploy",
-    "force_push",
-    "history_rewrite",
-    "governance.direct_push",
-    "approval.impersonate"
-  ],
-  "direct_protected_branch_push_allowed": false,
-  "dismiss_stale_approvals": true,
-  "dormant_deployment_evidence_sha256": "c4c326784a3d66d62e32c46be3506c801585c06a34e62c9a1f210492a6c1bc06",
-  "evidence_closure_oid": "5f45139ca5f7f7f3da244141c5115d12f5af58ae",
-  "evidence_closure_sha256": "53e5f2fdc01a6225048dfdf6eac973e99743f0295f17f3a42f01dce7e7050ab8",
-  "expected_governance_base_oid": "f6bef90633f428454e85721f353cd82cdf04caf0",
-  "expires_at": "2026-07-29T13:49:18Z",
-  "explicitly_allowed_operations_after_exact_head_approvals_and_merge": [
-    "approval_validator.activate",
-    "governance_state_machine.activate",
-    "gitea_branch_protection.atomic_update",
-    "rollback_configuration.install",
-    "single_owner_policy.activate",
-    "break_glass.expire",
-    "post_activation_tests.execute"
-  ],
-  "force_push_allowed": false,
-  "human_authorizer": "owner",
-  "issued_at": "2026-07-29T01:49:18Z",
-  "legacy_mechanical_approvals": [
-    "codex",
-    "gpt"
-  ],
-  "merge_mode": "CREATE_MERGE_COMMIT",
-  "pr30_codex_approval_review_id": 45,
-  "pr30_codex_reviewed_at": "2026-07-29T01:24:38Z",
-  "pr30_codex_reviewed_head_oid": "c2eed5b37983a6461783361efb6de43a28f909bb",
-  "pr30_gpt_approval_review_id": 46,
-  "pr30_gpt_reviewed_at": "2026-07-29T01:25:02Z",
-  "pr30_gpt_reviewed_head_oid": "c2eed5b37983a6461783361efb6de43a28f909bb",
-  "pr30_manifest_path": "approvals/governance-policy/SINGLE-OWNER-GOVERNANCE-ATOMIC-ACTIVATION-20260728T204808Z-4cab1d5829d6.json",
-  "pr30_merge_tree_oid": "219974f085efe473fcc6ad2170f67312d8e57c54",
-  "pr30_merged_at": "2026-07-29T01:25:08Z",
-  "pr30_owner_review_id": 42,
-  "pr30_owner_review_state_observed": "REQUESTED_NOT_APPROVED",
-  "pr30_owner_reviewed_head_oid": null,
-  "pr30_premerge_base_oid": "6e8212608ee310e2fb45f1e802359f4db2e9077b",
-  "production_deployment_allowed": false,
-  "ratifies_pr30_manifest_blob_oid": "38c95dde2d3831f8e3c80b342369f1c3e1cbf34c",
-  "ratifies_pr30_manifest_sha256": "bc19ada0e8eeb47d421a6360cf1d66b6d1129eb6056a447d9ff70ebd5ada1718",
-  "ratifies_pr30_merge_oid": "f6bef90633f428454e85721f353cd82cdf04caf0",
-  "ratifies_pr30_request_oid": "c2eed5b37983a6461783361efb6de43a28f909bb",
-  "ratifies_pr_number": 30,
-  "require_latest_head_approval": true,
-  "required_reviewers": [
-    "owner",
-    "codex",
-    "gpt"
-  ],
-  "rollback_configuration_sha256": "eb44fc5f655f8c30c4b687185055ba3a2725189e19538e3a9a46a2c0cf141b8c",
-  "schema": "aios.governance-approval/v1",
-  "state_machine_sha256": "0b08a2c378d143cb9031a25132afc7b7d825bdc03d11efe10610341d4b70167e",
-  "task_id": "AIOS-PR30-SINGLE-OWNER-ATOMIC-ACTIVATION-OWNER-RATIFICATION-20260729",
-  "test_evidence_sha256": "42168da7437028440bece3432d8aa38a8722b4db18244423d9daaa380675c45a",
-  "validator_sha256": "754639846cb15cb997d612a1fe0ceb0224ddef5bbc3ccac9802a3747f122dac1",
-  "wip_blocks_merge": true
-}
@@ -1,91 +0,0 @@
-{
-  "approval_request_branch": "governance/request/single-owner-governance-activation-prerequisites-20260728T183025127107Z",
-  "approval_type": "SINGLE_OWNER_GOVERNANCE_ACTIVATION_PREREQUISITES",
-  "binds_final_ratification_manifest_blob_oid": "2865fbec766901eb61fc8aed0542970e951e0d1d",
-  "binds_final_ratification_manifest_sha256": "216e54503d8e6a3f4c908084e19ce1e6242d3ba15f7b8011a9a9d9f7975e63e7",
-  "binds_final_ratification_merge_oid": "2bef44f6bc8cf7bc04c959ab629ac95561fa609f",
-  "binds_mirror_receipt_sha256": "6873133f7233bfed0d3b78b01847ad4251b8b67f3b6db7011efd07664f8d088f",
-  "expected_governance_base_oid": "2bef44f6bc8cf7bc04c959ab629ac95561fa609f",
-  "expires_at": "2026-07-29T06:30:25Z",
-  "explicitly_allowed_after_owner_approval_and_legacy_merge": [
-    "task_bound_activation_writer_grant.create",
-    "gitea_owner_review_adapter.create_and_dormant_deploy",
-    "machine_status_producer.create_and_dormant_deploy",
-    "machine_status_producer.credential_rotation_and_revocation",
-    "maintenance_lock.create",
-    "branch_protection_compensation_saga.create",
-    "targeted_online_rollback_executor.create",
-    "disposable_gitea_fixture.create_test_destroy",
-    "single_owner_activation_prerequisite_tests.execute",
-    "activation_prerequisite_evidence.create"
-  ],
-  "implementation_branch": "patch/single-owner-governance-activation-prerequisites-20260729",
-  "implementation_paths": [
-    "services/aios-single-owner-governance/**",
-    "tests/single_owner_governance/**",
-    "deploy/systemd/aios-governance-*.service",
-    "deploy/systemd/aios-governance-*.timer"
-  ],
-  "issued_at": "2026-07-28T18:30:25Z",
-  "machine_status_contexts": [
-    "aios/machine-gates",
-    "aios/secret-scan",
-    "aios/evidence-closure"
-  ],
-  "observed_blockers": {
-    "commit_status_row_count": 0,
-    "disposable_governance_fixture_present": false,
-    "gitea_owner_review_validator_present": false,
-    "gitea_version": "1.22.6",
-    "native_branch_protection_etag_cas_present": false,
-    "required_status_context_producers_present": false,
-    "targeted_online_rollback_executor_present": false
-  },
-  "owner_approval_contract": {
-    "agent_must_not_submit_review": true,
-    "dismissed": false,
-    "head_change_invalidates_approval": true,
-    "only_human_approver": "owner",
-    "owner_user_id": 2,
-    "review_state": "APPROVED",
-    "reviewed_before_expires_at": true,
-    "reviewed_head_oid_must_equal_current_head_oid": true,
-    "stale": false
-  },
-  "permanent_constraints": {
-    "AIOS_GITOPS_WRITES_ENABLED": false,
-    "direct_main_push": false,
-    "force_push": false,
-    "history_rewrite": false,
-    "secret_commit": false,
-    "tag_rewrite": false
-  },
-  "pre_approval_non_authorizations": {
-    "activation_allowed": false,
-    "baseline_write_allowed": false,
-    "branch_protection_change_allowed": false,
-    "fixture_deployment_allowed": false,
-    "integration_write_allowed": false,
-    "main_write_allowed": false,
-    "merge_allowed": false,
-    "production_write_allowed": false,
-    "registry_write_allowed": false,
-    "tag_write_allowed": false,
-    "writer_grant_allowed": false
-  },
-  "reason": "safe-atomic-activation-prerequisites-absent",
-  "repository": "aios/aios",
-  "request_status": "HUMAN_OWNER_APPROVAL_PENDING",
-  "schema": "aios.single-owner-governance-activation-prerequisites/v1",
-  "task_id": "AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-PREREQUISITES-20260729",
-  "wip": true,
-  "wip_transition_contract": {
-    "codex_and_gpt_not_requested_before_owner_approval": true,
-    "remove_wip_without_head_change_only_after_owner_approval": true,
-    "then_request_legacy_mechanical_reviews": [
-      "codex",
-      "gpt"
-    ],
-    "wip_must_remain_until_owner_exact_head_approval": true
-  }
-}
@@ -1,68 +0,0 @@
-{
-  "AIOS_GITOPS_WRITES_ENABLED": false,
-  "activation_prerequisites_artifact_sha256": "729077800c6510bf8930c97a78781218d1bce9ec40157aa99fc2bd205466e895",
-  "activation_prerequisites_commit_oid": "fa038d17b29001e26f1ac88019a407a4b3ebaa7e",
-  "activation_prerequisites_rollback_artifact_sha256": "00e40eace10a0aae1731eb98851fec71a0c13c48e1e6e5a113e30a4356c2086f",
-  "activation_prerequisites_tree_oid": "d5ff67f848807ef2c7a695c05cdd0bb5f2644fc2",
-  "approval_request_branch": "governance/request/single-owner-governance-atomic-activation-20260728T204808Z-4cab1d5829d6",
-  "approval_type": "SINGLE_OWNER_GOVERNANCE_ATOMIC_ACTIVATION",
-  "branch_protection_adapter_sha256": "2706dc6095ff639838f72c91a66c1f80711893c8c0498555b388feaacf2db569",
-  "denied_operations": [
-    "main.write",
-    "integration.write",
-    "tag.write",
-    "registry.write",
-    "baseline.write",
-    "production.deploy",
-    "force_push",
-    "history_rewrite",
-    "governance.direct_push",
-    "approval.impersonate"
-  ],
-  "deployment_mode_before_execution": "DORMANT_SHADOW_ONLY",
-  "direct_protected_branch_push_allowed": false,
-  "dismiss_stale_approvals": true,
-  "dormant_deployment_evidence_sha256": "c4c326784a3d66d62e32c46be3506c801585c06a34e62c9a1f210492a6c1bc06",
-  "evidence_closure_oid": "5f45139ca5f7f7f3da244141c5115d12f5af58ae",
-  "evidence_closure_sha256": "53e5f2fdc01a6225048dfdf6eac973e99743f0295f17f3a42f01dce7e7050ab8",
-  "expected_governance_base_oid": "6e8212608ee310e2fb45f1e802359f4db2e9077b",
-  "expires_at": "2026-07-29T08:48:08Z",
-  "explicitly_allowed_operations_after_exact_head_approvals_and_merge": [
-    "approval_validator.activate",
-    "governance_state_machine.activate",
-    "gitea_branch_protection.atomic_update",
-    "rollback_configuration.install",
-    "single_owner_policy.activate",
-    "break_glass.expire",
-    "post_activation_tests.execute"
-  ],
-  "force_push_allowed": false,
-  "issued_at": "2026-07-28T20:48:08Z",
-  "legacy_mechanical_approvals": [
-    "codex",
-    "gpt"
-  ],
-  "machine_gates_required": true,
-  "merge_mode": "CREATE_MERGE_COMMIT",
-  "pr26_merge_oid": "a5489f1b67870622162b2daa781bd0237735831a",
-  "pr27_merge_oid": "4e6ef70029b1d94626e432892f7d3beb8e3e5627",
-  "pr28_merge_oid": "2bef44f6bc8cf7bc04c959ab629ac95561fa609f",
-  "pr29_merge_oid": "6e8212608ee310e2fb45f1e802359f4db2e9077b",
-  "production_deployment_allowed": false,
-  "require_latest_head_approval": true,
-  "required_human_authorizer": "owner",
-  "required_reviewers": [
-    "owner",
-    "codex",
-    "gpt"
-  ],
-  "rollback_configuration_sha256": "eb44fc5f655f8c30c4b687185055ba3a2725189e19538e3a9a46a2c0cf141b8c",
-  "rollback_required_on_any_activation_failure": true,
-  "schema": "aios.governance-approval/v1",
-  "single_owner_policy_active_before_execution": false,
-  "state_machine_sha256": "0b08a2c378d143cb9031a25132afc7b7d825bdc03d11efe10610341d4b70167e",
-  "task_id": "AIOS-SINGLE-OWNER-GOVERNANCE-ATOMIC-ACTIVATION-20260729",
-  "test_evidence_sha256": "42168da7437028440bece3432d8aa38a8722b4db18244423d9daaa380675c45a",
-  "validator_sha256": "754639846cb15cb997d612a1fe0ceb0224ddef5bbc3ccac9802a3747f122dac1",
-  "wip_blocks_merge": true
-}
@@ -1,268 +0,0 @@
-{
-  "acknowledges_pr26_owner_approval_was_missing": true,
-  "approval_request_branch": "governance/request/single-owner-control-plane-deployment-20260728T170740Z-ea7a102dac417c23",
-  "approval_type": "SINGLE_OWNER_GOVERNANCE_CONTROL_PLANE_DEPLOYMENT",
-  "control_plane_targets": {
-    "allowed_human_approvers": [
-      "owner"
-    ],
-    "branch_deletion": false,
-    "direct_protected_branch_push": false,
-    "dismiss_stale_approvals": true,
-    "executor_must_not_approve": true,
-    "force_push": false,
-    "governance_model": "SINGLE_OWNER_WITH_MACHINE_GATES_V1",
-    "historical_records_immutable": true,
-    "machine_gates_required": true,
-    "policy_effective_at_set_only_after_activation_tests_pass": true,
-    "protected_branches": [
-      "governance/approvals",
-      "main",
-      "release/**",
-      "integration/**"
-    ],
-    "requester_must_not_approve": true,
-    "require_approval_for_latest_commit": true,
-    "required_human_approvals": 1,
-    "required_owner_approvals": 1,
-    "required_status_contexts": [
-      "aios/machine-gates",
-      "aios/secret-scan",
-      "aios/evidence-closure"
-    ],
-    "tag_rewrite": false,
-    "wip_blocks_merge": true
-  },
-  "does_not_claim_pr26_met_old_two_natural_person_policy": true,
-  "expected_authoritative_governance_base_oid": "ac2dc5c30eb35748ef11c98297812729d0fd5828",
-  "expected_gitea_governance_base_oid": "a5489f1b67870622162b2daa781bd0237735831a",
-  "expires_at": "2026-07-29T05:07:40Z",
-  "explicitly_allowed_operations_after_exact_head_approvals_and_merge": [
-    "approval_mirror.fast_forward_governance_only",
-    "approval_validator.update",
-    "state_machine.update",
-    "gitea_branch_protection.update_via_authenticated_api_compare_and_swap",
-    "governance_policy.activate",
-    "rollback_configuration.install",
-    "governance_acceptance_tests.execute",
-    "single_owner_governance_activation_receipt.create"
-  ],
-  "explicitly_denied_operations": [
-    "force_push",
-    "plus_refspec",
-    "tag_fetch",
-    "prune",
-    "direct_git_database_write",
-    "direct_protected_ref_push",
-    "main_write",
-    "integration_write",
-    "tag_write",
-    "registry_write",
-    "baseline_write",
-    "production_write",
-    "history_rewrite",
-    "branch_delete",
-    "secret_read",
-    "approval_impersonation"
-  ],
-  "global_constraints": {
-    "AIOS_GITOPS_WRITES_ENABLED": false,
-    "direct_main_push": false,
-    "force_push_used": false,
-    "owner_approval_respected": true,
-    "secrets_committed": false,
-    "tag_rewritten": false
-  },
-  "implementation_surface": {
-    "approval_validator": [
-      "services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/approval.py",
-      "services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/models.py",
-      "services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/policy.py"
-    ],
-    "runtime": [
-      "active-runtime/app/silent_release_controller.py",
-      "active-runtime/app/silent_release_hardening.py"
-    ],
-    "state_machine": [
-      "services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/store.py",
-      "services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/workflow.py",
-      "services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/release.py"
-    ],
-    "systemd": [
-      "deploy/systemd/aios-autonomous-release-candidate.service",
-      "deploy/systemd/aios-silent-release-controller.service"
-    ]
-  },
-  "issued_at": "2026-07-28T17:07:40Z",
-  "legacy_gitea_protection_gate": {
-    "account_reviews_do_not_prove_distinct_natural_persons": true,
-    "both_must_approve_this_exact_head": true,
-    "current_approval_whitelist": [
-      "codex",
-      "gpt"
-    ],
-    "current_required_approvals": 2
-  },
-  "migration_mode": "OWNER_BREAK_GLASS_GOVERNANCE_RESET_RATIFICATION",
-  "mirror_contract": {
-    "expected_chain_contains_policy_merge_oid": "a5489f1b67870622162b2daa781bd0237735831a",
-    "expected_pre_sync_authoritative_oid": "ac2dc5c30eb35748ef11c98297812729d0fd5828",
-    "fast_forward_only": true,
-    "force": false,
-    "fsck_connectivity_only_required": true,
-    "only_ref": "refs/heads/governance/approvals",
-    "plus_refspec": false,
-    "prune": false,
-    "quarantine_required": true,
-    "source": "gitea_repository_file_url_only",
-    "tags": false
-  },
-  "owner_break_glass_ratification": {
-    "attests_reason": "single-maintainer-system",
-    "attests_scope": "governance-policy-migration-only",
-    "created_before_expires_at": true,
-    "dismissed": false,
-    "required": true,
-    "review_state": "APPROVED",
-    "reviewed_head_oid_must_equal_current_pr_head_oid": true,
-    "reviewer_user_id": 2,
-    "reviewer_username": "owner",
-    "stale": false
-  },
-  "pre_approval_non_authorizations": {
-    "approval_validator_update_allowed": false,
-    "development_allowed": false,
-    "gitea_branch_protection_update_allowed": false,
-    "governance_policy_activation_allowed": false,
-    "merge_allowed": false,
-    "mirror_allowed": false,
-    "production_change_allowed": false,
-    "rollback_install_allowed": false,
-    "standing_writer_policy_allowed": false,
-    "state_machine_update_allowed": false
-  },
-  "pre_cutover_protection_snapshot": {
-    "protected_branch": [
-      {
-        "approvals_whitelist_team_i_ds": "null",
-        "approvals_whitelist_user_i_ds": "[42,43]",
-        "block_on_official_review_requests": 1,
-        "block_on_outdated_branch": 1,
-        "block_on_rejected_reviews": 1,
-        "branch_name": "governance/approvals",
-        "can_push": 0,
-        "created_unix": 1785093201,
-        "dismiss_stale_approvals": 1,
-        "enable_approvals_whitelist": 1,
-        "enable_merge_whitelist": 1,
-        "enable_status_check": 0,
-        "enable_whitelist": 0,
-        "id": 1,
-        "ignore_stale_approvals": 0,
-        "merge_whitelist_team_i_ds": "null",
-        "merge_whitelist_user_i_ds": "[42,43]",
-        "protected_file_patterns": "",
-        "repo_id": 1,
-        "require_signed_commits": 0,
-        "required_approvals": 2,
-        "status_check_contexts": "[]",
-        "unprotected_file_patterns": "",
-        "updated_unix": 1785093422,
-        "whitelist_deploy_keys": 0,
-        "whitelist_team_i_ds": "null",
-        "whitelist_user_i_ds": "null"
-      },
-      {
-        "approvals_whitelist_team_i_ds": "null",
-        "approvals_whitelist_user_i_ds": "[42,43]",
-        "block_on_official_review_requests": 1,
-        "block_on_outdated_branch": 1,
-        "block_on_rejected_reviews": 1,
-        "branch_name": "integration/chatgpt-autonomous-completion-20260726",
-        "can_push": 0,
-        "created_unix": 1785093201,
-        "dismiss_stale_approvals": 1,
-        "enable_approvals_whitelist": 1,
-        "enable_merge_whitelist": 1,
-        "enable_status_check": 0,
-        "enable_whitelist": 0,
-        "id": 3,
-        "ignore_stale_approvals": 0,
-        "merge_whitelist_team_i_ds": "null",
-        "merge_whitelist_user_i_ds": "[42,43]",
-        "protected_file_patterns": "",
-        "repo_id": 1,
-        "require_signed_commits": 0,
-        "required_approvals": 2,
-        "status_check_contexts": "[]",
-        "unprotected_file_patterns": "",
-        "updated_unix": 1785093422,
-        "whitelist_deploy_keys": 0,
-        "whitelist_team_i_ds": "null",
-        "whitelist_user_i_ds": "null"
-      },
-      {
-        "approvals_whitelist_team_i_ds": "null",
-        "approvals_whitelist_user_i_ds": "[42,43]",
-        "block_on_official_review_requests": 1,
-        "block_on_outdated_branch": 1,
-        "block_on_rejected_reviews": 1,
-        "branch_name": "main",
-        "can_push": 0,
-        "created_unix": 1785093201,
-        "dismiss_stale_approvals": 1,
-        "enable_approvals_whitelist": 1,
-        "enable_merge_whitelist": 1,
-        "enable_status_check": 0,
-        "enable_whitelist": 0,
-        "id": 2,
-        "ignore_stale_approvals": 0,
-        "merge_whitelist_team_i_ds": "null",
-        "merge_whitelist_user_i_ds": "[42,43]",
-        "protected_file_patterns": "",
-        "repo_id": 1,
-        "require_signed_commits": 0,
-        "required_approvals": 2,
-        "status_check_contexts": "[]",
-        "unprotected_file_patterns": "",
-        "updated_unix": 1785093422,
-        "whitelist_deploy_keys": 0,
-        "whitelist_team_i_ds": "null",
-        "whitelist_user_i_ds": "null"
-      }
-    ],
-    "protected_tag": []
-  },
-  "pre_cutover_protection_snapshot_sha256": "2bc353f34689242cabebf89856d3faab0e1c496b5d33761dfb7cbd47904516f7",
-  "ratifies_policy_manifest_blob_oid": "65f44007b10fc2a912d69e3f9081c0cfff77dfad",
-  "ratifies_policy_manifest_path": "approvals/governance-policy/SINGLE-OWNER-GOVERNANCE-MIGRATION-20260728T162246Z.json",
-  "ratifies_policy_manifest_sha256": "c097475afbe3074e6482f125b635981f8c0284f3d763c926e2a63e1a3ee1c6c3",
-  "ratifies_policy_merge_oid": "a5489f1b67870622162b2daa781bd0237735831a",
-  "ratifies_policy_pr_number": 26,
-  "ratifies_policy_request_oid": "312d3b483049a748675e887a516ec739c81ff474",
-  "ratifies_policy_tree_oid": "5c6974c058bba6210dcc1bdd0968fb7e6c84a844",
-  "repository": "aios/aios",
-  "request_status": "HUMAN_OWNER_AND_LEGACY_PROTECTION_APPROVAL_PENDING",
-  "required_machine_gates": [
-    "owner_exact_head_review_valid",
-    "legacy_protection_reviews_valid",
-    "ordinary_merge_commit",
-    "parent_order_verified",
-    "manifest_add_only",
-    "quarantine_verification",
-    "approval_mirror_fast_forward",
-    "validator_tests",
-    "state_machine_tests",
-    "protection_compare_and_swap",
-    "positive_governance_tests",
-    "negative_governance_tests",
-    "secret_scan",
-    "rollback_integrity",
-    "production_write_false"
-  ],
-  "rollback_configuration_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-MIGRATION-20260729/rollback-configuration.tar",
-  "rollback_configuration_sha256": "fc8dcf68aaf53edb0cda45833ee45ba5b8b205791af9073258ca617c8b8187d6",
-  "schema": "aios.single-owner-governance-control-plane-deployment/v1",
-  "scope": "pr26-ratification-mirror-and-single-owner-control-plane-deployment-only",
-  "task_id": "AIOS-SINGLE-OWNER-CONTROL-PLANE-DEPLOYMENT-20260729"
-}
@@ -1,260 +0,0 @@
-{
-  "acknowledges_pr26_and_pr27_owner_approval_was_missing": true,
-  "approval_request_branch": "governance/request/single-owner-governance-final-owner-ratification-20260728T173634412838Z",
-  "approval_type": "SINGLE_OWNER_GOVERNANCE_FINAL_OWNER_RATIFICATION",
-  "backup_checksums_sha256": "72e2fe0b03d1011c872bb39a6cff489f08398ac7d52092f720cbbc63bcf6f753",
-  "backup_root": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-MIGRATION-20260729/pre-migration-backup",
-  "break_glass_expires_immediately_after_activation": true,
-  "does_not_claim_old_two_natural_person_compliance": true,
-  "expires_at": "2026-07-29T05:36:34Z",
-  "inherits_only_pr27_control_plane_allowlist": [
-    "approval_mirror.fast_forward_governance_only",
-    "approval_validator.update",
-    "state_machine.update",
-    "gitea_branch_protection.update_via_authenticated_api_compare_and_swap",
-    "governance_policy.activate",
-    "rollback_configuration.install",
-    "governance_acceptance_tests.execute",
-    "single_owner_governance_activation_receipt.create"
-  ],
-  "issued_at": "2026-07-28T17:36:34Z",
-  "legacy_mechanical_protection_gate": {
-    "account_reviews_do_not_count_as_owner_ratification": true,
-    "account_reviews_do_not_prove_distinct_natural_persons": true,
-    "approval_and_merge_whitelist_user_ids": [
-      42,
-      43
-    ],
-    "both_reviews_must_bind_current_request_head": true,
-    "required_approvals": 2,
-    "reviewers": [
-      "codex",
-      "gpt"
-    ]
-  },
-  "merge_contract": {
-    "first_parent_must_equal_premerge_governance_oid": true,
-    "force": false,
-    "merge_mode": "CREATE_MERGE_COMMIT",
-    "parent_count": 2,
-    "rebase": false,
-    "second_parent_must_equal_final_ratification_request_oid": true,
-    "single_file_add_only": true,
-    "squash": false
-  },
-  "migration_mode": "OWNER_BREAK_GLASS_GOVERNANCE_RESET",
-  "mirror_contract": {
-    "expected_authoritative_pre_oid": "ac2dc5c30eb35748ef11c98297812729d0fd5828",
-    "fast_forward_only": true,
-    "force": false,
-    "fsck_connectivity_only_required": true,
-    "only_ref": "refs/heads/governance/approvals",
-    "plus_refspec": false,
-    "prune": false,
-    "quarantine_required": true,
-    "required_chain": [
-      "ac2dc5c30eb35748ef11c98297812729d0fd5828",
-      "a5489f1b67870622162b2daa781bd0237735831a",
-      "4e6ef70029b1d94626e432892f7d3beb8e3e5627",
-      "FINAL_RATIFICATION_MERGE_OID"
-    ],
-    "source": "gitea_repository_file_url_only",
-    "tags": false
-  },
-  "owner_ratification_contract": {
-    "agent_must_not_submit_review": true,
-    "dismissed": false,
-    "only_valid_human_approver": "owner",
-    "owner_user_id": 2,
-    "review_state": "APPROVED",
-    "review_type_must_be_approved_not_requested": true,
-    "reviewed_before_expires_at": true,
-    "reviewed_before_merge": true,
-    "reviewed_head_oid_must_equal_current_request_head_oid": true,
-    "stale": false
-  },
-  "permanent_constraints": {
-    "AIOS_GITOPS_WRITES_ENABLED": false,
-    "direct_main_push": false,
-    "force_push_used": false,
-    "owner_approval_respected": true,
-    "secrets_committed": false,
-    "tag_rewritten": false
-  },
-  "post_merge_activation_preconditions": [
-    "owner_exact_head_approval_valid",
-    "legacy_mechanical_reviews_valid",
-    "ordinary_merge_commit",
-    "one_file_add_only",
-    "quarantine_chain_verified",
-    "approval_mirror_fast_forward_closed",
-    "rollback_integrity_pass",
-    "validator_and_state_machine_tests_pass",
-    "protection_compare_and_swap_pass",
-    "positive_and_negative_governance_tests_pass",
-    "production_write_false"
-  ],
-  "pre_activation_protection_snapshot": {
-    "protected_branch": [
-      {
-        "approvals_whitelist_team_i_ds": "null",
-        "approvals_whitelist_user_i_ds": "[42,43]",
-        "block_on_official_review_requests": 1,
-        "block_on_outdated_branch": 1,
-        "block_on_rejected_reviews": 1,
-        "branch_name": "governance/approvals",
-        "can_push": 0,
-        "created_unix": 1785093201,
-        "dismiss_stale_approvals": 1,
-        "enable_approvals_whitelist": 1,
-        "enable_merge_whitelist": 1,
-        "enable_status_check": 0,
-        "enable_whitelist": 0,
-        "id": 1,
-        "ignore_stale_approvals": 0,
-        "merge_whitelist_team_i_ds": "null",
-        "merge_whitelist_user_i_ds": "[42,43]",
-        "protected_file_patterns": "",
-        "repo_id": 1,
-        "require_signed_commits": 0,
-        "required_approvals": 2,
-        "status_check_contexts": "[]",
-        "unprotected_file_patterns": "",
-        "updated_unix": 1785093422,
-        "whitelist_deploy_keys": 0,
-        "whitelist_team_i_ds": "null",
-        "whitelist_user_i_ds": "null"
-      },
-      {
-        "approvals_whitelist_team_i_ds": "null",
-        "approvals_whitelist_user_i_ds": "[42,43]",
-        "block_on_official_review_requests": 1,
-        "block_on_outdated_branch": 1,
-        "block_on_rejected_reviews": 1,
-        "branch_name": "integration/chatgpt-autonomous-completion-20260726",
-        "can_push": 0,
-        "created_unix": 1785093201,
-        "dismiss_stale_approvals": 1,
-        "enable_approvals_whitelist": 1,
-        "enable_merge_whitelist": 1,
-        "enable_status_check": 0,
-        "enable_whitelist": 0,
-        "id": 3,
-        "ignore_stale_approvals": 0,
-        "merge_whitelist_team_i_ds": "null",
-        "merge_whitelist_user_i_ds": "[42,43]",
-        "protected_file_patterns": "",
-        "repo_id": 1,
-        "require_signed_commits": 0,
-        "required_approvals": 2,
-        "status_check_contexts": "[]",
-        "unprotected_file_patterns": "",
-        "updated_unix": 1785093422,
-        "whitelist_deploy_keys": 0,
-        "whitelist_team_i_ds": "null",
-        "whitelist_user_i_ds": "null"
-      },
-      {
-        "approvals_whitelist_team_i_ds": "null",
-        "approvals_whitelist_user_i_ds": "[42,43]",
-        "block_on_official_review_requests": 1,
-        "block_on_outdated_branch": 1,
-        "block_on_rejected_reviews": 1,
-        "branch_name": "main",
-        "can_push": 0,
-        "created_unix": 1785093201,
-        "dismiss_stale_approvals": 1,
-        "enable_approvals_whitelist": 1,
-        "enable_merge_whitelist": 1,
-        "enable_status_check": 0,
-        "enable_whitelist": 0,
-        "id": 2,
-        "ignore_stale_approvals": 0,
-        "merge_whitelist_team_i_ds": "null",
-        "merge_whitelist_user_i_ds": "[42,43]",
-        "protected_file_patterns": "",
-        "repo_id": 1,
-        "require_signed_commits": 0,
-        "required_approvals": 2,
-        "status_check_contexts": "[]",
-        "unprotected_file_patterns": "",
-        "updated_unix": 1785093422,
-        "whitelist_deploy_keys": 0,
-        "whitelist_team_i_ds": "null",
-        "whitelist_user_i_ds": "null"
-      }
-    ],
-    "protected_tag": []
-  },
-  "pre_activation_protection_snapshot_sha256": "2bc353f34689242cabebf89856d3faab0e1c496b5d33761dfb7cbd47904516f7",
-  "pre_approval_non_authorizations": {
-    "baseline_write_allowed": false,
-    "branch_protection_update_allowed": false,
-    "control_plane_activation_allowed": false,
-    "development_allowed": false,
-    "integration_write_allowed": false,
-    "main_write_allowed": false,
-    "merge_allowed": false,
-    "mirror_allowed": false,
-    "production_write_allowed": false,
-    "registry_write_allowed": false,
-    "rollback_install_allowed": false,
-    "standing_writer_allowed": false,
-    "state_machine_update_allowed": false,
-    "tag_write_allowed": false,
-    "validator_update_allowed": false
-  },
-  "ratification_scope": "GOVERNANCE_MIGRATION_AND_CONTROL_PLANE_ACTIVATION_ONLY",
-  "ratifies_pr26_manifest_blob_oid": "65f44007b10fc2a912d69e3f9081c0cfff77dfad",
-  "ratifies_pr26_manifest_path": "approvals/governance-policy/SINGLE-OWNER-GOVERNANCE-MIGRATION-20260728T162246Z.json",
-  "ratifies_pr26_manifest_sha256": "c097475afbe3074e6482f125b635981f8c0284f3d763c926e2a63e1a3ee1c6c3",
-  "ratifies_pr26_merge_oid": "a5489f1b67870622162b2daa781bd0237735831a",
-  "ratifies_pr26_request_oid": "312d3b483049a748675e887a516ec739c81ff474",
-  "ratifies_pr26_tree_oid": "5c6974c058bba6210dcc1bdd0968fb7e6c84a844",
-  "ratifies_pr27_manifest_blob_oid": "77f3c2ab85cba2c30c8c0aa36e591232d0f4c396",
-  "ratifies_pr27_manifest_path": "approvals/governance-policy/SINGLE-OWNER-GOVERNANCE-CONTROL-PLANE-DEPLOYMENT-20260728T170740Z-ea7a102dac417c23.json",
-  "ratifies_pr27_manifest_sha256": "2ed09180c0aeadbef2e5d6310efe7c2d0de15e0e87b6135e7a8494cb4f0967c7",
-  "ratifies_pr27_merge_oid": "4e6ef70029b1d94626e432892f7d3beb8e3e5627",
-  "ratifies_pr27_request_oid": "80feef309fd8e1db7795f68d5bf0f15ce805b365",
-  "ratifies_pr27_tree_oid": "85af0d1e88e8484a9c3a0562a81cbc1de09250ae",
-  "ratifies_pr_numbers": [
-    26,
-    27
-  ],
-  "repository": "aios/aios",
-  "request_status": "HUMAN_OWNER_APPROVAL_PENDING",
-  "retroactive_authorization_for_other_operations": false,
-  "rollback_archive_member_hashes": {
-    "pre-migration-backup/app.ini": "0693e4fa8296a22533429339faeee2ac1856b6c966c6c1009bb139ab4784f687",
-    "pre-migration-backup/authoritative-aios.bundle": "4fb4ccc979c3061065cde451af0e733326cb56fa6f860124bb73f153a60907c9",
-    "pre-migration-backup/authoritative-refs.txt": "85cb664c8edf3902bebfc6c2253a3ee16cff8534f86561ba771a73df160186c6",
-    "pre-migration-backup/backup-metadata.json": "a38ef6dacb52ae61c4332bf8d087f479fb0d5f51d5f636a132a711bddd6e7732",
-    "pre-migration-backup/checksums.sha256": "72e2fe0b03d1011c872bb39a6cff489f08398ac7d52092f720cbbc63bcf6f753",
-    "pre-migration-backup/gitea-aios.bundle": "a343c7437f3a1a2aa842dd9d986a1d3cf80691058faae978565224320ff5ed90",
-    "pre-migration-backup/gitea-refs.txt": "1792b2c4f1cf1f232704601ee968e16425f926a6eaab1bdcddf273525d046e4d",
-    "pre-migration-backup/gitea.db": "aadcc1587a05827ed3b2c4ffc2403f26139020cd0328afaa03f7afbf6083a2f1",
-    "pre-migration-backup/governance-identities.json": "2d7b4e72d1fdf187425092089589547e0d76784c611d00f915a8c212f17d3b15",
-    "pre-migration-backup/protected-branch.json": "5cc4ae4fe5614baa3d4bb83d71872a4ad1ce3c5e39061e02b336be40d5b5b75d",
-    "pre-migration-backup/protected-tag.json": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
-    "pre-migration-backup/repository/active-runtime/app/aios_isolated_writer_policy.py": "d86ec23fd5d8b7e9844c0895c50385b6f8f3071c3dac3c0f26c70768ae00a188",
-    "pre-migration-backup/repository/active-runtime/app/isolated_writer_authz.py": "cfae1cdf70c1dabbe013e9365c308a45f11acf20035881a3bb6143774682bbf0",
-    "pre-migration-backup/repository/active-runtime/app/isolated_writer_path_policy.py": "c6c9ea8e45dfc03c4703503f4dc9c92f887bbacdbf1c7779a487567eee6c257c",
-    "pre-migration-backup/repository/active-runtime/app/silent_release_controller.py": "524a0a9961b15c2a35b669d1b89b2142377c13ddd3c721780f374331b7d2b6eb",
-    "pre-migration-backup/repository/active-runtime/app/silent_release_hardening.py": "524aba7034f2cd89d897fe01e9799c835bae9f11ca738182ce469aa59e05cc1a",
-    "pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/approval.py": "cc937a81aef881206cb1d6fd2ad1feb1a1c2e0ad91c908095d56fd96402c3373",
-    "pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/models.py": "aa3b3dd41c03c17e4e116ce444d9f4f779694a9cde684e8329cf892bd319069a",
-    "pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/policy.py": "24b3f3326e6dcd1a4c376d892c53ad20c68e0dd6f861a3a34e11c9a2bba4c756",
-    "pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/release.py": "db535e5006f8e4a3ab80c2f689213045c120b01cda9b43ef461a3022096c9d19",
-    "pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/store.py": "31e1f3b904b0bfc8822d21bfd166a45388f122398d1ec76b803e90ee06dc92f0",
-    "pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/workflow.py": "5f6a8e3a4d66f47717e95842f2eaa443e3cfa321cb08026cc82d74c4ad353bcf",
-    "pre-migration-backup/repository/tests/autonomous_release/test_core_contracts.py": "71852070db50a04901c141213cadc987ae17ec678fe27a901fee165b6d1c3e2a",
-    "pre-migration-backup/repository/tests/autonomous_release/test_external_gates.py": "91cca37eb1d40f0cf9fc38b12e2123045ffebd794a34d6cdef3f1dec470fffd2",
-    "pre-migration-backup/repository/tests/autonomous_release/test_release_gates.py": "d82b23ac00f5389f1a0de628bda9dff898d33f80d375cf6ff74f1531fd138134",
-    "pre-migration-backup/repository/tests/autonomous_release/test_state_and_workflow.py": "c0395a901732adb0b2f1402e6a1cf5202d54aa597bcaec9584a7ea7589c53917"
-  },
-  "rollback_configuration_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-MIGRATION-20260729/rollback-configuration.tar",
-  "rollback_configuration_sha256": "fc8dcf68aaf53edb0cda45833ee45ba5b8b205791af9073258ca617c8b8187d6",
-  "schema": "aios.single-owner-governance-final-owner-ratification/v1",
-  "single_owner_policy_effective_at": "FINAL_RATIFICATION_MERGE_OID",
-  "task_id": "AIOS-SINGLE-OWNER-GOVERNANCE-FINAL-RATIFICATION-20260729"
-}
@@ -1,484 +0,0 @@
-{
-  "allowed_human_approvers": [
-    "owner"
-  ],
-  "approval_expires_at": "2026-07-29T16:22:46Z",
-  "approval_request_branch": "governance/request/single-owner-governance-migration-20260728T162246Z",
-  "approval_type": "SINGLE_OWNER_GOVERNANCE_POLICY",
-  "approval_types_migrated_after_policy_effective_at": [
-    "SOURCE_MAPPING_AND_IMPORT_EXECUTION_RENEWAL",
-    "CONTROL_PLANE_DEPLOYMENT_APPROVAL",
-    "DEVELOPMENT_MERGE_APPROVAL",
-    "RELEASE_CANDIDATE_APPROVAL",
-    "PRODUCTION_RELEASE_APPROVAL",
-    "TAG_APPROVAL",
-    "REGISTRY_BASELINE_PROMOTION_APPROVAL",
-    "PRODUCTION_DEPLOYMENT_APPROVAL",
-    "ROLLBACK_APPROVAL"
-  ],
-  "atomic_migration": {
-    "backup_checksums_sha256": "72e2fe0b03d1011c872bb39a6cff489f08398ac7d52092f720cbbc63bcf6f753",
-    "backup_root": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-MIGRATION-20260729/pre-migration-backup",
-    "direct_database_update": false,
-    "direct_ref_update": false,
-    "dual_capable_validator_shadow_required": true,
-    "identity_snapshot_sha256": "2d7b4e72d1fdf187425092089589547e0d76784c611d00f915a8c212f17d3b15",
-    "live_protection_canonical_sha256": "2bc353f34689242cabebf89856d3faab0e1c496b5d33761dfb7cbd47904516f7",
-    "maintenance_lock_required": true,
-    "old_rules_remain_active_until_owner_approval_and_machine_gates_pass": true,
-    "protected_branch_snapshot_sha256": "2bc353f34689242cabebf89856d3faab0e1c496b5d33761dfb7cbd47904516f7",
-    "protection_update_method": "authenticated_admin_API_compare_and_swap",
-    "reviewable_backup_file_hashes": {
-      "app.ini": "0693e4fa8296a22533429339faeee2ac1856b6c966c6c1009bb139ab4784f687",
-      "authoritative-aios.bundle": "4fb4ccc979c3061065cde451af0e733326cb56fa6f860124bb73f153a60907c9",
-      "authoritative-refs.txt": "85cb664c8edf3902bebfc6c2253a3ee16cff8534f86561ba771a73df160186c6",
-      "backup-metadata.json": "a38ef6dacb52ae61c4332bf8d087f479fb0d5f51d5f636a132a711bddd6e7732",
-      "checksums.sha256": "72e2fe0b03d1011c872bb39a6cff489f08398ac7d52092f720cbbc63bcf6f753",
-      "gitea-aios.bundle": "a343c7437f3a1a2aa842dd9d986a1d3cf80691058faae978565224320ff5ed90",
-      "gitea-refs.txt": "1792b2c4f1cf1f232704601ee968e16425f926a6eaab1bdcddf273525d046e4d",
-      "gitea.db": "aadcc1587a05827ed3b2c4ffc2403f26139020cd0328afaa03f7afbf6083a2f1",
-      "governance-identities.json": "2d7b4e72d1fdf187425092089589547e0d76784c611d00f915a8c212f17d3b15",
-      "protected-branch.json": "5cc4ae4fe5614baa3d4bb83d71872a4ad1ce3c5e39061e02b336be40d5b5b75d",
-      "protected-tag.json": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
-      "repository/active-runtime/app/aios_isolated_writer_policy.py": "d86ec23fd5d8b7e9844c0895c50385b6f8f3071c3dac3c0f26c70768ae00a188",
-      "repository/active-runtime/app/isolated_writer_authz.py": "cfae1cdf70c1dabbe013e9365c308a45f11acf20035881a3bb6143774682bbf0",
-      "repository/active-runtime/app/isolated_writer_path_policy.py": "c6c9ea8e45dfc03c4703503f4dc9c92f887bbacdbf1c7779a487567eee6c257c",
-      "repository/active-runtime/app/silent_release_controller.py": "524a0a9961b15c2a35b669d1b89b2142377c13ddd3c721780f374331b7d2b6eb",
-      "repository/active-runtime/app/silent_release_hardening.py": "524aba7034f2cd89d897fe01e9799c835bae9f11ca738182ce469aa59e05cc1a",
-      "repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/approval.py": "cc937a81aef881206cb1d6fd2ad1feb1a1c2e0ad91c908095d56fd96402c3373",
-      "repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/models.py": "aa3b3dd41c03c17e4e116ce444d9f4f779694a9cde684e8329cf892bd319069a",
-      "repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/policy.py": "24b3f3326e6dcd1a4c376d892c53ad20c68e0dd6f861a3a34e11c9a2bba4c756",
-      "repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/release.py": "db535e5006f8e4a3ab80c2f689213045c120b01cda9b43ef461a3022096c9d19",
-      "repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/store.py": "31e1f3b904b0bfc8822d21bfd166a45388f122398d1ec76b803e90ee06dc92f0",
-      "repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/workflow.py": "5f6a8e3a4d66f47717e95842f2eaa443e3cfa321cb08026cc82d74c4ad353bcf",
-      "repository/tests/autonomous_release/test_core_contracts.py": "71852070db50a04901c141213cadc987ae17ec678fe27a901fee165b6d1c3e2a",
-      "repository/tests/autonomous_release/test_external_gates.py": "91cca37eb1d40f0cf9fc38b12e2123045ffebd794a34d6cdef3f1dec470fffd2",
-      "repository/tests/autonomous_release/test_release_gates.py": "d82b23ac00f5389f1a0de628bda9dff898d33f80d375cf6ff74f1531fd138134",
-      "repository/tests/autonomous_release/test_state_and_workflow.py": "c0395a901732adb0b2f1402e6a1cf5202d54aa597bcaec9584a7ea7589c53917"
-    },
-    "reviewable_pre_migration_governance_identity_snapshot": [
-      {
-        "created_unix": 1783321252,
-        "id": 1,
-        "is_active": 1,
-        "is_admin": 0,
-        "last_login_unix": 0,
-        "lower_name": "aios",
-        "prohibit_login": 1,
-        "type": 0
-      },
-      {
-        "created_unix": 1783335380,
-        "id": 2,
-        "is_active": 1,
-        "is_admin": 1,
-        "last_login_unix": 1785086126,
-        "lower_name": "owner",
-        "prohibit_login": 0,
-        "type": 0
-      },
-      {
-        "created_unix": 1783411566,
-        "id": 3,
-        "is_active": 1,
-        "is_admin": 1,
-        "last_login_unix": 0,
-        "lower_name": "gito",
-        "prohibit_login": 0,
-        "type": 0
-      },
-      {
-        "created_unix": 1785078826,
-        "id": 42,
-        "is_active": 1,
-        "is_admin": 0,
-        "last_login_unix": 1785206253,
-        "lower_name": "codex",
-        "prohibit_login": 0,
-        "type": 0
-      },
-      {
-        "created_unix": 1785078882,
-        "id": 43,
-        "is_active": 1,
-        "is_admin": 0,
-        "last_login_unix": 1785206380,
-        "lower_name": "gpt",
-        "prohibit_login": 0,
-        "type": 0
-      }
-    ],
-    "reviewable_pre_migration_protection_snapshot": {
-      "protected_branch": [
-        {
-          "approvals_whitelist_team_i_ds": "null",
-          "approvals_whitelist_user_i_ds": "[42,43]",
-          "block_on_official_review_requests": 1,
-          "block_on_outdated_branch": 1,
-          "block_on_rejected_reviews": 1,
-          "branch_name": "governance/approvals",
-          "can_push": 0,
-          "created_unix": 1785093201,
-          "dismiss_stale_approvals": 1,
-          "enable_approvals_whitelist": 1,
-          "enable_merge_whitelist": 1,
-          "enable_status_check": 0,
-          "enable_whitelist": 0,
-          "id": 1,
-          "ignore_stale_approvals": 0,
-          "merge_whitelist_team_i_ds": "null",
-          "merge_whitelist_user_i_ds": "[42,43]",
-          "protected_file_patterns": "",
-          "repo_id": 1,
-          "require_signed_commits": 0,
-          "required_approvals": 2,
-          "status_check_contexts": "[]",
-          "unprotected_file_patterns": "",
-          "updated_unix": 1785093422,
-          "whitelist_deploy_keys": 0,
-          "whitelist_team_i_ds": "null",
-          "whitelist_user_i_ds": "null"
-        },
-        {
-          "approvals_whitelist_team_i_ds": "null",
-          "approvals_whitelist_user_i_ds": "[42,43]",
-          "block_on_official_review_requests": 1,
-          "block_on_outdated_branch": 1,
-          "block_on_rejected_reviews": 1,
-          "branch_name": "integration/chatgpt-autonomous-completion-20260726",
-          "can_push": 0,
-          "created_unix": 1785093201,
-          "dismiss_stale_approvals": 1,
-          "enable_approvals_whitelist": 1,
-          "enable_merge_whitelist": 1,
-          "enable_status_check": 0,
-          "enable_whitelist": 0,
-          "id": 3,
-          "ignore_stale_approvals": 0,
-          "merge_whitelist_team_i_ds": "null",
-          "merge_whitelist_user_i_ds": "[42,43]",
-          "protected_file_patterns": "",
-          "repo_id": 1,
-          "require_signed_commits": 0,
-          "required_approvals": 2,
-          "status_check_contexts": "[]",
-          "unprotected_file_patterns": "",
-          "updated_unix": 1785093422,
-          "whitelist_deploy_keys": 0,
-          "whitelist_team_i_ds": "null",
-          "whitelist_user_i_ds": "null"
-        },
-        {
-          "approvals_whitelist_team_i_ds": "null",
-          "approvals_whitelist_user_i_ds": "[42,43]",
-          "block_on_official_review_requests": 1,
-          "block_on_outdated_branch": 1,
-          "block_on_rejected_reviews": 1,
-          "branch_name": "main",
-          "can_push": 0,
-          "created_unix": 1785093201,
-          "dismiss_stale_approvals": 1,
-          "enable_approvals_whitelist": 1,
-          "enable_merge_whitelist": 1,
-          "enable_status_check": 0,
-          "enable_whitelist": 0,
-          "id": 2,
-          "ignore_stale_approvals": 0,
-          "merge_whitelist_team_i_ds": "null",
-          "merge_whitelist_user_i_ds": "[42,43]",
-          "protected_file_patterns": "",
-          "repo_id": 1,
-          "require_signed_commits": 0,
-          "required_approvals": 2,
-          "status_check_contexts": "[]",
-          "unprotected_file_patterns": "",
-          "updated_unix": 1785093422,
-          "whitelist_deploy_keys": 0,
-          "whitelist_team_i_ds": "null",
-          "whitelist_user_i_ds": "null"
-        }
-      ],
-      "protected_tag": []
-    },
-    "rollback_archive_members": {
-      "pre-migration-backup/app.ini": "0693e4fa8296a22533429339faeee2ac1856b6c966c6c1009bb139ab4784f687",
-      "pre-migration-backup/authoritative-aios.bundle": "4fb4ccc979c3061065cde451af0e733326cb56fa6f860124bb73f153a60907c9",
-      "pre-migration-backup/authoritative-refs.txt": "85cb664c8edf3902bebfc6c2253a3ee16cff8534f86561ba771a73df160186c6",
-      "pre-migration-backup/backup-metadata.json": "a38ef6dacb52ae61c4332bf8d087f479fb0d5f51d5f636a132a711bddd6e7732",
-      "pre-migration-backup/checksums.sha256": "72e2fe0b03d1011c872bb39a6cff489f08398ac7d52092f720cbbc63bcf6f753",
-      "pre-migration-backup/gitea-aios.bundle": "a343c7437f3a1a2aa842dd9d986a1d3cf80691058faae978565224320ff5ed90",
-      "pre-migration-backup/gitea-refs.txt": "1792b2c4f1cf1f232704601ee968e16425f926a6eaab1bdcddf273525d046e4d",
-      "pre-migration-backup/gitea.db": "aadcc1587a05827ed3b2c4ffc2403f26139020cd0328afaa03f7afbf6083a2f1",
-      "pre-migration-backup/governance-identities.json": "2d7b4e72d1fdf187425092089589547e0d76784c611d00f915a8c212f17d3b15",
-      "pre-migration-backup/protected-branch.json": "5cc4ae4fe5614baa3d4bb83d71872a4ad1ce3c5e39061e02b336be40d5b5b75d",
-      "pre-migration-backup/protected-tag.json": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
-      "pre-migration-backup/repository/active-runtime/app/aios_isolated_writer_policy.py": "d86ec23fd5d8b7e9844c0895c50385b6f8f3071c3dac3c0f26c70768ae00a188",
-      "pre-migration-backup/repository/active-runtime/app/isolated_writer_authz.py": "cfae1cdf70c1dabbe013e9365c308a45f11acf20035881a3bb6143774682bbf0",
-      "pre-migration-backup/repository/active-runtime/app/isolated_writer_path_policy.py": "c6c9ea8e45dfc03c4703503f4dc9c92f887bbacdbf1c7779a487567eee6c257c",
-      "pre-migration-backup/repository/active-runtime/app/silent_release_controller.py": "524a0a9961b15c2a35b669d1b89b2142377c13ddd3c721780f374331b7d2b6eb",
-      "pre-migration-backup/repository/active-runtime/app/silent_release_hardening.py": "524aba7034f2cd89d897fe01e9799c835bae9f11ca738182ce469aa59e05cc1a",
-      "pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/approval.py": "cc937a81aef881206cb1d6fd2ad1feb1a1c2e0ad91c908095d56fd96402c3373",
-      "pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/models.py": "aa3b3dd41c03c17e4e116ce444d9f4f779694a9cde684e8329cf892bd319069a",
-      "pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/policy.py": "24b3f3326e6dcd1a4c376d892c53ad20c68e0dd6f861a3a34e11c9a2bba4c756",
-      "pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/release.py": "db535e5006f8e4a3ab80c2f689213045c120b01cda9b43ef461a3022096c9d19",
-      "pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/store.py": "31e1f3b904b0bfc8822d21bfd166a45388f122398d1ec76b803e90ee06dc92f0",
-      "pre-migration-backup/repository/services/aios-autonomous-release-candidate/aios_autonomous_release_candidate/workflow.py": "5f6a8e3a4d66f47717e95842f2eaa443e3cfa321cb08026cc82d74c4ad353bcf",
-      "pre-migration-backup/repository/tests/autonomous_release/test_core_contracts.py": "71852070db50a04901c141213cadc987ae17ec678fe27a901fee165b6d1c3e2a",
-      "pre-migration-backup/repository/tests/autonomous_release/test_external_gates.py": "91cca37eb1d40f0cf9fc38b12e2123045ffebd794a34d6cdef3f1dec470fffd2",
-      "pre-migration-backup/repository/tests/autonomous_release/test_release_gates.py": "d82b23ac00f5389f1a0de628bda9dff898d33f80d375cf6ff74f1531fd138134",
-      "pre-migration-backup/repository/tests/autonomous_release/test_state_and_workflow.py": "c0395a901732adb0b2f1402e6a1cf5202d54aa597bcaec9584a7ea7589c53917"
-    },
-    "rollback_configuration_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-MIGRATION-20260729/rollback-configuration.tar",
-    "rollback_configuration_sha256": "fc8dcf68aaf53edb0cda45833ee45ba5b8b205791af9073258ca617c8b8187d6",
-    "rollback_restores_protection_before_validator": true
-  },
-  "auto_merge_after_owner_approval": false,
-  "auto_merge_machine_conditions": [
-    "owner_approval_valid",
-    "head_oid_unchanged",
-    "required_checks_pass",
-    "secret_scan_pass",
-    "evidence_closure_pass",
-    "approval_not_expired",
-    "protected_branch_rules_pass"
-  ],
-  "automatic_renewal_policy": {
-    "approval_ref_fast_forward_descendant_required": true,
-    "changed_condition_fallback": "HUMAN_OWNER_APPROVAL_PENDING",
-    "secret_scan": "PASS_REQUIRED",
-    "single_renewal_max_hours": 12,
-    "status": "PROPOSED_AFTER_MIGRATION",
-    "total_window_max_days": 7,
-    "unchanged_fields_required": [
-      "original_policy_sha256",
-      "allowed_paths",
-      "allowed_operations",
-      "denied_operations",
-      "source_sha256",
-      "source_blob_oid"
-    ]
-  },
-  "break_glass_executor_may_merge_only_after_owner_approval_machine_gates_and_atomic_cutover_preconditions": true,
-  "break_glass_expires_at": "2026-07-29T16:22:46Z",
-  "desired_branch_protection": {
-    "approval_whitelist_user_ids": [
-      2
-    ],
-    "approval_whitelist_usernames": [
-      "owner"
-    ],
-    "block_on_official_review_requests": true,
-    "block_on_outdated_branch": true,
-    "block_on_rejected_reviews": true,
-    "branch_deletion": false,
-    "branch_patterns": [
-      "governance/approvals",
-      "main",
-      "release/**",
-      "integration/**"
-    ],
-    "direct_push": false,
-    "dismiss_stale_approvals": true,
-    "force_push": false,
-    "require_status_checks": true,
-    "required_approvals": 1,
-    "required_status_contexts": [
-      "aios/machine-gates",
-      "aios/secret-scan",
-      "aios/evidence-closure"
-    ],
-    "wip_blocks_merge": true
-  },
-  "executor_must_not_approve": true,
-  "expected_governance_base_oid": "ac2dc5c30eb35748ef11c98297812729d0fd5828",
-  "expires_at": "2026-07-29T16:22:46Z",
-  "global_constraints": {
-    "AIOS_GITOPS_WRITES_ENABLED": false,
-    "approval_impersonation": false,
-    "direct_main_push": false,
-    "fake_review": false,
-    "force_push": false,
-    "production_change_without_owner_approval": false,
-    "secret_commit": false,
-    "tag_rewrite": false
-  },
-  "governance_model": "SINGLE_OWNER_WITH_MACHINE_GATES_V1",
-  "historical_policy": {
-    "historical_manifests_modified": false,
-    "old_policy_decoder_retained_read_only": true,
-    "requests_created_before_policy_effective_at_use_old_policy": true
-  },
-  "issued_at": "2026-07-28T16:22:46Z",
-  "machine_gates": {
-    "development_branch": [
-      "allowed_branch",
-      "allowed_paths",
-      "compileall",
-      "targeted_tests",
-      "secret_scan",
-      "git_diff_check"
-    ],
-    "production": [
-      "owner_approval",
-      "tag_consistency",
-      "registry_consistency",
-      "deployment_plan",
-      "rollback_plan",
-      "artifact_integrity",
-      "production_preflight"
-    ],
-    "protected_branch_merge": [
-      "expected_base_oid",
-      "current_head_oid",
-      "ordinary_merge_commit",
-      "parent_order_verified",
-      "artifact_binding",
-      "audit_chain_valid"
-    ],
-    "release": [
-      "version_manifest",
-      "explicit_release_target_oid",
-      "artifact_sha256",
-      "rollback_artifact_sha256",
-      "sbom",
-      "test_evidence",
-      "evidence_closure"
-    ]
-  },
-  "merge_mode": "CREATE_MERGE_COMMIT",
-  "migration_acceptance_tests": [
-    "agent_request_pass",
-    "owner_current_head_approval_pass",
-    "machine_gates_then_merge_commit_pass",
-    "agent_self_approval_denied",
-    "non_owner_approval_denied",
-    "stale_head_approval_denied",
-    "wip_merge_denied",
-    "machine_test_failure_merge_denied",
-    "secret_scan_failure_merge_denied",
-    "main_direct_write_denied",
-    "tag_direct_write_denied",
-    "force_push_denied",
-    "missing_tag_target_oid_denied",
-    "missing_evidence_closure_oid_denied",
-    "production_without_owner_denied",
-    "dormant_only_production_activation_denied"
-  ],
-  "migration_mode": "OWNER_BREAK_GLASS_GOVERNANCE_RESET",
-  "new_policy": "SINGLE_OWNER_WITH_MACHINE_GATES_V1",
-  "old_policy": "DUAL_HUMAN_APPROVAL",
-  "owner_approval_contract": {
-    "dismissed": false,
-    "does_not_claim_old_dual_approval_compliance": true,
-    "head_change_invalidates_owner_approval": true,
-    "owner_review_is_break_glass_signature": true,
-    "review_created_before_approval_expires_at": true,
-    "review_state": "APPROVED",
-    "reviewed_head_oid_must_equal_current_pr_head_oid": true,
-    "reviewer_must_equal": "owner",
-    "stale": false
-  },
-  "owner_break_glass_declaration_to_be_attested_by_review": {
-    "attestation_status": "PENDING_OWNER_REVIEW",
-    "expires_at": "2026-07-29T16:22:46Z",
-    "new_policy": "SINGLE_OWNER_WITH_MACHINE_GATES_V1",
-    "old_policy": "DUAL_HUMAN_APPROVAL",
-    "owner_acknowledges_old_policy_exception": true,
-    "reason": "single-maintainer-system",
-    "scope": "governance-policy-migration-only"
-  },
-  "owner_is_only_human_approver": true,
-  "policy_effective_at": null,
-  "pre_approval_non_authorizations": {
-    "approval_validator_update_allowed": false,
-    "gitea_branch_protection_update_allowed": false,
-    "merge_allowed": false,
-    "old_dual_rule_disable_allowed": false,
-    "production_change_allowed": false,
-    "state_machine_update_allowed": false,
-    "writer_credential_issue_allowed": false
-  },
-  "prohibited_merge_modes": [
-    "squash",
-    "rebase",
-    "force",
-    "fast_forward_policy_bypass"
-  ],
-  "reason": "single-maintainer-system",
-  "repository": "aios/aios",
-  "request_status": "HUMAN_OWNER_APPROVAL_PENDING",
-  "requester_must_not_approve": true,
-  "requesters": [
-    "codex-chartgpt-bridge",
-    "aios-governance-agent",
-    "aios-release-agent",
-    "aios-governed-development-writer"
-  ],
-  "required_distinct_human_approvers": 1,
-  "required_human_approvals": 1,
-  "required_owner_approvals": 1,
-  "resolved_owner": {
-    "confidence_before_review": "MEDIUM",
-    "confirmation_rule": "valid APPROVED review by owner on this exact immutable head",
-    "email_sha256": "f5dc2928f6202c24fa4db8bb33db84e1b77c6eff30d1b95abdadeaae209bc4c9",
-    "identity_source": [
-      "gitea_repository_owner_account_aios_is_login_prohibited",
-      "all_login_enabled_site_admins_enumerated_owner_and_never_logged_in_service_gito",
-      "only_interactive_site_admin_named_owner",
-      "gitea_owner_last_login_present",
-      "historical_governance_records_use_approved_by_role_owner",
-      "user_declared_single_natural_person_maintainer"
-    ],
-    "login_enabled_site_admins": [
-      {
-        "observed_prior_login": true,
-        "user_id": 2,
-        "username": "owner"
-      },
-      {
-        "classification": "service_admin_not_human_approver",
-        "observed_prior_login": false,
-        "user_id": 3,
-        "username": "gito"
-      }
-    ],
-    "user_id": 2,
-    "username": "owner"
-  },
-  "schema": "aios.single-owner-governance-policy/v1",
-  "scope": "governance-policy-migration-only",
-  "standing_autonomous_development_policy": {
-    "allowed_without_repeated_owner_approval": [
-      "patch_branch_create",
-      "allowlisted_development_write",
-      "patch_branch_commit_and_push",
-      "test_execute",
-      "artifact_build",
-      "approval_pr_create",
-      "read_only_evidence",
-      "task_writer_renewal"
-    ],
-    "owner_approval_still_required": [
-      "protected_branch_merge",
-      "tag",
-      "registry_update",
-      "production_baseline_update",
-      "production_deploy",
-      "production_rollback",
-      "governance_policy_change"
-    ],
-    "status": "PROPOSED_AFTER_MIGRATION"
-  },
-  "standing_single_owner_governance_migration_authorization": true,
-  "state_machine": {
-    "auto_merge_ready_state": "AUTO_MERGE_READY",
-    "execution_ready_state": "OWNER_APPROVED_EXECUTION_READY",
-    "machine_verified_state": "MACHINE_GATES_VERIFIED",
-    "owner_approval_alone_is_not_execution_ready": true,
-    "owner_verified_state": "OWNER_APPROVAL_VERIFIED",
-    "pending_state": "HUMAN_OWNER_APPROVAL_PENDING"
-  },
-  "task_id": "AIOS-SINGLE-OWNER-GOVERNANCE-MIGRATION-20260729",
-  "this_manifest_authorizes_only_governance_policy_migration": true,
-  "this_manifest_grants_standing_development_authorization": false
-}
@@ -1,49 +0,0 @@
-{
-  "schema": "aios.gitea-native-approval/v1",
-  "approval_type": "IMPLEMENTATION",
-  "task_id": "AIOS-INTEGRATION-REFRESH-PROVISIONER-IMPLEMENTATION-20260726",
-  "repository": "aios/aios",
-  "branch": "patch/integration-refresh-grant-provisioner-20260726",
-  "base_oid": "875d41c3101093149414292067fd700dc214d4d3",
-  "actor_identity": "chatgpt-gitops-bot",
-  "writer_audience": "aios-integration-refresh-provisioner-development-writer",
-  "risk": "high",
-  "allowed_paths": [
-    "active-runtime/app/**",
-    "tests/test_integration_refresh_provisioner.py",
-    "tests/test_isolated_writer_integration_merge.py",
-    "tests/test_gitea_branch_read_projection.py",
-    "tests/test_isolated_writer_token_policy_v2.py",
-    "deploy/systemd/aios-integration-refresh-*.service",
-    "docs/autonomous-release/**"
-  ],
-  "allowed_operations": [
-    "repository.source_map.read",
-    "runtime.unit_metadata.read",
-    "git.ref.read",
-    "git.diff.read",
-    "git.branch.patch.create",
-    "commit_file.atomic",
-    "git.push.patch_branch",
-    "test.execute.allowlisted",
-    "artifact.build.control_plane_patch",
-    "evidence.write.task_runtime"
-  ],
-  "denied_operations": [
-    "main.write",
-    "main.merge",
-    "tag.write",
-    "tag.delete",
-    "tag.rewrite",
-    "force_push",
-    "history.rewrite",
-    "baseline.write",
-    "registry.write",
-    "production.deploy",
-    "production.rollback",
-    "secret.read",
-    "secret.export",
-    "bare_ref_direct_write"
-  ],
-  "expires_at": "2026-07-27T03:35:55Z"
-}
@@ -1,49 +0,0 @@
-{
-  "schema": "aios.gitea-native-approval/v1",
-  "approval_type": "IMPLEMENTATION",
-  "task_id": "AIOS-INTEGRATION-REFRESH-PROVISIONER-IMPLEMENTATION-20260726",
-  "repository": "aios/aios",
-  "branch": "patch/integration-refresh-grant-provisioner-20260726",
-  "base_oid": "875d41c3101093149414292067fd700dc214d4d3",
-  "actor_identity": "chatgpt-gitops-bot",
-  "writer_audience": "aios-integration-refresh-provisioner-development-writer",
-  "risk": "high",
-  "allowed_paths": [
-    "active-runtime/app/**",
-    "tests/test_integration_refresh_provisioner.py",
-    "tests/test_isolated_writer_integration_merge.py",
-    "tests/test_gitea_branch_read_projection.py",
-    "tests/test_isolated_writer_token_policy_v2.py",
-    "deploy/systemd/aios-integration-refresh-*.service",
-    "docs/autonomous-release/**"
-  ],
-  "allowed_operations": [
-    "repository.source_map.read",
-    "runtime.unit_metadata.read",
-    "git.ref.read",
-    "git.diff.read",
-    "git.branch.patch.create",
-    "commit_file.atomic",
-    "git.push.patch_branch",
-    "test.execute.allowlisted",
-    "artifact.build.control_plane_patch",
-    "evidence.write.task_runtime"
-  ],
-  "denied_operations": [
-    "main.write",
-    "main.merge",
-    "tag.write",
-    "tag.delete",
-    "tag.rewrite",
-    "force_push",
-    "history.rewrite",
-    "baseline.write",
-    "registry.write",
-    "production.deploy",
-    "production.rollback",
-    "secret.read",
-    "secret.export",
-    "bare_ref_direct_write"
-  ],
-  "expires_at": "2026-07-27T13:00:11Z"
-}
@@ -1,73 +0,0 @@
-{
-  "approval_type": "SINGLE_OWNER_GOVERNANCE_LIVE_ACTIVATION_IMPLEMENTATION_AND_EXECUTION",
-  "artifact_sha256": "01e0226f0302bb8e2f8d81299393075bf0332c6e22e00877469fb297c51f3802",
-  "authorization_scope": [
-    "deploy_live_activation_implementation",
-    "execute_one_atomic_governance_activation",
-    "execute_acceptance_tests",
-    "control_plane_rollback_on_failure",
-    "write_activation_receipt"
-  ],
-  "denied_operations": [
-    "main.write",
-    "integration.write",
-    "tag.write",
-    "registry.write",
-    "baseline.write",
-    "production.deploy",
-    "force_push",
-    "history_rewrite"
-  ],
-  "evidence_closure_oid": "c6316943d2485f06f97242df6338ded21de1ee38",
-  "evidence_closure_sha256": "bd521103c907d6194acbbbd42a947c5af2ccbda91797e5dc75e81887a042becd",
-  "execution_binding": {
-    "backend": "sqlite",
-    "branch": "governance/approvals",
-    "evidence_closure_oid": "c6316943d2485f06f97242df6338ded21de1ee38",
-    "executor": "aios-governance-single-owner-activation",
-    "expected_branch_protection_sha256": "f27992c8024426708d93bce072d231707bae47a927aa2393d566aae64d5ed079",
-    "expected_gitea_schema_sha256": "3524f4912165939cb746c2c65d70583a909f5abbd00c4e07ae76f7206d49aa54",
-    "expected_state_machine_sha256": "0b08a2c378d143cb9031a25132afc7b7d825bdc03d11efe10610341d4b70167e",
-    "expected_validator_sha256": "754639846cb15cb997d612a1fe0ceb0224ddef5bbc3ccac9802a3747f122dac1",
-    "forbidden_operations": {
-      "baseline": false,
-      "force_push": false,
-      "governance_direct": false,
-      "history_rewrite": false,
-      "integration": false,
-      "main": false,
-      "production": false,
-      "registry": false,
-      "tags": false
-    },
-    "operation_id": "single-owner-live-activation-20260729T033228Z",
-    "repo_id": 1,
-    "requester": "codex-agent",
-    "target_branch_protection_sha256": "61b424b0c495eed71c73171c5c4434ac66d074de36886a73ec4c445fd1905db8",
-    "task_id": "AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729"
-  },
-  "execution_binding_sha256": "6b2ed671a94fa83704383728fd2bb2df3b67523b4273100fa371777d984be102",
-  "expected_governance_base_oid": "8b7f9d9028f6ff9beb225bf85f53dbeaac6830e7",
-  "expires_at": "2026-07-29T15:32:28Z",
-  "human_authorizer": "owner",
-  "implementation_commit_oid": "e1e438564ce8b987a36df0947e6eaa324dfede74",
-  "implementation_tree_oid": "dd93dc1df10cb8b8fe59b09d3214a9ae6fee671e",
-  "issued_at": "2026-07-29T03:32:28Z",
-  "legacy_mechanical_approvals": [
-    "codex",
-    "gpt"
-  ],
-  "machine_gate_contexts": [
-    "aios/branch-protection",
-    "aios/evidence-closure",
-    "aios/secret-scan",
-    "aios/state-machine",
-    "aios/validator"
-  ],
-  "pr30_merge_oid": "f6bef90633f428454e85721f353cd82cdf04caf0",
-  "pr31_merge_oid": "8b7f9d9028f6ff9beb225bf85f53dbeaac6830e7",
-  "rollback_artifact_sha256": "ed9307cc2f07767b75866fcb370fa3f98b76c5147e4b7fc49ecf04cf21cf7c31",
-  "signed_merge_requirement_effective": false,
-  "task_id": "AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729",
-  "test_evidence_sha256": "172a7cf812c6b901524138fb72851a9b7d2e895dedc98893407d0bab9b52c6c1"
-}
@@ -1,171 +0,0 @@
-{
-  "approval_type": "SINGLE_OWNER_GOVERNANCE_LIVE_ACTIVATION_IMPLEMENTATION_AND_EXECUTION",
-  "artifact_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729/artifacts/hardening-71def340e7cc34f4f19918dcf8d3c847abbe4fbf/live-activation-71def340e7cc34f4f19918dcf8d3c847abbe4fbf.tar.gz",
-  "artifact_sha256": "32bc49c207ec454b6fd81b0484f5b257bb789481b37175995029a2ec78cc62fa",
-  "authorization_scope": [
-    "deploy_exact_approved_artifact",
-    "publish_exact_head_machine_statuses",
-    "execute_one_atomic_governance_activation",
-    "verify_and_rollback_exact_transaction"
-  ],
-  "denied_operations": [
-    "main.write",
-    "integration.write",
-    "tag.write",
-    "registry.write",
-    "baseline.write",
-    "production.deploy",
-    "force_push",
-    "history_rewrite"
-  ],
-  "evidence_closure_blob_oid": "6af6d017f22c4e0c512b0cd62644cdc6ab2135d5",
-  "evidence_closure_oid": "310ab2af902a9fde9108d227077f433cc743ce7c",
-  "evidence_closure_path": "evidence/single-owner-governance/AIOS-SINGLE-OWNER-LIVE-ACTIVATION-HARDENING-20260729T043010Z.json",
-  "evidence_closure_sha256": "e482fe52c8381f765ee508d2de1fe2e77dff52e6e342f01be4ca481ff2f76820",
-  "execution_binding": {
-    "artifact_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729/artifacts/hardening-71def340e7cc34f4f19918dcf8d3c847abbe4fbf/live-activation-71def340e7cc34f4f19918dcf8d3c847abbe4fbf.tar.gz",
-    "artifact_sha256": "32bc49c207ec454b6fd81b0484f5b257bb789481b37175995029a2ec78cc62fa",
-    "backend": "sqlite",
-    "branch": "governance/approvals",
-    "evidence_closure_oid": "310ab2af902a9fde9108d227077f433cc743ce7c",
-    "evidence_closure_path": "evidence/single-owner-governance/AIOS-SINGLE-OWNER-LIVE-ACTIVATION-HARDENING-20260729T043010Z.json",
-    "evidence_closure_sha256": "e482fe52c8381f765ee508d2de1fe2e77dff52e6e342f01be4ca481ff2f76820",
-    "executor": "aios-governance-single-owner-activation",
-    "expected_branch_protection_sha256": "f27992c8024426708d93bce072d231707bae47a927aa2393d566aae64d5ed079",
-    "expected_gitea_schema_sha256": "3524f4912165939cb746c2c65d70583a909f5abbd00c4e07ae76f7206d49aa54",
-    "expected_state_machine_sha256": "0b08a2c378d143cb9031a25132afc7b7d825bdc03d11efe10610341d4b70167e",
-    "expected_validator_sha256": "754639846cb15cb997d612a1fe0ceb0224ddef5bbc3ccac9802a3747f122dac1",
-    "forbidden_operations": {
-      "baseline": false,
-      "force_push": false,
-      "governance_direct": false,
-      "history_rewrite": false,
-      "integration": false,
-      "main": false,
-      "production": false,
-      "registry": false,
-      "tags": false
-    },
-    "implementation_commit_oid": "71def340e7cc34f4f19918dcf8d3c847abbe4fbf",
-    "implementation_tree_oid": "3cc61bfbf69cbe0a24d54a0e53a6c50bcc130066",
-    "machine_status_producer_id": 13,
-    "machine_status_producer_name": "gitops-bot",
-    "operation_id": "single-owner-live-activation-hardening-20260729T043149Z",
-    "repo_id": 1,
-    "requester": "codex-agent",
-    "rollback_artifact_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729/artifacts/hardening-71def340e7cc34f4f19918dcf8d3c847abbe4fbf/live-activation-rollback-71def340e7cc34f4f19918dcf8d3c847abbe4fbf.tar.gz",
-    "rollback_artifact_sha256": "4efe1ea73d4fd72e5364fc91a16ad5e9d1e6ebe78d8aa466f7b11c4915b08403",
-    "runtime_sources": [
-      {
-        "git_path": "services/aios-single-owner-governance/aios_single_owner_governance/activation.py",
-        "runtime_path": "/opt/aios/single-owner-governance/releases/71def340e7cc34f4f19918dcf8d3c847abbe4fbf/services/aios-single-owner-governance/aios_single_owner_governance/activation.py",
-        "sha256": "48846a58fa3afb2b7c8ffe6e88504a9333863932df867f33ba0321ad3bac6003"
-      },
-      {
-        "git_path": "services/aios-single-owner-governance/aios_single_owner_governance/gitea_protected_branch.py",
-        "runtime_path": "/opt/aios/single-owner-governance/releases/71def340e7cc34f4f19918dcf8d3c847abbe4fbf/services/aios-single-owner-governance/aios_single_owner_governance/gitea_protected_branch.py",
-        "sha256": "00775efe3f3d631d88379eff4ed2dcfaf386a2fa43111abe961e75109e80d768"
-      },
-      {
-        "git_path": "services/aios-single-owner-governance/aios_single_owner_governance/journal.py",
-        "runtime_path": "/opt/aios/single-owner-governance/releases/71def340e7cc34f4f19918dcf8d3c847abbe4fbf/services/aios-single-owner-governance/aios_single_owner_governance/journal.py",
-        "sha256": "a8f121245e04487d99c99fb03ada83f0c907723f8eb18552872ff46dcf5a7873"
-      },
-      {
-        "git_path": "services/aios-single-owner-governance/aios_single_owner_governance/state_machine.py",
-        "runtime_path": "/opt/aios/single-owner-governance/releases/71def340e7cc34f4f19918dcf8d3c847abbe4fbf/services/aios-single-owner-governance/aios_single_owner_governance/state_machine.py",
-        "sha256": "0b08a2c378d143cb9031a25132afc7b7d825bdc03d11efe10610341d4b70167e"
-      },
-      {
-        "git_path": "services/aios-single-owner-governance/aios_single_owner_governance/validator.py",
-        "runtime_path": "/opt/aios/single-owner-governance/releases/71def340e7cc34f4f19918dcf8d3c847abbe4fbf/services/aios-single-owner-governance/aios_single_owner_governance/validator.py",
-        "sha256": "754639846cb15cb997d612a1fe0ceb0224ddef5bbc3ccac9802a3747f122dac1"
-      }
-    ],
-    "target_branch_protection_sha256": "4713f0494b79103668fbe5bd8fd7da5d60a43e56fb545aa6e7c773f43dc07c10",
-    "task_id": "AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729",
-    "test_evidence_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729/artifacts/hardening-71def340e7cc34f4f19918dcf8d3c847abbe4fbf/test-evidence-71def340e7cc34f4f19918dcf8d3c847abbe4fbf.json",
-    "test_evidence_sha256": "c1633732767f3f051ffb01404d12d05a6168a4b01b91efdb34a64988d6dee684"
-  },
-  "execution_binding_sha256": "63705dd0f5cc25debde132179f96819a844a9703b33c092db4ac48d5680d536a",
-  "expected_governance_base_oid": "1071979079deab8a4028473d967c2a205c3b111e",
-  "expires_at": "2026-07-29T16:31:49Z",
-  "human_authorizer": "owner",
-  "implementation_commit_oid": "71def340e7cc34f4f19918dcf8d3c847abbe4fbf",
-  "implementation_tree_oid": "3cc61bfbf69cbe0a24d54a0e53a6c50bcc130066",
-  "issued_at": "2026-07-29T04:31:49Z",
-  "legacy_mechanical_approvals": [
-    "codex",
-    "gpt"
-  ],
-  "machine_gate_contexts": [
-    "aios/branch-protection",
-    "aios/evidence-closure",
-    "aios/secret-scan",
-    "aios/state-machine",
-    "aios/validator"
-  ],
-  "machine_status_producer_id": 13,
-  "machine_status_producer_name": "gitops-bot",
-  "rollback_artifact_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729/artifacts/hardening-71def340e7cc34f4f19918dcf8d3c847abbe4fbf/live-activation-rollback-71def340e7cc34f4f19918dcf8d3c847abbe4fbf.tar.gz",
-  "rollback_artifact_sha256": "4efe1ea73d4fd72e5364fc91a16ad5e9d1e6ebe78d8aa466f7b11c4915b08403",
-  "runtime_sources": [
-    {
-      "git_path": "services/aios-single-owner-governance/aios_single_owner_governance/activation.py",
-      "runtime_path": "/opt/aios/single-owner-governance/releases/71def340e7cc34f4f19918dcf8d3c847abbe4fbf/services/aios-single-owner-governance/aios_single_owner_governance/activation.py",
-      "sha256": "48846a58fa3afb2b7c8ffe6e88504a9333863932df867f33ba0321ad3bac6003"
-    },
-    {
-      "git_path": "services/aios-single-owner-governance/aios_single_owner_governance/gitea_protected_branch.py",
-      "runtime_path": "/opt/aios/single-owner-governance/releases/71def340e7cc34f4f19918dcf8d3c847abbe4fbf/services/aios-single-owner-governance/aios_single_owner_governance/gitea_protected_branch.py",
-      "sha256": "00775efe3f3d631d88379eff4ed2dcfaf386a2fa43111abe961e75109e80d768"
-    },
-    {
-      "git_path": "services/aios-single-owner-governance/aios_single_owner_governance/journal.py",
-      "runtime_path": "/opt/aios/single-owner-governance/releases/71def340e7cc34f4f19918dcf8d3c847abbe4fbf/services/aios-single-owner-governance/aios_single_owner_governance/journal.py",
-      "sha256": "a8f121245e04487d99c99fb03ada83f0c907723f8eb18552872ff46dcf5a7873"
-    },
-    {
-      "git_path": "services/aios-single-owner-governance/aios_single_owner_governance/state_machine.py",
-      "runtime_path": "/opt/aios/single-owner-governance/releases/71def340e7cc34f4f19918dcf8d3c847abbe4fbf/services/aios-single-owner-governance/aios_single_owner_governance/state_machine.py",
-      "sha256": "0b08a2c378d143cb9031a25132afc7b7d825bdc03d11efe10610341d4b70167e"
-    },
-    {
-      "git_path": "services/aios-single-owner-governance/aios_single_owner_governance/validator.py",
-      "runtime_path": "/opt/aios/single-owner-governance/releases/71def340e7cc34f4f19918dcf8d3c847abbe4fbf/services/aios-single-owner-governance/aios_single_owner_governance/validator.py",
-      "sha256": "754639846cb15cb997d612a1fe0ceb0224ddef5bbc3ccac9802a3747f122dac1"
-    }
-  ],
-  "target_branch_protection": {
-    "approvals_whitelist_team_i_ds": "null",
-    "approvals_whitelist_user_i_ds": "[2]",
-    "block_on_official_review_requests": 1,
-    "block_on_outdated_branch": 1,
-    "block_on_rejected_reviews": 1,
-    "branch_name": "governance/approvals",
-    "can_push": 0,
-    "created_unix": 1785093201,
-    "dismiss_stale_approvals": 1,
-    "enable_approvals_whitelist": 1,
-    "enable_merge_whitelist": 1,
-    "enable_status_check": 1,
-    "enable_whitelist": 0,
-    "id": 1,
-    "ignore_stale_approvals": 0,
-    "merge_whitelist_team_i_ds": "null",
-    "merge_whitelist_user_i_ds": "[42,43]",
-    "protected_file_patterns": "",
-    "repo_id": 1,
-    "require_signed_commits": 0,
-    "required_approvals": 1,
-    "status_check_contexts": "[\"aios/branch-protection\",\"aios/evidence-closure\",\"aios/secret-scan\",\"aios/state-machine\",\"aios/validator\"]",
-    "unprotected_file_patterns": "",
-    "updated_unix": 1785299509,
-    "whitelist_deploy_keys": 0,
-    "whitelist_team_i_ds": "null",
-    "whitelist_user_i_ds": "null"
-  },
-  "task_id": "AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729",
-  "test_evidence_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729/artifacts/hardening-71def340e7cc34f4f19918dcf8d3c847abbe4fbf/test-evidence-71def340e7cc34f4f19918dcf8d3c847abbe4fbf.json",
-  "test_evidence_sha256": "c1633732767f3f051ffb01404d12d05a6168a4b01b91efdb34a64988d6dee684"
-}
@@ -1,151 +0,0 @@
-{
-  "actor_identity": "chatgpt-gitops-bot",
-  "allowed_operations": [
-    "runtime.source.read.exact",
-    "runtime.source.hash",
-    "runtime.unit_metadata.read",
-    "package.ownership.read",
-    "git.object.lookup.by_blob_oid",
-    "secret.scan.local_source",
-    "repository.source_import.byte_exact",
-    "repository.module.create",
-    "source_map.evidence.write",
-    "git.branch.patch.create",
-    "commit_file.atomic",
-    "git.push.patch_branch",
-    "test.execute.allowlisted",
-    "artifact.build.control_plane_patch",
-    "evidence.write.task_runtime"
-  ],
-  "allowed_paths": [
-    "active-runtime/app/aios_autonomous_release_authorization/**",
-    "active-runtime/app/aios_chatgpt_action_task_router/**",
-    "active-runtime/app/aios_isolated_writer_api/**",
-    "tests/test_integration_refresh_provisioner.py",
-    "tests/test_isolated_writer_integration_merge.py",
-    "tests/test_gitea_branch_read_projection.py",
-    "tests/test_isolated_writer_token_policy_v2.py",
-    "deploy/systemd/aios-integration-refresh-*.service",
-    "docs/autonomous-release/**"
-  ],
-  "allowed_runtime_reads": [
-    "/usr/libexec/aios-autonomous-release-authorization/controller.py",
-    "/usr/libexec/aios-chatgpt-action-task-router-continuous-20260726/action_task_router.py"
-  ],
-  "approval_type": "SOURCE_MAPPING_AND_IMPORT",
-  "canonical_paths": {
-    "controller": "active-runtime/app/aios_autonomous_release_authorization/controller.py",
-    "isolated_writer_api": "active-runtime/app/aios_isolated_writer_api/**",
-    "router": "active-runtime/app/aios_chatgpt_action_task_router/action_task_router.py"
-  },
-  "denied_operations": [
-    "secret.value.return",
-    "secret.matching_line.return",
-    "secret.context.return",
-    "runtime.source.modify",
-    "runtime.unit.modify",
-    "arbitrary_path.read",
-    "secret.read.by_agent",
-    "secret.export",
-    "main.write",
-    "main.merge",
-    "governance.approvals.direct_write",
-    "integration.write",
-    "tag.write",
-    "tag.delete",
-    "tag.rewrite",
-    "force_push",
-    "history.rewrite",
-    "bare_ref_direct_write",
-    "baseline.write",
-    "registry.write",
-    "production.deploy",
-    "production.rollback"
-  ],
-  "expires_at": "2026-07-27T22:36:27Z",
-  "extends_approval_merge_oid": "45f3226662965c8d41ec1775e8c8857f2b986397",
-  "finding_policy": {
-    "controller_byte_exact_import_allowed": true,
-    "controller_finding_status": "PASS",
-    "controller_sanitized_source_creation_allowed": false,
-    "finding_classification_by_automation": "PROHIBITED",
-    "isolated_writer_api_module_create_allowed": true,
-    "matching_source_lines_disclosed": false,
-    "router_byte_exact_import_allowed": true,
-    "router_finding_status": "PASS",
-    "router_sanitized_source_creation_allowed": false,
-    "scan_decision": "MAPPING_IMPORT_ONLY",
-    "secret_content_disclosed": false
-  },
-  "implementation_base_oid": "875d41c3101093149414292067fd700dc214d4d3",
-  "implementation_branch": "patch/integration-refresh-grant-provisioner-20260726",
-  "issued_at": "2026-07-27T10:36:27Z",
-  "repository": "aios/aios",
-  "required_controls": {
-    "controller_finding_must_be_resolved": false,
-    "controller_import_blob_must_equal_runtime_blob": true,
-    "controller_import_must_be_byte_exact": true,
-    "controller_import_sha256_must_equal_runtime_sha256": true,
-    "dual_human_approval_required": true,
-    "global_gitops_writes_must_remain_disabled": true,
-    "new_task_bound_grant_required": true,
-    "old_implementation_token_auth_status": 401,
-    "old_implementation_writer_revoked": true,
-    "old_secret_revocation_must_be_verified": false,
-    "router_finding_must_be_resolved": false,
-    "router_import_blob_must_equal_runtime_blob": true,
-    "router_import_must_be_byte_exact": true,
-    "router_import_sha256_must_equal_runtime_sha256": true,
-    "sanitized_source_behavioral_equivalence_required": false,
-    "sanitized_source_secret_scan_must_pass": false,
-    "true_positive_requires_rotation": false
-  },
-  "risk": "high",
-  "runtime_source_evidence": {
-    "controller": {
-      "finding_count": 0,
-      "findings": [],
-      "git_blob_oid": "9c68be36e0b6a18260e3099e3d7b0dcab6d814aa",
-      "group_gid": 0,
-      "mode": "0o700",
-      "mtime_ns": 1785043975531298047,
-      "owner_uid": 0,
-      "package_owner": "UNPACKAGED",
-      "referencing_systemd_units": [
-        "aios-autonomous-release-authorization-controller.service"
-      ],
-      "resolved_path": "/usr/libexec/aios-autonomous-release-authorization/controller.py",
-      "secret_content_returned": false,
-      "secret_scan": "PASS",
-      "sha256": "39b532c3058c4ae49ed691d7c66c3b7745a25111fa61039f388c8335fd262c50",
-      "size": 24204,
-      "utf8_python": true
-    },
-    "isolated_writer_api": {
-      "canonical_source_path": "NOT_ESTABLISHED",
-      "runtime_module_status": "ABSENT"
-    },
-    "router": {
-      "finding_count": 0,
-      "findings": [],
-      "git_blob_oid": "ee0595ca61a0598f8cb3dc10865a255e21679b2a",
-      "group_gid": 0,
-      "mode": "0o644",
-      "mtime_ns": 1785042222580725999,
-      "owner_uid": 0,
-      "package_owner": "UNPACKAGED",
-      "referencing_systemd_units": [
-        "aios-chatgpt-autonomous-release-route.service"
-      ],
-      "resolved_path": "/usr/libexec/aios-chatgpt-action-task-router-continuous-20260726/action_task_router.py",
-      "secret_content_returned": false,
-      "secret_scan": "PASS",
-      "sha256": "738fb7035a6b792115d6467b4d1e4ffd47a8c5d5646f7032ebc68ea587cbd554",
-      "size": 25952,
-      "utf8_python": true
-    }
-  },
-  "schema": "aios.gitea-native-approval/v1",
-  "task_id": "AIOS-INTEGRATION-REFRESH-PROVISIONER-IMPLEMENTATION-20260726",
-  "writer_audience": "aios-integration-refresh-provisioner-development-writer"
-}
@@ -1,157 +0,0 @@
-{
-  "actor_identity": "chatgpt-gitops-bot",
-  "allowed_operations": [
-    "runtime.source.read.exact",
-    "runtime.source.hash",
-    "runtime.unit_metadata.read",
-    "package.ownership.read",
-    "git.object.lookup.by_blob_oid",
-    "secret.scan.local_source",
-    "repository.source_import.byte_exact",
-    "repository.module.create",
-    "source_map.evidence.write",
-    "git.branch.patch.create",
-    "commit_file.atomic",
-    "git.push.patch_branch",
-    "test.execute.allowlisted",
-    "artifact.build.control_plane_patch",
-    "evidence.write.task_runtime"
-  ],
-  "allowed_paths": [
-    "active-runtime/app/aios_autonomous_release_authorization/**",
-    "active-runtime/app/aios_chatgpt_action_task_router/**",
-    "active-runtime/app/aios_isolated_writer_api/**",
-    "tests/test_integration_refresh_provisioner.py",
-    "tests/test_isolated_writer_integration_merge.py",
-    "tests/test_gitea_branch_read_projection.py",
-    "tests/test_isolated_writer_token_policy_v2.py",
-    "deploy/systemd/aios-integration-refresh-*.service",
-    "docs/autonomous-release/**"
-  ],
-  "allowed_runtime_reads": [
-    "/usr/libexec/aios-autonomous-release-authorization/controller.py",
-    "/usr/libexec/aios-chatgpt-action-task-router-continuous-20260726/action_task_router.py"
-  ],
-  "approval_type": "SOURCE_MAPPING_AND_IMPORT_EXECUTION_RENEWAL",
-  "canonical_paths": {
-    "controller": "active-runtime/app/aios_autonomous_release_authorization/controller.py",
-    "isolated_writer_api": "active-runtime/app/aios_isolated_writer_api/**",
-    "router": "active-runtime/app/aios_chatgpt_action_task_router/action_task_router.py"
-  },
-  "denied_operations": [
-    "secret.value.return",
-    "secret.matching_line.return",
-    "secret.context.return",
-    "runtime.source.modify",
-    "runtime.unit.modify",
-    "arbitrary_path.read",
-    "secret.read.by_agent",
-    "secret.export",
-    "main.write",
-    "main.merge",
-    "governance.approvals.direct_write",
-    "integration.write",
-    "tag.write",
-    "tag.delete",
-    "tag.rewrite",
-    "force_push",
-    "history.rewrite",
-    "bare_ref_direct_write",
-    "baseline.write",
-    "registry.write",
-    "production.deploy",
-    "production.rollback"
-  ],
-  "expected_governance_base_oid": "9514062cf33e45941abe4a8c98377e0713b0b3f6",
-  "expires_at": "2026-07-28T18:10:44Z",
-  "extends_approval_merge_oid": "45f3226662965c8d41ec1775e8c8857f2b986397",
-  "finding_policy": {
-    "controller_byte_exact_import_allowed": true,
-    "controller_finding_status": "PASS",
-    "controller_sanitized_source_creation_allowed": false,
-    "finding_classification_by_automation": "PROHIBITED",
-    "isolated_writer_api_module_create_allowed": true,
-    "matching_source_lines_disclosed": false,
-    "router_byte_exact_import_allowed": true,
-    "router_finding_status": "PASS",
-    "router_sanitized_source_creation_allowed": false,
-    "scan_decision": "MAPPING_IMPORT_ONLY",
-    "secret_content_disclosed": false
-  },
-  "implementation_base_oid": "875d41c3101093149414292067fd700dc214d4d3",
-  "implementation_branch": "patch/integration-refresh-grant-provisioner-20260726",
-  "issued_at": "2026-07-28T06:10:44Z",
-  "renews_source_mapping_approval_merge_oid": "9514062cf33e45941abe4a8c98377e0713b0b3f6",
-  "renews_source_mapping_manifest_blob_oid": "00c5e90e529cb98c7750a5761b0a0d6ccf507174",
-  "renews_source_mapping_manifest_sha256": "17af8ebc43673c0e46bb9ab1bf44497e8c147f1b4a9d7a8a404edd5c0abd6f21",
-  "repository": "aios/aios",
-  "required_controls": {
-    "controller_finding_must_be_resolved": false,
-    "controller_import_blob_must_equal_runtime_blob": true,
-    "controller_import_must_be_byte_exact": true,
-    "controller_import_sha256_must_equal_runtime_sha256": true,
-    "dual_human_approval_required": true,
-    "global_gitops_writes_must_remain_disabled": true,
-    "new_task_bound_grant_required": true,
-    "old_implementation_token_auth_status": 401,
-    "old_implementation_writer_revoked": true,
-    "old_secret_revocation_must_be_verified": false,
-    "router_finding_must_be_resolved": false,
-    "router_import_blob_must_equal_runtime_blob": true,
-    "router_import_must_be_byte_exact": true,
-    "router_import_sha256_must_equal_runtime_sha256": true,
-    "sanitized_source_behavioral_equivalence_required": false,
-    "sanitized_source_secret_scan_must_pass": false,
-    "true_positive_requires_rotation": false
-  },
-  "risk": "high",
-  "runtime_source_evidence": {
-    "controller": {
-      "finding_count": 0,
-      "findings": [],
-      "git_blob_oid": "9c68be36e0b6a18260e3099e3d7b0dcab6d814aa",
-      "group_gid": 0,
-      "mode": "0o700",
-      "mtime_ns": 1785043975531298047,
-      "owner_uid": 0,
-      "package_owner": "UNPACKAGED",
-      "referencing_systemd_units": [
-        "aios-autonomous-release-authorization-controller.service"
-      ],
-      "resolved_path": "/usr/libexec/aios-autonomous-release-authorization/controller.py",
-      "secret_content_returned": false,
-      "secret_scan": "PASS",
-      "sha256": "39b532c3058c4ae49ed691d7c66c3b7745a25111fa61039f388c8335fd262c50",
-      "size": 24204,
-      "utf8_python": true
-    },
-    "isolated_writer_api": {
-      "canonical_source_path": "NOT_ESTABLISHED",
-      "runtime_module_status": "ABSENT"
-    },
-    "observed_at": "2026-07-28T05:53:01.253909Z",
-    "router": {
-      "finding_count": 0,
-      "findings": [],
-      "git_blob_oid": "ee0595ca61a0598f8cb3dc10865a255e21679b2a",
-      "group_gid": 0,
-      "mode": "0o644",
-      "mtime_ns": 1785042222580725999,
-      "owner_uid": 0,
-      "package_owner": "UNPACKAGED",
-      "referencing_systemd_units": [
-        "aios-chatgpt-autonomous-release-route.service"
-      ],
-      "resolved_path": "/usr/libexec/aios-chatgpt-action-task-router-continuous-20260726/action_task_router.py",
-      "secret_content_returned": false,
-      "secret_scan": "PASS",
-      "sha256": "738fb7035a6b792115d6467b4d1e4ffd47a8c5d5646f7032ebc68ea587cbd554",
-      "size": 25952,
-      "utf8_python": true
-    }
-  },
-  "runtime_source_read_projection_evidence_sha256": "23f03d9c6abe6f11e1acda5210b8708696e3b77caa0083b6bfaef30a44b2a35f",
-  "schema": "aios.gitea-native-approval/v1",
-  "task_id": "AIOS-INTEGRATION-REFRESH-PROVISIONER-IMPLEMENTATION-20260726",
-  "writer_audience": "aios-integration-refresh-provisioner-development-writer"
-}
@@ -0,0 +1,26 @@
+[Unit]
+Description=AIOS dormant single-owner machine-status prerequisite
+RefuseManualStop=no
+
+[Service]
+Type=oneshot
+User=aiman
+Group=gitops
+Environment=AIOS_SINGLE_OWNER_GOVERNANCE_ENABLED=false
+Environment=AIOS_SINGLE_OWNER_ACTIVATION_ACTIVE=false
+Environment=AIOS_GITOPS_WRITES_ENABLED=false
+ExecStart=/usr/bin/python3 -m aios_single_owner_governance.service --component machine-status-producer --self-check --checkpoint-dir /var/lib/aios-gitops/runtime/single-owner-governance
+NoNewPrivileges=true
+PrivateTmp=true
+PrivateDevices=true
+ProtectSystem=strict
+ProtectHome=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictSUIDSGID=true
+LockPersonality=true
+MemoryDenyWriteExecute=true
+RestrictAddressFamilies=AF_UNIX
+ReadOnlyPaths=/data/aios-gitops/repo.git
+ReadWritePaths=/var/lib/aios-gitops/runtime/single-owner-governance
@@ -0,0 +1,26 @@
+[Unit]
+Description=AIOS dormant single-owner review adapter prerequisite
+RefuseManualStop=no
+
+[Service]
+Type=oneshot
+User=aiman
+Group=gitops
+Environment=AIOS_SINGLE_OWNER_GOVERNANCE_ENABLED=false
+Environment=AIOS_SINGLE_OWNER_ACTIVATION_ACTIVE=false
+Environment=AIOS_GITOPS_WRITES_ENABLED=false
+ExecStart=/usr/bin/python3 -m aios_single_owner_governance.service --component owner-review-adapter --self-check --checkpoint-dir /var/lib/aios-gitops/runtime/single-owner-governance
+NoNewPrivileges=true
+PrivateTmp=true
+PrivateDevices=true
+ProtectSystem=strict
+ProtectHome=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictSUIDSGID=true
+LockPersonality=true
+MemoryDenyWriteExecute=true
+RestrictAddressFamilies=AF_UNIX
+ReadOnlyPaths=/data/aios-gitops/repo.git
+ReadWritePaths=/var/lib/aios-gitops/runtime/single-owner-governance
@@ -0,0 +1,20 @@
+[Unit]
+Description=AIOS single-owner governance activation verifier
+ConditionPathExists=/etc/aios-gitops/single-owner-activation-bindings.json
+
+[Service]
+Type=oneshot
+User=root
+Group=gitops
+Environment=AIOS_GITOPS_WRITES_ENABLED=false
+ExecStart=/usr/bin/aios-single-owner-governance --verify --bindings /etc/aios-gitops/single-owner-activation-bindings.json --state-root /var/lib/aios-gitops/governance-activation --lock-path /run/aios-gitops/governance-activation.lock
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectHome=true
+ProtectSystem=strict
+ReadWritePaths=/var/lib/aios-gitops/governance-activation /run/aios-gitops
+RestrictSUIDSGID=true
+UMask=0027
+
+# Deliberately not installable. Deployment remains disabled/inactive;
+# activation is an explicit approved CLI transaction, never an always-on unit.
@@ -1,24 +0,0 @@
-[Unit]
-Description=AIOS root task credential broker (%i)
-ConditionPathExists=/var/lib/aios-gitops/runtime/task-status-merge/%i/grant.json
-
-[Service]
-Type=oneshot
-User=root
-Group=root
-LoadCredentialEncrypted=audit-key:/run/aios-task-credential-broker/%i-audit.cred
-ExecStart=/usr/bin/python3 -m aios_single_owner_governance.task_credential_broker --grant /var/lib/aios-gitops/runtime/task-status-merge/%i/grant.json --grant-signature /var/lib/aios-gitops/runtime/task-status-merge/%i/grant.sig --allowed-signers /etc/aios-gitops/task-status-merge/allowed_signers --audit-key %d/audit-key --audit-dir /var/lib/aios-gitops/runtime/task-status-merge/%i/audit --request /var/lib/aios-gitops/runtime/task-status-merge/%i/credential-request.json
-Environment=AIOS_GITOPS_WRITES_ENABLED=false
-NoNewPrivileges=false
-PrivateTmp=true
-PrivateDevices=true
-ProtectSystem=strict
-ProtectHome=true
-ReadOnlyPaths=/data/aios-gitops/runtime/bin/gitea /data/aios-gitops/runtime/gitea-bin/custom/conf/app.ini /var/lib/aios-gitops/runtime/task-status-merge/%i/grant.json /var/lib/aios-gitops/runtime/task-status-merge/%i/grant.sig /var/lib/aios-gitops/runtime/task-status-merge/%i/credential-request.json /etc/aios-gitops/task-status-merge/allowed_signers /data/aios-gitops/runtime/gitea-bin/data/actions_artifacts /data/aios-gitops/runtime/gitea-bin/data/actions_log /data/aios-gitops/runtime/gitea-bin/data/attachments /data/aios-gitops/runtime/gitea-bin/data/avatars /data/aios-gitops/runtime/gitea-bin/data/gitea.db.bak.20260708133830 /data/aios-gitops/runtime/gitea-bin/data/gitea.db.bak-20260710-0105 /data/aios-gitops/runtime/gitea-bin/data/home /data/aios-gitops/runtime/gitea-bin/data/indexers /data/aios-gitops/runtime/gitea-bin/data/jwt /data/aios-gitops/runtime/gitea-bin/data/packages /data/aios-gitops/runtime/gitea-bin/data/queues /data/aios-gitops/runtime/gitea-bin/data/repo-archive /data/aios-gitops/runtime/gitea-bin/data/repo-avatars /data/aios-gitops/runtime/gitea-bin/data/repositories /data/aios-gitops/runtime/gitea-bin/data/tmp
-ReadWritePaths=/data/aios-gitops/runtime/gitea-bin/data /run/aios-task-credential-broker /var/lib/aios-gitops/runtime/task-status-merge/%i/audit
-RestrictAddressFamilies=AF_UNIX AF_INET
-IPAddressDeny=any
-IPAddressAllow=localhost
-LockPersonality=true
-MemoryDenyWriteExecute=true
-RestrictSUIDSGID=true
@@ -1,23 +0,0 @@
-[Unit]
-Description=AIOS task credential expiry and completion sweeper
-After=aios-gitea.service
-Requires=aios-gitea.service
-
-[Service]
-Type=oneshot
-User=root
-Group=root
-ExecStart=/usr/bin/python3 -m aios_single_owner_governance.task_credential_expiry_sweeper --runtime-root /var/lib/aios-gitops/runtime/task-status-merge --allowed-signers /etc/aios-gitops/task-status-merge/allowed_signers
-Environment=AIOS_GITOPS_WRITES_ENABLED=false
-PrivateTmp=true
-PrivateDevices=true
-ProtectSystem=strict
-ProtectHome=true
-ReadOnlyPaths=/etc/aios-gitops/task-status-merge/allowed_signers /data/aios-gitops/runtime/gitea-bin/data/actions_artifacts /data/aios-gitops/runtime/gitea-bin/data/actions_log /data/aios-gitops/runtime/gitea-bin/data/attachments /data/aios-gitops/runtime/gitea-bin/data/avatars /data/aios-gitops/runtime/gitea-bin/data/gitea.db.bak.20260708133830 /data/aios-gitops/runtime/gitea-bin/data/gitea.db.bak-20260710-0105 /data/aios-gitops/runtime/gitea-bin/data/home /data/aios-gitops/runtime/gitea-bin/data/indexers /data/aios-gitops/runtime/gitea-bin/data/jwt /data/aios-gitops/runtime/gitea-bin/data/packages /data/aios-gitops/runtime/gitea-bin/data/queues /data/aios-gitops/runtime/gitea-bin/data/repo-archive /data/aios-gitops/runtime/gitea-bin/data/repo-avatars /data/aios-gitops/runtime/gitea-bin/data/repositories /data/aios-gitops/runtime/gitea-bin/data/tmp
-ReadWritePaths=/data/aios-gitops/runtime/gitea-bin/data /run/aios-task-credential-broker /var/lib/aios-gitops/runtime/task-status-merge
-RestrictAddressFamilies=AF_UNIX AF_INET
-IPAddressDeny=any
-IPAddressAllow=localhost
-LockPersonality=true
-MemoryDenyWriteExecute=true
-RestrictSUIDSGID=true
@@ -1,12 +0,0 @@
-[Unit]
-Description=Run AIOS task credential expiry sweeper every minute
-
-[Timer]
-OnBootSec=1min
-OnUnitActiveSec=1min
-AccuracySec=5s
-Persistent=true
-Unit=aios-task-credential-expiry-sweeper.service
-
-[Install]
-WantedBy=timers.target
@@ -1,26 +0,0 @@
-[Unit]
-Description=AIOS task-scoped Gitea fast-forward-only merge broker (%i)
-After=network.target aios-gitea.service aios-task-status-broker@%i.service
-Requires=aios-gitea.service aios-task-status-broker@%i.service
-
-[Service]
-Type=oneshot
-User=aios-task-merge-bot
-Group=aios-task-merge-bot
-LoadCredentialEncrypted=gitea-token:/run/aios-task-credential-broker/%i-merge.cred
-LoadCredentialEncrypted=audit-key:/run/aios-task-credential-broker/%i-audit.cred
-ExecStart=/usr/bin/python3 -m aios_single_owner_governance.task_status_merge_broker --mode merge --grant /var/lib/aios-gitops/runtime/task-status-merge/%i/grant.json --grant-signature /var/lib/aios-gitops/runtime/task-status-merge/%i/grant.sig --allowed-signers /etc/aios-gitops/task-status-merge/allowed_signers --token %d/gitea-token --audit-key %d/audit-key --journal /var/lib/aios-gitops/runtime/task-status-merge/%i/merge-journal/journal.sqlite3
-Environment=AIOS_GITOPS_WRITES_ENABLED=false
-NoNewPrivileges=true
-PrivateTmp=true
-PrivateDevices=true
-ProtectSystem=strict
-ProtectHome=true
-RestrictAddressFamilies=AF_UNIX AF_INET
-ReadOnlyPaths=/var/lib/aios-gitops/runtime/task-status-merge/%i /etc/aios-gitops/task-status-merge/allowed_signers
-ReadWritePaths=/var/lib/aios-gitops/runtime/task-status-merge/%i/merge-journal
-IPAddressDeny=any
-IPAddressAllow=localhost
-LockPersonality=true
-MemoryDenyWriteExecute=true
-RestrictSUIDSGID=true
@@ -1,26 +0,0 @@
-[Unit]
-Description=AIOS task-scoped Gitea status broker (%i)
-After=network.target aios-gitea.service
-Requires=aios-gitea.service
-
-[Service]
-Type=oneshot
-User=aios-task-status-bot
-Group=aios-task-status-bot
-LoadCredentialEncrypted=gitea-token:/run/aios-task-credential-broker/%i-status.cred
-LoadCredentialEncrypted=audit-key:/run/aios-task-credential-broker/%i-audit.cred
-ExecStart=/usr/bin/python3 -m aios_single_owner_governance.task_status_merge_broker --mode status --grant /var/lib/aios-gitops/runtime/task-status-merge/%i/grant.json --grant-signature /var/lib/aios-gitops/runtime/task-status-merge/%i/grant.sig --allowed-signers /etc/aios-gitops/task-status-merge/allowed_signers --evidence /var/lib/aios-gitops/runtime/task-status-merge/%i/status-evidence.json --token %d/gitea-token --audit-key %d/audit-key --journal /var/lib/aios-gitops/runtime/task-status-merge/%i/status-journal/journal.sqlite3
-Environment=AIOS_GITOPS_WRITES_ENABLED=false
-NoNewPrivileges=true
-PrivateTmp=true
-PrivateDevices=true
-ProtectSystem=strict
-ProtectHome=true
-RestrictAddressFamilies=AF_UNIX AF_INET
-ReadOnlyPaths=/var/lib/aios-gitops/runtime/task-status-merge/%i /etc/aios-gitops/task-status-merge/allowed_signers
-ReadWritePaths=/var/lib/aios-gitops/runtime/task-status-merge/%i/status-journal
-IPAddressDeny=any
-IPAddressAllow=localhost
-LockPersonality=true
-MemoryDenyWriteExecute=true
-RestrictSUIDSGID=true
@@ -0,0 +1,4 @@
+d /var/lib/aios-gitops/governance-activation 0750 root gitops -
+d /var/lib/aios-gitops/governance-activation/wal 0750 root gitops -
+d /var/lib/aios-gitops/governance-activation/receipts 0750 root gitops -
+d /run/aios-gitops 0750 root gitops -
@@ -1,75 +0,0 @@
-{
-  "evidence_type": "TWO_STAGE_OWNER_CAMPAIGN_V2_PHASE_A_CANDIDATE",
-  "generated_at": "2026-07-30T02:35:51Z",
-  "execution_status": "PARTIALLY_COMPLETED",
-  "blocking_layer": "PHASE_A_OWNER_EXACT_HEAD_APPROVAL",
-  "repository": "aios/aios",
-  "governance_base_oid": "ebd74398743e36523b593fcc395b73945d4924c5",
-  "governance_tree_oid": "ad1255a1127204fad1d1208d8f31dc94fa64e6e1",
-  "authority_main_oid": "875d41c3101093149414292067fd700dc214d4d3",
-  "schema_seed_commit_oid": "8da47545a507cb798d3d6ab30ff8552a2d0a5ecf",
-  "schema_seed_tree_oid": "991e68577a469657c1c4996814b6634ce5ed752f",
-  "candidate_source_commit_oid": "a637a9dbb6e0021cb7dcf0d6b0ca00dfe10dce38",
-  "candidate_source_tree_oid": "bf6e0c16fcad7515465bec4aefdd2e77b1e9bef0",
-  "candidate_diff_sha256": "c06d002db06da6cbf16f9c8321f1acbfd431f009b5127a13fd2cb5d63b278867",
-  "candidate_files_sha256": "5061402d516c0e9413208ce64e2b52f77d224e6eec1f7b07c5b3a10b58df5eaf",
-  "candidate_file_count": 44,
-  "schema_document_path": "services/aios-single-owner-governance/task-scoped-governance-bootstrap-v1.schema.json",
-  "schema_document_sha256": "6ec912a96c8bac5c0d3c0a017abc078cb9567ed54dcb20bb0eadb5926ac54fdd",
-  "validator_policy_path": "services/aios-single-owner-governance/aios_single_owner_governance/task_scoped_bootstrap.py",
-  "validator_policy_sha256": "de11123b5cd9ccdad4961f1d5d084a8c4a1b2270ce793652ab9c50bb95694eac",
-  "two_stage_policy_schema_sha256": "6b4def7c1eef19c01ef73c43252eb0cd1a87c103e1047249a3cfcc75c7922bf6",
-  "two_stage_release_schema_sha256": "82ee589dc87db6998ddf0779ce264194cadea0deca66088b0797378f6ce89ad3",
-  "runtime_observer_sha256": "181e632192f1417a98c1efb35631cf80246759080b2e04243576abcdc7da22af",
-  "journal_anchor_sha256": "18feb0792b95f1060aa696cc60943379695a246984aecf76098838f9ed37426e",
-  "package_zip_sha256": "668239a549b4a2b2094fe9b5104b84703fe8ed75011fd8ed71ed3958a6dc0706",
-  "candidate_bundle_sha256": "15711b225b9ef41cca0588d21b2b95d7a95ac155efc27fcb8772c435fcdab147",
-  "anchor_install_wheel_sha256": "abbf616366eb3467d4e651bb5306e22ae5e931b613df5362a0892935c4a1c0c7",
-  "tests": {
-    "two_stage_campaign": {"passed": 67, "failed": 0, "skipped": 0, "collection_errors": 0},
-    "single_owner_governance": {"passed": 105, "failed": 0, "subtests_passed": 17, "collection_errors": 0},
-    "task_scoped_bootstrap": {"passed": 15, "failed": 0, "collection_errors": 0},
-    "compileall": "PASS",
-    "quarantine_fsck": "PASS",
-    "systemd_verify": "PASS_WITH_UNRELATED_HOST_WARNINGS"
-  },
-  "anchor": {
-    "service_status": "active",
-    "anchor_uid": 988,
-    "runner_uid": 986,
-    "uids_distinct": true,
-    "runner_database_write": "DENIED",
-    "unauthorized_socket_peer": "DENIED",
-    "runner_registration_action": "ANCHOR_REQUEST_INVALID",
-    "journal_mode": "WAL",
-    "synchronous": "FULL",
-    "foreign_keys": "ON",
-    "restart_open_reservation": "PASS",
-    "selftest_open_reservation_cleanup": "ABORTED"
-  },
-  "phase_separation": {
-    "required_owner_decisions": 2,
-    "phase_a_authorization": "GITEA_EXACT_HEAD_REVIEW",
-    "phase_b_authorization": "DETACHED_SSH_SIGNATURE",
-    "phase_a_release_authority": false,
-    "one_shot_authority": false
-  },
-  "isolation": {
-    "AIOS_GITOPS_WRITES_ENABLED": false,
-    "publisher_created": false,
-    "writer_created": false,
-    "credential_projection_created": false,
-    "target_branch_created": false,
-    "tag_created": false,
-    "registry_modified": false,
-    "baseline_modified": false,
-    "production_modified": false
-  },
-  "governance": {
-    "force_push_used": false,
-    "tag_rewritten": false,
-    "direct_main_push": false,
-    "secrets_committed": false,
-    "owner_approval_respected": true
-  }
-}
@@ -1,44 +0,0 @@
-1f4a83cf91e9aacb6f50bc4fb24d4f745a7a31fd1dd7f2d3d3ed0de05e38234f  deploy/systemd/aios-campaign-anchor.service
-6b2525d31b8544488bce1544deb39a087cc2d830fb1b16fda26cde6ce430dbd2  deploy/systemd/aios-policy-activation-verification@.service
-fad52587775ff5f1c5cc16862c5fb1d910bb097c6b3330c00d75db4f7bef0bbd  deploy/systemd/aios-policy-campaign-register@.service
-de11123b5cd9ccdad4961f1d5d084a8c4a1b2270ce793652ab9c50bb95694eac  services/aios-single-owner-governance/aios_single_owner_governance/task_scoped_bootstrap.py
-6ec912a96c8bac5c0d3c0a017abc078cb9567ed54dcb20bb0eadb5926ac54fdd  services/aios-single-owner-governance/task-scoped-governance-bootstrap-v1.schema.json
-5b6d65ae34b2c3bebc1bde8f38c6b0bb73269336d7d4ee5e3416f79c323134d6  services/aios-two-stage-owner-campaign/ANCHOR_REGISTRATION_CONTRACT.md
-8ba5278f96447bf4308813b49fcc433d0cc7a5019cd9e78aeb0d8ada5f00d53b  services/aios-two-stage-owner-campaign/README.md
-7285527358bc8da1d4bc7ff70162dfc3a734086851b734daac89d6f9b330798d  services/aios-two-stage-owner-campaign/SECURITY_DELTA_V2.md
-89f03fdf156d35807bf39f2f1dbf304c01e7e9ad64399276fb72c68d795eda65  services/aios-two-stage-owner-campaign/STEP_EXECUTOR_CONTRACT.md
-7453177223b62509e4854051a75d53f24d8d1f737986f309cc6ae7a2e721459f  services/aios-two-stage-owner-campaign/TWO_STAGE_OWNER_INTERACTION_SPEC.md
-9308ee245a28a0f0ff623fbfc8e3961204b8e67194bffe536a9c3485ca126ac7  services/aios-two-stage-owner-campaign/examples/allowed_signers.example
-9ac7b7fdeb73a99d4f41bf3410ef16f67091d85f9082075287d388e6e5e37eed  services/aios-two-stage-owner-campaign/examples/campaign-anchor.env.example
-926f0c0cfb7bd6db0ebab6bcb5a0530057b8d38ae1e0b436a69a12b44039462b  services/aios-two-stage-owner-campaign/examples/executor-release.example.json
-8d46ec9279eb58c03337d41b63de2abdd9eb0d03f98f0806768dcd309d481ee9  services/aios-two-stage-owner-campaign/examples/policy-activation-verification.example.json
-b34d8895fe872ef27c62c759449757def698eb05157daff8badd0c86f64ee18c  services/aios-two-stage-owner-campaign/examples/release-campaign-manifest.example.json
-a2992f493cf0547e1f4acd3fcd9b20e03c912d8b255e196f640d47e291ec9d8e  services/aios-two-stage-owner-campaign/examples/runtime-observer-policy.example.json
-150c9a8debdcaa4dbb9fd51817ca8710ef805a32f2f96dc5490d0c4f77f2cb6f  services/aios-two-stage-owner-campaign/examples/runtime-observer-release.example.json
-675b39d13223ad281a4d14a04e739639e470e4e2a2591b85264ba37f840f2b49  services/aios-two-stage-owner-campaign/payload/scripts/generate_diff_chunks.py
-5751764275e626c787dad17c2561edd86b2710ae0b3cfeafeec44d98126d9015  services/aios-two-stage-owner-campaign/payload/services/aios-autonomous-control-plane/aios_autonomous_control_plane/lineage_audit.py
-2b501bf32a22e1b10c7254d2268d11aa2424aac5756c52441557c25dbaaaa8d5  services/aios-two-stage-owner-campaign/payload/tests/autonomous_control_plane/test_lineage_audit_v3.py
-3f118bc7a4f2bdfdd47e2c86112e87f95162dba4d88c1579337bd1d442ec9832  services/aios-two-stage-owner-campaign/pyproject.toml
-6b4def7c1eef19c01ef73c43252eb0cd1a87c103e1047249a3cfcc75c7922bf6  services/aios-two-stage-owner-campaign/schemas/governance-policy-activation-verification-v1.schema.json
-82ee589dc87db6998ddf0779ce264194cadea0deca66088b0797378f6ce89ad3  services/aios-two-stage-owner-campaign/schemas/task-scoped-release-campaign-v1.schema.json
-d04543b5407dcefc0a41af1b8a65ebc2e62f779582ae959449f1ac37b305eecf  services/aios-two-stage-owner-campaign/src/aios_two_stage_campaign/__init__.py
-935a1c1166b0c1ea35a82256345000bf2c73ded718d77773bc27a71ecce28f7d  services/aios-two-stage-owner-campaign/src/aios_two_stage_campaign/__main__.py
-4e317e2fbf912662bfbf57d2f7fe1a9f7fd3d8c00f7ad09602d9e885ee4ef3cc  services/aios-two-stage-owner-campaign/src/aios_two_stage_campaign/canonical.py
-863be28723553e5bf5df90eda49e96edf8417e765da7b41579f050b04336d480  services/aios-two-stage-owner-campaign/src/aios_two_stage_campaign/cli.py
-dae1e0ed0f841d928a1dd5094c64b1f39b3213301c1da747f45d032a18833c1e  services/aios-two-stage-owner-campaign/src/aios_two_stage_campaign/errors.py
-baf8931566d2c2fb2985d1814b5ded89719bb4b0eba01e94cca9f3690baadeb2  services/aios-two-stage-owner-campaign/src/aios_two_stage_campaign/executor.py
-18feb0792b95f1060aa696cc60943379695a246984aecf76098838f9ed37426e  services/aios-two-stage-owner-campaign/src/aios_two_stage_campaign/journal_anchor.py
-e24765d3c62f9934a921f099e43a002d349a6c9934438da82040e40238070c58  services/aios-two-stage-owner-campaign/src/aios_two_stage_campaign/orchestrator.py
-181e632192f1417a98c1efb35631cf80246759080b2e04243576abcdc7da22af  services/aios-two-stage-owner-campaign/src/aios_two_stage_campaign/runtime_observer.py
-3f3ce81490b6f0893665ba296fc23be904ae0e5dcbcd3b602e25feb2571262b0  services/aios-two-stage-owner-campaign/src/aios_two_stage_campaign/signature.py
-c71d85d5df2ed0e5367de9aacd230f586e77f3b4c11cf52960c84bbdeec43eb7  services/aios-two-stage-owner-campaign/src/aios_two_stage_campaign/state_machine.py
-75ea8ed1c9b49b1ca3ce452fe229524ebd0ccd802945d3362dd668602ce1f98c  services/aios-two-stage-owner-campaign/src/aios_two_stage_campaign/validator.py
-b1be7e1ed0fa0e16e041f77200d651cf46f6bb029c89d31f0b286d32c026cb66  services/aios-two-stage-owner-campaign/tests/test_canonical_snapshot.py
-0bb956135c90cf71fcb655c4d700c1f71c3442b9e9fddc376959890cdad823de  services/aios-two-stage-owner-campaign/tests/test_executor_v2.py
-9bb8a9f1c3bd9aaf44db3dd2f5b810eb0cb650da0e5a5f5e2ea50be46f12664d  services/aios-two-stage-owner-campaign/tests/test_lineage_payload.py
-681c14ddc0be90f94fd3c3d8a6768fe602ec8acd130ed00a8668505d2db57aa2  services/aios-two-stage-owner-campaign/tests/test_orchestrator_v2.py
-9edf44fe0129098c31d66f6b6f7ab252879b425e2844969d09e22c3c88e6b77d  services/aios-two-stage-owner-campaign/tests/test_runtime_observer.py
-204e77c760380f8e29d10fc0afa4227497109d27493245c55a851de6ff69ac86  services/aios-two-stage-owner-campaign/tests/test_signature.py
-9bc5dfa237e6bf37ccc90bbc618a807892d323cdd41345717b296838b44cd22a  services/aios-two-stage-owner-campaign/tests/test_state_machine.py
-a9ef9c11120f480e0cde3ccbf8a816705621506657d8ac10faf7e38fb54bf367  services/aios-two-stage-owner-campaign/tests/test_validator.py
-4ec67865474c6c7ebaa7d125490486e8644618b1666cbde597420e4e6fe8f1d4  tests/single_owner_governance/test_task_scoped_bootstrap.py
@@ -1,28 +0,0 @@
-{
-  "plan_id": "AIOS-BOOTSTRAP-RFC3339-FIX-ROLLBACK-V1",
-  "schema_version": 1,
-  "repository": "aios/aios",
-  "approved_base_oid": "8814dff20222625b60454c613b61ccf15fa20e51",
-  "governance_history_rewrite_allowed": false,
-  "steps": [
-    "stop_uncompleted_task_status_merge_units",
-    "revoke_exact_task_tokens_and_verify_http_401",
-    "remove_all_runtime_credential_projections",
-    "remove_unactivated_runtime_units_and_non_root_task_accounts",
-    "verify_governance_refs_and_production_refs_unchanged"
-  ],
-  "internal_token_rotation": {
-    "rollback_allowed_before_old_secret_revocation": true,
-    "rollback_source": "root_only_encrypted_runtime_credential",
-    "rollback_allowed_after_old_secret_revocation": false,
-    "post_revocation_recovery": "issue_another_replacement_secret_under_new_governed_operation",
-    "plaintext_secret_in_evidence_allowed": false
-  },
-  "required_closure": {
-    "temporary_accounts_remaining": 0,
-    "temporary_credentials_remaining": 0,
-    "credential_projections_remaining": 0,
-    "old_task_tokens_http_status": 401,
-    "AIOS_GITOPS_WRITES_ENABLED": false
-  }
-}
@@ -1,30 +0,0 @@
-{
-  "schema_id": "AIOS_BOOTSTRAP_RFC3339_FIX_TEST_SUMMARY",
-  "schema_version": 1,
-  "candidate_tree_before_manifest": "c72b13bfe0656de9deeff9652e3e13ada81b110e",
-  "local_unittest": {
-    "tests_passed": 19,
-    "tests_failed": 0,
-    "tests_skipped": 0
-  },
-  "remote_posix": {
-    "pytest_tests_passed": 19,
-    "pytest_subtests_passed": 16,
-    "tests_failed": 0,
-    "tests_skipped": 0,
-    "compileall": "PASS",
-    "json_schema": "PASS",
-    "systemd_validation": "PASS"
-  },
-  "secret_scan": {
-    "scanner": "gitleaks",
-    "exact_changed_paths": "PASS",
-    "exact_changed_path_findings": 0,
-    "whole_tree_existing_findings": 10,
-    "whole_tree_findings_claimed_as_new": false
-  },
-  "python_executable": {
-    "path": "/usr/bin/python3.12",
-    "sha256": "e1efa562c2cc2e35521a5c9c9b9939921001ff8ca9708a13ef15ace68cc2ccd7"
-  }
-}
@@ -0,0 +1,25 @@
+{
+  "artifact_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729/artifacts/hardening-71def340e7cc34f4f19918dcf8d3c847abbe4fbf/live-activation-71def340e7cc34f4f19918dcf8d3c847abbe4fbf.tar.gz",
+  "artifact_sha256": "32bc49c207ec454b6fd81b0484f5b257bb789481b37175995029a2ec78cc62fa",
+  "copied_live_db_acceptance": "PASS",
+  "implementation_commit_oid": "71def340e7cc34f4f19918dcf8d3c847abbe4fbf",
+  "implementation_tree_oid": "3cc61bfbf69cbe0a24d54a0e53a6c50bcc130066",
+  "independent_validator": "ALLOW_CANDIDATE",
+  "production_mutation": false,
+  "result": "PASS",
+  "rollback_artifact_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729/artifacts/hardening-71def340e7cc34f4f19918dcf8d3c847abbe4fbf/live-activation-rollback-71def340e7cc34f4f19918dcf8d3c847abbe4fbf.tar.gz",
+  "rollback_artifact_sha256": "4efe1ea73d4fd72e5364fc91a16ad5e9d1e6ebe78d8aa466f7b11c4915b08403",
+  "runtime_source_sha256": {
+    "services/aios-single-owner-governance/aios_single_owner_governance/activation.py": "48846a58fa3afb2b7c8ffe6e88504a9333863932df867f33ba0321ad3bac6003",
+    "services/aios-single-owner-governance/aios_single_owner_governance/gitea_protected_branch.py": "00775efe3f3d631d88379eff4ed2dcfaf386a2fa43111abe961e75109e80d768",
+    "services/aios-single-owner-governance/aios_single_owner_governance/journal.py": "a8f121245e04487d99c99fb03ada83f0c907723f8eb18552872ff46dcf5a7873",
+    "services/aios-single-owner-governance/aios_single_owner_governance/state_machine.py": "0b08a2c378d143cb9031a25132afc7b7d825bdc03d11efe10610341d4b70167e",
+    "services/aios-single-owner-governance/aios_single_owner_governance/validator.py": "754639846cb15cb997d612a1fe0ceb0224ddef5bbc3ccac9802a3747f122dac1"
+  },
+  "subtests_passed": 17,
+  "task_id": "AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729",
+  "test_evidence_path": "/var/lib/aios-gitops/runtime/tasks/AIOS-SINGLE-OWNER-GOVERNANCE-ACTIVATION-20260729/artifacts/hardening-71def340e7cc34f4f19918dcf8d3c847abbe4fbf/test-evidence-71def340e7cc34f4f19918dcf8d3c847abbe4fbf.json",
+  "test_evidence_sha256": "c1633732767f3f051ffb01404d12d05a6168a4b01b91efdb34a64988d6dee684",
+  "tests_failed": 0,
+  "tests_passed": 90
+}
@@ -0,0 +1,51 @@
+# AIOS Single-Owner Governance Prerequisites
+
+This package is a dormant candidate produced under the PR #29 prerequisite
+authorization. It validates exact-head Owner approvals and machine gates,
+models protection-policy compare-and-swap with compensation, builds evidence,
+and exercises every mutation path only against disposable fixtures.
+
+The prerequisite shadow services remain static and refuse live mutation. This
+branch adds a separate, one-shot activation executor with `--plan`,
+`--activate`, `--verify`, `--rollback`, and `--status` commands. It is not an
+always-on writer and never enables global GitOps writes.
+
+The executor is fail-closed: every consequential command is bound to an exact
+approval merge, governance OID, evidence closure, Owner review, component
+digests, full branch-protection snapshot, operation ID, and plan ID. It writes
+a fsynced WAL before the single-row SQLite CAS, verifies the full applied row,
+and only rolls back with a target-to-previous CAS. Audit records are
+hash-chained and credentials are redacted.
+
+## Hardening Contract
+
+Fresh activation is authorized only before the approved `expires_at` instant.
+An already-recorded `PREPARED` transaction may recover after expiry only to
+reach a safe terminal state using the same exact bindings; `--verify` and
+`--rollback` remain available for that recorded transaction after expiry.
+`ROLLED_BACK` and `FAILED` are terminal states and must never be replayed as a
+new activation.
+
+The approved execution binding must pin the implementation commit and its
+exact tree, the installed hashes of the five runtime source files
+(`activation.py`, `gitea_protected_branch.py`, `journal.py`, `validator.py`,
+and `state_machine.py`), and independent SHA-256 values for the deployment
+artifact, rollback artifact, and test evidence. It must also bind an evidence
+closure that is a commit with the exact direct parent and exactly one approved
+closure file, including that file's Git blob OID and SHA-256.
+
+Every required machine status is accepted only when its exact status record,
+creator identity, producer provenance, target URL, description digest, head
+OID, state, and observation time match the approved binding. A fixture status
+or a dormant self-check is not machine-status producer provenance.
+
+This contract hardens validation; it does not authorize deployment. The
+existing governed approval rules still apply, and installation remains
+disabled and inactive until the required merged approval authorizes one
+explicit execution.
+
+Installation must remain disabled and inactive until a merged
+`SINGLE_OWNER_GOVERNANCE_LIVE_ACTIVATION_IMPLEMENTATION_AND_EXECUTION`
+approval authorizes one explicit execution. The approved runtime paths are
+`/var/lib/aios-gitops/governance-activation/` and
+`/run/aios-gitops/governance-activation.lock`.
@@ -0,0 +1,115 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "properties": {
+    "activation_approval_merge_oid": {"pattern": "^[0-9a-f]{40}$", "type": "string"},
+    "activation_approval_pr_number": {"minimum": 1, "type": "integer"},
+    "activation_manifest_blob_oid": {"pattern": "^[0-9a-f]{40,64}$", "type": "string"},
+    "activation_manifest_path": {"pattern": "^approvals/.+\\.json$", "type": "string"},
+    "activation_manifest_sha256": {"pattern": "^[0-9a-f]{64}$", "type": "string"},
+    "artifact_path": {"pattern": "^/", "type": "string"},
+    "artifact_sha256": {"pattern": "^[0-9a-f]{64}$", "type": "string"},
+    "approval_db_path": {"minLength": 1, "type": "string"},
+    "approval_request_head_oid": {"pattern": "^[0-9a-f]{40}$", "type": "string"},
+    "backend": {"enum": ["file", "sqlite"]},
+    "backend_path": {"minLength": 1, "type": "string"},
+    "branch": {"const": "governance/approvals"},
+    "evidence_closure_oid": {"pattern": "^[0-9a-f]{40}$", "type": "string"},
+    "evidence_closure_path": {"pattern": "^(?!/)(?!.*\\.\\.).+", "type": "string"},
+    "evidence_closure_sha256": {"pattern": "^[0-9a-f]{64}$", "type": "string"},
+    "evidence_git_dir": {"minLength": 1, "type": "string"},
+    "executor": {"not": {"const": "owner"}, "type": "string"},
+    "expected_branch_protection_sha256": {"pattern": "^[0-9a-f]{64}$", "type": "string"},
+    "expected_gitea_schema_sha256": {"pattern": "^[0-9a-f]{64}$", "type": "string"},
+    "expected_governance_oid": {"pattern": "^[0-9a-f]{40}$", "type": "string"},
+    "expected_state_machine_sha256": {"pattern": "^[0-9a-f]{64}$", "type": "string"},
+    "expected_validator_sha256": {"pattern": "^[0-9a-f]{64}$", "type": "string"},
+    "expires_at": {"format": "date-time", "type": "string"},
+    "forbidden_operations": {"additionalProperties": {"const": false}, "type": "object"},
+    "governance_git_dir": {"minLength": 1, "type": "string"},
+    "governance_ref": {"const": "refs/heads/governance/approvals"},
+    "implementation_commit_oid": {"pattern": "^[0-9a-f]{40}$", "type": "string"},
+    "implementation_tree_oid": {"pattern": "^[0-9a-f]{40}$", "type": "string"},
+    "machine_status_producer_id": {"minimum": 1, "type": "integer"},
+    "machine_status_producer_name": {"minLength": 1, "type": "string"},
+    "machine_checks": {
+      "additionalProperties": false,
+      "properties": {
+        "aios/branch-protection": {"$ref": "#/$defs/machineCheck"},
+        "aios/evidence-closure": {"$ref": "#/$defs/machineCheck"},
+        "aios/secret-scan": {"$ref": "#/$defs/machineCheck"},
+        "aios/state-machine": {"$ref": "#/$defs/machineCheck"},
+        "aios/validator": {"$ref": "#/$defs/machineCheck"}
+      },
+      "required": ["aios/branch-protection", "aios/evidence-closure", "aios/secret-scan", "aios/state-machine", "aios/validator"],
+      "type": "object"
+    },
+    "observed_evidence_closure_oid": {"pattern": "^[0-9a-f]{40}$", "type": "string"},
+    "observed_governance_oid": {"pattern": "^[0-9a-f]{40}$", "type": "string"},
+    "observed_owner_review_oid": {"type": ["integer", "string"]},
+    "observed_state_machine_sha256": {"pattern": "^[0-9a-f]{64}$", "type": "string"},
+    "observed_validator_sha256": {"pattern": "^[0-9a-f]{64}$", "type": "string"},
+    "operation_id": {"minLength": 1, "type": "string"},
+    "owner_review_oid": {"type": ["integer", "string"]},
+    "repo_id": {"minimum": 1, "type": "integer"},
+    "requester": {"not": {"const": "owner"}, "type": "string"},
+    "rollback_artifact_path": {"pattern": "^/", "type": "string"},
+    "rollback_artifact_sha256": {"pattern": "^[0-9a-f]{64}$", "type": "string"},
+    "runtime_sources": {
+      "items": {
+        "additionalProperties": false,
+        "properties": {
+          "git_path": {"minLength": 1, "type": "string"},
+          "runtime_path": {"pattern": "^/", "type": "string"},
+          "sha256": {"pattern": "^[0-9a-f]{64}$", "type": "string"}
+        },
+        "required": ["git_path", "runtime_path", "sha256"],
+        "type": "object"
+      },
+      "maxItems": 5,
+      "minItems": 5,
+      "type": "array"
+    },
+    "state_machine_path": {"minLength": 1, "type": "string"},
+    "target_branch_protection": {"type": "object"},
+    "task_id": {"minLength": 1, "type": "string"},
+    "test_evidence_path": {"pattern": "^/", "type": "string"},
+    "test_evidence_sha256": {"pattern": "^[0-9a-f]{64}$", "type": "string"},
+    "validator_path": {"minLength": 1, "type": "string"},
+    "wip": {"const": false}
+  },
+  "$defs": {
+    "machineCheck": {
+      "additionalProperties": false,
+      "properties": {
+        "head_oid": {"pattern": "^[0-9a-f]{40}$", "type": "string"},
+        "status_id": {"minimum": 1, "type": "integer"},
+        "creator_id": {"minimum": 1, "type": "integer"},
+        "creator_login": {"minLength": 1, "type": "string"},
+        "state": {"const": "success"}
+      },
+      "required": ["state", "head_oid", "status_id", "creator_id", "creator_login"],
+      "type": "object"
+    }
+  },
+  "required": [
+    "task_id", "operation_id", "expected_governance_oid", "observed_governance_oid",
+    "expected_validator_sha256", "observed_validator_sha256", "validator_path",
+    "expected_state_machine_sha256", "observed_state_machine_sha256", "state_machine_path",
+    "expected_branch_protection_sha256", "expected_gitea_schema_sha256",
+    "activation_approval_merge_oid", "activation_approval_pr_number", "approval_request_head_oid",
+    "activation_manifest_path", "activation_manifest_blob_oid", "activation_manifest_sha256",
+    "evidence_closure_oid", "observed_evidence_closure_oid", "evidence_git_dir",
+    "evidence_closure_path", "evidence_closure_sha256",
+    "implementation_commit_oid", "implementation_tree_oid", "runtime_sources",
+    "artifact_path", "artifact_sha256", "rollback_artifact_path", "rollback_artifact_sha256",
+    "test_evidence_path", "test_evidence_sha256",
+    "machine_status_producer_id", "machine_status_producer_name",
+    "owner_review_oid", "observed_owner_review_oid", "approval_db_path", "expires_at",
+    "governance_git_dir", "governance_ref", "machine_checks", "forbidden_operations",
+    "target_branch_protection", "backend", "backend_path", "repo_id", "branch",
+    "requester", "executor", "wip"
+  ],
+  "title": "AIOS Single Owner Live Activation Bindings",
+  "type": "object"
+}
@@ -0,0 +1,20 @@
+"""Dormant single-owner governance activation prerequisites."""
+
+from .models import (
+    ApprovalContext,
+    GovernanceState,
+    MachineGate,
+    ProtectionSnapshot,
+    Review,
+)
+from .validator import SingleOwnerApprovalValidator, ValidationDenied
+
+__all__ = [
+    "ApprovalContext",
+    "GovernanceState",
+    "MachineGate",
+    "ProtectionSnapshot",
+    "Review",
+    "SingleOwnerApprovalValidator",
+    "ValidationDenied",
+]
@@ -0,0 +1,860 @@
+from __future__ import annotations
+
+import argparse
+from contextlib import contextmanager
+from datetime import datetime, timezone
+import hashlib
+import json
+import os
+from pathlib import Path
+import re
+import sqlite3
+import subprocess
+from typing import Any, Iterator, Mapping, Protocol
+
+try:
+    import fcntl
+except ImportError:  # pragma: no cover
+    fcntl = None
+
+from .gitea_protected_branch import (
+    CASConflict,
+    FileProtectedBranchAdapter,
+    SQLiteProtectedBranchAdapter,
+    calculate_snapshot_sha256,
+)
+from .journal import JournalStore, atomic_write_json, read_json, redact, sha256_json
+from . import state_machine as state_machine_module
+from . import validator as validator_module
+
+
+DEFAULT_STATE_ROOT = Path("/var/lib/aios-gitops/governance-activation")
+DEFAULT_LOCK_PATH = Path("/run/aios-gitops/governance-activation.lock")
+LIVE_GITEA_DB = Path("/data/aios-gitops/runtime/gitea-bin/data/gitea.db")
+LIVE_AUTHORITATIVE_GIT = Path("/data/aios-gitops/repo.git")
+HEX40 = re.compile(r"^[0-9a-f]{40}$")
+HEX64 = re.compile(r"^[0-9a-f]{64}$")
+REQUIRED_BINDINGS = {
+    "task_id",
+    "operation_id",
+    "expected_governance_oid",
+    "expected_validator_sha256",
+    "expected_state_machine_sha256",
+    "expected_branch_protection_sha256",
+    "activation_approval_merge_oid",
+    "evidence_closure_oid",
+    "owner_review_oid",
+    "observed_governance_oid",
+    "observed_validator_sha256",
+    "observed_state_machine_sha256",
+    "observed_evidence_closure_oid",
+    "observed_owner_review_oid",
+    "approval_request_head_oid",
+    "activation_approval_pr_number",
+    "expires_at",
+    "validator_path",
+    "state_machine_path",
+    "governance_git_dir",
+    "governance_ref",
+    "evidence_git_dir",
+    "approval_db_path",
+    "expected_gitea_schema_sha256",
+    "backend",
+    "backend_path",
+    "repo_id",
+    "branch",
+    "activation_manifest_path",
+    "activation_manifest_blob_oid",
+    "activation_manifest_sha256",
+    "implementation_commit_oid",
+    "implementation_tree_oid",
+    "runtime_sources",
+    "artifact_path",
+    "artifact_sha256",
+    "rollback_artifact_path",
+    "rollback_artifact_sha256",
+    "test_evidence_path",
+    "test_evidence_sha256",
+    "evidence_closure_path",
+    "evidence_closure_sha256",
+    "machine_status_producer_id",
+    "machine_status_producer_name",
+}
+REQUIRED_MACHINE_CONTEXTS = {
+    "aios/validator",
+    "aios/state-machine",
+    "aios/branch-protection",
+    "aios/secret-scan",
+    "aios/evidence-closure",
+}
+REQUIRED_RUNTIME_GIT_PATHS = {
+    "services/aios-single-owner-governance/aios_single_owner_governance/activation.py",
+    "services/aios-single-owner-governance/aios_single_owner_governance/gitea_protected_branch.py",
+    "services/aios-single-owner-governance/aios_single_owner_governance/journal.py",
+    "services/aios-single-owner-governance/aios_single_owner_governance/state_machine.py",
+    "services/aios-single-owner-governance/aios_single_owner_governance/validator.py",
+}
+
+
+class InjectedCrash(BaseException):
+    pass
+
+
+class Adapter(Protocol):
+    def read_current(self) -> dict[str, Any]: ...
+    def calculate_snapshot_sha256(self, snapshot: Mapping[str, Any]) -> str: ...
+    def apply_atomic(self, expected_sha256: str, target: Mapping[str, Any]) -> dict[str, Any]: ...
+    def verify_applied(self, expected_sha256: str) -> bool: ...
+    def rollback_atomic(self, expected_target_sha256: str, previous: Mapping[str, Any]) -> dict[str, Any]: ...
+    def verify_rollback(self, expected_sha256: str) -> bool: ...
+
+
+@contextmanager
+def exclusive_lock(path: Path) -> Iterator[None]:
+    path.parent.mkdir(parents=True, exist_ok=True, mode=0o750)
+    flags = os.O_RDWR | os.O_CREAT
+    if hasattr(os, "O_NOFOLLOW"):
+        flags |= os.O_NOFOLLOW
+    fd = os.open(path, flags, 0o640)
+    try:
+        os.fchmod(fd, 0o640)
+        if fcntl is not None:
+            fcntl.flock(fd, fcntl.LOCK_EX | fcntl.LOCK_NB)
+        yield
+    finally:
+        if fcntl is not None:
+            fcntl.flock(fd, fcntl.LOCK_UN)
+        os.close(fd)
+
+
+def _require_hex(name: str, value: object, lengths: tuple[int, ...]) -> None:
+    if not isinstance(value, str) or len(value) not in lengths or not re.fullmatch(r"[0-9a-f]+", value):
+        raise RuntimeError(f"{name.upper()}_INVALID")
+
+
+def _sha256_file(path: Path) -> str:
+    if not path.is_absolute() or not path.is_file() or path.is_symlink():
+        raise RuntimeError("VERIFIED_COMPONENT_PATH_INVALID")
+    digest = hashlib.sha256()
+    with path.open("rb") as handle:
+        for block in iter(lambda: handle.read(1024 * 1024), b""):
+            digest.update(block)
+    return digest.hexdigest()
+
+
+def _git(git_dir: Path, *args: str) -> str:
+    if not git_dir.is_absolute() or not git_dir.exists() or git_dir.is_symlink():
+        raise RuntimeError("GIT_OBJECT_STORE_INVALID")
+    result = subprocess.run(
+        ["git", f"--git-dir={git_dir}", *args],
+        text=True,
+        capture_output=True,
+        check=False,
+    )
+    if result.returncode != 0:
+        raise RuntimeError("GIT_EVIDENCE_VERIFICATION_FAILED")
+    return result.stdout.strip()
+
+
+def _git_raw(git_dir: Path, *args: str) -> bytes:
+    if not git_dir.is_absolute() or not git_dir.exists() or git_dir.is_symlink():
+        raise RuntimeError("GIT_OBJECT_STORE_INVALID")
+    result = subprocess.run(
+        ["git", f"--git-dir={git_dir}", *args], capture_output=True, check=False
+    )
+    if result.returncode != 0:
+        raise RuntimeError("GIT_EVIDENCE_VERIFICATION_FAILED")
+    return result.stdout
+
+
+def _parse_utc(value: object) -> datetime:
+    if not isinstance(value, str):
+        raise RuntimeError("EXPIRY_INVALID")
+    try:
+        parsed = datetime.fromisoformat(value.replace("Z", "+00:00"))
+    except ValueError as exc:
+        raise RuntimeError("EXPIRY_INVALID") from exc
+    if parsed.tzinfo is None:
+        raise RuntimeError("EXPIRY_INVALID")
+    return parsed.astimezone(timezone.utc)
+
+
+def _utc_now() -> datetime:
+    return datetime.now(timezone.utc)
+
+
+def _approved_execution_binding(bindings: Mapping[str, Any]) -> dict[str, Any]:
+    return {
+        "task_id": bindings["task_id"],
+        "operation_id": bindings["operation_id"],
+        "expected_validator_sha256": bindings["expected_validator_sha256"],
+        "expected_state_machine_sha256": bindings["expected_state_machine_sha256"],
+        "expected_branch_protection_sha256": bindings["expected_branch_protection_sha256"],
+        "expected_gitea_schema_sha256": bindings["expected_gitea_schema_sha256"],
+        "target_branch_protection_sha256": calculate_snapshot_sha256(
+            bindings["target_branch_protection"]
+        ),
+        "evidence_closure_oid": bindings["evidence_closure_oid"],
+        "evidence_closure_path": bindings["evidence_closure_path"],
+        "evidence_closure_sha256": bindings["evidence_closure_sha256"],
+        "implementation_commit_oid": bindings["implementation_commit_oid"],
+        "implementation_tree_oid": bindings["implementation_tree_oid"],
+        "runtime_sources": bindings["runtime_sources"],
+        "artifact_path": bindings["artifact_path"],
+        "artifact_sha256": bindings["artifact_sha256"],
+        "rollback_artifact_path": bindings["rollback_artifact_path"],
+        "rollback_artifact_sha256": bindings["rollback_artifact_sha256"],
+        "test_evidence_path": bindings["test_evidence_path"],
+        "test_evidence_sha256": bindings["test_evidence_sha256"],
+        "machine_status_producer_id": bindings["machine_status_producer_id"],
+        "machine_status_producer_name": bindings["machine_status_producer_name"],
+        "backend": bindings["backend"],
+        "repo_id": bindings["repo_id"],
+        "branch": bindings["branch"],
+        "requester": bindings["requester"],
+        "executor": bindings["executor"],
+        "forbidden_operations": bindings["forbidden_operations"],
+    }
+
+
+def _same_path(left: Path, right: Path) -> bool:
+    try:
+        return left.resolve(strict=True) == right.resolve(strict=True) and os.path.samefile(left, right)
+    except (FileNotFoundError, OSError):
+        return False
+
+
+def _verify_authority_paths(bindings: Mapping[str, Any]) -> None:
+    if bindings["backend"] != "sqlite":
+        return
+    approval_db = Path(str(bindings["approval_db_path"]))
+    backend_db = Path(str(bindings["backend_path"]))
+    if not _same_path(approval_db, backend_db):
+        raise RuntimeError("APPROVAL_DB_BACKEND_DB_IDENTITY_MISMATCH")
+    live = _same_path(backend_db, LIVE_GITEA_DB)
+    if live:
+        if not _same_path(Path(str(bindings["governance_git_dir"])), LIVE_AUTHORITATIVE_GIT):
+            raise RuntimeError("AUTHORITATIVE_GOVERNANCE_GIT_REQUIRED")
+        if not _same_path(Path(str(bindings["evidence_git_dir"])), LIVE_AUTHORITATIVE_GIT):
+            raise RuntimeError("AUTHORITATIVE_EVIDENCE_GIT_REQUIRED")
+        return
+    acceptance_root = os.environ.get("AIOS_GOVERNANCE_ACTIVATION_ACCEPTANCE_ROOT")
+    if not acceptance_root:
+        raise RuntimeError("NON_LIVE_SQLITE_BACKEND_DENIED")
+    root = Path(acceptance_root).resolve(strict=True)
+    if not str(root).startswith("/run/aios-live-activation-acceptance-"):
+        raise RuntimeError("ACCEPTANCE_ROOT_INVALID")
+    for path in (approval_db, backend_db, Path(str(bindings["governance_git_dir"])), Path(str(bindings["evidence_git_dir"]))):
+        try:
+            path.resolve(strict=True).relative_to(root)
+        except (FileNotFoundError, ValueError) as exc:
+            raise RuntimeError("ACCEPTANCE_AUTHORITY_ESCAPE_DENIED") from exc
+
+
+def _load_approved_manifest(bindings: Mapping[str, Any], git_dir: Path) -> dict[str, Any]:
+    path = str(bindings["activation_manifest_path"])
+    if not path.startswith("approvals/") or not path.endswith(".json") or ".." in Path(path).parts:
+        raise RuntimeError("ACTIVATION_MANIFEST_PATH_INVALID")
+    merge_oid = str(bindings["activation_approval_merge_oid"])
+    blob_oid = _git(git_dir, "rev-parse", f"{merge_oid}:{path}")
+    if blob_oid != bindings["activation_manifest_blob_oid"]:
+        raise RuntimeError("ACTIVATION_MANIFEST_BLOB_MISMATCH")
+    raw_result = subprocess.run(
+        ["git", f"--git-dir={git_dir}", "show", f"{merge_oid}:{path}"],
+        capture_output=True,
+        check=False,
+    )
+    if raw_result.returncode != 0:
+        raise RuntimeError("ACTIVATION_MANIFEST_READ_FAILED")
+    if hashlib.sha256(raw_result.stdout).hexdigest() != bindings["activation_manifest_sha256"]:
+        raise RuntimeError("ACTIVATION_MANIFEST_SHA256_MISMATCH")
+    try:
+        manifest = json.loads(raw_result.stdout)
+    except (UnicodeDecodeError, json.JSONDecodeError) as exc:
+        raise RuntimeError("ACTIVATION_MANIFEST_INVALID") from exc
+    if not isinstance(manifest, dict):
+        raise RuntimeError("ACTIVATION_MANIFEST_INVALID")
+    return manifest
+
+
+def _require_approval_unexpired(bindings: Mapping[str, Any]) -> None:
+    if _utc_now() >= _parse_utc(bindings["expires_at"]):
+        raise RuntimeError("APPROVAL_EXPIRED")
+
+
+def _safe_git_path(value: object) -> str:
+    path = str(value)
+    if not path or Path(path).is_absolute() or ".." in Path(path).parts:
+        raise RuntimeError("APPROVED_GIT_PATH_INVALID")
+    return path
+
+
+def _verify_approved_entities(bindings: Mapping[str, Any], git_dir: Path) -> None:
+    implementation_oid = str(bindings["implementation_commit_oid"])
+    _git(git_dir, "cat-file", "-e", f"{implementation_oid}^{{commit}}")
+    if _git(git_dir, "rev-parse", f"{implementation_oid}^{{tree}}") != bindings["implementation_tree_oid"]:
+        raise RuntimeError("IMPLEMENTATION_TREE_MISMATCH")
+    sources = bindings["runtime_sources"]
+    if not isinstance(sources, list) or not sources:
+        raise RuntimeError("RUNTIME_SOURCES_INVALID")
+    seen_git: set[str] = set()
+    seen_runtime: set[str] = set()
+    loaded_runtime_paths = {
+        "services/aios-single-owner-governance/aios_single_owner_governance/activation.py": Path(__file__).resolve(),
+        "services/aios-single-owner-governance/aios_single_owner_governance/gitea_protected_branch.py": Path(__import__(SQLiteProtectedBranchAdapter.__module__, fromlist=["x"]).__file__).resolve(),
+        "services/aios-single-owner-governance/aios_single_owner_governance/journal.py": Path(__import__(JournalStore.__module__, fromlist=["x"]).__file__).resolve(),
+        "services/aios-single-owner-governance/aios_single_owner_governance/state_machine.py": Path(state_machine_module.__file__).resolve(),
+        "services/aios-single-owner-governance/aios_single_owner_governance/validator.py": Path(validator_module.__file__).resolve(),
+    }
+    for source in sources:
+        if not isinstance(source, dict) or set(source) != {"git_path", "runtime_path", "sha256"}:
+            raise RuntimeError("RUNTIME_SOURCE_BINDING_INVALID")
+        git_path = _safe_git_path(source["git_path"])
+        runtime_path = str(source["runtime_path"])
+        _require_hex("runtime_source_sha256", source["sha256"], (64,))
+        if git_path in seen_git or runtime_path in seen_runtime:
+            raise RuntimeError("RUNTIME_SOURCE_BINDING_DUPLICATE")
+        seen_git.add(git_path)
+        seen_runtime.add(runtime_path)
+        if Path(runtime_path).resolve() != loaded_runtime_paths.get(git_path):
+            raise RuntimeError("RUNTIME_SOURCE_PATH_MISMATCH")
+        if hashlib.sha256(_git_raw(git_dir, "show", f"{implementation_oid}:{git_path}")).hexdigest() != source["sha256"]:
+            raise RuntimeError("IMPLEMENTATION_SOURCE_DIGEST_MISMATCH")
+        if _sha256_file(Path(runtime_path)) != source["sha256"]:
+            raise RuntimeError("RUNTIME_SOURCE_DIGEST_MISMATCH")
+    if seen_git != REQUIRED_RUNTIME_GIT_PATHS:
+        raise RuntimeError("RUNTIME_SOURCE_SET_MISMATCH")
+    for prefix in ("artifact", "rollback_artifact", "test_evidence"):
+        if _sha256_file(Path(str(bindings[f"{prefix}_path"]))) != bindings[f"{prefix}_sha256"]:
+            raise RuntimeError("APPROVED_ENTITY_DIGEST_MISMATCH")
+
+    closure_oid = str(bindings["evidence_closure_oid"])
+    if _git(git_dir, "cat-file", "-t", closure_oid) != "commit":
+        raise RuntimeError("EVIDENCE_CLOSURE_NOT_COMMIT")
+    parents = _git(git_dir, "rev-list", "--parents", "-n", "1", closure_oid).split()
+    if parents != [closure_oid, implementation_oid]:
+        raise RuntimeError("EVIDENCE_CLOSURE_PARENT_MISMATCH")
+    closure_path = _safe_git_path(bindings["evidence_closure_path"])
+    if hashlib.sha256(_git_raw(git_dir, "show", f"{closure_oid}:{closure_path}")).hexdigest() != bindings["evidence_closure_sha256"]:
+        raise RuntimeError("EVIDENCE_CLOSURE_SHA256_MISMATCH")
+    if _git(git_dir, "diff", "--name-status", implementation_oid, closure_oid) != f"A\t{closure_path}":
+        raise RuntimeError("EVIDENCE_CLOSURE_DIFF_INVALID")
+
+
+def _verify_external_evidence(
+    bindings: Mapping[str, Any], *, require_unexpired: bool = True
+) -> None:
+    _verify_authority_paths(bindings)
+    validator_sha = _sha256_file(Path(str(bindings["validator_path"])))
+    state_machine_sha = _sha256_file(Path(str(bindings["state_machine_path"])))
+    if validator_sha != bindings["expected_validator_sha256"] or validator_sha != bindings["observed_validator_sha256"]:
+        raise RuntimeError("VALIDATOR_DIGEST_MISMATCH")
+    if state_machine_sha != bindings["expected_state_machine_sha256"] or state_machine_sha != bindings["observed_state_machine_sha256"]:
+        raise RuntimeError("STATE_MACHINE_DIGEST_MISMATCH")
+
+    governance_git_dir = Path(str(bindings["governance_git_dir"]))
+    governance_oid = _git(governance_git_dir, "rev-parse", "--verify", str(bindings["governance_ref"]))
+    if governance_oid != bindings["expected_governance_oid"] or governance_oid != bindings["observed_governance_oid"]:
+        raise RuntimeError("WRONG_GOVERNANCE_OID_DENIED")
+    merge_oid = str(bindings["activation_approval_merge_oid"])
+    _git(governance_git_dir, "cat-file", "-e", f"{merge_oid}^{{commit}}")
+    if subprocess.run(
+        ["git", f"--git-dir={governance_git_dir}", "merge-base", "--is-ancestor", merge_oid, governance_oid],
+        capture_output=True,
+        check=False,
+    ).returncode != 0:
+        raise RuntimeError("ACTIVATION_APPROVAL_NOT_IN_GOVERNANCE_REF")
+    manifest = _load_approved_manifest(bindings, governance_git_dir)
+    if manifest.get("approval_type") != "SINGLE_OWNER_GOVERNANCE_LIVE_ACTIVATION_IMPLEMENTATION_AND_EXECUTION":
+        raise RuntimeError("ACTIVATION_APPROVAL_TYPE_MISMATCH")
+    if manifest.get("execution_binding") != _approved_execution_binding(bindings):
+        raise RuntimeError("APPROVED_EXECUTION_BINDING_MISMATCH")
+    if manifest.get("execution_binding_sha256") != sha256_json(manifest["execution_binding"]):
+        raise RuntimeError("APPROVED_EXECUTION_BINDING_SHA256_MISMATCH")
+    if manifest.get("expires_at") != bindings["expires_at"]:
+        raise RuntimeError("APPROVAL_EXPIRY_BINDING_MISMATCH")
+
+    manifest_bound_fields = (
+        "implementation_commit_oid", "implementation_tree_oid", "runtime_sources",
+        "artifact_path", "artifact_sha256", "rollback_artifact_path",
+        "rollback_artifact_sha256", "test_evidence_path", "test_evidence_sha256",
+        "evidence_closure_oid", "evidence_closure_path", "evidence_closure_sha256",
+        "machine_status_producer_id", "machine_status_producer_name",
+    )
+    if any(manifest.get(field) != bindings[field] for field in manifest_bound_fields):
+        raise RuntimeError("APPROVED_ARTIFACT_BINDING_MISMATCH")
+
+    evidence_git_dir = Path(str(bindings["evidence_git_dir"]))
+    evidence_oid = str(bindings["evidence_closure_oid"])
+    if evidence_oid != bindings["observed_evidence_closure_oid"]:
+        raise RuntimeError("WRONG_EVIDENCE_CLOSURE_DENIED")
+    _verify_approved_entities(bindings, evidence_git_dir)
+
+    db_path = Path(str(bindings["approval_db_path"]))
+    if not db_path.is_absolute() or not db_path.is_file() or db_path.is_symlink():
+        raise RuntimeError("APPROVAL_DATABASE_INVALID")
+    expiry = _parse_utc(bindings["expires_at"])
+    if require_unexpired:
+        _require_approval_unexpired(bindings)
+    with sqlite3.connect(f"file:{db_path}?mode=ro", uri=True) as connection:
+        connection.row_factory = sqlite3.Row
+        pr = connection.execute(
+            "SELECT pr.issue_id,pr.has_merged,pr.merged_commit_id,pr.merged_unix,i.is_closed "
+            "FROM pull_request pr JOIN issue i ON i.id=pr.issue_id "
+            "WHERE i.repo_id=? AND pr.\"index\"=? AND pr.base_branch=?",
+            (int(bindings["repo_id"]), int(bindings["activation_approval_pr_number"]), str(bindings["branch"])),
+        ).fetchone()
+        if pr is None or int(pr["has_merged"]) != 1 or int(pr["is_closed"]) != 1:
+            raise RuntimeError("ACTIVATION_APPROVAL_PR_NOT_MERGED")
+        if pr["merged_commit_id"] != bindings["activation_approval_merge_oid"]:
+            raise RuntimeError("ACTIVATION_APPROVAL_MERGE_MISMATCH")
+        if int(pr["merged_unix"] or 0) <= 0 or datetime.fromtimestamp(int(pr["merged_unix"]), timezone.utc) > expiry:
+            raise RuntimeError("ACTIVATION_APPROVAL_MERGED_AFTER_EXPIRY")
+        review = connection.execute(
+            "SELECT r.id,r.type,r.reviewer_id,r.commit_id,r.stale,r.dismissed,r.created_unix,u.lower_name "
+            "FROM review r JOIN user u ON u.id=r.reviewer_id WHERE r.id=? AND r.issue_id=?",
+            (int(bindings["owner_review_oid"]), int(pr["issue_id"])),
+        ).fetchone()
+        if review is None or int(review["id"]) != int(bindings["observed_owner_review_oid"]):
+            raise RuntimeError("WRONG_APPROVAL_OID_DENIED")
+        if (
+            int(review["type"]) != 1
+            or int(review["reviewer_id"]) != 2
+            or review["lower_name"] != "owner"
+            or review["commit_id"] != bindings["approval_request_head_oid"]
+            or int(review["stale"]) != 0
+            or int(review["dismissed"]) != 0
+            or datetime.fromtimestamp(int(review["created_unix"]), timezone.utc) >= expiry
+        ):
+            raise RuntimeError("OWNER_APPROVAL_INVALID")
+        statuses = connection.execute(
+            "SELECT cs.id,cs.context,cs.state,cs.sha,cs.creator_id,u.lower_name AS creator_login "
+            "FROM commit_status cs LEFT JOIN user u ON u.id=cs.creator_id "
+            "WHERE cs.repo_id=? AND cs.sha=? ORDER BY cs.id DESC",
+            (int(bindings["repo_id"]), str(bindings["approval_request_head_oid"])),
+        ).fetchall()
+        observed: dict[str, sqlite3.Row] = {}
+        for row in statuses:
+            if row["context"] in REQUIRED_MACHINE_CONTEXTS:
+                observed.setdefault(row["context"], row)
+        if set(observed) != REQUIRED_MACHINE_CONTEXTS:
+            raise RuntimeError("MACHINE_GATE_SET_MISMATCH")
+        for context, row in observed.items():
+            if row["state"] != "success" or row["sha"] != bindings["approval_request_head_oid"]:
+                raise RuntimeError("MACHINE_GATE_FAILED")
+            if (
+                int(row["creator_id"] or 0) != int(bindings["machine_status_producer_id"])
+                or row["creator_login"] != bindings["machine_status_producer_name"]
+            ):
+                raise RuntimeError("MACHINE_GATE_PRODUCER_MISMATCH")
+            expected = bindings["machine_checks"][context]
+            actual = {
+                "state": row["state"], "head_oid": row["sha"], "status_id": int(row["id"]),
+                "creator_id": int(row["creator_id"]), "creator_login": row["creator_login"],
+            }
+            if expected != actual:
+                raise RuntimeError("MACHINE_GATE_BINDING_MISMATCH")
+
+
+def validate_bindings(
+    bindings: Mapping[str, Any], *, require_unexpired: bool = True
+) -> None:
+    missing = sorted(REQUIRED_BINDINGS - set(bindings))
+    if missing:
+        raise RuntimeError("MISSING_BINDINGS:" + ",".join(missing))
+    for name in (
+        "expected_governance_oid",
+        "activation_approval_merge_oid",
+        "evidence_closure_oid",
+        "implementation_commit_oid",
+        "implementation_tree_oid",
+    ):
+        _require_hex(name, bindings[name], (40,))
+    for name in (
+        "expected_validator_sha256",
+        "expected_state_machine_sha256",
+        "expected_branch_protection_sha256",
+        "observed_validator_sha256",
+        "observed_state_machine_sha256",
+        "expected_gitea_schema_sha256",
+        "activation_manifest_sha256",
+        "artifact_sha256",
+        "rollback_artifact_sha256",
+        "test_evidence_sha256",
+        "evidence_closure_sha256",
+    ):
+        _require_hex(name, bindings[name], (64,))
+    _require_hex("activation_manifest_blob_oid", bindings["activation_manifest_blob_oid"], (40, 64))
+    if not isinstance(bindings["owner_review_oid"], (int, str)) or str(bindings["owner_review_oid"]).strip() == "":
+        raise RuntimeError("OWNER_REVIEW_OID_INVALID")
+    if bindings["governance_ref"] != "refs/heads/governance/approvals":
+        raise RuntimeError("GOVERNANCE_REF_INVALID")
+    if bindings["branch"] != "governance/approvals":
+        raise RuntimeError("BRANCH_BINDING_DENIED")
+    if bindings["backend"] not in {"file", "sqlite"}:
+        raise RuntimeError("UNKNOWN_PROTECTION_BACKEND")
+    if bindings["observed_governance_oid"] != bindings["expected_governance_oid"]:
+        raise RuntimeError("WRONG_GOVERNANCE_OID_DENIED")
+    if bindings["observed_evidence_closure_oid"] != bindings["evidence_closure_oid"]:
+        raise RuntimeError("WRONG_EVIDENCE_CLOSURE_DENIED")
+    if str(bindings["observed_owner_review_oid"]) != str(bindings["owner_review_oid"]):
+        raise RuntimeError("WRONG_APPROVAL_OID_DENIED")
+    if bindings.get("requester") == "owner":
+        raise RuntimeError("REQUESTER_SELF_APPROVAL_DENIED")
+    if bindings.get("executor") == "owner":
+        raise RuntimeError("EXECUTOR_SELF_APPROVAL_DENIED")
+    if bindings.get("wip") is not False:
+        raise RuntimeError("WIP_BLOCKED")
+    checks = bindings.get("machine_checks")
+    if not isinstance(checks, dict) or set(checks) != REQUIRED_MACHINE_CONTEXTS:
+        raise RuntimeError("MACHINE_GATE_SET_MISMATCH")
+    if not isinstance(bindings["machine_status_producer_id"], int) or bindings["machine_status_producer_id"] < 1:
+        raise RuntimeError("MACHINE_STATUS_PRODUCER_INVALID")
+    if not isinstance(bindings["machine_status_producer_name"], str) or not bindings["machine_status_producer_name"]:
+        raise RuntimeError("MACHINE_STATUS_PRODUCER_INVALID")
+    for context, check in checks.items():
+        if (
+            not isinstance(check, dict)
+            or set(check) != {"state", "head_oid", "status_id", "creator_id", "creator_login"}
+            or check.get("state") != "success"
+            or check.get("head_oid") != bindings["approval_request_head_oid"]
+            or not isinstance(check.get("status_id"), int)
+            or check.get("status_id") < 1
+            or check.get("creator_id") != bindings["machine_status_producer_id"]
+            or check.get("creator_login") != bindings["machine_status_producer_name"]
+        ):
+            raise RuntimeError(f"MACHINE_GATE_FAILED:{context}")
+    forbidden = bindings.get("forbidden_operations", {})
+    if any(bool(value) for value in forbidden.values()):
+        raise RuntimeError("FORBIDDEN_OPERATION_REQUESTED")
+    if os.environ.get("AIOS_GITOPS_WRITES_ENABLED", "false").lower() != "false":
+        raise RuntimeError("GLOBAL_GITOPS_WRITES_MUST_REMAIN_FALSE")
+    if not isinstance(bindings.get("target_branch_protection"), dict):
+        raise RuntimeError("TARGET_BRANCH_PROTECTION_REQUIRED")
+    _verify_external_evidence(bindings, require_unexpired=require_unexpired)
+
+
+def binding_payload_hash(bindings: Mapping[str, Any]) -> str:
+    stable = dict(bindings)
+    stable.pop("crash_at", None)
+    return sha256_json(redact(stable))
+
+
+def plan_id(bindings: Mapping[str, Any], previous: Mapping[str, Any], target: Mapping[str, Any]) -> str:
+    stable = dict(bindings)
+    stable.pop("crash_at", None)
+    return sha256_json(
+        {
+            "bindings": redact(stable),
+            "previous": dict(previous),
+            "target": dict(target),
+        }
+    )
+
+
+class ActivationEngine:
+    def __init__(self, adapter: Adapter, state_root: Path, lock_path: Path) -> None:
+        self.adapter = adapter
+        self.journal = JournalStore(state_root)
+        self.lock_path = lock_path
+
+    def plan(self, bindings: Mapping[str, Any]) -> dict[str, Any]:
+        validate_bindings(bindings)
+        previous = self.adapter.read_current()
+        previous_sha = calculate_snapshot_sha256(previous)
+        if previous_sha != bindings["expected_branch_protection_sha256"]:
+            raise CASConflict("EXPECTED_BRANCH_PROTECTION_SHA256_MISMATCH")
+        target = dict(bindings["target_branch_protection"])
+        # Validate without writing by using the public target validator through a
+        # disposable comparison: adapters enforce the same checks again in CAS.
+        from .gitea_protected_branch import validate_target
+
+        validate_target(previous, target)
+        result = {
+            "status": "PLAN_READY",
+            "task_id": bindings["task_id"],
+            "operation_id": bindings["operation_id"],
+            "plan_id": plan_id(bindings, previous, target),
+            "payload_hash": binding_payload_hash(bindings),
+            "previous_sha256": previous_sha,
+            "target_sha256": calculate_snapshot_sha256(target),
+        }
+        return result
+
+    def _recover(self, record: dict[str, Any]) -> dict[str, Any]:
+        current = self.adapter.read_current()
+        current_sha = calculate_snapshot_sha256(current)
+        previous_sha = record["previous_sha256"]
+        target_sha = record["target_sha256"]
+        if record["phase"] == "PREPARED":
+            if current_sha == previous_sha:
+                return {**record, "recovery": "RESUME_BEFORE_APPLY"}
+            if current_sha == target_sha:
+                record = {**record, "phase": "APPLIED", "recovery": "RESUME_AFTER_APPLY"}
+                self.journal.write(record["operation_id"], record)
+                return record
+            raise RuntimeError("MANUAL_INTERVENTION_REQUIRED")
+        if record["phase"] in {"APPLIED", "COMMITTED"} and current_sha not in {target_sha, previous_sha}:
+            raise RuntimeError("MANUAL_INTERVENTION_REQUIRED")
+        return record
+
+    def _ensure_closure(self, record: dict[str, Any], event: str) -> None:
+        expected_sha = (
+            record["target_sha256"] if record["phase"] == "COMMITTED" else record["previous_sha256"]
+        )
+        if calculate_snapshot_sha256(self.adapter.read_current()) != expected_sha:
+            raise RuntimeError("MANUAL_INTERVENTION_REQUIRED")
+        atomic_write_json(
+            self.journal.root / "current-snapshot.json",
+            record["target"] if record["phase"] == "COMMITTED" else record["previous"],
+        )
+        atomic_write_json(self.journal.root / "rollback-snapshot.json", record["previous"])
+        self.journal.write_receipt(record["operation_id"], record)
+        if not self.journal.audit.has_event(record["operation_id"], event):
+            payload = {"event": event}
+            if event == "SINGLE_OWNER_ACTIVATION_COMMITTED":
+                payload.update(
+                    payload_hash=record["payload_hash"],
+                    target_sha256=record["target_sha256"],
+                )
+            self.journal.audit.append(record["operation_id"], payload)
+        atomic_write_json(self.journal.root / "state.json", record)
+
+    def activate(self, bindings: Mapping[str, Any], supplied_plan_id: str) -> dict[str, Any]:
+        with exclusive_lock(self.lock_path):
+            self.journal.audit.verify()
+            operation_id = str(bindings["operation_id"])
+            payload_hash = binding_payload_hash(bindings)
+            record = self.journal.load(operation_id)
+            if record:
+                if record.get("payload_hash") != payload_hash:
+                    raise RuntimeError("OPERATION_ID_PAYLOAD_MISMATCH_DENIED")
+                if record.get("plan_id") != supplied_plan_id:
+                    raise RuntimeError("PLAN_ID_MISMATCH")
+                if record.get("phase") == "ROLLED_BACK":
+                    raise RuntimeError("OPERATION_TERMINAL_ROLLED_BACK")
+                if record.get("phase") == "FAILED":
+                    raise RuntimeError("OPERATION_TERMINAL_FAILED")
+                prepared_at = _parse_utc(record.get("prepared_at"))
+                if prepared_at >= _parse_utc(bindings["expires_at"]):
+                    raise RuntimeError("RECOVERY_AUTHORIZATION_INVALID")
+                record = self._recover(record)
+                if record["phase"] == "COMMITTED":
+                    self._ensure_closure(record, "SINGLE_OWNER_ACTIVATION_COMMITTED")
+                    return {"status": "ALREADY_COMMITTED", **record}
+            else:
+                validate_bindings(bindings)
+                planned = self.plan(bindings)
+                if supplied_plan_id != planned["plan_id"]:
+                    raise RuntimeError("PLAN_ID_MISMATCH")
+            previous = self.adapter.read_current()
+            target = dict(bindings["target_branch_protection"])
+            if record is None:
+                if calculate_snapshot_sha256(previous) != planned["previous_sha256"]:
+                    raise CASConflict("PREPARED_BOUNDARY_SNAPSHOT_CHANGED")
+                prepared_at = _utc_now()
+                if prepared_at >= _parse_utc(bindings["expires_at"]):
+                    raise RuntimeError("APPROVAL_EXPIRED")
+                record = {
+                    "task_id": bindings["task_id"],
+                    "operation_id": operation_id,
+                    "transaction_id": operation_id,
+                    "payload_hash": payload_hash,
+                    "plan_id": supplied_plan_id,
+                    "phase": "PREPARED",
+                    "prepared_at": prepared_at.isoformat().replace("+00:00", "Z"),
+                    "previous": previous,
+                    "target": target,
+                    "previous_sha256": calculate_snapshot_sha256(previous),
+                    "target_sha256": calculate_snapshot_sha256(target),
+                    "activation_approval_merge_oid": bindings["activation_approval_merge_oid"],
+                    "evidence_closure_oid": bindings["evidence_closure_oid"],
+                    "owner_review_oid": bindings["owner_review_oid"],
+                }
+                self.journal.write(operation_id, record)
+                atomic_write_json(self.journal.root / "current-snapshot.json", previous)
+                atomic_write_json(self.journal.root / "rollback-snapshot.json", previous)
+            crash_at = bindings.get("crash_at")
+            if crash_at == "before_apply":
+                raise InjectedCrash("before_apply")
+            try:
+                current_sha = calculate_snapshot_sha256(self.adapter.read_current())
+                if current_sha == record["previous_sha256"]:
+                    applied = self.adapter.apply_atomic(record["previous_sha256"], record["target"])
+                    record["target"] = applied
+                    record["target_sha256"] = calculate_snapshot_sha256(applied)
+                elif current_sha != record["target_sha256"]:
+                    raise CASConflict("CAS_CONFLICT")
+                if crash_at == "during_apply":
+                    raise InjectedCrash("during_apply")
+                record["phase"] = "APPLIED"
+                self.journal.write(operation_id, record)
+                if crash_at == "after_apply_before_receipt":
+                    raise InjectedCrash("after_apply_before_receipt")
+                if not self.adapter.verify_applied(record["target_sha256"]):
+                    raise RuntimeError("POST_ACTIVATION_VERIFY_FAILED")
+                record["phase"] = "COMMITTED"
+                record["single_owner_policy_active"] = True
+                record["break_glass_active"] = False
+                self.journal.write(operation_id, record)
+                if crash_at == "after_commit_wal":
+                    raise InjectedCrash("after_commit_wal")
+                self._ensure_closure(record, "SINGLE_OWNER_ACTIVATION_COMMITTED")
+                return {"status": "ACTIVATED", **record}
+            except InjectedCrash:
+                raise
+            except Exception as exc:
+                failure = {**record, "phase": "FAILED", "error": type(exc).__name__}
+                current_sha = calculate_snapshot_sha256(self.adapter.read_current())
+                if current_sha == record["target_sha256"]:
+                    self.adapter.rollback_atomic(record["target_sha256"], record["previous"])
+                    if not self.adapter.verify_rollback(record["previous_sha256"]):
+                        raise RuntimeError("ROLLBACK_VERIFY_FAILED") from exc
+                    failure["phase"] = "ROLLED_BACK"
+                self.journal.write(operation_id, failure)
+                self.journal.write_receipt(operation_id, failure)
+                self.journal.audit.append(operation_id, {"event": failure["phase"], "error": type(exc).__name__})
+                raise
+
+    def verify(self, bindings: Mapping[str, Any], operation_id: str) -> dict[str, Any]:
+        record = self.journal.load(operation_id)
+        if not record:
+            raise RuntimeError("TRANSACTION_NOT_FOUND")
+        if record.get("payload_hash") != binding_payload_hash(bindings):
+            raise RuntimeError("OPERATION_ID_PAYLOAD_MISMATCH_DENIED")
+        self.journal.audit.verify()
+        current_sha = calculate_snapshot_sha256(self.adapter.read_current())
+        passed = record.get("phase") == "COMMITTED" and current_sha == record.get("target_sha256")
+        if not passed:
+            raise RuntimeError("ACTIVATION_VERIFY_FAILED")
+        return {"status": "VERIFIED", "operation_id": operation_id, "target_sha256": current_sha}
+
+    def rollback(
+        self, bindings: Mapping[str, Any], operation_id: str, supplied_plan_id: str
+    ) -> dict[str, Any]:
+        with exclusive_lock(self.lock_path):
+            self.journal.audit.verify()
+            record = self.journal.load(operation_id)
+            if not record:
+                raise RuntimeError("TRANSACTION_NOT_FOUND")
+            if record.get("payload_hash") != binding_payload_hash(bindings):
+                raise RuntimeError("OPERATION_ID_PAYLOAD_MISMATCH_DENIED")
+            if record.get("plan_id") != supplied_plan_id:
+                raise RuntimeError("PLAN_ID_MISMATCH")
+            for field in (
+                "activation_approval_merge_oid",
+                "evidence_closure_oid",
+                "owner_review_oid",
+            ):
+                if str(record.get(field)) != str(bindings[field]):
+                    raise RuntimeError("ROLLBACK_AUTHORIZATION_MISMATCH_DENIED")
+            current_sha = calculate_snapshot_sha256(self.adapter.read_current())
+            if current_sha == record["previous_sha256"]:
+                record["phase"] = "ROLLED_BACK"
+                record["single_owner_policy_active"] = False
+                self.journal.write(operation_id, record)
+                self._ensure_closure(record, "ACTIVATION_ROLLED_BACK")
+                return {"status": "ALREADY_ROLLED_BACK", "operation_id": operation_id}
+            if current_sha != record["target_sha256"]:
+                raise RuntimeError("MANUAL_INTERVENTION_REQUIRED")
+            self.adapter.rollback_atomic(record["target_sha256"], record["previous"])
+            if not self.adapter.verify_rollback(record["previous_sha256"]):
+                raise RuntimeError("ROLLBACK_VERIFY_FAILED")
+            if bindings.get("crash_at") == "after_rollback_cas":
+                raise InjectedCrash("after_rollback_cas")
+            record["phase"] = "ROLLED_BACK"
+            record["single_owner_policy_active"] = False
+            self.journal.write(operation_id, record)
+            if bindings.get("crash_at") == "after_rollback_wal":
+                raise InjectedCrash("after_rollback_wal")
+            self._ensure_closure(record, "ACTIVATION_ROLLED_BACK")
+            return {"status": "ROLLED_BACK", "operation_id": operation_id}
+
+    def status(self, operation_id: str | None = None) -> dict[str, Any]:
+        audit_head = self.journal.audit.verify()
+        if operation_id:
+            record = self.journal.load(operation_id)
+            if not record:
+                raise RuntimeError("TRANSACTION_NOT_FOUND")
+            return {"status": "OK", "audit_head": audit_head, "transaction": record}
+        state_path = self.journal.root / "state.json"
+        return {
+            "status": "OK",
+            "audit_head": audit_head,
+            "state": read_json(state_path) if state_path.exists() else None,
+            "transactions": list(self.journal.iter_transactions()),
+        }
+
+
+def load_bindings(path: Path) -> dict[str, Any]:
+    return read_json(path)
+
+
+def adapter_from_bindings(bindings: Mapping[str, Any]) -> Adapter:
+    backend = bindings.get("backend", "file")
+    backend_path = Path(str(bindings.get("backend_path", "")))
+    if not backend_path.is_absolute():
+        raise RuntimeError("BACKEND_PATH_MUST_BE_ABSOLUTE")
+    if backend == "file":
+        return FileProtectedBranchAdapter(backend_path)
+    if backend == "sqlite":
+        return SQLiteProtectedBranchAdapter(
+            backend_path,
+            repo_id=int(bindings.get("repo_id", 1)),
+            branch=str(bindings.get("branch", "governance/approvals")),
+            expected_schema_sha256=str(bindings["expected_gitea_schema_sha256"]),
+        )
+    raise RuntimeError("UNKNOWN_PROTECTION_BACKEND")
+
+
+def build_parser() -> argparse.ArgumentParser:
+    parser = argparse.ArgumentParser()
+    action = parser.add_mutually_exclusive_group(required=True)
+    for name in ("plan", "activate", "verify", "rollback", "status"):
+        action.add_argument(f"--{name}", action="store_true")
+    parser.add_argument("--bindings", type=Path)
+    parser.add_argument("--plan-id")
+    parser.add_argument("--transaction")
+    parser.add_argument("--state-root", type=Path, default=DEFAULT_STATE_ROOT)
+    parser.add_argument("--lock-path", type=Path, default=DEFAULT_LOCK_PATH)
+    return parser
+
+
+def main(argv: list[str] | None = None) -> int:
+    args = build_parser().parse_args(argv)
+    if args.status and args.bindings is None:
+        # Status without bindings is intentionally limited to durable local state.
+        journal = JournalStore(args.state_root)
+        result = {
+            "status": "OK",
+            "audit_head": journal.audit.verify(),
+            "transactions": list(journal.iter_transactions()),
+        }
+        print(json.dumps(result, sort_keys=True))
+        return 0
+    if args.bindings is None:
+        raise SystemExit("--bindings is required")
+    bindings = load_bindings(args.bindings)
+    engine = ActivationEngine(adapter_from_bindings(bindings), args.state_root, args.lock_path)
+    if args.plan:
+        result = engine.plan(bindings)
+    elif args.activate:
+        if not args.plan_id:
+            raise SystemExit("--plan-id is required")
+        result = engine.activate(bindings, args.plan_id)
+    elif args.verify:
+        result = engine.verify(bindings, args.transaction or str(bindings["operation_id"]))
+    elif args.rollback:
+        if not args.plan_id:
+            raise SystemExit("--plan-id is required")
+        result = engine.rollback(
+            bindings, args.transaction or str(bindings["operation_id"]), args.plan_id
+        )
+    else:
+        result = engine.status(args.transaction)
+    print(json.dumps(redact(result), sort_keys=True))
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())
@@ -0,0 +1,61 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+import hashlib
+import json
+from typing import Mapping
+
+
+def canonical_json(value: object) -> bytes:
+    return json.dumps(value, sort_keys=True, separators=(",", ":")).encode()
+
+
+@dataclass(frozen=True)
+class EvidenceClosure:
+    evidence: Mapping[str, str]
+    closure_sha256: str
+
+
+class ActivationEvidenceClosureBuilder:
+    def build(self, evidence: Mapping[str, str]) -> EvidenceClosure:
+        required = {
+            "activation_prerequisites_commit_oid",
+            "activation_prerequisites_tree_oid",
+            "artifact_sha256",
+            "rollback_artifact_sha256",
+            "validator_sha256",
+            "state_machine_sha256",
+            "branch_protection_adapter_sha256",
+            "rollback_configuration_sha256",
+            "test_evidence_sha256",
+            "deployment_manifest_sha256",
+            "dormant_unit_manifest_sha256",
+            "dormant_deployment_evidence_sha256",
+        }
+        if set(evidence) != required:
+            raise ValueError("evidence set mismatch")
+        for value in evidence.values():
+            if len(value) != 40 and len(value) != 64:
+                raise ValueError("invalid evidence digest")
+        return EvidenceClosure(
+            dict(evidence), hashlib.sha256(canonical_json(evidence)).hexdigest()
+        )
+
+
+class ApprovalMirrorStatusVerifier:
+    def verify(
+        self,
+        expected_oid: str,
+        *,
+        gitea_oid: str,
+        quarantine_oid: str,
+        authoritative_oid: str,
+        controller_visible_oid: str,
+        fsck_connectivity: str,
+    ) -> bool:
+        return (
+            len(expected_oid) == 40
+            and {gitea_oid, quarantine_oid, authoritative_oid, controller_visible_oid}
+            == {expected_oid}
+            and fsck_connectivity == "PASS"
+        )
@@ -0,0 +1,26 @@
+from __future__ import annotations
+
+from contextlib import AbstractContextManager
+from pathlib import Path
+import shutil
+import tempfile
+
+from .models import ProtectionSnapshot
+from .protection import MemoryProtectionStore
+
+
+class DisposableGiteaFixture(AbstractContextManager):
+    def __init__(self, initial: ProtectionSnapshot) -> None:
+        self.root = Path(tempfile.mkdtemp(prefix="aios-governance-fixture-"))
+        self.protection = MemoryProtectionStore(initial)
+        self.destroyed = False
+
+    def __enter__(self) -> "DisposableGiteaFixture":
+        return self
+
+    def __exit__(self, exc_type, exc, tb) -> None:
+        resolved = self.root.resolve()
+        if not resolved.name.startswith("aios-governance-fixture-"):
+            raise RuntimeError("fixture cleanup path guard failed")
+        shutil.rmtree(resolved)
+        self.destroyed = True
@@ -0,0 +1,260 @@
+from __future__ import annotations
+
+import json
+from pathlib import Path
+import sqlite3
+import time
+from typing import Any, Mapping
+
+from .journal import atomic_write_json, read_json, sha256_json
+
+
+class CASConflict(RuntimeError):
+    pass
+
+
+class UnsafePolicy(RuntimeError):
+    pass
+
+
+def calculate_snapshot_sha256(snapshot: Mapping[str, Any]) -> str:
+    return sha256_json(dict(snapshot))
+
+
+def validate_target(previous: Mapping[str, Any], target: Mapping[str, Any]) -> None:
+    if set(previous) != set(target):
+        raise UnsafePolicy("PROTECTION_ROW_SHAPE_CHANGED")
+    for field in ("id", "repo_id", "branch_name"):
+        if previous.get(field) != target.get(field):
+            raise UnsafePolicy(f"PROTECTION_IDENTITY_CHANGED:{field}")
+    if target.get("branch_name") != "governance/approvals":
+        raise UnsafePolicy("BRANCH_BINDING_DENIED")
+    if int(target.get("can_push", 1)) != 0:
+        raise UnsafePolicy("DIRECT_PUSH_MUST_REMAIN_DISABLED")
+    if int(target.get("required_approvals", 0)) != 1:
+        raise UnsafePolicy("EXACTLY_ONE_APPROVAL_REQUIRED")
+    if int(target.get("enable_approvals_whitelist", 0)) != 1:
+        raise UnsafePolicy("APPROVAL_WHITELIST_MUST_REMAIN_ENABLED")
+    if json.loads(target.get("approvals_whitelist_user_i_ds", "[]")) != [2]:
+        raise UnsafePolicy("OWNER_APPROVAL_WHITELIST_REQUIRED")
+    if int(target.get("enable_merge_whitelist", 0)) != 1:
+        raise UnsafePolicy("MERGE_WHITELIST_MUST_REMAIN_ENABLED")
+    if target.get("merge_whitelist_user_i_ds") != previous.get("merge_whitelist_user_i_ds"):
+        raise UnsafePolicy("MERGE_EXECUTOR_WHITELIST_CHANGE_DENIED")
+    if int(target.get("dismiss_stale_approvals", 0)) != 1:
+        raise UnsafePolicy("DISMISS_STALE_APPROVALS_REQUIRED")
+    if int(target.get("enable_status_check", 0)) != 1:
+        raise UnsafePolicy("STATUS_CHECKS_REQUIRED")
+    required_contexts = {
+        "aios/validator",
+        "aios/state-machine",
+        "aios/branch-protection",
+        "aios/secret-scan",
+        "aios/evidence-closure",
+    }
+    try:
+        contexts = set(json.loads(target.get("status_check_contexts", "[]")))
+    except (TypeError, ValueError) as exc:
+        raise UnsafePolicy("STATUS_CHECK_CONTEXTS_INVALID") from exc
+    if contexts != required_contexts:
+        raise UnsafePolicy("STATUS_CHECK_CONTEXTS_MISMATCH")
+    if int(target.get("block_on_rejected_reviews", 0)) != 1:
+        raise UnsafePolicy("REJECTED_REVIEWS_MUST_BLOCK")
+    if int(target.get("block_on_outdated_branch", 0)) != 1:
+        raise UnsafePolicy("OUTDATED_BRANCH_MUST_BLOCK")
+    if target.get("require_signed_commits") != previous.get("require_signed_commits"):
+        raise UnsafePolicy("SIGNATURE_POLICY_CHANGE_DENIED")
+
+
+class FileProtectedBranchAdapter:
+    def __init__(self, path: Path) -> None:
+        self.path = path
+
+    @staticmethod
+    def calculate_snapshot_sha256(snapshot: Mapping[str, Any]) -> str:
+        return calculate_snapshot_sha256(snapshot)
+
+    def read_current(self) -> dict[str, Any]:
+        return read_json(self.path)
+
+    def compare_expected(self, expected_sha256: str) -> bool:
+        return calculate_snapshot_sha256(self.read_current()) == expected_sha256
+
+    def apply_atomic(
+        self, expected_sha256: str, target: Mapping[str, Any]
+    ) -> dict[str, Any]:
+        previous = self.read_current()
+        if calculate_snapshot_sha256(previous) != expected_sha256:
+            raise CASConflict("CAS_CONFLICT")
+        validate_target(previous, target)
+        atomic_write_json(self.path, dict(target))
+        applied = self.read_current()
+        if calculate_snapshot_sha256(applied) != calculate_snapshot_sha256(target):
+            raise CASConflict("CAS_VERIFY_FAILED")
+        return applied
+
+    def verify_applied(self, expected_sha256: str) -> bool:
+        return self.compare_expected(expected_sha256)
+
+    def rollback_atomic(
+        self, expected_target_sha256: str, previous: Mapping[str, Any]
+    ) -> dict[str, Any]:
+        current = self.read_current()
+        if calculate_snapshot_sha256(current) != expected_target_sha256:
+            raise CASConflict("ROLLBACK_CONFLICT")
+        atomic_write_json(self.path, dict(previous))
+        restored = self.read_current()
+        if calculate_snapshot_sha256(restored) != calculate_snapshot_sha256(previous):
+            raise CASConflict("ROLLBACK_VERIFY_FAILED")
+        return restored
+
+    def verify_rollback(self, expected_sha256: str) -> bool:
+        return self.compare_expected(expected_sha256)
+
+
+class SQLiteProtectedBranchAdapter:
+    ALLOWED_UPDATE_FIELDS = (
+        "can_push",
+        "enable_merge_whitelist",
+        "merge_whitelist_user_i_ds",
+        "enable_status_check",
+        "status_check_contexts",
+        "enable_approvals_whitelist",
+        "approvals_whitelist_user_i_ds",
+        "required_approvals",
+        "block_on_rejected_reviews",
+        "block_on_official_review_requests",
+        "block_on_outdated_branch",
+        "dismiss_stale_approvals",
+        "ignore_stale_approvals",
+        "updated_unix",
+    )
+
+    def __init__(
+        self,
+        db_path: Path,
+        *,
+        repo_id: int = 1,
+        branch: str = "governance/approvals",
+        expected_schema_sha256: str,
+    ) -> None:
+        self.db_path = db_path
+        self.repo_id = repo_id
+        self.branch = branch
+        self.expected_schema_sha256 = expected_schema_sha256
+
+    def _connect(self) -> sqlite3.Connection:
+        connection = sqlite3.connect(self.db_path, timeout=10)
+        connection.row_factory = sqlite3.Row
+        return connection
+
+    def schema_sha256(self, connection: sqlite3.Connection | None = None) -> str:
+        own = connection is None
+        connection = connection or self._connect()
+        try:
+            rows = [dict(row) for row in connection.execute("PRAGMA table_info(protected_branch)")]
+            return sha256_json(rows)
+        finally:
+            if own:
+                connection.close()
+
+    def _check_schema(self, connection: sqlite3.Connection) -> None:
+        if not isinstance(self.expected_schema_sha256, str) or len(self.expected_schema_sha256) != 64:
+            raise RuntimeError("GITEA_SCHEMA_FINGERPRINT_REQUIRED")
+        if self.schema_sha256(connection) != self.expected_schema_sha256:
+            raise RuntimeError("GITEA_SCHEMA_FINGERPRINT_MISMATCH")
+
+    def _read(self, connection: sqlite3.Connection) -> dict[str, Any]:
+        row = connection.execute(
+            "SELECT * FROM protected_branch WHERE repo_id=? AND branch_name=?",
+            (self.repo_id, self.branch),
+        ).fetchone()
+        if row is None:
+            raise RuntimeError("PROTECTED_BRANCH_ROW_NOT_FOUND")
+        return dict(row)
+
+    def read_current(self) -> dict[str, Any]:
+        with self._connect() as connection:
+            self._check_schema(connection)
+            return self._read(connection)
+
+    @staticmethod
+    def calculate_snapshot_sha256(snapshot: Mapping[str, Any]) -> str:
+        return calculate_snapshot_sha256(snapshot)
+
+    def compare_expected(self, expected_sha256: str) -> bool:
+        return calculate_snapshot_sha256(self.read_current()) == expected_sha256
+
+    def apply_atomic(
+        self, expected_sha256: str, target: Mapping[str, Any]
+    ) -> dict[str, Any]:
+        connection = self._connect()
+        try:
+            connection.execute("BEGIN IMMEDIATE")
+            self._check_schema(connection)
+            previous = self._read(connection)
+            if calculate_snapshot_sha256(previous) != expected_sha256:
+                raise CASConflict("CAS_CONFLICT")
+            validate_target(previous, target)
+            values = dict(target)
+            values["updated_unix"] = int(values.get("updated_unix") or time.time())
+            assignments = ",".join(f"{field}=?" for field in self.ALLOWED_UPDATE_FIELDS)
+            parameters = [values[field] for field in self.ALLOWED_UPDATE_FIELDS]
+            parameters.extend((self.repo_id, self.branch))
+            cursor = connection.execute(
+                f"UPDATE protected_branch SET {assignments} WHERE repo_id=? AND branch_name=?",
+                parameters,
+            )
+            if cursor.rowcount != 1:
+                raise CASConflict("CAS_ROWCOUNT_INVALID")
+            applied = self._read(connection)
+            expected_target = dict(target)
+            expected_target["updated_unix"] = values["updated_unix"]
+            if calculate_snapshot_sha256(applied) != calculate_snapshot_sha256(expected_target):
+                raise CASConflict("CAS_VERIFY_FAILED")
+            connection.commit()
+            return applied
+        except Exception:
+            connection.rollback()
+            raise
+        finally:
+            connection.close()
+
+    def verify_applied(self, expected_sha256: str) -> bool:
+        return self.compare_expected(expected_sha256)
+
+    def rollback_atomic(
+        self, expected_target_sha256: str, previous: Mapping[str, Any]
+    ) -> dict[str, Any]:
+        connection = self._connect()
+        try:
+            connection.execute("BEGIN IMMEDIATE")
+            self._check_schema(connection)
+            current = self._read(connection)
+            if calculate_snapshot_sha256(current) != expected_target_sha256:
+                raise CASConflict("ROLLBACK_CONFLICT")
+            for field in ("id", "repo_id", "branch_name"):
+                if current.get(field) != previous.get(field):
+                    raise CASConflict("ROLLBACK_IDENTITY_MISMATCH")
+            assignments = ",".join(f"{field}=?" for field in self.ALLOWED_UPDATE_FIELDS)
+            parameters = [previous[field] for field in self.ALLOWED_UPDATE_FIELDS]
+            parameters.extend((self.repo_id, self.branch))
+            cursor = connection.execute(
+                f"UPDATE protected_branch SET {assignments} WHERE repo_id=? AND branch_name=?",
+                parameters,
+            )
+            if cursor.rowcount != 1:
+                raise CASConflict("ROLLBACK_ROWCOUNT_INVALID")
+            restored = self._read(connection)
+            if calculate_snapshot_sha256(restored) != calculate_snapshot_sha256(previous):
+                raise CASConflict("ROLLBACK_VERIFY_FAILED")
+            connection.commit()
+            return restored
+        except Exception:
+            connection.rollback()
+            raise
+        finally:
+            connection.close()
+
+    def verify_rollback(self, expected_sha256: str) -> bool:
+        return self.compare_expected(expected_sha256)
@@ -0,0 +1,189 @@
+from __future__ import annotations
+
+import hashlib
+import json
+import os
+from pathlib import Path
+import tempfile
+from typing import Any, Iterable
+
+
+SENSITIVE_FRAGMENTS = (
+    "authorization",
+    "cookie",
+    "credential",
+    "password",
+    "private_key",
+    "secret",
+    "token",
+)
+
+
+def canonical_json(value: object) -> bytes:
+    return json.dumps(value, sort_keys=True, separators=(",", ":")).encode("utf-8")
+
+
+def sha256_json(value: object) -> str:
+    return hashlib.sha256(canonical_json(value)).hexdigest()
+
+
+def redact(value: Any) -> Any:
+    if isinstance(value, dict):
+        return {
+            str(key): (
+                "[REDACTED]"
+                if any(fragment in str(key).lower() for fragment in SENSITIVE_FRAGMENTS)
+                else redact(item)
+            )
+            for key, item in value.items()
+        }
+    if isinstance(value, list):
+        return [redact(item) for item in value]
+    if isinstance(value, tuple):
+        return [redact(item) for item in value]
+    return value
+
+
+def ensure_state_directory(path: Path) -> None:
+    if path.is_symlink():
+        raise RuntimeError("STATE_DIRECTORY_SYMLINK_DENIED")
+    path.mkdir(parents=True, exist_ok=True, mode=0o750)
+    path.chmod(0o750)
+    mode = path.stat().st_mode & 0o777
+    if mode != 0o750:
+        raise RuntimeError("STATE_DIRECTORY_MODE_INVALID")
+
+
+def atomic_write_json(path: Path, value: object) -> None:
+    ensure_state_directory(path.parent)
+    raw = json.dumps(redact(value), sort_keys=True, indent=2).encode("utf-8") + b"\n"
+    with tempfile.NamedTemporaryFile(
+        dir=path.parent, prefix=f".{path.name}.", delete=False
+    ) as handle:
+        temporary = Path(handle.name)
+        handle.write(raw)
+        handle.flush()
+        os.fsync(handle.fileno())
+    temporary.chmod(0o640)
+    os.replace(temporary, path)
+    path.chmod(0o640)
+    directory_fd = os.open(path.parent, os.O_RDONLY)
+    try:
+        os.fsync(directory_fd)
+    finally:
+        os.close(directory_fd)
+
+
+def read_json(path: Path) -> dict[str, Any]:
+    raw = json.loads(path.read_text(encoding="utf-8"))
+    if not isinstance(raw, dict):
+        raise RuntimeError("STATE_DOCUMENT_NOT_OBJECT")
+    return raw
+
+
+class AuditChain:
+    def __init__(self, path: Path) -> None:
+        self.path = path
+
+    def _records(self) -> list[dict[str, Any]]:
+        if not self.path.exists():
+            return []
+        records: list[dict[str, Any]] = []
+        for line in self.path.read_text(encoding="utf-8").splitlines():
+            if line.strip():
+                record = json.loads(line)
+                if not isinstance(record, dict):
+                    raise RuntimeError("AUDIT_RECORD_INVALID")
+                records.append(record)
+        return records
+
+    def verify(self) -> str:
+        previous = "0" * 64
+        for index, record in enumerate(self._records(), 1):
+            payload = record.get("payload")
+            if record.get("sequence") != index:
+                raise RuntimeError("AUDIT_SEQUENCE_INVALID")
+            if record.get("previous_event_hash") != previous:
+                raise RuntimeError("AUDIT_PREVIOUS_HASH_INVALID")
+            payload_hash = sha256_json(payload)
+            if record.get("payload_hash") != payload_hash:
+                raise RuntimeError("AUDIT_PAYLOAD_HASH_INVALID")
+            material = {
+                "sequence": index,
+                "previous_event_hash": previous,
+                "payload_hash": payload_hash,
+                "transaction_id": record.get("transaction_id"),
+            }
+            event_hash = sha256_json(material)
+            if record.get("event_hash") != event_hash:
+                raise RuntimeError("AUDIT_EVENT_HASH_INVALID")
+            previous = event_hash
+        return previous
+
+    def append(self, transaction_id: str, payload: dict[str, Any]) -> dict[str, Any]:
+        ensure_state_directory(self.path.parent)
+        previous = self.verify()
+        sequence = len(self._records()) + 1
+        clean_payload = redact(payload)
+        payload_hash = sha256_json(clean_payload)
+        material = {
+            "sequence": sequence,
+            "previous_event_hash": previous,
+            "payload_hash": payload_hash,
+            "transaction_id": transaction_id,
+        }
+        record = {
+            **material,
+            "payload": clean_payload,
+            "event_hash": sha256_json(material),
+        }
+        fd = os.open(self.path, os.O_WRONLY | os.O_APPEND | os.O_CREAT, 0o640)
+        try:
+            os.write(fd, canonical_json(record) + b"\n")
+            os.fsync(fd)
+        finally:
+            os.close(fd)
+        self.path.chmod(0o640)
+        return record
+
+    def has_event(self, transaction_id: str, event: str) -> bool:
+        self.verify()
+        return any(
+            record.get("transaction_id") == transaction_id
+            and isinstance(record.get("payload"), dict)
+            and record["payload"].get("event") == event
+            for record in self._records()
+        )
+
+
+class JournalStore:
+    def __init__(self, root: Path) -> None:
+        self.root = root
+        self.wal = root / "wal"
+        self.receipts = root / "receipts"
+        ensure_state_directory(root)
+        ensure_state_directory(self.wal)
+        ensure_state_directory(self.receipts)
+        self.audit = AuditChain(root / "audit.jsonl")
+
+    def transaction_path(self, operation_id: str) -> Path:
+        if not operation_id or any(char not in "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789._-" for char in operation_id):
+            raise RuntimeError("OPERATION_ID_INVALID")
+        return self.wal / f"{operation_id}.json"
+
+    def receipt_path(self, operation_id: str) -> Path:
+        return self.receipts / f"{operation_id}.json"
+
+    def load(self, operation_id: str) -> dict[str, Any] | None:
+        path = self.transaction_path(operation_id)
+        return read_json(path) if path.exists() else None
+
+    def write(self, operation_id: str, value: dict[str, Any]) -> None:
+        atomic_write_json(self.transaction_path(operation_id), value)
+
+    def write_receipt(self, operation_id: str, value: dict[str, Any]) -> None:
+        atomic_write_json(self.receipt_path(operation_id), value)
+
+    def iter_transactions(self) -> Iterable[dict[str, Any]]:
+        for path in sorted(self.wal.glob("*.json")):
+            yield read_json(path)
@@ -0,0 +1,47 @@
+from __future__ import annotations
+
+from pathlib import Path
+
+try:
+    import fcntl
+except ImportError:  # pragma: no cover - exercised by Windows validation
+    fcntl = None
+    import msvcrt
+
+
+class MaintenanceLock:
+    """Process fence used only by fixture and later approved activation executors."""
+
+    def __init__(self, path: Path) -> None:
+        self.path = path
+        self._handle = None
+
+    def __enter__(self) -> "MaintenanceLock":
+        self.path.parent.mkdir(parents=True, exist_ok=True)
+        self._handle = self.path.open("a+")
+        if fcntl is not None:
+            try:
+                fcntl.flock(self._handle.fileno(), fcntl.LOCK_EX | fcntl.LOCK_NB)
+            except BlockingIOError:
+                self._handle.close()
+                self._handle = None
+                raise
+        else:
+            self._handle.seek(0)
+            try:
+                msvcrt.locking(self._handle.fileno(), msvcrt.LK_NBLCK, 1)
+            except OSError as exc:
+                self._handle.close()
+                self._handle = None
+                raise BlockingIOError("maintenance lock held") from exc
+        return self
+
+    def __exit__(self, exc_type, exc, tb) -> None:
+        if self._handle is not None:
+            if fcntl is not None:
+                fcntl.flock(self._handle.fileno(), fcntl.LOCK_UN)
+            else:
+                self._handle.seek(0)
+                msvcrt.locking(self._handle.fileno(), msvcrt.LK_UNLCK, 1)
+            self._handle.close()
+            self._handle = None
@@ -0,0 +1,90 @@
+from __future__ import annotations
+
+from dataclasses import dataclass, field
+from datetime import datetime, timezone
+from enum import Enum
+from typing import Any, Mapping
+
+
+class GovernanceState(str, Enum):
+    HUMAN_OWNER_APPROVAL_PENDING = "HUMAN_OWNER_APPROVAL_PENDING"
+    OWNER_APPROVAL_VERIFIED = "OWNER_APPROVAL_VERIFIED"
+    MACHINE_GATES_VERIFIED = "MACHINE_GATES_VERIFIED"
+    AUTO_MERGE_READY = "AUTO_MERGE_READY"
+    OWNER_APPROVED_EXECUTION_READY = "OWNER_APPROVED_EXECUTION_READY"
+
+
+@dataclass(frozen=True)
+class Review:
+    reviewer: str
+    reviewer_id: int
+    state: str
+    head_oid: str
+    reviewed_at: datetime
+    stale: bool = False
+    dismissed: bool = False
+
+    def __post_init__(self) -> None:
+        if self.reviewed_at.tzinfo is None:
+            raise ValueError("reviewed_at must be timezone-aware")
+
+
+@dataclass(frozen=True)
+class MachineGate:
+    context: str
+    state: str
+    head_oid: str
+    observed_at: datetime
+
+    def __post_init__(self) -> None:
+        if self.observed_at.tzinfo is None:
+            raise ValueError("observed_at must be timezone-aware")
+
+
+@dataclass(frozen=True)
+class ApprovalContext:
+    current_head_oid: str
+    requester: str
+    executor: str
+    owner: str
+    owner_id: int
+    reviews: tuple[Review, ...]
+    machine_gates: tuple[MachineGate, ...]
+    required_machine_contexts: tuple[str, ...]
+    expires_at: datetime
+    wip: bool
+    now: datetime = field(default_factory=lambda: datetime.now(timezone.utc))
+
+    def __post_init__(self) -> None:
+        if self.expires_at.tzinfo is None or self.now.tzinfo is None:
+            raise ValueError("approval timestamps must be timezone-aware")
+
+
+@dataclass(frozen=True)
+class ProtectionSnapshot:
+    branch: str
+    required_approvals: int
+    approval_whitelist: tuple[str, ...]
+    merge_whitelist: tuple[str, ...]
+    dismiss_stale_approvals: bool
+    require_status_checks: bool
+    status_contexts: tuple[str, ...]
+    direct_push: bool
+    force_push: bool
+    branch_deletion: bool
+    version: int
+
+    def as_dict(self) -> Mapping[str, Any]:
+        return {
+            "branch": self.branch,
+            "required_approvals": self.required_approvals,
+            "approval_whitelist": list(self.approval_whitelist),
+            "merge_whitelist": list(self.merge_whitelist),
+            "dismiss_stale_approvals": self.dismiss_stale_approvals,
+            "require_status_checks": self.require_status_checks,
+            "status_contexts": list(self.status_contexts),
+            "direct_push": self.direct_push,
+            "force_push": self.force_push,
+            "branch_deletion": self.branch_deletion,
+            "version": self.version,
+        }
@@ -0,0 +1,23 @@
+from __future__ import annotations
+
+
+class OperationDenied(PermissionError):
+    pass
+
+
+class DormantOperationGuard:
+    """Fail-closed operation boundary for the prerequisite deployment."""
+
+    DENIED = frozenset({
+        "protected_branch.direct_push",
+        "governance.direct_push",
+        "tag.direct_write",
+        "git.force_push",
+        "production.without_owner",
+        "branch_protection.live_update",
+        "single_owner_policy.activate",
+    })
+
+    def authorize(self, operation: str, *, fixture: bool = False) -> None:
+        if operation in self.DENIED or not fixture:
+            raise OperationDenied(operation)
@@ -0,0 +1,98 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+import hashlib
+import json
+from typing import Protocol
+
+from .models import ProtectionSnapshot
+
+
+class CASConflict(RuntimeError):
+    pass
+
+
+class DormantViolation(RuntimeError):
+    pass
+
+
+def snapshot_sha256(snapshot: ProtectionSnapshot) -> str:
+    raw = json.dumps(snapshot.as_dict(), sort_keys=True, separators=(",", ":")).encode()
+    return hashlib.sha256(raw).hexdigest()
+
+
+class ProtectionStore(Protocol):
+    fixture: bool
+
+    def read(self, branch: str) -> ProtectionSnapshot: ...
+    def compare_and_swap(
+        self, branch: str, expected_sha256: str, target: ProtectionSnapshot
+    ) -> bool: ...
+
+
+@dataclass(frozen=True)
+class ProtectionPlan:
+    branch: str
+    expected_previous_sha256: str
+    previous: ProtectionSnapshot
+    target: ProtectionSnapshot
+    target_sha256: str
+
+
+class BranchProtectionCASMigrationAdapter:
+    """Candidate adapter. Mutations are restricted to disposable fixtures."""
+
+    def plan(
+        self,
+        current: ProtectionSnapshot,
+        target: ProtectionSnapshot,
+        expected_previous_sha256: str,
+    ) -> ProtectionPlan:
+        actual = snapshot_sha256(current)
+        if actual != expected_previous_sha256:
+            raise CASConflict("EXPECTED_PREVIOUS_SHA256_MISMATCH")
+        if current.branch != target.branch:
+            raise CASConflict("BRANCH_BINDING_MISMATCH")
+        if target.direct_push or target.force_push or target.branch_deletion:
+            raise DormantViolation("UNSAFE_TARGET_POLICY")
+        return ProtectionPlan(
+            current.branch, actual, current, target, snapshot_sha256(target)
+        )
+
+    def apply_fixture(self, store: ProtectionStore, plan: ProtectionPlan) -> ProtectionSnapshot:
+        if not store.fixture:
+            raise DormantViolation("LIVE_PROTECTION_MUTATION_DENIED")
+        if not store.compare_and_swap(
+            plan.branch, plan.expected_previous_sha256, plan.target
+        ):
+            raise CASConflict("CONCURRENT_PROTECTION_CHANGE")
+        return store.read(plan.branch)
+
+    def rollback_fixture(self, store: ProtectionStore, plan: ProtectionPlan) -> ProtectionSnapshot:
+        if not store.fixture:
+            raise DormantViolation("LIVE_PROTECTION_ROLLBACK_DENIED")
+        if not store.compare_and_swap(plan.branch, plan.target_sha256, plan.previous):
+            raise CASConflict("ROLLBACK_CONFLICT")
+        return store.read(plan.branch)
+
+
+class MemoryProtectionStore:
+    fixture = True
+
+    def __init__(self, snapshot: ProtectionSnapshot) -> None:
+        self._snapshot = snapshot
+
+    def read(self, branch: str) -> ProtectionSnapshot:
+        if self._snapshot.branch != branch:
+            raise KeyError(branch)
+        return self._snapshot
+
+    def compare_and_swap(
+        self, branch: str, expected_sha256: str, target: ProtectionSnapshot
+    ) -> bool:
+        if self._snapshot.branch != branch:
+            return False
+        if snapshot_sha256(self._snapshot) != expected_sha256:
+            return False
+        self._snapshot = target
+        return True
@@ -0,0 +1,69 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+import hashlib
+import json
+from pathlib import Path
+import tempfile
+
+from .models import ProtectionSnapshot
+from .protection import MemoryProtectionStore, ProtectionPlan, snapshot_sha256
+
+
+@dataclass(frozen=True)
+class RollbackConfiguration:
+    branch: str
+    previous_sha256: str
+    target_sha256: str
+    payload: dict
+
+
+class RollbackConfigurationManager:
+    def build(self, plan: ProtectionPlan) -> RollbackConfiguration:
+        return RollbackConfiguration(
+            plan.branch,
+            plan.expected_previous_sha256,
+            plan.target_sha256,
+            {"previous": plan.previous.as_dict(), "target": plan.target.as_dict()},
+        )
+
+    def install_fixture(self, root: Path, config: RollbackConfiguration) -> Path:
+        if not root.name.startswith("aios-governance-fixture-"):
+            raise PermissionError("rollback configuration may only be installed in fixture root")
+        root.mkdir(parents=True, exist_ok=True)
+        destination = root / "rollback-configuration.json"
+        raw = json.dumps(config.payload, sort_keys=True, indent=2).encode() + b"\n"
+        with tempfile.NamedTemporaryFile(dir=root, prefix=".rollback.", delete=False) as handle:
+            handle.write(raw)
+            handle.flush()
+            temporary = Path(handle.name)
+        temporary.chmod(0o600)
+        temporary.replace(destination)
+        return destination
+
+    def verify(self, config: RollbackConfiguration, plan: ProtectionPlan) -> bool:
+        return (
+            config.previous_sha256 == snapshot_sha256(plan.previous)
+            and config.target_sha256 == snapshot_sha256(plan.target)
+        )
+
+
+@dataclass
+class ProtectionCompensationSaga:
+    adapter: object
+    store: MemoryProtectionStore
+    plan: ProtectionPlan
+    applied: bool = False
+    rolled_back: bool = False
+
+    def execute_fixture(self) -> ProtectionSnapshot:
+        result = self.adapter.apply_fixture(self.store, self.plan)
+        self.applied = True
+        return result
+
+    def compensate_fixture(self) -> ProtectionSnapshot:
+        if not self.applied:
+            return self.store.read(self.plan.branch)
+        result = self.adapter.rollback_fixture(self.store, self.plan)
+        self.rolled_back = True
+        return result
@@ -0,0 +1,69 @@
+from __future__ import annotations
+
+import argparse
+import json
+import os
+from pathlib import Path
+import tempfile
+
+
+def runtime_state(component: str, prior_invocations: int = 0) -> dict:
+    return {
+        "component": component,
+        "deployment_mode": "DORMANT_SHADOW_ONLY",
+        "enabled": False,
+        "active": False,
+        "production_routing": False,
+        "production_mutation": False,
+        "global_gitops_writes_enabled": False,
+        "prior_invocations": prior_invocations,
+        "restart_recovery": prior_invocations > 0,
+    }
+
+
+def checkpoint_state(component: str, root: Path) -> dict:
+    root.mkdir(parents=True, exist_ok=True)
+    destination = root / f"{component}.json"
+    prior = 0
+    if destination.exists():
+        previous = json.loads(destination.read_text(encoding="utf-8"))
+        if previous.get("component") != component or previous.get("deployment_mode") != "DORMANT_SHADOW_ONLY":
+            raise RuntimeError("checkpoint identity mismatch")
+        prior = int(previous.get("invocations", 0))
+    state = runtime_state(component, prior)
+    checkpoint = {**state, "invocations": prior + 1}
+    with tempfile.NamedTemporaryFile("w", encoding="utf-8", dir=root, delete=False) as handle:
+        json.dump(checkpoint, handle, sort_keys=True)
+        handle.write("\n")
+        handle.flush()
+        temporary = Path(handle.name)
+    temporary.replace(destination)
+    return state
+
+
+def main(argv: list[str] | None = None) -> int:
+    parser = argparse.ArgumentParser()
+    parser.add_argument("--component", required=True, choices=("owner-review-adapter", "machine-status-producer"))
+    parser.add_argument("--self-check", action="store_true")
+    parser.add_argument("--activate", action="store_true")
+    parser.add_argument("--checkpoint-dir", type=Path)
+    args = parser.parse_args(argv)
+    if args.activate:
+        parser.error("activation is not authorized by the prerequisites candidate")
+    if os.environ.get("AIOS_SINGLE_OWNER_GOVERNANCE_ENABLED", "false").lower() != "false":
+        parser.error("candidate must remain disabled")
+    if os.environ.get("AIOS_SINGLE_OWNER_ACTIVATION_ACTIVE", "false").lower() != "false":
+        parser.error("activation must remain inactive")
+    if os.environ.get("AIOS_GITOPS_WRITES_ENABLED", "false").lower() != "false":
+        parser.error("production mutation must remain disabled")
+    state = (
+        checkpoint_state(args.component, args.checkpoint_dir)
+        if args.checkpoint_dir is not None
+        else runtime_state(args.component)
+    )
+    print(json.dumps(state, sort_keys=True))
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())
@@ -0,0 +1,54 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+import json
+from pathlib import Path
+import tempfile
+
+from .models import GovernanceState
+
+
+class InvalidTransition(RuntimeError):
+    pass
+
+
+_NEXT = {
+    GovernanceState.HUMAN_OWNER_APPROVAL_PENDING: GovernanceState.OWNER_APPROVAL_VERIFIED,
+    GovernanceState.OWNER_APPROVAL_VERIFIED: GovernanceState.MACHINE_GATES_VERIFIED,
+    GovernanceState.MACHINE_GATES_VERIFIED: GovernanceState.AUTO_MERGE_READY,
+    GovernanceState.AUTO_MERGE_READY: GovernanceState.OWNER_APPROVED_EXECUTION_READY,
+}
+
+
+@dataclass
+class GovernanceStateMachine:
+    state: GovernanceState = GovernanceState.HUMAN_OWNER_APPROVAL_PENDING
+
+    def transition(self, target: GovernanceState) -> GovernanceState:
+        if _NEXT.get(self.state) != target:
+            raise InvalidTransition(f"{self.state.value}->{target.value}")
+        self.state = target
+        return self.state
+
+    def restore(self, checkpoint: GovernanceState) -> None:
+        if checkpoint not in GovernanceState:
+            raise InvalidTransition("unknown checkpoint")
+        self.state = checkpoint
+
+    def save_fixture(self, path: Path) -> None:
+        if not any(part.startswith("aios-governance-fixture-") for part in path.resolve().parts):
+            raise PermissionError("state checkpoint writes are fixture-only")
+        path.parent.mkdir(parents=True, exist_ok=True)
+        with tempfile.NamedTemporaryFile("w", encoding="utf-8", dir=path.parent, delete=False) as handle:
+            json.dump({"state": self.state.value}, handle, sort_keys=True)
+            handle.write("\n")
+            handle.flush()
+            temporary = Path(handle.name)
+        temporary.replace(path)
+
+    @classmethod
+    def load_fixture(cls, path: Path) -> "GovernanceStateMachine":
+        if not any(part.startswith("aios-governance-fixture-") for part in path.resolve().parts):
+            raise PermissionError("state checkpoint reads are fixture-only")
+        raw = json.loads(path.read_text(encoding="utf-8"))
+        return cls(GovernanceState(raw["state"]))
@@ -0,0 +1,38 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+from datetime import datetime, timezone
+
+
+class DormantStatusProducer(RuntimeError):
+    pass
+
+
+@dataclass(frozen=True)
+class StatusRecord:
+    context: str
+    state: str
+    head_oid: str
+    observed_at: str
+
+
+class MachineStatusProducer:
+    def __init__(self, *, enabled: bool = False, fixture: bool = False) -> None:
+        self.enabled = enabled
+        self.fixture = fixture
+
+    def produce(self, context: str, state: str, head_oid: str) -> StatusRecord:
+        if not self.fixture:
+            raise DormantStatusProducer("LIVE_STATUS_PUBLICATION_DENIED")
+        if self.enabled:
+            raise DormantStatusProducer("DORMANT_CANDIDATE_MUST_NOT_BE_ENABLED")
+        if context not in {
+            "aios/machine-gates", "aios/secret-scan", "aios/evidence-closure"
+        }:
+            raise ValueError("unknown status context")
+        if state not in {"success", "failure"} or len(head_oid) != 40:
+            raise ValueError("invalid status record")
+        return StatusRecord(
+            context, state, head_oid,
+            datetime.now(timezone.utc).isoformat().replace("+00:00", "Z"),
+        )
@@ -1,238 +0,0 @@
-from __future__ import annotations
-
-import argparse
-import hashlib
-import hmac
-import json
-import os
-from pathlib import Path
-import sqlite3
-import subprocess
-from datetime import datetime, timezone
-import urllib.error
-import urllib.request
-
-from .task_status_merge_broker import ContractDenied, TaskGrant, canonical, load_signed_task_grant, read_runtime_secret
-
-
-GITEA_BIN = Path("/data/aios-gitops/runtime/bin/gitea")
-GITEA_CONFIG = Path("/data/aios-gitops/runtime/gitea-bin/custom/conf/app.ini")
-GITEA_DB = Path("/data/aios-gitops/runtime/gitea-bin/data/gitea.db")
-RUNUSER = Path("/usr/sbin/runuser")
-SYSTEMD_CREDS = Path("/usr/bin/systemd-creds")
-GIT = Path("/usr/bin/git")
-GITEA_REPOSITORY = Path("/data/aios-gitops/runtime/gitea-bin/data/repositories/aios/aios.git")
-
-
-def _git(*arguments: str, input_bytes: bytes | None = None) -> bytes:
-    return subprocess.run(
-        [str(GIT), f"--git-dir={GITEA_REPOSITORY}", *arguments], input=input_bytes,
-        check=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE,
-    ).stdout
-
-
-def _verify_local_governance_binding(grant: TaskGrant) -> None:
-    """Verify the exact open PR and latest Owner review without issuing a token."""
-    connection = sqlite3.connect(f"file:{GITEA_DB}?mode=ro", uri=True)
-    connection.row_factory = sqlite3.Row
-    try:
-        pr = connection.execute(
-            "SELECT pr.head_branch,pr.base_branch,pr.merge_base,pr.has_merged,i.is_closed "
-            "FROM pull_request pr JOIN issue i ON i.id=pr.issue_id JOIN repository repo ON repo.id=i.repo_id "
-            "WHERE repo.owner_name='aios' AND repo.lower_name='aios' AND pr.[index]=?",
-            (grant.raw["pr_number"],),
-        ).fetchone()
-        review = connection.execute(
-            "SELECT r.type,r.commit_id,r.official,r.stale,r.dismissed,r.created_unix,u.id,u.lower_name "
-            "FROM review r JOIN user u ON u.id=r.reviewer_id JOIN issue i ON i.id=r.issue_id "
-            "JOIN repository repo ON repo.id=i.repo_id "
-            "WHERE repo.owner_name='aios' AND repo.lower_name='aios' AND i.[index]=? "
-            "AND u.id=2 AND u.lower_name='owner' ORDER BY r.id DESC LIMIT 1",
-            (grant.raw["pr_number"],),
-        ).fetchone()
-    finally:
-        connection.close()
-    if pr is None or pr["base_branch"] != "governance/approvals" or pr["merge_base"] != grant.raw["base_oid"] or pr["has_merged"] != 0 or pr["is_closed"] != 0:
-        raise ContractDenied("LOCAL_PR_BINDING_INVALID")
-    head = _git("rev-parse", f"refs/heads/{pr['head_branch']}").decode().strip()
-    base = _git("rev-parse", "refs/heads/governance/approvals").decode().strip()
-    if head != grant.raw["target_commit"] or base != grant.raw["base_oid"]:
-        raise ContractDenied("LOCAL_REF_BINDING_INVALID")
-    if review is None or review["type"] != 1 or review["commit_id"] != head or review["official"] != 1 or review["stale"] != 0 or review["dismissed"] != 0:
-        raise ContractDenied("LOCAL_OWNER_APPROVAL_MISSING")
-    submitted = datetime.fromtimestamp(review["created_unix"], tz=timezone.utc)
-    if submitted < grant.issued_at or submitted >= grant.expires_at:
-        raise ContractDenied("LOCAL_OWNER_APPROVAL_EXPIRED")
-    tree = _git("show", "-s", "--format=%T", head).decode().strip()
-    if tree != grant.raw["approved_tree_oid"]:
-        raise ContractDenied("APPROVED_TREE_MISMATCH")
-    entry = _git("ls-tree", head, "--", grant.raw["manifest_path"]).decode().strip().split()
-    if len(entry) < 3 or entry[1] != "blob" or entry[2] != grant.raw["manifest_blob_oid"]:
-        raise ContractDenied("MANIFEST_BLOB_BINDING_INVALID")
-    manifest = _git("cat-file", "blob", grant.raw["manifest_blob_oid"])
-    if hashlib.sha256(manifest).hexdigest() != grant.raw["manifest_sha256"]:
-        raise ContractDenied("MANIFEST_SHA256_MISMATCH")
-
-
-def _safe_absolute(path: Path, expected_parent: Path) -> None:
-    if not path.is_absolute() or path.is_symlink() or path.parent != expected_parent:
-        raise ContractDenied("CREDENTIAL_PATH_UNSAFE")
-
-
-class TaskCredentialBroker:
-    def __init__(self, grant: TaskGrant, audit_dir: Path, audit_key: bytes):
-        self.grant = grant
-        self.audit_key = bytes(audit_key)
-        if not self.audit_key:
-            raise ContractDenied("CREDENTIAL_AUDIT_KEY_EMPTY")
-        self.audit_dir = Path(audit_dir)
-        if not self.audit_dir.is_absolute() or self.audit_dir.is_symlink():
-            raise ContractDenied("AUDIT_DIR_UNSAFE")
-
-    def provision(self, *, identity: str, token_name: str, encrypted_path: Path) -> dict:
-        if os.geteuid() != 0:
-            raise ContractDenied("ROOT_BROKER_REQUIRED")
-        expected = self.grant.raw["status_identity"] if token_name.endswith("-status") else self.grant.raw["merge_identity"]
-        if identity != expected or identity not in {"codex", "gpt"}:
-            raise ContractDenied("IDENTITY_BINDING_INVALID")
-        prefix = f"pr{self.grant.raw['pr_number']}-{self.grant.raw['target_commit'][:12]}"
-        if token_name not in {f"{prefix}-status", f"{prefix}-merge"}:
-            raise ContractDenied("TOKEN_NAME_INVALID")
-        _safe_absolute(encrypted_path, Path("/run/aios-task-credential-broker"))
-        if encrypted_path.exists():
-            raise ContractDenied("CREDENTIAL_PATH_EXISTS")
-        _verify_local_governance_binding(self.grant)
-        command = [str(RUNUSER), "-u", "aiman", "--", str(GITEA_BIN), "admin", "user", "generate-access-token", "--config", str(GITEA_CONFIG), "--username", identity, "--token-name", token_name, "--scopes", "write:repository", "--raw"]
-        issued = subprocess.run(command, check=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE).stdout.strip()
-        if len(issued) < 32 or b"\n" in issued or b"\x00" in issued:
-            raise ContractDenied("ISSUED_TOKEN_INVALID")
-        subprocess.run([str(SYSTEMD_CREDS), "encrypt", "--name=gitea-token", "-", str(encrypted_path)], input=issued, check=True, stdout=subprocess.DEVNULL, stderr=subprocess.PIPE)
-        os.chmod(encrypted_path, 0o400)
-        connection = sqlite3.connect(f"file:{GITEA_DB}?mode=ro", uri=True)
-        try:
-            rows = connection.execute("SELECT t.id,u.id FROM access_token t JOIN user u ON u.id=t.uid WHERE u.lower_name=? AND t.name=? AND t.scope='write:repository'", (identity, token_name)).fetchall()
-        finally:
-            connection.close()
-        if len(rows) != 1:
-            raise ContractDenied("TOKEN_DATABASE_BINDING_MISSING")
-        row = rows[0]
-        receipt = {"status": "PASS", "operation": "credential_provision", "identity": identity, "token_name": token_name, "token_id": int(row[0]), "token_uid": int(row[1]), "grant_sha256": self.grant.digest, "credential_ref": f"systemd-credential-encrypted://{encrypted_path.name}"}
-        return self._audit(receipt)
-
-    def revoke(self, *, receipt: dict, encrypted_path: Path) -> dict:
-        if os.geteuid() != 0:
-            raise ContractDenied("ROOT_BROKER_REQUIRED")
-        _safe_absolute(encrypted_path, Path("/run/aios-task-credential-broker"))
-        self.validate_provision_receipt(receipt, encrypted_path)
-        decrypted = subprocess.run([str(SYSTEMD_CREDS), "decrypt", str(encrypted_path), "-"], check=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE).stdout.strip()
-        if len(decrypted) < 32 or b"\n" in decrypted or b"\x00" in decrypted:
-            raise ContractDenied("PROJECTED_TOKEN_INVALID")
-        token_header = {"Authorization": "token " + decrypted.decode("utf-8")}
-        preflight = urllib.request.Request("http://127.0.0.1:3000/api/v1/repos/aios/aios", headers=token_header)
-        try:
-            with urllib.request.urlopen(preflight, timeout=10) as response:
-                if response.status != 200:
-                    raise ContractDenied("TOKEN_PREFLIGHT_STATUS_INVALID")
-        except urllib.error.HTTPError as exc:
-            raise ContractDenied(f"TOKEN_PREFLIGHT_FAILED:{exc.code}") from exc
-        connection = sqlite3.connect(GITEA_DB)
-        try:
-            connection.execute("BEGIN IMMEDIATE")
-            cursor = connection.execute(
-                "DELETE FROM access_token WHERE id=? AND uid=? AND name=? AND scope='write:repository'",
-                (receipt["token_id"], receipt["token_uid"], receipt["token_name"]),
-            )
-            if cursor.rowcount != 1:
-                raise ContractDenied("TOKEN_REVOCATION_MISMATCH")
-            connection.commit()
-        except Exception:
-            connection.rollback()
-            raise
-        finally:
-            connection.close()
-        connection = sqlite3.connect(f"file:{GITEA_DB}?mode=ro", uri=True)
-        try:
-            remaining = connection.execute("SELECT COUNT(*) FROM access_token WHERE id=?", (receipt["token_id"],)).fetchone()[0]
-        finally:
-            connection.close()
-        if remaining != 0:
-            raise ContractDenied("TOKEN_REVOCATION_READBACK_MISMATCH")
-        request = urllib.request.Request("http://127.0.0.1:3000/api/v1/repos/aios/aios", headers=token_header)
-        try:
-            urllib.request.urlopen(request, timeout=10)
-            raise ContractDenied("REVOKED_TOKEN_STILL_ACCEPTED")
-        except urllib.error.HTTPError as exc:
-            if exc.code != 401:
-                raise ContractDenied("REVOCATION_HTTP_STATUS_INVALID") from exc
-        encrypted_path.unlink(missing_ok=True)
-        result = {"status": "PASS", "operation": "credential_revoke", "identity": receipt["identity"], "token_name": receipt["token_name"], "token_id": receipt["token_id"], "grant_sha256": self.grant.digest, "token_rows_remaining": 0, "credential_projection_remaining": False, "old_token_http_status": 401}
-        return self._audit(result)
-
-    def validate_provision_receipt(self, receipt: dict, encrypted_path: Path) -> None:
-        required = {"status", "operation", "identity", "token_name", "token_id", "token_uid", "grant_sha256", "credential_ref", "audit_sha256", "audit_hmac_signature"}
-        expected_credential_ref = f"systemd-credential-encrypted://{encrypted_path.name}"
-        unsigned_receipt = {key: value for key, value in receipt.items() if key not in {"audit_sha256", "audit_hmac_signature"}}
-        expected_name_prefix = f"pr{self.grant.raw['pr_number']}-{self.grant.raw['target_commit'][:12]}"
-        if (set(receipt) != required or receipt["status"] != "PASS" or receipt["operation"] != "credential_provision"
-                or receipt["grant_sha256"] != self.grant.digest or receipt["identity"] not in {self.grant.raw["status_identity"], self.grant.raw["merge_identity"]}
-                or receipt["token_name"] not in {f"{expected_name_prefix}-status", f"{expected_name_prefix}-merge"}
-                or receipt["credential_ref"] != expected_credential_ref
-                or hashlib.sha256(canonical(unsigned_receipt)).hexdigest() != receipt["audit_sha256"]
-                or not hmac.compare_digest(receipt["audit_hmac_signature"], hmac.new(self.audit_key, canonical(unsigned_receipt), hashlib.sha256).hexdigest())):
-            raise ContractDenied("PROVISION_RECEIPT_INVALID")
-
-    def _audit(self, value: dict) -> dict:
-        raw = canonical(value)
-        result = dict(value)
-        result["audit_sha256"] = hashlib.sha256(raw).hexdigest()
-        result["audit_hmac_signature"] = hmac.new(self.audit_key, raw, hashlib.sha256).hexdigest()
-        self.audit_dir.mkdir(mode=0o750, parents=True, exist_ok=True)
-        destination = self.audit_dir / f"{value['operation']}-{value['token_name']}.json"
-        descriptor = os.open(destination, os.O_WRONLY | os.O_CREAT | os.O_EXCL | getattr(os, "O_NOFOLLOW", 0), 0o640)
-        try:
-            os.write(descriptor, canonical(result) + b"\n")
-            os.fsync(descriptor)
-        finally:
-            os.close(descriptor)
-        return result
-
-
-def main(argv: list[str] | None = None) -> int:
-    parser = argparse.ArgumentParser(prog="aios-task-credential-broker")
-    parser.add_argument("--grant", required=True, type=Path)
-    parser.add_argument("--audit-dir", required=True, type=Path)
-    parser.add_argument("--operation", choices=("provision", "revoke"))
-    parser.add_argument("--identity")
-    parser.add_argument("--token-name")
-    parser.add_argument("--encrypted-path", type=Path)
-    parser.add_argument("--receipt", type=Path)
-    parser.add_argument("--request", type=Path)
-    parser.add_argument("--grant-signature", required=True, type=Path)
-    parser.add_argument("--allowed-signers", required=True, type=Path)
-    parser.add_argument("--audit-key", required=True, type=Path)
-    args = parser.parse_args(argv)
-    grant = load_signed_task_grant(args.grant, args.grant_signature, args.allowed_signers)
-    broker = TaskCredentialBroker(grant, args.audit_dir, read_runtime_secret(args.audit_key))
-    if args.request is not None:
-        request = json.loads(args.request.read_text(encoding="utf-8"))
-        if not isinstance(request, dict) or set(request) not in ({"operation", "identity", "token_name", "encrypted_path"}, {"operation", "identity", "token_name", "encrypted_path", "receipt"}):
-            raise ContractDenied("CREDENTIAL_REQUEST_INVALID")
-        args.operation = request["operation"]
-        args.identity = request["identity"]
-        args.token_name = request["token_name"]
-        args.encrypted_path = Path(request["encrypted_path"])
-        args.receipt = Path(request["receipt"]) if "receipt" in request else None
-    if args.operation is None or args.identity is None or args.token_name is None or args.encrypted_path is None:
-        raise ContractDenied("CREDENTIAL_REQUEST_INCOMPLETE")
-    if args.operation == "provision":
-        result = broker.provision(identity=args.identity, token_name=args.token_name, encrypted_path=args.encrypted_path)
-    else:
-        if args.receipt is None:
-            raise ContractDenied("RECEIPT_REQUIRED")
-        result = broker.revoke(receipt=json.loads(args.receipt.read_text(encoding="utf-8")), encrypted_path=args.encrypted_path)
-    print(json.dumps(result, sort_keys=True, separators=(",", ":")))
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())
@@ -1,94 +0,0 @@
-from __future__ import annotations
-
-import argparse
-from datetime import datetime, timezone
-import json
-import os
-from pathlib import Path
-import sqlite3
-import subprocess
-
-from .task_credential_broker import SYSTEMD_CREDS, TaskCredentialBroker
-from .task_status_merge_broker import ContractDenied, load_signed_task_grant
-
-
-RUNTIME_ROOT = Path("/var/lib/aios-gitops/runtime/task-status-merge")
-CREDENTIAL_ROOT = Path("/run/aios-task-credential-broker")
-
-
-def _operation_complete(task_dir: Path, token_name: str) -> bool:
-    if token_name.endswith("-status"):
-        journal, operation = task_dir / "status-journal" / "journal.sqlite3", "statuses"
-    elif token_name.endswith("-merge"):
-        journal, operation = task_dir / "merge-journal" / "journal.sqlite3", "merge"
-    else:
-        raise ContractDenied("SWEEPER_TOKEN_NAME_INVALID")
-    if not journal.is_file() or journal.is_symlink():
-        return False
-    connection = sqlite3.connect(f"file:{journal}?mode=ro", uri=True)
-    try:
-        row = connection.execute("SELECT state FROM quota WHERE operation=?", (operation,)).fetchone()
-    finally:
-        connection.close()
-    return row == ("COMMITTED",)
-
-
-def sweep(runtime_root: Path, allowed_signers: Path, *, now: datetime | None = None) -> list[dict]:
-    if os.geteuid() != 0:
-        raise ContractDenied("ROOT_SWEEPER_REQUIRED")
-    if runtime_root != RUNTIME_ROOT or runtime_root.is_symlink():
-        raise ContractDenied("SWEEPER_ROOT_INVALID")
-    current = now or datetime.now(timezone.utc)
-    results: list[dict] = []
-    for task_dir in sorted(runtime_root.iterdir() if runtime_root.exists() else []):
-        if not task_dir.is_dir() or task_dir.is_symlink():
-            raise ContractDenied("SWEEPER_TASK_DIR_INVALID")
-        grant_path, signature_path = task_dir / "grant.json", task_dir / "grant.sig"
-        if not grant_path.is_file() or not signature_path.is_file():
-            raise ContractDenied("SWEEPER_GRANT_INCOMPLETE")
-        grant = load_signed_task_grant(grant_path, signature_path, allowed_signers, now=current, allow_expired=True)
-        audit_credential = CREDENTIAL_ROOT / f"{task_dir.name}-audit.cred"
-        if not audit_credential.is_file() or audit_credential.is_symlink():
-            raise ContractDenied("SWEEPER_TASK_AUDIT_CREDENTIAL_MISSING")
-        audit_key = subprocess.run(
-            [str(SYSTEMD_CREDS), "decrypt", str(audit_credential), "-"], check=True,
-            stdout=subprocess.PIPE, stderr=subprocess.PIPE,
-        ).stdout.strip()
-        if not audit_key or b"\n" in audit_key or b"\x00" in audit_key:
-            raise ContractDenied("SWEEPER_TASK_AUDIT_KEY_INVALID")
-        broker = TaskCredentialBroker(grant, task_dir / "audit", audit_key)
-        for receipt_path in sorted((task_dir / "audit").glob("credential_provision-*.json")):
-            if receipt_path.is_symlink():
-                raise ContractDenied("SWEEPER_RECEIPT_UNSAFE")
-            receipt = json.loads(receipt_path.read_text(encoding="utf-8"))
-            token_name = str(receipt.get("token_name") or "")
-            credential_ref = str(receipt.get("credential_ref") or "")
-            prefix = "systemd-credential-encrypted://"
-            if not credential_ref.startswith(prefix):
-                raise ContractDenied("SWEEPER_CREDENTIAL_REF_INVALID")
-            encrypted_path = CREDENTIAL_ROOT / credential_ref.removeprefix(prefix)
-            revoked_receipt = task_dir / "audit" / f"credential_revoke-{token_name}.json"
-            if revoked_receipt.exists():
-                if encrypted_path.exists():
-                    raise ContractDenied("SWEEPER_REVOKED_PROJECTION_REAPPEARED")
-                continue
-            if current < grant.expires_at and not _operation_complete(task_dir, token_name):
-                continue
-            if not encrypted_path.is_file() or encrypted_path.is_symlink():
-                raise ContractDenied("SWEEPER_CREDENTIAL_PROJECTION_MISSING")
-            results.append(broker.revoke(receipt=receipt, encrypted_path=encrypted_path))
-    return results
-
-
-def main(argv: list[str] | None = None) -> int:
-    parser = argparse.ArgumentParser(prog="aios-task-credential-expiry-sweeper")
-    parser.add_argument("--runtime-root", required=True, type=Path)
-    parser.add_argument("--allowed-signers", required=True, type=Path)
-    args = parser.parse_args(argv)
-    result = sweep(args.runtime_root, args.allowed_signers)
-    print(json.dumps({"status": "PASS", "revoked": result}, sort_keys=True, separators=(",", ":")))
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())
@@ -1,472 +0,0 @@
-from __future__ import annotations
-
-import argparse
-from dataclasses import dataclass
-from datetime import datetime, timezone
-import hashlib
-import hmac
-import json
-import os
-from pathlib import Path
-import re
-import sqlite3
-import stat
-import subprocess
-from typing import Any, Protocol
-import urllib.error
-import urllib.parse
-import urllib.request
-
-
-ALLOWED_CONTEXTS = frozenset({
-    "aios/branch-protection",
-    "aios/evidence-closure",
-    "aios/secret-scan",
-    "aios/state-machine",
-    "aios/validator",
-})
-ALLOWED_IDENTITIES = frozenset({"codex", "gpt"})
-OID = re.compile(r"^[0-9a-f]{40}$")
-SHA256 = re.compile(r"^[0-9a-f]{64}$")
-SECRET_REF = re.compile(r"^systemd-credential://[A-Za-z0-9_.-]+$")
-SUPERSEDED_PR_NUMBER = 36
-SUPERSEDED_HEAD_OID = "a8644fc172bd8ebbba17a16e6bf586c93fd1e793"
-FIELDS = frozenset({
-    "schema_id", "schema_version", "repository", "pr_number", "base_oid",
-    "target_commit", "approved_tree_oid", "manifest_path", "manifest_blob_oid", "manifest_sha256",
-    "payload_sha256", "status_identity", "merge_identity", "status_contexts",
-    "status_write_quota", "merge_quota", "merge_method", "branch_push_allowed",
-    "tag_write_allowed", "main_write_allowed", "registry_write_allowed",
-    "baseline_write_allowed", "production_write_allowed", "issued_at", "expires_at",
-    "audit_key_ref", "grant_signer_identity", "grant_signature_namespace",
-    "status_evidence_sha256", "supersedes_pr_number", "supersedes_head_oid",
-    "renewal_required", "timestamp_contract", "canonical_timezone",
-    "raw_timestamp_preserved", "naive_datetime_allowed",
-})
-RFC3339 = re.compile(
-    r"^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$"
-)
-
-
-class ContractDenied(RuntimeError):
-    pass
-
-
-def canonical(value: Any) -> bytes:
-    return json.dumps(value, sort_keys=True, separators=(",", ":")).encode()
-
-
-def _time(value: str) -> datetime:
-    if not isinstance(value, str) or value != value.strip() or not RFC3339.fullmatch(value):
-        raise ContractDenied("TIMESTAMP_INVALID")
-    try:
-        normalized = value[:-1] + "+00:00" if value.endswith("Z") else value
-        parsed = datetime.fromisoformat(normalized)
-    except ValueError as exc:
-        raise ContractDenied("TIMESTAMP_INVALID") from exc
-    if parsed.tzinfo is None or parsed.utcoffset() is None:
-        raise ContractDenied("TIMESTAMP_TIMEZONE_REQUIRED")
-    return parsed.astimezone(timezone.utc)
-
-
-def _utc_timestamp(value: datetime) -> str:
-    normalized = value.astimezone(timezone.utc).isoformat()
-    return normalized[:-6] + "Z" if normalized.endswith("+00:00") else normalized
-
-
-@dataclass(frozen=True)
-class TaskGrant:
-    raw: dict[str, Any]
-    issued_at: datetime
-    expires_at: datetime
-
-    @classmethod
-    def from_dict(cls, value: dict[str, Any], *, now: datetime | None = None,
-                  allow_expired: bool = False) -> "TaskGrant":
-        if not isinstance(value, dict) or set(value) != FIELDS:
-            raise ContractDenied("GRANT_FIELDS_INVALID")
-        if value["schema_id"] != "AIOS_TASK_STATUS_MERGE_GRANT" or value["schema_version"] != 1:
-            raise ContractDenied("GRANT_SCHEMA_INVALID")
-        if value["repository"] != "aios/aios" or type(value["pr_number"]) is not int or value["pr_number"] <= 0:
-            raise ContractDenied("REPOSITORY_OR_PR_MISMATCH")
-        for field in ("base_oid", "target_commit", "approved_tree_oid", "manifest_blob_oid"):
-            if not isinstance(value[field], str) or not OID.fullmatch(value[field]):
-                raise ContractDenied("OID_INVALID")
-        if not isinstance(value["manifest_path"], str) or not re.fullmatch(r"approvals/[A-Za-z0-9._/-]+\.json", value["manifest_path"]) or ".." in value["manifest_path"].split("/"):
-            raise ContractDenied("MANIFEST_PATH_INVALID")
-        for field in ("manifest_sha256", "payload_sha256"):
-            if not isinstance(value[field], str) or not SHA256.fullmatch(value[field]):
-                raise ContractDenied("SHA256_INVALID")
-        evidence = value["status_evidence_sha256"]
-        if not isinstance(evidence, dict) or set(evidence) != ALLOWED_CONTEXTS or any(not isinstance(item, str) or not SHA256.fullmatch(item) for item in evidence.values()):
-            raise ContractDenied("STATUS_EVIDENCE_BINDING_INVALID")
-        if value["supersedes_pr_number"] != SUPERSEDED_PR_NUMBER or value["pr_number"] == SUPERSEDED_PR_NUMBER:
-            raise ContractDenied("RENEWAL_PR_INVALID")
-        if value["supersedes_head_oid"] != SUPERSEDED_HEAD_OID or value["supersedes_head_oid"] == value["target_commit"] or value["renewal_required"] is not True:
-            raise ContractDenied("RENEWAL_BINDING_INVALID")
-        if value["status_identity"] not in ALLOWED_IDENTITIES or value["merge_identity"] not in ALLOWED_IDENTITIES:
-            raise ContractDenied("IDENTITY_NOT_ALLOWED")
-        if set(value["status_contexts"]) != ALLOWED_CONTEXTS or len(value["status_contexts"]) != 5:
-            raise ContractDenied("STATUS_CONTEXTS_INVALID")
-        if value["status_write_quota"] != 5 or value["merge_quota"] != 1:
-            raise ContractDenied("QUOTA_INVALID")
-        if value["merge_method"] != "fast-forward-only":
-            raise ContractDenied("MERGE_METHOD_INVALID")
-        denied = (
-            "branch_push_allowed", "tag_write_allowed", "main_write_allowed",
-            "registry_write_allowed", "baseline_write_allowed", "production_write_allowed",
-        )
-        if any(value[field] is not False for field in denied):
-            raise ContractDenied("WRITE_SCOPE_EXPANDED")
-        if not isinstance(value["audit_key_ref"], str) or not SECRET_REF.fullmatch(value["audit_key_ref"]):
-            raise ContractDenied("AUDIT_KEY_REFERENCE_INVALID")
-        if value["grant_signer_identity"] != "aios-task-grant-signer" or value["grant_signature_namespace"] != "aios-task-status-merge-grant-v1":
-            raise ContractDenied("GRANT_SIGNATURE_POLICY_INVALID")
-        if (value["timestamp_contract"] != "RFC3339_OFFSET_AWARE_V2"
-                or value["canonical_timezone"] != "UTC"
-                or value["raw_timestamp_preserved"] is not True
-                or value["naive_datetime_allowed"] is not False):
-            raise ContractDenied("TIMESTAMP_CONTRACT_INVALID")
-        issued, expires = _time(value["issued_at"]), _time(value["expires_at"])
-        current = now or datetime.now(timezone.utc)
-        lifetime = (expires - issued).total_seconds()
-        if lifetime <= 0 or lifetime > 12 * 3600 or (not allow_expired and current >= expires):
-            raise ContractDenied("GRANT_EXPIRED_OR_LIFETIME_INVALID")
-        return cls(dict(value), issued, expires)
-
-    @property
-    def digest(self) -> str:
-        return hashlib.sha256(canonical(self.raw)).hexdigest()
-
-
-def load_signed_task_grant(grant_path: Path, signature_path: Path, allowed_signers: Path,
-                           *, now: datetime | None = None, allow_expired: bool = False) -> TaskGrant:
-    for path in (grant_path, signature_path, allowed_signers):
-        if not path.is_absolute() or path.is_symlink():
-            raise ContractDenied("GRANT_SIGNATURE_PATH_UNSAFE")
-    raw = grant_path.read_bytes()
-    if len(raw) > 1024 * 1024:
-        raise ContractDenied("GRANT_TOO_LARGE")
-    try:
-        value = json.loads(raw)
-    except (UnicodeDecodeError, json.JSONDecodeError) as exc:
-        raise ContractDenied("GRANT_JSON_INVALID") from exc
-    if raw != canonical(value) + b"\n":
-        raise ContractDenied("GRANT_NOT_CANONICAL")
-    grant = TaskGrant.from_dict(value, now=now, allow_expired=allow_expired)
-    command = [
-        "/usr/bin/ssh-keygen", "-Y", "verify", "-f", str(allowed_signers),
-        "-I", "aios-task-grant-signer", "-n", "aios-task-status-merge-grant-v1",
-        "-s", str(signature_path),
-    ]
-    try:
-        subprocess.run(command, input=raw, check=True, stdout=subprocess.DEVNULL, stderr=subprocess.PIPE)
-    except (OSError, subprocess.CalledProcessError) as exc:
-        raise ContractDenied("GRANT_SIGNATURE_INVALID") from exc
-    return grant
-
-
-class API(Protocol):
-    def get(self, path: str) -> Any: ...
-    def post(self, path: str, payload: dict[str, Any]) -> Any: ...
-
-
-def read_runtime_secret(path: Path) -> bytes:
-    flags = os.O_RDONLY | getattr(os, "O_CLOEXEC", 0) | getattr(os, "O_NOFOLLOW", 0)
-    descriptor = os.open(path, flags)
-    try:
-        metadata = os.fstat(descriptor)
-        mode = stat.S_IMODE(metadata.st_mode)
-        credential_directory = os.environ.get("CREDENTIALS_DIRECTORY")
-        systemd_projection = (
-            credential_directory is not None
-            and path.parent == Path(credential_directory)
-            and mode == 0o440
-            and metadata.st_uid == 0
-            and metadata.st_gid == 0
-        )
-        if not stat.S_ISREG(metadata.st_mode) or (mode != 0o400 and not systemd_projection):
-            raise ContractDenied("CREDENTIAL_FILE_UNSAFE")
-        value = os.read(descriptor, 16 * 1024 + 1)
-    finally:
-        os.close(descriptor)
-    if not value or len(value) > 16 * 1024 or b"\x00" in value or b"\n" in value.strip():
-        raise ContractDenied("CREDENTIAL_CONTENT_INVALID")
-    return value.strip()
-
-
-class _NoRedirect(urllib.request.HTTPRedirectHandler):
-    def redirect_request(self, req, fp, code, msg, headers, newurl):
-        return None
-
-
-class GiteaClient:
-    def __init__(self, token_path: Path, api_base: str = "http://127.0.0.1:3000/api/v1"):
-        parsed = urllib.parse.urlparse(api_base)
-        if parsed.scheme != "http" or parsed.hostname != "127.0.0.1" or parsed.path.rstrip("/") != "/api/v1" or parsed.username or parsed.password or parsed.query or parsed.fragment:
-            raise ContractDenied("GITEA_API_ORIGIN_INVALID")
-        self.token_path = Path(token_path)
-        self.api_base = api_base.rstrip("/")
-        self.opener = urllib.request.build_opener(_NoRedirect)
-
-    def _request(self, method: str, path: str, payload: dict[str, Any] | None = None) -> Any:
-        if not path.startswith("/") or ".." in path.split("/"):
-            raise ContractDenied("GITEA_API_PATH_INVALID")
-        token = read_runtime_secret(self.token_path).decode("utf-8")
-        body = canonical(payload) if payload is not None else None
-        request = urllib.request.Request(self.api_base + path, data=body, method=method, headers={"Authorization": f"token {token}", "Content-Type": "application/json", "Accept": "application/json"})
-        try:
-            with self.opener.open(request, timeout=20) as response:
-                raw = response.read(2 * 1024 * 1024 + 1)
-        except (urllib.error.URLError, OSError) as exc:
-            raise ContractDenied(f"GITEA_API_FAILED:{type(exc).__name__}") from exc
-        if len(raw) > 2 * 1024 * 1024:
-            raise ContractDenied("GITEA_API_RESPONSE_TOO_LARGE")
-        return json.loads(raw.decode("utf-8")) if raw else None
-
-    def get(self, path: str) -> Any:
-        return self._request("GET", path)
-
-    def post(self, path: str, payload: dict[str, Any]) -> Any:
-        return self._request("POST", path, payload)
-
-
-class QuotaJournal:
-    def __init__(self, path: Path, grant: TaskGrant):
-        self.path = Path(path)
-        self.grant = grant
-        self.connection = sqlite3.connect(self.path, isolation_level=None)
-        journal_mode = self.connection.execute("PRAGMA journal_mode=WAL").fetchone()
-        if journal_mode is None or str(journal_mode[0]).lower() != "wal":
-            raise ContractDenied("JOURNAL_MODE_INVALID")
-        self.connection.execute("PRAGMA synchronous=FULL")
-        synchronous = self.connection.execute("PRAGMA synchronous").fetchone()
-        if synchronous is None or int(synchronous[0]) != 2:
-            raise ContractDenied("JOURNAL_SYNCHRONOUS_INVALID")
-        self.connection.execute("CREATE TABLE IF NOT EXISTS quota(operation TEXT PRIMARY KEY, state TEXT NOT NULL, effect_sha256 TEXT)")
-        self.connection.execute("CREATE TABLE IF NOT EXISTS audit(seq INTEGER PRIMARY KEY AUTOINCREMENT, event BLOB NOT NULL, previous_hash TEXT NOT NULL, event_hash TEXT NOT NULL UNIQUE)")
-
-    def close(self) -> None:
-        self.connection.close()
-
-    def reserve(self, operation: str) -> str:
-        limit = {"statuses": 1, "merge": 1}.get(operation)
-        if limit is None:
-            raise ContractDenied("OPERATION_INVALID")
-        self.connection.execute("BEGIN IMMEDIATE")
-        try:
-            row = self.connection.execute("SELECT state FROM quota WHERE operation=?", (operation,)).fetchone()
-            if row and row[0] == "COMMITTED":
-                raise ContractDenied("STATUS_QUOTA_EXHAUSTED" if operation == "statuses" else "MERGE_QUOTA_EXHAUSTED")
-            if row and row[0] != "RESERVED":
-                raise ContractDenied("JOURNAL_STATE_INVALID")
-            if not row:
-                self.connection.execute("INSERT INTO quota(operation,state,effect_sha256) VALUES(?,'RESERVED',NULL)", (operation,))
-            self.connection.execute("COMMIT")
-            return "RESERVED"
-        except Exception:
-            self.connection.execute("ROLLBACK")
-            raise
-
-    def state(self, operation: str) -> str | None:
-        row = self.connection.execute("SELECT state FROM quota WHERE operation=?", (operation,)).fetchone()
-        return str(row[0]) if row else None
-
-    def commit(self, operation: str, effect: dict[str, Any]) -> None:
-        digest = hashlib.sha256(canonical(effect)).hexdigest()
-        self.connection.execute("BEGIN IMMEDIATE")
-        try:
-            row = self.connection.execute("SELECT state,effect_sha256 FROM quota WHERE operation=?", (operation,)).fetchone()
-            if row is None or row[0] not in {"RESERVED", "COMMITTED"}:
-                raise ContractDenied("RESERVATION_MISSING")
-            if row[0] == "COMMITTED" and row[1] != digest:
-                raise ContractDenied("COMMITTED_EFFECT_MISMATCH")
-            self.connection.execute("UPDATE quota SET state='COMMITTED',effect_sha256=? WHERE operation=?", (digest, operation))
-            self.connection.execute("COMMIT")
-        except Exception:
-            self.connection.execute("ROLLBACK")
-            raise
-
-    def append(self, event: dict[str, Any]) -> str:
-        row = self.connection.execute("SELECT event_hash FROM audit ORDER BY seq DESC LIMIT 1").fetchone()
-        previous = row[0] if row else "0" * 64
-        raw = canonical(event)
-        digest = hashlib.sha256(previous.encode() + raw).hexdigest()
-        self.connection.execute("INSERT INTO audit(event,previous_hash,event_hash) VALUES(?,?,?)", (raw, previous, digest))
-        return digest
-
-    def verify_chain(self) -> bool:
-        previous = "0" * 64
-        for raw, observed_previous, observed_hash in self.connection.execute("SELECT event,previous_hash,event_hash FROM audit ORDER BY seq"):
-            if observed_previous != previous or hashlib.sha256(previous.encode() + raw).hexdigest() != observed_hash:
-                return False
-            previous = observed_hash
-        return True
-
-
-def _latest_statuses(values: Any) -> dict[str, dict[str, Any]]:
-    if not isinstance(values, list):
-        raise ContractDenied("STATUS_RESPONSE_INVALID")
-    latest: dict[str, tuple[tuple[str, int], dict[str, Any]]] = {}
-    for item in values:
-        if not isinstance(item, dict) or item.get("context") not in ALLOWED_CONTEXTS:
-            continue
-        key = (str(item.get("created_at") or ""), int(item.get("id") or 0))
-        context = item["context"]
-        if context not in latest or key > latest[context][0]:
-            latest[context] = (key, item)
-    return {context: item for context, (_, item) in latest.items()}
-
-
-def _verify_owner_binding(api: API, grant: TaskGrant) -> tuple[dict[str, Any], dict[str, Any]]:
-    pr_number = grant.raw["pr_number"]
-    head, base = grant.raw["target_commit"], grant.raw["base_oid"]
-    pr = api.get(f"/repos/aios/aios/pulls/{pr_number}")
-    reviews = api.get(f"/repos/aios/aios/pulls/{pr_number}/reviews")
-    if not isinstance(pr, dict) or pr.get("state") != "open" or pr.get("mergeable") is not True or (pr.get("head") or {}).get("sha") != head or (pr.get("base") or {}).get("sha") != base or (pr.get("base") or {}).get("ref") != "governance/approvals":
-        raise ContractDenied("PR_BINDING_INVALID")
-    if not isinstance(reviews, list):
-        raise ContractDenied("REVIEW_RESPONSE_INVALID")
-    owners = [item for item in reviews if isinstance(item, dict) and (item.get("user") or {}).get("login") == "owner" and (item.get("user") or {}).get("id") == 2]
-    if not owners:
-        raise ContractDenied("OWNER_EXACT_HEAD_APPROVAL_MISSING")
-    latest = max(owners, key=lambda item: int(item.get("id") or -1))
-    if latest.get("state") != "APPROVED" or latest.get("commit_id") != head or latest.get("official") is not True or latest.get("stale") is not False or latest.get("dismissed") is not False:
-        raise ContractDenied("OWNER_EXACT_HEAD_APPROVAL_MISSING")
-    raw_timestamp = str(latest.get("submitted_at") or "")
-    submitted = _time(raw_timestamp)
-    if submitted < grant.issued_at or submitted >= grant.expires_at:
-        raise ContractDenied("OWNER_APPROVAL_EXPIRED")
-    normalized_review = dict(latest)
-    normalized_review["review_timestamp_raw"] = raw_timestamp
-    normalized_review["review_timestamp_utc"] = _utc_timestamp(submitted)
-    return pr, normalized_review
-
-
-def _signed_receipt(value: dict[str, Any], key: bytes) -> dict[str, Any]:
-    if not key:
-        raise ContractDenied("AUDIT_KEY_EMPTY")
-    result = dict(value)
-    result["audit_signature"] = hmac.new(key, canonical(value), hashlib.sha256).hexdigest()
-    return result
-
-
-class StatusBroker:
-    def __init__(self, grant: TaskGrant, journal: QuotaJournal, api: API, audit_key: bytes):
-        self.grant, self.journal, self.api, self.audit_key = grant, journal, api, audit_key
-
-    def publish(self, evidence: list[dict[str, Any]]) -> dict[str, Any]:
-        if not isinstance(evidence, list) or len(evidence) != 5:
-            raise ContractDenied("EVIDENCE_SET_INVALID")
-        mapped = {item.get("context"): item for item in evidence if isinstance(item, dict)}
-        if set(mapped) != ALLOWED_CONTEXTS or any(set(item) != {"context", "evidence_sha256"} or not SHA256.fullmatch(str(item["evidence_sha256"])) or item["evidence_sha256"] != self.grant.raw["status_evidence_sha256"].get(context) for context, item in mapped.items()):
-            raise ContractDenied("EVIDENCE_SET_INVALID")
-        _, review = _verify_owner_binding(self.api, self.grant)
-        self.journal.reserve("statuses")
-        published = []
-        head = self.grant.raw["target_commit"]
-        pr_number = self.grant.raw["pr_number"]
-        observed_before = self.api.get(f"/repos/aios/aios/commits/{head}/statuses")
-        already = _latest_statuses(observed_before)
-        already = {context: item for context, item in already.items()
-                   if item.get("status", item.get("state")) == "success"
-                   and item.get("sha", head) == head
-                   and (item.get("creator") or {}).get("login") == self.grant.raw["status_identity"]
-                   and str(item.get("description") or "").endswith(mapped[context]["evidence_sha256"])}
-        for context in sorted(ALLOWED_CONTEXTS):
-            digest = mapped[context]["evidence_sha256"]
-            if context in already:
-                published.append({"context": context, "evidence_sha256": digest, "status_id": already[context].get("id"), "reconciled": True})
-                continue
-            response = self.api.post(f"/repos/aios/aios/statuses/{head}", {
-                "state": "success", "context": context,
-                "description": f"task-scoped PASS evidence_sha256={digest}",
-                "target_url": f"https://g.cnnetmkt.top/git/aios/aios/pulls/{pr_number}",
-            })
-            if not isinstance(response, dict) or response.get("context") != context or response.get("status", response.get("state")) != "success":
-                raise ContractDenied("STATUS_PUBLICATION_FAILED")
-            published.append({"context": context, "evidence_sha256": digest, "status_id": response.get("id")})
-        observed = self.api.get(f"/repos/aios/aios/commits/{head}/statuses")
-        latest = _latest_statuses(observed)
-        if set(latest) != ALLOWED_CONTEXTS or any(
-            item.get("status", item.get("state")) != "success"
-            or item.get("sha", head) != head
-            or (item.get("creator") or {}).get("login") != self.grant.raw["status_identity"]
-            or not str(item.get("description") or "").endswith(mapped[context]["evidence_sha256"])
-            for context, item in latest.items()
-        ):
-            raise ContractDenied("STATUS_READBACK_INVALID")
-        receipt = {"status": "PASS", "operation": "publish_statuses", "grant_sha256": self.grant.digest, "target_commit": head, "published_count": 5, "published": published, "review_timestamp_raw": review["review_timestamp_raw"], "review_timestamp_utc": review["review_timestamp_utc"]}
-        receipt["audit_signature"] = hmac.new(self.audit_key, canonical(receipt), hashlib.sha256).hexdigest()
-        receipt["audit_chain_hash"] = self.journal.append(receipt)
-        self.journal.commit("statuses", receipt)
-        return receipt
-
-
-class MergeBroker:
-    def __init__(self, grant: TaskGrant, journal: QuotaJournal, api: API, audit_key: bytes):
-        self.grant, self.journal, self.api, self.audit_key = grant, journal, api, audit_key
-
-    def merge(self) -> dict[str, Any]:
-        head, base = self.grant.raw["target_commit"], self.grant.raw["base_oid"]
-        pr_number = self.grant.raw["pr_number"]
-        pr = self.api.get(f"/repos/aios/aios/pulls/{pr_number}")
-        if isinstance(pr, dict) and pr.get("merged") is True:
-            observed_branch = self.api.get("/repos/aios/aios/branches/governance%2Fapprovals")
-            if pr.get("merge_commit_sha") != head or (observed_branch.get("commit") or {}).get("id") != head or self.journal.state("merge") != "RESERVED":
-                raise ContractDenied("FAST_FORWARD_RESULT_MISMATCH")
-            receipt = {"status": "PASS", "operation": "fast_forward_merge", "grant_sha256": self.grant.digest, "pr_number": pr_number, "governance_oid": head, "merge_method": "fast-forward-only", "reconciled": True}
-            receipt["audit_signature"] = hmac.new(self.audit_key, canonical(receipt), hashlib.sha256).hexdigest()
-            receipt["audit_chain_hash"] = self.journal.append(receipt)
-            self.journal.commit("merge", receipt)
-            return receipt
-        pr, review = _verify_owner_binding(self.api, self.grant)
-        statuses = self.api.get(f"/repos/aios/aios/commits/{head}/statuses")
-        latest = _latest_statuses(statuses)
-        if set(latest) != ALLOWED_CONTEXTS or any(item.get("status", item.get("state")) != "success" or item.get("sha", head) != head or (item.get("creator") or {}).get("login") != self.grant.raw["status_identity"] or not str(item.get("description") or "").endswith(self.grant.raw["status_evidence_sha256"][context]) for context, item in latest.items()):
-            raise ContractDenied("MACHINE_STATUS_INVALID")
-        self.journal.reserve("merge")
-        self.api.post(f"/repos/aios/aios/pulls/{pr_number}/merge", {"Do": "fast-forward-only", "head_commit_id": head, "force_merge": False, "delete_branch_after_merge": False})
-        observed_pr = self.api.get(f"/repos/aios/aios/pulls/{pr_number}")
-        observed_branch = self.api.get("/repos/aios/aios/branches/governance%2Fapprovals")
-        if observed_pr.get("merged") is not True or observed_pr.get("merge_commit_sha") != head or (observed_branch.get("commit") or {}).get("id") != head:
-            raise ContractDenied("FAST_FORWARD_RESULT_MISMATCH")
-        receipt = {"status": "PASS", "operation": "fast_forward_merge", "grant_sha256": self.grant.digest, "pr_number": pr_number, "governance_oid": head, "merge_method": "fast-forward-only", "review_timestamp_raw": review["review_timestamp_raw"], "review_timestamp_utc": review["review_timestamp_utc"]}
-        receipt["audit_signature"] = hmac.new(self.audit_key, canonical(receipt), hashlib.sha256).hexdigest()
-        receipt["audit_chain_hash"] = self.journal.append(receipt)
-        self.journal.commit("merge", receipt)
-        return receipt
-
-
-def main(argv: list[str] | None = None) -> int:
-    parser = argparse.ArgumentParser(prog="aios-task-status-merge-broker")
-    parser.add_argument("--mode", required=True, choices=("status", "merge"))
-    parser.add_argument("--grant", required=True, type=Path)
-    parser.add_argument("--token", required=True, type=Path)
-    parser.add_argument("--audit-key", required=True, type=Path)
-    parser.add_argument("--grant-signature", required=True, type=Path)
-    parser.add_argument("--allowed-signers", required=True, type=Path)
-    parser.add_argument("--journal", required=True, type=Path)
-    parser.add_argument("--evidence", type=Path)
-    args = parser.parse_args(argv)
-    grant = load_signed_task_grant(args.grant, args.grant_signature, args.allowed_signers)
-    journal = QuotaJournal(args.journal, grant)
-    try:
-        client = GiteaClient(args.token)
-        key = read_runtime_secret(args.audit_key)
-        if args.mode == "status":
-            if args.evidence is None:
-                raise ContractDenied("EVIDENCE_REQUIRED")
-            result = StatusBroker(grant, journal, client, key).publish(json.loads(args.evidence.read_text(encoding="utf-8")))
-        else:
-            if args.evidence is not None:
-                raise ContractDenied("EVIDENCE_FORBIDDEN")
-            result = MergeBroker(grant, journal, client, key).merge()
-        print(json.dumps(result, sort_keys=True, separators=(",", ":")))
-        return 0
-    finally:
-        journal.close()
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())
@@ -0,0 +1,69 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+
+from .models import ApprovalContext, Review
+
+
+class ValidationDenied(RuntimeError):
+    def __init__(self, code: str) -> None:
+        super().__init__(code)
+        self.code = code
+
+
+@dataclass(frozen=True)
+class ValidationResult:
+    owner_review: Review
+    machine_contexts: tuple[str, ...]
+
+
+class SingleOwnerApprovalValidator:
+    """Pure candidate validator. It has no Gitea or production write path."""
+
+    def validate(self, context: ApprovalContext) -> ValidationResult:
+        if context.now >= context.expires_at:
+            raise ValidationDenied("APPROVAL_EXPIRED")
+        if context.wip:
+            raise ValidationDenied("WIP_BLOCKED")
+        if context.requester == context.owner:
+            raise ValidationDenied("REQUESTER_SELF_APPROVAL")
+        if context.executor == context.owner:
+            raise ValidationDenied("EXECUTOR_SELF_APPROVAL")
+
+        approved = [review for review in context.reviews if review.state == "APPROVED"]
+        owner_reviews = [
+            review for review in approved
+            if review.reviewer == context.owner and review.reviewer_id == context.owner_id
+        ]
+        if len(owner_reviews) != 1:
+            raise ValidationDenied("OWNER_APPROVAL_REQUIRED")
+        owner_review = owner_reviews[0]
+        if owner_review.stale:
+            raise ValidationDenied("STALE_OWNER_APPROVAL")
+        if owner_review.dismissed:
+            raise ValidationDenied("DISMISSED_OWNER_APPROVAL")
+        if owner_review.head_oid != context.current_head_oid:
+            raise ValidationDenied("OWNER_APPROVAL_NOT_LATEST_HEAD")
+        if owner_review.reviewed_at >= context.expires_at:
+            raise ValidationDenied("OWNER_APPROVAL_EXPIRED")
+        if any(
+            review.state == "APPROVED"
+            and review.reviewer != context.owner
+            and review.reviewer_id != context.owner_id
+            for review in context.reviews
+        ):
+            # Non-owner approvals may exist for legacy mechanics, but never
+            # satisfy or replace the human authorization decision.
+            pass
+
+        gates = {gate.context: gate for gate in context.machine_gates}
+        if set(gates) != set(context.required_machine_contexts):
+            raise ValidationDenied("MACHINE_GATE_SET_MISMATCH")
+        for gate in gates.values():
+            if gate.state != "success":
+                raise ValidationDenied("MACHINE_GATE_FAILED")
+            if gate.head_oid != context.current_head_oid:
+                raise ValidationDenied("MACHINE_GATE_NOT_LATEST_HEAD")
+            if gate.observed_at >= context.expires_at:
+                raise ValidationDenied("MACHINE_GATE_EXPIRED")
+        return ValidationResult(owner_review, tuple(sorted(gates)))
@@ -0,0 +1,16 @@
+[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "aios-single-owner-governance"
+version = "0.1.0"
+requires-python = ">=3.11"
+dependencies = []
+
+[project.scripts]
+aios-single-owner-governance = "aios_single_owner_governance.activation:main"
+
+[tool.setuptools.packages.find]
+where = ["."]
+include = ["aios_single_owner_governance*"]
@@ -1,323 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "TASK_SCOPED_GOVERNANCE_BOOTSTRAP",
-  "title": "TASK_SCOPED_GOVERNANCE_BOOTSTRAP observed approval envelope",
-  "description": "Versioned fail-closed validation envelope assembled from an immutable request plus observed Owner, Git, machine-gate, runtime, and mirror evidence.",
-  "x-schema-version": 1,
-  "x-schema-status": "CANDIDATE",
-  "type": "object",
-  "additionalProperties": false,
-  "required": [
-    "document_kind",
-    "request_id",
-    "schema_id",
-    "schema_version",
-    "request_created_at",
-    "request_expires_at",
-    "requester_identity",
-    "repository_identity",
-    "approval_plan_path",
-    "approval_plan_blob_oid",
-    "approval_plan_sha256",
-    "schema_document_sha256",
-    "validator_policy_sha256",
-    "required_machine_contexts",
-    "governance_base_ref",
-    "governance_base_oid",
-    "request_head_ref",
-    "request_head_oid",
-    "code_base_ref",
-    "code_base_oid",
-    "candidate_commit_oid",
-    "candidate_parent_oid",
-    "candidate_tree_oid",
-    "candidate_diff_sha256",
-    "candidate_files_sha256",
-    "target_ref",
-    "target_initial_state",
-    "provision_publisher",
-    "provision_writer",
-    "provision_credential_projection",
-    "publisher_identity",
-    "writer_identity",
-    "credential_secret_ref",
-    "publisher_scope",
-    "writer_scope",
-    "credential_scope",
-    "observed_preapproval_operations",
-    "allowed_operations",
-    "allowed_operations_sha256",
-    "denied_operations",
-    "maximum_operation_count",
-    "maximum_pr_count",
-    "maximum_branch_count",
-    "maximum_commit_count",
-    "allowed_paths",
-    "allowed_paths_sha256",
-    "approved_at",
-    "expires_at",
-    "maximum_lifetime_seconds",
-    "auto_revoke",
-    "required_human_approvals",
-    "allowed_human_approvers",
-    "approved_by",
-    "owner_review_id",
-    "owner_review_commit_oid",
-    "approval_plan_id",
-    "approval_audit_event_id",
-    "production_runtime_anchor_change",
-    "production_writes_enabled",
-    "tag_operations",
-    "registry_operations",
-    "baseline_operations",
-    "deployment_operations",
-    "force_push_allowed",
-    "tag_rewrite_allowed",
-    "direct_main_push_allowed"
-  ],
-  "properties": {
-    "document_kind": {"const": "ENVELOPE"},
-    "request_id": {"type": "string", "minLength": 3, "maxLength": 192, "pattern": "^[A-Za-z0-9][A-Za-z0-9_.:-]+$"},
-    "schema_id": {"const": "TASK_SCOPED_GOVERNANCE_BOOTSTRAP"},
-    "schema_version": {"const": 1},
-    "request_created_at": {"type": "string", "format": "date-time", "pattern": "Z$"},
-    "request_expires_at": {"type": "string", "format": "date-time", "pattern": "Z$"},
-    "requester_identity": {"$ref": "#/$defs/identity"},
-    "repository_identity": {"const": "aios/aios"},
-    "approval_plan_path": {"type": "string", "pattern": "^approvals/governance-bootstrap/[A-Za-z0-9._-]+\\.json$"},
-    "approval_plan_blob_oid": {"$ref": "#/$defs/oid"},
-    "approval_plan_sha256": {"$ref": "#/$defs/sha256"},
-    "schema_document_sha256": {"$ref": "#/$defs/sha256"},
-    "validator_policy_sha256": {"$ref": "#/$defs/sha256"},
-    "required_machine_contexts": {
-      "type": "array",
-      "minItems": 5,
-      "maxItems": 5,
-      "uniqueItems": true,
-      "items": {"enum": [
-        "governance/authority-mirror",
-        "governance/fault-injection",
-        "governance/runtime-isolation",
-        "governance/schema-contract",
-        "governance/validator-security"
-      ]}
-    },
-    "governance_base_ref": {"const": "refs/heads/governance/approvals"},
-    "governance_base_oid": {"$ref": "#/$defs/oid"},
-    "request_head_ref": {"type": "string", "pattern": "^refs/heads/governance/request/[A-Za-z0-9._/-]+$"},
-    "request_head_oid": {"$ref": "#/$defs/oid"},
-    "code_base_ref": {"type": "string", "pattern": "^refs/heads/patch/[A-Za-z0-9._/-]+$"},
-    "code_base_oid": {"$ref": "#/$defs/oid"},
-    "candidate_commit_oid": {"$ref": "#/$defs/oid"},
-    "candidate_parent_oid": {"$ref": "#/$defs/oid"},
-    "candidate_tree_oid": {"$ref": "#/$defs/oid"},
-    "candidate_diff_sha256": {"$ref": "#/$defs/sha256"},
-    "candidate_files_sha256": {"$ref": "#/$defs/sha256"},
-    "target_ref": {"type": "string", "pattern": "^refs/heads/patch/[A-Za-z0-9._/-]+$"},
-    "target_initial_state": {"const": "ABSENT"},
-    "provision_publisher": {"const": true},
-    "provision_writer": {"const": true},
-    "provision_credential_projection": {"const": true},
-    "publisher_identity": {"$ref": "#/$defs/identity"},
-    "writer_identity": {"$ref": "#/$defs/identity"},
-    "credential_secret_ref": {"type": "string", "pattern": "^(systemd-credential|secret-ref)://[A-Za-z0-9_.-]+$"},
-    "publisher_scope": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["repository", "local_code_write", "administrator"],
-      "properties": {
-        "repository": {"const": "aios/aios"},
-        "local_code_write": {"const": false},
-        "administrator": {"const": false}
-      }
-    },
-    "writer_scope": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["repository", "remote_credentials", "remote_push", "run_as_root"],
-      "properties": {
-        "repository": {"const": "aios/aios"},
-        "remote_credentials": {"const": false},
-        "remote_push": {"const": false},
-        "run_as_root": {"const": false}
-      }
-    },
-    "credential_scope": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": [
-        "provider", "projection", "audience", "writer_visible",
-        "runtime_anchor_visible", "expires_with_request", "revocation_required",
-        "post_revoke_http_status"
-      ],
-      "properties": {
-        "provider": {"const": "systemd"},
-        "projection": {"const": "LoadCredential"},
-        "audience": {"$ref": "#/$defs/identity"},
-        "writer_visible": {"const": false},
-        "runtime_anchor_visible": {"const": false},
-        "expires_with_request": {"const": true},
-        "revocation_required": {"const": true},
-        "post_revoke_http_status": {"const": 401}
-      }
-    },
-    "observed_preapproval_operations": {
-      "type": "array",
-      "minItems": 2,
-      "maxItems": 2,
-      "uniqueItems": true,
-      "items": {"enum": [
-        "create_governance_request_branch",
-        "create_governance_approval_pr"
-      ]}
-    },
-    "allowed_operations": {
-      "type": "array",
-      "minItems": 1,
-      "uniqueItems": true,
-      "items": {"enum": [
-        "provision_task_publisher",
-        "provision_task_writer",
-        "provision_task_credential_projection",
-        "create_approved_code_branch",
-        "push_approved_code_branch",
-        "read_remote_refs",
-        "revoke_task_credentials",
-        "remove_task_identities"
-      ]}
-    },
-    "allowed_operations_sha256": {"$ref": "#/$defs/sha256"},
-    "denied_operations": {"type": "array", "minItems": 12, "uniqueItems": true, "items": {"type": "string"}},
-    "maximum_operation_count": {"type": "integer", "minimum": 1, "maximum": 10},
-    "maximum_pr_count": {"const": 1},
-    "maximum_branch_count": {"const": 1},
-    "maximum_commit_count": {"const": 1},
-    "allowed_paths": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "minLength": 1}},
-    "allowed_paths_sha256": {"$ref": "#/$defs/sha256"},
-    "approved_at": {"type": "string", "format": "date-time", "pattern": "Z$"},
-    "expires_at": {"type": "string", "format": "date-time", "pattern": "Z$"},
-    "maximum_lifetime_seconds": {"type": "integer", "minimum": 1, "maximum": 43200},
-    "auto_revoke": {"const": true},
-    "required_human_approvals": {"const": 1},
-    "allowed_human_approvers": {"const": ["owner"]},
-    "approved_by": {"const": "owner"},
-    "owner_review_id": {"type": "integer", "minimum": 1},
-    "owner_review_commit_oid": {"$ref": "#/$defs/oid"},
-    "approval_plan_id": {"type": "string", "minLength": 3, "maxLength": 192},
-    "approval_audit_event_id": {"type": "string", "minLength": 3, "maxLength": 192},
-    "production_runtime_anchor_change": {"const": false},
-    "production_writes_enabled": {"const": false},
-    "tag_operations": {"const": false},
-    "registry_operations": {"const": false},
-    "baseline_operations": {"const": false},
-    "deployment_operations": {"const": false},
-    "force_push_allowed": {"const": false},
-    "tag_rewrite_allowed": {"const": false},
-    "direct_main_push_allowed": {"const": false}
-  },
-  "$defs": {
-    "plan": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": [
-        "document_kind", "schema_id", "schema_version", "payload_sha256",
-        "payload"
-      ],
-      "properties": {
-        "document_kind": {"const": "PLAN"},
-        "schema_id": {"const": "TASK_SCOPED_GOVERNANCE_BOOTSTRAP_PLAN"},
-        "schema_version": {"const": 1},
-        "payload_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
-        "payload": {"$ref": "#/$defs/planPayload"}
-      }
-    },
-    "planPayload": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": [
-        "allowed_human_approvers", "allowed_operations", "allowed_operations_sha256",
-        "allowed_paths", "allowed_paths_sha256", "approval_plan_id", "approval_plan_path",
-        "approved_by", "auto_revoke", "baseline_operations", "candidate_commit_oid",
-        "candidate_diff_sha256", "candidate_files_sha256", "candidate_parent_oid",
-        "candidate_tree_oid", "code_base_oid", "code_base_ref", "credential_scope",
-        "credential_secret_ref", "denied_operations", "deployment_operations",
-        "direct_main_push_allowed", "expires_at", "force_push_allowed",
-        "governance_base_oid", "governance_base_ref", "maximum_branch_count",
-        "maximum_commit_count", "maximum_lifetime_seconds", "maximum_operation_count",
-        "maximum_pr_count", "observed_preapproval_operations",
-        "production_runtime_anchor_change", "production_writes_enabled",
-        "provision_credential_projection", "provision_publisher", "provision_writer",
-        "publisher_identity", "publisher_scope", "registry_operations",
-        "repository_identity", "request_created_at", "request_expires_at",
-        "request_head_ref", "request_id", "requester_identity",
-        "required_human_approvals", "required_machine_contexts",
-        "schema_document_sha256", "schema_id", "schema_version", "tag_operations",
-        "tag_rewrite_allowed", "target_initial_state", "target_ref",
-        "validator_policy_sha256", "writer_identity", "writer_scope"
-      ],
-      "properties": {
-        "allowed_human_approvers": {"$ref": "#/properties/allowed_human_approvers"},
-        "allowed_operations": {"$ref": "#/properties/allowed_operations"},
-        "allowed_operations_sha256": {"$ref": "#/properties/allowed_operations_sha256"},
-        "allowed_paths": {"$ref": "#/properties/allowed_paths"},
-        "allowed_paths_sha256": {"$ref": "#/properties/allowed_paths_sha256"},
-        "approval_plan_id": {"$ref": "#/properties/approval_plan_id"},
-        "approval_plan_path": {"$ref": "#/properties/approval_plan_path"},
-        "approved_by": {"$ref": "#/properties/approved_by"},
-        "auto_revoke": {"$ref": "#/properties/auto_revoke"},
-        "baseline_operations": {"$ref": "#/properties/baseline_operations"},
-        "candidate_commit_oid": {"$ref": "#/properties/candidate_commit_oid"},
-        "candidate_diff_sha256": {"$ref": "#/properties/candidate_diff_sha256"},
-        "candidate_files_sha256": {"$ref": "#/properties/candidate_files_sha256"},
-        "candidate_parent_oid": {"$ref": "#/properties/candidate_parent_oid"},
-        "candidate_tree_oid": {"$ref": "#/properties/candidate_tree_oid"},
-        "code_base_oid": {"$ref": "#/properties/code_base_oid"},
-        "code_base_ref": {"$ref": "#/properties/code_base_ref"},
-        "credential_scope": {"$ref": "#/properties/credential_scope"},
-        "credential_secret_ref": {"$ref": "#/properties/credential_secret_ref"},
-        "denied_operations": {"$ref": "#/properties/denied_operations"},
-        "deployment_operations": {"$ref": "#/properties/deployment_operations"},
-        "direct_main_push_allowed": {"$ref": "#/properties/direct_main_push_allowed"},
-        "expires_at": {"$ref": "#/properties/expires_at"},
-        "force_push_allowed": {"$ref": "#/properties/force_push_allowed"},
-        "governance_base_oid": {"$ref": "#/properties/governance_base_oid"},
-        "governance_base_ref": {"$ref": "#/properties/governance_base_ref"},
-        "maximum_branch_count": {"$ref": "#/properties/maximum_branch_count"},
-        "maximum_commit_count": {"$ref": "#/properties/maximum_commit_count"},
-        "maximum_lifetime_seconds": {"$ref": "#/properties/maximum_lifetime_seconds"},
-        "maximum_operation_count": {"$ref": "#/properties/maximum_operation_count"},
-        "maximum_pr_count": {"$ref": "#/properties/maximum_pr_count"},
-        "observed_preapproval_operations": {"$ref": "#/properties/observed_preapproval_operations"},
-        "production_runtime_anchor_change": {"$ref": "#/properties/production_runtime_anchor_change"},
-        "production_writes_enabled": {"$ref": "#/properties/production_writes_enabled"},
-        "provision_credential_projection": {"$ref": "#/properties/provision_credential_projection"},
-        "provision_publisher": {"$ref": "#/properties/provision_publisher"},
-        "provision_writer": {"$ref": "#/properties/provision_writer"},
-        "publisher_identity": {"$ref": "#/properties/publisher_identity"},
-        "publisher_scope": {"$ref": "#/properties/publisher_scope"},
-        "registry_operations": {"$ref": "#/properties/registry_operations"},
-        "repository_identity": {"$ref": "#/properties/repository_identity"},
-        "request_created_at": {"$ref": "#/properties/request_created_at"},
-        "request_expires_at": {"$ref": "#/properties/request_expires_at"},
-        "request_head_ref": {"$ref": "#/properties/request_head_ref"},
-        "request_id": {"$ref": "#/properties/request_id"},
-        "requester_identity": {"$ref": "#/properties/requester_identity"},
-        "required_human_approvals": {"$ref": "#/properties/required_human_approvals"},
-        "required_machine_contexts": {"$ref": "#/properties/required_machine_contexts"},
-        "schema_document_sha256": {"$ref": "#/properties/schema_document_sha256"},
-        "schema_id": {"$ref": "#/properties/schema_id"},
-        "schema_version": {"$ref": "#/properties/schema_version"},
-        "tag_operations": {"$ref": "#/properties/tag_operations"},
-        "tag_rewrite_allowed": {"$ref": "#/properties/tag_rewrite_allowed"},
-        "target_initial_state": {"$ref": "#/properties/target_initial_state"},
-        "target_ref": {"$ref": "#/properties/target_ref"},
-        "validator_policy_sha256": {"$ref": "#/properties/validator_policy_sha256"},
-        "writer_identity": {"$ref": "#/properties/writer_identity"},
-        "writer_scope": {"$ref": "#/properties/writer_scope"}
-      }
-    },
-    "oid": {"type": "string", "pattern": "^[0-9a-f]{40}$"},
-    "sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
-    "identity": {"type": "string", "minLength": 3, "maxLength": 128, "pattern": "^[A-Za-z0-9][A-Za-z0-9_.-]+$"}
-  }
-}
@@ -1,69 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "AIOS_TASK_STATUS_MERGE_GRANT_V1",
-  "type": "object",
-  "additionalProperties": false,
-  "required": [
-    "schema_id", "schema_version", "repository", "pr_number", "base_oid",
-    "target_commit", "approved_tree_oid", "manifest_path", "manifest_blob_oid", "manifest_sha256",
-    "payload_sha256", "status_identity", "merge_identity", "status_contexts",
-    "status_write_quota", "merge_quota", "merge_method", "branch_push_allowed",
-    "tag_write_allowed", "main_write_allowed", "registry_write_allowed",
-    "baseline_write_allowed", "production_write_allowed", "issued_at", "expires_at",
-    "audit_key_ref", "grant_signer_identity", "grant_signature_namespace",
-    "status_evidence_sha256", "supersedes_pr_number", "supersedes_head_oid",
-    "renewal_required", "timestamp_contract", "canonical_timezone",
-    "raw_timestamp_preserved", "naive_datetime_allowed"
-  ],
-  "properties": {
-    "schema_id": {"const": "AIOS_TASK_STATUS_MERGE_GRANT"},
-    "schema_version": {"const": 1},
-    "repository": {"const": "aios/aios"},
-    "pr_number": {"type": "integer", "minimum": 1},
-    "base_oid": {"type": "string", "pattern": "^[0-9a-f]{40}$"},
-    "target_commit": {"type": "string", "pattern": "^[0-9a-f]{40}$"},
-    "approved_tree_oid": {"type": "string", "pattern": "^[0-9a-f]{40}$"},
-    "manifest_path": {"type": "string", "pattern": "^approvals/[A-Za-z0-9._/-]+\\.json$"},
-    "manifest_blob_oid": {"type": "string", "pattern": "^[0-9a-f]{40}$"},
-    "manifest_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
-    "payload_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
-    "status_evidence_sha256": {
-      "type": "object", "additionalProperties": false,
-      "required": ["aios/branch-protection", "aios/evidence-closure", "aios/secret-scan", "aios/state-machine", "aios/validator"],
-      "properties": {
-        "aios/branch-protection": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
-        "aios/evidence-closure": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
-        "aios/secret-scan": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
-        "aios/state-machine": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
-        "aios/validator": {"type": "string", "pattern": "^[0-9a-f]{64}$"}
-      }
-    },
-    "supersedes_pr_number": {"const": 36},
-    "supersedes_head_oid": {"const": "a8644fc172bd8ebbba17a16e6bf586c93fd1e793"},
-    "renewal_required": {"const": true},
-    "timestamp_contract": {"const": "RFC3339_OFFSET_AWARE_V2"},
-    "canonical_timezone": {"const": "UTC"},
-    "raw_timestamp_preserved": {"const": true},
-    "naive_datetime_allowed": {"const": false},
-    "status_identity": {"enum": ["codex", "gpt"]},
-    "merge_identity": {"enum": ["codex", "gpt"]},
-    "status_contexts": {
-      "type": "array", "minItems": 5, "maxItems": 5, "uniqueItems": true,
-      "items": {"enum": ["aios/branch-protection", "aios/evidence-closure", "aios/secret-scan", "aios/state-machine", "aios/validator"]}
-    },
-    "status_write_quota": {"const": 5},
-    "merge_quota": {"const": 1},
-    "merge_method": {"const": "fast-forward-only"},
-    "branch_push_allowed": {"const": false},
-    "tag_write_allowed": {"const": false},
-    "main_write_allowed": {"const": false},
-    "registry_write_allowed": {"const": false},
-    "baseline_write_allowed": {"const": false},
-    "production_write_allowed": {"const": false},
-    "issued_at": {"type": "string", "format": "date-time"},
-    "expires_at": {"type": "string", "format": "date-time"},
-    "audit_key_ref": {"type": "string", "pattern": "^systemd-credential://[A-Za-z0-9_.-]+$"},
-    "grant_signer_identity": {"const": "aios-task-grant-signer"},
-    "grant_signature_namespace": {"const": "aios-task-status-merge-grant-v1"}
-  }
-}
@@ -0,0 +1 @@
+
@@ -0,0 +1,51 @@
+from __future__ import annotations
+
+from datetime import datetime, timedelta, timezone
+
+from aios_single_owner_governance.models import (
+    ApprovalContext,
+    MachineGate,
+    ProtectionSnapshot,
+    Review,
+)
+
+HEAD = "a" * 40
+NOW = datetime(2026, 7, 28, 19, 0, tzinfo=timezone.utc)
+CONTEXTS = ("aios/machine-gates", "aios/secret-scan", "aios/evidence-closure")
+
+
+def owner_review(**changes) -> Review:
+    values = dict(
+        reviewer="owner", reviewer_id=2, state="APPROVED", head_oid=HEAD,
+        reviewed_at=NOW - timedelta(minutes=1), stale=False, dismissed=False,
+    )
+    values.update(changes)
+    return Review(**values)
+
+
+def gates(*, state="success", head_oid=HEAD):
+    return tuple(MachineGate(name, state, head_oid, NOW) for name in CONTEXTS)
+
+
+def context(**changes) -> ApprovalContext:
+    values = dict(
+        current_head_oid=HEAD, requester="agent", executor="merge-executor",
+        owner="owner", owner_id=2, reviews=(owner_review(),), machine_gates=gates(),
+        required_machine_contexts=CONTEXTS, expires_at=NOW + timedelta(hours=1),
+        wip=False, now=NOW,
+    )
+    values.update(changes)
+    return ApprovalContext(**values)
+
+
+def legacy_protection(version=1) -> ProtectionSnapshot:
+    return ProtectionSnapshot(
+        "governance/approvals", 2, ("codex", "gpt"), ("codex", "gpt"),
+        True, False, (), False, False, False, version,
+    )
+
+def single_owner_protection(version=2) -> ProtectionSnapshot:
+    return ProtectionSnapshot(
+        "governance/approvals", 1, ("owner",), ("owner",), True, True,
+        CONTEXTS, False, False, False, version,
+    )
@@ -0,0 +1,72 @@
+from __future__ import annotations
+
+from pathlib import Path
+import unittest
+
+from aios_single_owner_governance.fixture import DisposableGiteaFixture
+from aios_single_owner_governance.protection import (
+    BranchProtectionCASMigrationAdapter,
+    DormantViolation,
+    snapshot_sha256,
+)
+from aios_single_owner_governance.policy import DormantOperationGuard, OperationDenied
+
+from .helpers import legacy_protection, single_owner_protection
+
+
+class LiveStore:
+    fixture = False
+
+    def read(self, branch):
+        return legacy_protection()
+
+    def compare_and_swap(self, branch, expected_sha256, target):
+        raise AssertionError("live compare_and_swap must never be invoked")
+
+
+class DormantInvariantTests(unittest.TestCase):
+    def test_live_protection_apply_and_rollback_are_denied(self):
+        adapter = BranchProtectionCASMigrationAdapter()
+        old, new = legacy_protection(), single_owner_protection()
+        plan = adapter.plan(old, new, snapshot_sha256(old))
+        with self.assertRaises(DormantViolation):
+            adapter.apply_fixture(LiveStore(), plan)
+        with self.assertRaises(DormantViolation):
+            adapter.rollback_fixture(LiveStore(), plan)
+
+    def test_unsafe_policy_cannot_be_planned(self):
+        adapter = BranchProtectionCASMigrationAdapter()
+        old = legacy_protection()
+        for unsafe in (
+            single_owner_protection().__class__(**{**single_owner_protection().as_dict(), "approval_whitelist": ("owner",), "merge_whitelist": ("owner",), "status_contexts": tuple(single_owner_protection().status_contexts), "direct_push": True}),
+            single_owner_protection().__class__(**{**single_owner_protection().as_dict(), "approval_whitelist": ("owner",), "merge_whitelist": ("owner",), "status_contexts": tuple(single_owner_protection().status_contexts), "force_push": True}),
+            single_owner_protection().__class__(**{**single_owner_protection().as_dict(), "approval_whitelist": ("owner",), "merge_whitelist": ("owner",), "status_contexts": tuple(single_owner_protection().status_contexts), "branch_deletion": True}),
+        ):
+            with self.assertRaises(DormantViolation):
+                adapter.plan(old, unsafe, snapshot_sha256(old))
+
+    def test_disposable_fixture_is_destroyed(self):
+        fixture = DisposableGiteaFixture(legacy_protection())
+        root = fixture.root
+        with fixture:
+            self.assertTrue(root.exists())
+        self.assertTrue(fixture.destroyed)
+        self.assertFalse(root.exists())
+
+    def test_permanent_and_pre_activation_writes_are_denied(self):
+        guard = DormantOperationGuard()
+        for operation in (
+            "protected_branch.direct_push",
+            "governance.direct_push",
+            "tag.direct_write",
+            "git.force_push",
+            "production.without_owner",
+            "branch_protection.live_update",
+            "single_owner_policy.activate",
+        ):
+            with self.subTest(operation=operation), self.assertRaises(OperationDenied):
+                guard.authorize(operation)
+
+
+if __name__ == "__main__":
+    unittest.main()
@@ -0,0 +1,113 @@
+from __future__ import annotations
+
+import contextlib
+import io
+import json
+import os
+from pathlib import Path
+import subprocess
+import sys
+import tempfile
+import unittest
+from unittest.mock import patch
+
+from aios_single_owner_governance.evidence import (
+    ActivationEvidenceClosureBuilder,
+    ApprovalMirrorStatusVerifier,
+)
+from aios_single_owner_governance.service import main, runtime_state
+from aios_single_owner_governance.status import (
+    DormantStatusProducer,
+    MachineStatusProducer,
+)
+
+from .helpers import HEAD
+
+
+class EvidenceStatusServiceTests(unittest.TestCase):
+    def test_complete_evidence_set_builds_canonical_closure(self):
+        evidence = {
+            "activation_prerequisites_commit_oid": "a" * 40,
+            "activation_prerequisites_tree_oid": "b" * 40,
+            "artifact_sha256": "c" * 64,
+            "rollback_artifact_sha256": "d" * 64,
+            "validator_sha256": "e" * 64,
+            "state_machine_sha256": "f" * 64,
+            "branch_protection_adapter_sha256": "0" * 64,
+            "rollback_configuration_sha256": "1" * 64,
+            "test_evidence_sha256": "2" * 64,
+            "deployment_manifest_sha256": "3" * 64,
+            "dormant_unit_manifest_sha256": "4" * 64,
+            "dormant_deployment_evidence_sha256": "5" * 64,
+        }
+        closure = ActivationEvidenceClosureBuilder().build(evidence)
+        self.assertEqual(len(closure.closure_sha256), 64)
+        with self.assertRaises(ValueError):
+            ActivationEvidenceClosureBuilder().build({})
+
+    def test_mirror_verifier_requires_all_four_refs_and_fsck(self):
+        verifier = ApprovalMirrorStatusVerifier()
+        self.assertTrue(verifier.verify(
+            HEAD, gitea_oid=HEAD, quarantine_oid=HEAD,
+            authoritative_oid=HEAD, controller_visible_oid=HEAD,
+            fsck_connectivity="PASS",
+        ))
+        self.assertFalse(verifier.verify(
+            HEAD, gitea_oid=HEAD, quarantine_oid=HEAD,
+            authoritative_oid="b" * 40, controller_visible_oid=HEAD,
+            fsck_connectivity="PASS",
+        ))
+
+    def test_machine_status_is_fixture_only_and_dormant(self):
+        with self.assertRaises(DormantStatusProducer):
+            MachineStatusProducer().produce("aios/machine-gates", "success", HEAD)
+        with self.assertRaises(DormantStatusProducer):
+            MachineStatusProducer(enabled=True, fixture=True).produce(
+                "aios/machine-gates", "success", HEAD
+            )
+        record = MachineStatusProducer(fixture=True).produce(
+            "aios/evidence-closure", "success", HEAD
+        )
+        self.assertEqual(record.head_oid, HEAD)
+
+    def test_service_self_check_is_dormant_and_activate_is_rejected(self):
+        output = io.StringIO()
+        with contextlib.redirect_stdout(output):
+            self.assertEqual(main(["--component", "owner-review-adapter", "--self-check"]), 0)
+        state = json.loads(output.getvalue())
+        self.assertFalse(state["active"])
+        self.assertFalse(state["production_mutation"])
+        with contextlib.redirect_stderr(io.StringIO()):
+            with self.assertRaises(SystemExit):
+                main(["--component", "owner-review-adapter", "--activate"])
+
+    def test_write_flags_cannot_be_enabled(self):
+        for name in (
+            "AIOS_SINGLE_OWNER_GOVERNANCE_ENABLED",
+            "AIOS_SINGLE_OWNER_ACTIVATION_ACTIVE",
+            "AIOS_GITOPS_WRITES_ENABLED",
+        ):
+            with self.subTest(name=name), patch.dict(os.environ, {name: "true"}, clear=False):
+                with contextlib.redirect_stderr(io.StringIO()):
+                    with self.assertRaises(SystemExit):
+                        main(["--component", "machine-status-producer", "--self-check"])
+
+    def test_service_entrypoint_restart_recovery_across_processes(self):
+        with tempfile.TemporaryDirectory(prefix="aios-governance-fixture-") as root:
+            command = [
+                sys.executable, "-m", "aios_single_owner_governance.service",
+                "--component", "owner-review-adapter", "--self-check",
+                "--checkpoint-dir", root,
+            ]
+            first = subprocess.run(command, text=True, capture_output=True, check=True)
+            second = subprocess.run(command, text=True, capture_output=True, check=True)
+            first_state = json.loads(first.stdout)
+            second_state = json.loads(second.stdout)
+            self.assertFalse(first_state["restart_recovery"])
+            self.assertTrue(second_state["restart_recovery"])
+            self.assertEqual(second_state["prior_invocations"], 1)
+            self.assertFalse(second_state["production_mutation"])
+
+
+if __name__ == "__main__":
+    unittest.main()
@@ -0,0 +1,771 @@
+from __future__ import annotations
+
+import json
+from pathlib import Path
+import sqlite3
+import subprocess
+import hashlib
+import os
+from datetime import datetime, timedelta, timezone
+
+import pytest
+from jsonschema import Draft202012Validator, ValidationError
+
+from aios_single_owner_governance.activation import (
+    ActivationEngine,
+    InjectedCrash,
+    _verify_approved_entities,
+    validate_bindings,
+)
+import aios_single_owner_governance.validator as validator_module
+import aios_single_owner_governance.state_machine as state_machine_module
+import aios_single_owner_governance.activation as activation_module
+from aios_single_owner_governance.gitea_protected_branch import (
+    CASConflict,
+    FileProtectedBranchAdapter,
+    SQLiteProtectedBranchAdapter,
+    UnsafePolicy,
+    calculate_snapshot_sha256,
+    validate_target,
+)
+from aios_single_owner_governance.journal import sha256_json
+
+
+MACHINE_CONTEXTS = {
+    "aios/validator",
+    "aios/state-machine",
+    "aios/branch-protection",
+    "aios/secret-scan",
+    "aios/evidence-closure",
+}
+
+
+def write_json(path: Path, value: object) -> None:
+    path.parent.mkdir(parents=True, exist_ok=True)
+    path.write_text(json.dumps(value, sort_keys=True) + "\n", encoding="utf-8")
+
+
+def legacy_row() -> dict:
+    return {
+        "id": 7,
+        "repo_id": 1,
+        "branch_name": "governance/approvals",
+        "can_push": 0,
+        "enable_whitelist": 0,
+        "whitelist_user_i_ds": "null",
+        "whitelist_team_i_ds": "null",
+        "enable_merge_whitelist": 1,
+        "whitelist_deploy_keys": 0,
+        "merge_whitelist_user_i_ds": "[42,43]",
+        "merge_whitelist_team_i_ds": "null",
+        "enable_status_check": 0,
+        "status_check_contexts": "[]",
+        "enable_approvals_whitelist": 1,
+        "approvals_whitelist_user_i_ds": "[42,43]",
+        "approvals_whitelist_team_i_ds": "null",
+        "required_approvals": 2,
+        "block_on_rejected_reviews": 1,
+        "block_on_official_review_requests": 1,
+        "block_on_outdated_branch": 1,
+        "dismiss_stale_approvals": 1,
+        "ignore_stale_approvals": 0,
+        "require_signed_commits": 0,
+        "protected_file_patterns": "",
+        "unprotected_file_patterns": "",
+        "created_unix": 1,
+        "updated_unix": 10,
+    }
+
+
+def owner_row() -> dict:
+    row = legacy_row()
+    row.update(
+        {
+            "approvals_whitelist_user_i_ds": "[2]",
+            "required_approvals": 1,
+            "enable_status_check": 1,
+            "status_check_contexts": json.dumps(sorted(MACHINE_CONTEXTS), separators=(",", ":")),
+            "updated_unix": 11,
+        }
+    )
+    return row
+
+
+def git_output(git_dir: Path, *args: str, stdin: str | None = None) -> str:
+    return subprocess.run(
+        ["git", f"--git-dir={git_dir}", *args], input=stdin, text=True,
+        capture_output=True, check=True,
+        env={
+            **__import__("os").environ,
+            "GIT_AUTHOR_NAME": "Test", "GIT_AUTHOR_EMAIL": "test@example.invalid",
+            "GIT_COMMITTER_NAME": "Test", "GIT_COMMITTER_EMAIL": "test@example.invalid",
+        },
+    ).stdout.strip()
+
+
+def commit_files(
+    git_dir: Path, files: dict[str, str], message: str, *, parent: str | None = None
+) -> tuple[str, str]:
+    root: dict[str, object] = {}
+    for path, raw in files.items():
+        node = root
+        parts = path.split("/")
+        for directory in parts[:-1]:
+            node = node.setdefault(directory, {})  # type: ignore[assignment]
+        node[parts[-1]] = git_output(git_dir, "hash-object", "-w", "--stdin", stdin=raw)
+
+    def build_tree(node: dict[str, object]) -> str:
+        lines = []
+        for name in sorted(node):
+            value = node[name]
+            if isinstance(value, dict):
+                lines.append(f"040000 tree {build_tree(value)}\t{name}")
+            else:
+                lines.append(f"100644 blob {value}\t{name}")
+        return git_output(git_dir, "mktree", stdin="\n".join(lines) + "\n")
+
+    tree = build_tree(root)
+    args = ["commit-tree", tree]
+    if parent is not None:
+        args.extend(("-p", parent))
+    return git_output(git_dir, *args, stdin=message + "\n"), tree
+
+
+def evidence_fixture(tmp_path: Path, execution_binding: dict) -> dict:
+    git_dir = tmp_path / "evidence.git"
+    subprocess.run(["git", "init", "--bare", str(git_dir)], capture_output=True, check=True)
+    package_root = Path(activation_module.__file__).resolve().parent
+    source_files: dict[str, str] = {}
+    runtime_sources = []
+    for name in (
+        "activation.py", "gitea_protected_branch.py", "journal.py",
+        "state_machine.py", "validator.py",
+    ):
+        source = package_root / name
+        raw = source.read_text(encoding="utf-8")
+        git_path = (
+            "services/aios-single-owner-governance/"
+            f"aios_single_owner_governance/{name}"
+        )
+        source_files[git_path] = raw
+        runtime_sources.append({
+            "git_path": git_path,
+            "runtime_path": str(source.resolve()),
+            "sha256": hashlib.sha256(source.read_bytes()).hexdigest(),
+        })
+    implementation_oid, implementation_tree = commit_files(
+        git_dir, source_files, "implementation"
+    )
+    closure_path = "evidence/live-activation-closure.json"
+    closure_raw = '{"result":"PASS"}\n'
+    closure_oid, _ = commit_files(
+        git_dir, {**source_files, closure_path: closure_raw},
+        "closure", parent=implementation_oid
+    )
+    closure_sha = hashlib.sha256(closure_raw.encode()).hexdigest()
+    entities = {}
+    for name, raw in {
+        "artifact": b"approved-artifact\n",
+        "rollback_artifact": b"approved-rollback\n",
+        "test_evidence": b"approved-tests\n",
+    }.items():
+        path = tmp_path / "artifacts" / f"{name}.bin"
+        path.parent.mkdir(exist_ok=True)
+        path.write_bytes(raw)
+        entities[f"{name}_path"] = str(path.resolve())
+        entities[f"{name}_sha256"] = hashlib.sha256(raw).hexdigest()
+    head_oid = git_output(git_dir, "hash-object", "-w", "--stdin", stdin="head\n")
+    expiry = datetime.now(timezone.utc) + timedelta(hours=1)
+    producer_id = 99
+    producer_name = "trusted-machine-producer"
+    execution_binding = {
+        **execution_binding,
+        "evidence_closure_oid": closure_oid,
+        "evidence_closure_path": closure_path,
+        "evidence_closure_sha256": closure_sha,
+        "implementation_commit_oid": implementation_oid,
+        "implementation_tree_oid": implementation_tree,
+        "runtime_sources": runtime_sources,
+        "machine_status_producer_id": producer_id,
+        "machine_status_producer_name": producer_name,
+        **entities,
+    }
+    manifest = {
+        "approval_type": "SINGLE_OWNER_GOVERNANCE_LIVE_ACTIVATION_IMPLEMENTATION_AND_EXECUTION",
+        "expires_at": expiry.isoformat().replace("+00:00", "Z"),
+        "execution_binding": execution_binding,
+        "execution_binding_sha256": sha256_json(execution_binding),
+        **{key: execution_binding[key] for key in (
+            "implementation_commit_oid", "implementation_tree_oid", "runtime_sources",
+            "artifact_path", "artifact_sha256", "rollback_artifact_path",
+            "rollback_artifact_sha256", "test_evidence_path", "test_evidence_sha256",
+            "evidence_closure_oid", "evidence_closure_path", "evidence_closure_sha256",
+            "machine_status_producer_id", "machine_status_producer_name",
+        )},
+    }
+    manifest_raw = json.dumps(manifest, sort_keys=True, separators=(",", ":")) + "\n"
+    manifest_blob = git_output(git_dir, "hash-object", "-w", "--stdin", stdin=manifest_raw)
+    leaf = git_output(git_dir, "mktree", stdin=f"100644 blob {manifest_blob}\tactivation.json\n")
+    approvals = git_output(git_dir, "mktree", stdin=f"040000 tree {leaf}\tsingle-owner\n")
+    tree = git_output(git_dir, "mktree", stdin=f"040000 tree {approvals}\tapprovals\n")
+    merge_oid = git_output(git_dir, "commit-tree", tree, stdin="approved\n")
+    git_output(git_dir, "update-ref", "refs/heads/governance/approvals", merge_oid)
+
+    db = tmp_path / "approval.db"
+    with sqlite3.connect(db) as connection:
+        connection.executescript(
+            "CREATE TABLE issue(id INTEGER,repo_id INTEGER,is_closed INTEGER);"
+            "CREATE TABLE pull_request(issue_id INTEGER,\"index\" INTEGER,base_branch TEXT,has_merged INTEGER,merged_commit_id TEXT,merged_unix INTEGER);"
+            "CREATE TABLE user(id INTEGER,lower_name TEXT);"
+            "CREATE TABLE review(id INTEGER,type INTEGER,reviewer_id INTEGER,issue_id INTEGER,commit_id TEXT,stale INTEGER,dismissed INTEGER,created_unix INTEGER);"
+            "CREATE TABLE commit_status(id INTEGER,repo_id INTEGER,state TEXT,sha TEXT,context TEXT,creator_id INTEGER);"
+        )
+        connection.execute("INSERT INTO issue VALUES(10,1,1)")
+        merged_unix = int(datetime.now(timezone.utc).timestamp())
+        connection.execute("INSERT INTO pull_request VALUES(10,31,'governance/approvals',1,?,?)", (merge_oid, merged_unix))
+        connection.execute("INSERT INTO user VALUES(2,'owner')")
+        connection.execute("INSERT INTO user VALUES(?,?)", (producer_id, producer_name))
+        connection.execute(
+            "INSERT INTO review VALUES(52,1,2,10,?,0,0,?)",
+            (head_oid, int(datetime.now(timezone.utc).timestamp())),
+        )
+        machine_checks = {}
+        for index, context in enumerate(sorted(MACHINE_CONTEXTS), 101):
+            connection.execute(
+                "INSERT INTO commit_status VALUES(?,1,'success',?,?,?)",
+                (index, head_oid, context, producer_id),
+            )
+            machine_checks[context] = {
+                "state": "success", "head_oid": head_oid, "status_id": index,
+                "creator_id": producer_id, "creator_login": producer_name,
+            }
+    return {
+        "git_dir": git_dir, "merge_oid": merge_oid, "closure_oid": closure_oid,
+        "head_oid": head_oid, "db": db, "expiry": expiry.isoformat().replace("+00:00", "Z"),
+        "manifest_path": "approvals/single-owner/activation.json",
+        "manifest_blob": manifest_blob,
+        "manifest_sha256": hashlib.sha256(manifest_raw.encode()).hexdigest(),
+        "execution_binding": execution_binding,
+        "machine_checks": machine_checks,
+        **execution_binding,
+    }
+
+
+def bindings(tmp_path: Path, adapter: FileProtectedBranchAdapter, **overrides) -> dict:
+    validator_path = Path(validator_module.__file__).resolve()
+    state_machine_path = Path(state_machine_module.__file__).resolve()
+    validator_sha = hashlib.sha256(validator_path.read_bytes()).hexdigest()
+    state_machine_sha = hashlib.sha256(state_machine_path.read_bytes()).hexdigest()
+    execution_binding = {
+        "task_id": "AIOS-LIVE-ACTIVATION-TEST",
+        "operation_id": "op-live-001",
+        "expected_validator_sha256": validator_sha,
+        "expected_state_machine_sha256": state_machine_sha,
+        "expected_branch_protection_sha256": adapter.calculate_snapshot_sha256(legacy_row()),
+        "expected_gitea_schema_sha256": "0" * 64,
+        "target_branch_protection_sha256": calculate_snapshot_sha256(owner_row()),
+        "backend": "file",
+        "repo_id": 1,
+        "branch": "governance/approvals",
+        "requester": "agent",
+        "executor": "activation-executor",
+        "forbidden_operations": {
+            "main": False, "governance_direct": False, "integration": False,
+            "tags": False, "force_push": False,
+        },
+    }
+    evidence = evidence_fixture(tmp_path, execution_binding)
+    value = {
+        "task_id": "AIOS-LIVE-ACTIVATION-TEST",
+        "operation_id": "op-live-001",
+        "expected_governance_oid": evidence["merge_oid"],
+        "observed_governance_oid": evidence["merge_oid"],
+        "expected_validator_sha256": validator_sha,
+        "observed_validator_sha256": validator_sha,
+        "expected_state_machine_sha256": state_machine_sha,
+        "observed_state_machine_sha256": state_machine_sha,
+        "validator_path": str(validator_path),
+        "state_machine_path": str(state_machine_path),
+        "governance_git_dir": str(evidence["git_dir"].resolve()),
+        "governance_ref": "refs/heads/governance/approvals",
+        "evidence_git_dir": str(evidence["git_dir"].resolve()),
+        "approval_db_path": str(evidence["db"].resolve()),
+        "expected_branch_protection_sha256": adapter.calculate_snapshot_sha256(legacy_row()),
+        "activation_approval_merge_oid": evidence["merge_oid"],
+        "approval_request_head_oid": evidence["head_oid"],
+        "activation_approval_pr_number": 31,
+        "activation_manifest_path": evidence["manifest_path"],
+        "activation_manifest_blob_oid": evidence["manifest_blob"],
+        "activation_manifest_sha256": evidence["manifest_sha256"],
+        "expires_at": evidence["expiry"],
+        "evidence_closure_oid": evidence["closure_oid"],
+        "observed_evidence_closure_oid": evidence["closure_oid"],
+        **{key: evidence[key] for key in (
+            "implementation_commit_oid", "implementation_tree_oid", "runtime_sources",
+            "artifact_path", "artifact_sha256", "rollback_artifact_path",
+            "rollback_artifact_sha256", "test_evidence_path", "test_evidence_sha256",
+            "evidence_closure_path", "evidence_closure_sha256",
+            "machine_status_producer_id", "machine_status_producer_name",
+        )},
+        "owner_review_oid": 52,
+        "observed_owner_review_oid": 52,
+        "requester": "agent",
+        "executor": "activation-executor",
+        "wip": False,
+        "machine_checks": evidence["machine_checks"],
+        "forbidden_operations": {
+            "main": False,
+            "governance_direct": False,
+            "integration": False,
+            "tags": False,
+            "force_push": False,
+        },
+        "target_branch_protection": owner_row(),
+        "backend": "file",
+        "backend_path": str(adapter.path.resolve()),
+        "repo_id": 1,
+        "branch": "governance/approvals",
+        "expected_gitea_schema_sha256": "0" * 64,
+    }
+    value.update(overrides)
+    return value
+
+
+def harness(tmp_path: Path):
+    backend = tmp_path / "protected.json"
+    write_json(backend, legacy_row())
+    adapter = FileProtectedBranchAdapter(backend)
+    engine = ActivationEngine(adapter, tmp_path / "state", tmp_path / "run" / "activation.lock")
+    request = bindings(tmp_path, adapter)
+    return backend, adapter, engine, request
+
+
+def test_live_plan_success(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    result = engine.plan(request)
+    assert result["status"] == "PLAN_READY"
+    assert len(result["plan_id"]) == 64
+
+
+def test_activation_bindings_schema_matches_runtime_contract(tmp_path: Path) -> None:
+    _, _, _, request = harness(tmp_path)
+    schema_path = Path(activation_module.__file__).resolve().parents[1] / "activation-bindings.schema.json"
+    schema = json.loads(schema_path.read_text(encoding="utf-8"))
+    Draft202012Validator.check_schema(schema)
+    validator = Draft202012Validator(schema)
+    validator.validate(request)
+    invalid = json.loads(json.dumps(request))
+    invalid["machine_checks"][sorted(MACHINE_CONTEXTS)[0]]["status_id"] = 0
+    with pytest.raises(ValidationError):
+        validator.validate(invalid)
+
+
+def test_runtime_source_must_be_actual_loaded_module_not_decoy(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    source = Path(request["runtime_sources"][0]["runtime_path"])
+    decoy = tmp_path / "decoy.py"
+    decoy.write_bytes(source.read_bytes())
+    request["runtime_sources"][0]["runtime_path"] = str(decoy.resolve())
+    with pytest.raises(RuntimeError, match="RUNTIME_SOURCE_PATH_MISMATCH"):
+        _verify_approved_entities(request, Path(request["evidence_git_dir"]))
+
+
+@pytest.mark.parametrize("path_field", ["artifact_path", "rollback_artifact_path", "test_evidence_path"])
+def test_approved_entity_digest_is_enforced(tmp_path: Path, path_field: str) -> None:
+    _, _, engine, request = harness(tmp_path)
+    Path(request[path_field]).write_bytes(b"tampered\n")
+    with pytest.raises(RuntimeError, match="APPROVED_ENTITY_DIGEST_MISMATCH"):
+        engine.plan(request)
+
+
+def test_evidence_closure_must_be_direct_child_commit(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    git_dir = Path(request["evidence_git_dir"])
+    unrelated, _ = commit_files(
+        git_dir,
+        {request["evidence_closure_path"]: '{"result":"PASS"}\n'},
+        "unrelated",
+    )
+    request["evidence_closure_oid"] = unrelated
+    request["observed_evidence_closure_oid"] = unrelated
+    with pytest.raises(RuntimeError, match="APPROVED_EXECUTION_BINDING_MISMATCH"):
+        engine.plan(request)
+
+
+def test_pr_merge_after_expiry_is_denied(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    with sqlite3.connect(request["approval_db_path"]) as connection:
+        connection.execute(
+            "UPDATE pull_request SET merged_unix=?",
+            (int(_parse_test_utc(request["expires_at"]).timestamp()) + 1,),
+        )
+    with pytest.raises(RuntimeError, match="ACTIVATION_APPROVAL_MERGED_AFTER_EXPIRY"):
+        engine.plan(request)
+
+
+def _parse_test_utc(value: str) -> datetime:
+    return datetime.fromisoformat(value.replace("Z", "+00:00"))
+
+
+def test_machine_status_must_match_bound_producer_and_observed_row(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    context = sorted(MACHINE_CONTEXTS)[0]
+    request["machine_checks"][context]["status_id"] += 1000
+    with pytest.raises(RuntimeError, match="MACHINE_GATE_BINDING_MISMATCH"):
+        engine.plan(request)
+
+
+def test_latest_machine_status_from_unapproved_producer_is_denied(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    context = sorted(MACHINE_CONTEXTS)[0]
+    with sqlite3.connect(request["approval_db_path"]) as connection:
+        connection.execute("INSERT INTO user VALUES(100,'untrusted-producer')")
+        connection.execute(
+            "INSERT INTO commit_status VALUES(999,1,'success',?,?,100)",
+            (request["approval_request_head_oid"], context),
+        )
+    with pytest.raises(RuntimeError, match="MACHINE_GATE_PRODUCER_MISMATCH"):
+        engine.plan(request)
+
+
+def test_live_activate_verify_status_success(tmp_path: Path) -> None:
+    _, adapter, engine, request = harness(tmp_path)
+    planned = engine.plan(request)
+    activated = engine.activate(request, planned["plan_id"])
+    assert activated["status"] == "ACTIVATED"
+    assert adapter.read_current() == owner_row()
+    assert engine.verify(request, request["operation_id"])["status"] == "VERIFIED"
+    assert engine.status(request["operation_id"])["transaction"]["phase"] == "COMMITTED"
+    assert (engine.journal.root / "current-snapshot.json").exists()
+    assert (engine.journal.root / "rollback-snapshot.json").exists()
+
+
+def test_live_rollback_success(tmp_path: Path) -> None:
+    _, adapter, engine, request = harness(tmp_path)
+    planned = engine.plan(request)
+    engine.activate(request, planned["plan_id"])
+    assert engine.rollback(request, request["operation_id"], planned["plan_id"])["status"] == "ROLLED_BACK"
+    assert adapter.read_current() == legacy_row()
+    assert engine.rollback(request, request["operation_id"], planned["plan_id"])["status"] == "ALREADY_ROLLED_BACK"
+
+
+def test_terminal_rollback_cannot_be_reactivated(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    planned = engine.plan(request)
+    engine.activate(request, planned["plan_id"])
+    engine.rollback(request, request["operation_id"], planned["plan_id"])
+    with pytest.raises(RuntimeError, match="OPERATION_TERMINAL_ROLLED_BACK"):
+        engine.activate(request, planned["plan_id"])
+
+
+def test_verify_and_rollback_remain_available_after_approval_expiry(
+    tmp_path: Path, monkeypatch
+) -> None:
+    _, adapter, engine, request = harness(tmp_path)
+    planned = engine.plan(request)
+    engine.activate(request, planned["plan_id"])
+    future = datetime.now(timezone.utc) + timedelta(hours=2)
+
+    class FutureDateTime(datetime):
+        @classmethod
+        def now(cls, tz=None):
+            return future if tz is not None else future.replace(tzinfo=None)
+
+    monkeypatch.setattr(activation_module, "datetime", FutureDateTime)
+    assert engine.verify(request, request["operation_id"])["status"] == "VERIFIED"
+    assert engine.rollback(request, request["operation_id"], planned["plan_id"])["status"] == "ROLLED_BACK"
+    assert adapter.read_current() == legacy_row()
+
+
+def test_prepared_crash_can_recover_after_approval_expiry(tmp_path: Path, monkeypatch) -> None:
+    _, adapter, engine, request = harness(tmp_path)
+    request["crash_at"] = "before_apply"
+    planned = engine.plan(request)
+    with pytest.raises(InjectedCrash):
+        engine.activate(request, planned["plan_id"])
+    request.pop("crash_at")
+    future = datetime.now(timezone.utc) + timedelta(hours=2)
+
+    class FutureDateTime(datetime):
+        @classmethod
+        def now(cls, tz=None):
+            return future if tz is not None else future.replace(tzinfo=None)
+
+    monkeypatch.setattr(activation_module, "datetime", FutureDateTime)
+    assert engine.activate(request, planned["plan_id"])["status"] == "ACTIVATED"
+    assert adapter.read_current() == owner_row()
+
+
+def test_fresh_activation_rechecks_expiry_at_prepared_boundary(
+    tmp_path: Path, monkeypatch
+) -> None:
+    _, adapter, engine, request = harness(tmp_path)
+    planned = engine.plan(request)
+    expiry = _parse_test_utc(request["expires_at"])
+    moments = iter((
+        expiry - timedelta(seconds=2),
+        expiry - timedelta(seconds=1),
+        expiry + timedelta(seconds=1),
+    ))
+    monkeypatch.setattr(activation_module, "_utc_now", lambda: next(moments))
+    with pytest.raises(RuntimeError, match="APPROVAL_EXPIRED"):
+        engine.activate(request, planned["plan_id"])
+    assert adapter.read_current() == legacy_row()
+    assert engine.journal.load(request["operation_id"]) is None
+
+
+def test_fresh_activation_rejects_snapshot_drift_at_prepared_boundary(
+    tmp_path: Path, monkeypatch
+) -> None:
+    _, adapter, engine, request = harness(tmp_path)
+    planned = engine.plan(request)
+    original_read = adapter.read_current
+    reads = 0
+
+    def drifting_read() -> dict:
+        nonlocal reads
+        reads += 1
+        if reads == 2:
+            drifted = original_read()
+            drifted["can_push"] = 1
+            drifted["updated_unix"] = 777
+            return drifted
+        return original_read()
+
+    monkeypatch.setattr(adapter, "read_current", drifting_read)
+    with pytest.raises(CASConflict, match="PREPARED_BOUNDARY_SNAPSHOT_CHANGED"):
+        engine.activate(request, planned["plan_id"])
+    assert original_read() == legacy_row()
+    assert engine.journal.load(request["operation_id"]) is None
+
+
+def test_rollback_uses_durable_authorization_after_live_status_rerun(tmp_path: Path) -> None:
+    _, adapter, engine, request = harness(tmp_path)
+    planned = engine.plan(request)
+    engine.activate(request, planned["plan_id"])
+    context = sorted(MACHINE_CONTEXTS)[0]
+    with sqlite3.connect(request["approval_db_path"]) as connection:
+        connection.execute(
+            "INSERT INTO commit_status VALUES(999,1,'success',?,?,?)",
+            (
+                request["approval_request_head_oid"], context,
+                request["machine_status_producer_id"],
+            ),
+        )
+    result = engine.rollback(request, request["operation_id"], planned["plan_id"])
+    assert result["status"] == "ROLLED_BACK"
+    assert adapter.read_current() == legacy_row()
+
+
+def test_missing_approval_denied(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    request.pop("owner_review_oid")
+    with pytest.raises(RuntimeError, match="MISSING_BINDINGS"):
+        engine.plan(request)
+
+
+@pytest.mark.parametrize(
+    ("field", "value", "message"),
+    [
+        ("observed_owner_review_oid", 99, "WRONG_APPROVAL_OID_DENIED"),
+        ("observed_governance_oid", "f" * 40, "WRONG_GOVERNANCE_OID_DENIED"),
+        ("observed_evidence_closure_oid", "f" * 40, "WRONG_EVIDENCE_CLOSURE_DENIED"),
+    ],
+)
+def test_wrong_binding_denied(tmp_path: Path, field: str, value: object, message: str) -> None:
+    _, _, engine, request = harness(tmp_path)
+    request[field] = value
+    with pytest.raises(RuntimeError, match=message):
+        engine.plan(request)
+
+
+def test_cas_conflict_denied(tmp_path: Path) -> None:
+    backend, _, engine, request = harness(tmp_path)
+    planned = engine.plan(request)
+    changed = legacy_row()
+    changed["updated_unix"] = 12
+    write_json(backend, changed)
+    with pytest.raises(CASConflict):
+        engine.activate(request, planned["plan_id"])
+
+
+@pytest.mark.parametrize("crash_at", ["before_apply", "during_apply", "after_apply_before_receipt", "after_commit_wal"])
+def test_process_crash_restart_recovery(tmp_path: Path, crash_at: str) -> None:
+    _, adapter, engine, request = harness(tmp_path)
+    request["crash_at"] = crash_at
+    planned = engine.plan(request)
+    with pytest.raises(InjectedCrash):
+        engine.activate(request, planned["plan_id"])
+    request.pop("crash_at")
+    result = engine.activate(request, planned["plan_id"])
+    expected_status = "ALREADY_COMMITTED" if crash_at == "after_commit_wal" else "ACTIVATED"
+    assert result["status"] == expected_status
+    assert adapter.read_current() == owner_row()
+    assert engine.journal.receipt_path(request["operation_id"]).exists()
+    assert engine.journal.audit.has_event(request["operation_id"], "SINGLE_OWNER_ACTIVATION_COMMITTED")
+
+
+def test_post_activation_verify_failure_rolls_back(tmp_path: Path, monkeypatch) -> None:
+    _, adapter, engine, request = harness(tmp_path)
+    planned = engine.plan(request)
+    monkeypatch.setattr(adapter, "verify_applied", lambda _: False)
+    with pytest.raises(RuntimeError, match="POST_ACTIVATION_VERIFY_FAILED"):
+        engine.activate(request, planned["plan_id"])
+    assert adapter.read_current() == legacy_row()
+    assert engine.journal.load(request["operation_id"])["phase"] == "ROLLED_BACK"
+
+
+def test_operation_id_idempotency(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    planned = engine.plan(request)
+    engine.activate(request, planned["plan_id"])
+    assert engine.activate(request, planned["plan_id"])["status"] == "ALREADY_COMMITTED"
+
+
+@pytest.mark.parametrize("crash_at", ["after_rollback_cas", "after_rollback_wal"])
+def test_rollback_crash_restart_repairs_closure(tmp_path: Path, crash_at: str) -> None:
+    _, adapter, engine, request = harness(tmp_path)
+    planned = engine.plan(request)
+    engine.activate(request, planned["plan_id"])
+    request["crash_at"] = crash_at
+    with pytest.raises(InjectedCrash):
+        engine.rollback(request, request["operation_id"], planned["plan_id"])
+    request.pop("crash_at")
+    assert engine.rollback(request, request["operation_id"], planned["plan_id"])["status"] == "ALREADY_ROLLED_BACK"
+    assert adapter.read_current() == legacy_row()
+    assert engine.journal.receipt_path(request["operation_id"]).exists()
+    assert engine.journal.audit.has_event(request["operation_id"], "ACTIVATION_ROLLED_BACK")
+
+
+def test_operation_id_payload_mismatch_denied(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    planned = engine.plan(request)
+    engine.activate(request, planned["plan_id"])
+    changed = dict(request)
+    approval_alias = tmp_path / "approval-alias.db"
+    os.link(request["approval_db_path"], approval_alias)
+    changed["approval_db_path"] = str(approval_alias)
+    with pytest.raises(RuntimeError, match="PAYLOAD_MISMATCH"):
+        engine.activate(changed, planned["plan_id"])
+
+
+@pytest.mark.parametrize(
+    ("field", "value"),
+    [("operation_id", "op-live-REPLAY"), ("task_id", "REPLAY-TASK")],
+)
+def test_approved_execution_binding_replay_denied(tmp_path: Path, field: str, value: str) -> None:
+    _, _, engine, request = harness(tmp_path)
+    request[field] = value
+    with pytest.raises(RuntimeError, match="APPROVED_EXECUTION_BINDING_MISMATCH"):
+        engine.plan(request)
+
+
+def test_expiry_must_come_from_approved_manifest(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    request["expires_at"] = (datetime.now(timezone.utc) + timedelta(hours=12)).isoformat().replace("+00:00", "Z")
+    with pytest.raises(RuntimeError, match="APPROVAL_EXPIRY_BINDING_MISMATCH"):
+        engine.plan(request)
+
+
+def test_target_snapshot_must_match_approved_manifest(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    request["target_branch_protection"] = {**owner_row(), "updated_unix": 99}
+    with pytest.raises(RuntimeError, match="APPROVED_EXECUTION_BINDING_MISMATCH"):
+        engine.plan(request)
+
+
+def test_approval_database_must_be_backend_database(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    other_db = tmp_path / "other.db"
+    other_db.write_bytes(Path(request["approval_db_path"]).read_bytes())
+    request.update(backend="sqlite", backend_path=str(other_db.resolve()))
+    with pytest.raises(RuntimeError, match="APPROVAL_DB_BACKEND_DB_IDENTITY_MISMATCH"):
+        engine.plan(request)
+
+
+def test_audit_chain_continuity_and_credential_redaction(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    request["api_token"] = "must-not-appear"
+    planned = engine.plan(request)
+    engine.activate(request, planned["plan_id"])
+    assert len(engine.journal.audit.verify()) == 64
+    raw = (engine.journal.root / "audit.jsonl").read_text(encoding="utf-8")
+    assert "must-not-appear" not in raw
+    assert "[REDACTED]" not in raw  # only hashes/events are persisted to audit
+
+
+@pytest.mark.parametrize(
+    "mutation",
+    [
+        lambda request: request.update(requester="owner"),
+        lambda request: request.update(executor="owner"),
+        lambda request: request.update(wip=True),
+        lambda request: request.update(machine_checks={"anything": {"state": "success", "head_oid": request["approval_request_head_oid"]}}),
+        lambda request: request.update(forbidden_operations={"main": True}),
+        lambda request: request.update(forbidden_operations={"tags": True}),
+        lambda request: request.update(forbidden_operations={"force_push": True}),
+    ],
+)
+def test_negative_governance_acceptance(tmp_path: Path, mutation) -> None:
+    _, _, engine, request = harness(tmp_path)
+    mutation(request)
+    with pytest.raises(RuntimeError):
+        engine.plan(request)
+
+
+@pytest.mark.parametrize(
+    "mutation",
+    [
+        lambda target: target.update(enable_approvals_whitelist=0),
+        lambda target: target.update(enable_merge_whitelist=0),
+        lambda target: target.update(status_check_contexts="[]"),
+    ],
+)
+def test_unsafe_policy_enable_fields_denied(tmp_path: Path, mutation) -> None:
+    _, _, _, request = harness(tmp_path)
+    mutation(request["target_branch_protection"])
+    with pytest.raises(UnsafePolicy):
+        validate_target(legacy_row(), request["target_branch_protection"])
+
+
+@pytest.mark.parametrize("invalid_owner", ["codex", "gpt"])
+def test_owner_review_must_come_from_gitea_database(tmp_path: Path, invalid_owner: str) -> None:
+    _, _, engine, request = harness(tmp_path)
+    with sqlite3.connect(request["approval_db_path"]) as connection:
+        connection.execute("UPDATE user SET lower_name=? WHERE id=2", (invalid_owner,))
+    with pytest.raises(RuntimeError, match="OWNER_APPROVAL_INVALID"):
+        engine.plan(request)
+
+
+def test_stale_owner_review_denied_from_gitea_database(tmp_path: Path) -> None:
+    _, _, engine, request = harness(tmp_path)
+    with sqlite3.connect(request["approval_db_path"]) as connection:
+        connection.execute("UPDATE review SET stale=1 WHERE id=52")
+    with pytest.raises(RuntimeError, match="OWNER_APPROVAL_INVALID"):
+        engine.plan(request)
+
+
+def create_sqlite_fixture(path: Path) -> None:
+    row = legacy_row()
+    columns = []
+    for key, value in row.items():
+        kind = "INTEGER" if isinstance(value, int) else "TEXT"
+        columns.append(f"{key} {kind}")
+    with sqlite3.connect(path) as connection:
+        connection.execute(f"CREATE TABLE protected_branch ({','.join(columns)})")
+        connection.execute(
+            f"INSERT INTO protected_branch ({','.join(row)}) VALUES ({','.join('?' for _ in row)})",
+            list(row.values()),
+        )
+
+
+def test_sqlite_full_row_cas_and_rollback(tmp_path: Path) -> None:
+    db = tmp_path / "gitea.db"
+    create_sqlite_fixture(db)
+    probe = SQLiteProtectedBranchAdapter(db, expected_schema_sha256="0" * 64)
+    adapter = SQLiteProtectedBranchAdapter(db, expected_schema_sha256=probe.schema_sha256())
+    previous = adapter.read_current()
+    applied = adapter.apply_atomic(calculate_snapshot_sha256(previous), owner_row())
+    assert applied == owner_row()
+    restored = adapter.rollback_atomic(calculate_snapshot_sha256(applied), previous)
+    assert restored == previous
@@ -0,0 +1,126 @@
+from __future__ import annotations
+
+from pathlib import Path
+import tempfile
+import unittest
+
+from aios_single_owner_governance.fixture import DisposableGiteaFixture
+from aios_single_owner_governance.lock import MaintenanceLock
+from aios_single_owner_governance.models import GovernanceState
+from aios_single_owner_governance.protection import (
+    BranchProtectionCASMigrationAdapter,
+    CASConflict,
+    MemoryProtectionStore,
+    snapshot_sha256,
+)
+from aios_single_owner_governance.rollback import (
+    ProtectionCompensationSaga,
+    RollbackConfigurationManager,
+)
+from aios_single_owner_governance.state_machine import GovernanceStateMachine, InvalidTransition
+
+from .helpers import legacy_protection, single_owner_protection
+from .helpers import context
+from aios_single_owner_governance.validator import SingleOwnerApprovalValidator, ValidationDenied
+
+
+class StateCasRollbackTests(unittest.TestCase):
+    def test_ordinary_owner_approved_merge_simulation(self):
+        result = SingleOwnerApprovalValidator().validate(context())
+        self.assertEqual(result.owner_review.reviewer, "owner")
+        machine = GovernanceStateMachine()
+        for target in (
+            GovernanceState.OWNER_APPROVAL_VERIFIED,
+            GovernanceState.MACHINE_GATES_VERIFIED,
+            GovernanceState.AUTO_MERGE_READY,
+            GovernanceState.OWNER_APPROVED_EXECUTION_READY,
+        ):
+            machine.transition(target)
+        self.assertEqual(machine.state, GovernanceState.OWNER_APPROVED_EXECUTION_READY)
+
+    def test_validator_failure_is_stateless_and_recoverable(self):
+        validator = SingleOwnerApprovalValidator()
+        with self.assertRaises(ValidationDenied):
+            validator.validate(context(wip=True))
+        self.assertEqual(validator.validate(context()).owner_review.reviewer, "owner")
+
+    def test_state_machine_happy_path_and_restart_recovery(self):
+        machine = GovernanceStateMachine()
+        for target in (
+            GovernanceState.OWNER_APPROVAL_VERIFIED,
+            GovernanceState.MACHINE_GATES_VERIFIED,
+            GovernanceState.AUTO_MERGE_READY,
+            GovernanceState.OWNER_APPROVED_EXECUTION_READY,
+        ):
+            machine.transition(target)
+        restarted = GovernanceStateMachine(machine.state)
+        self.assertEqual(restarted.state, GovernanceState.OWNER_APPROVED_EXECUTION_READY)
+
+    def test_state_machine_rollback_to_checkpoint(self):
+        machine = GovernanceStateMachine()
+        machine.transition(GovernanceState.OWNER_APPROVAL_VERIFIED)
+        checkpoint = machine.state
+        machine.transition(GovernanceState.MACHINE_GATES_VERIFIED)
+        machine.restore(checkpoint)
+        self.assertEqual(machine.state, GovernanceState.OWNER_APPROVAL_VERIFIED)
+
+    def test_service_restart_from_each_checkpoint(self):
+        with tempfile.TemporaryDirectory(prefix="aios-governance-fixture-") as root:
+            checkpoint = Path(root) / "state.json"
+            for state in GovernanceState:
+                with self.subTest(state=state):
+                    GovernanceStateMachine(state).save_fixture(checkpoint)
+                    restarted = GovernanceStateMachine.load_fixture(checkpoint)
+                    self.assertEqual(restarted.state, state)
+
+    def test_invalid_transition_denied(self):
+        with self.assertRaises(InvalidTransition):
+            GovernanceStateMachine().transition(GovernanceState.AUTO_MERGE_READY)
+
+    def test_branch_protection_cas_success_and_rollback(self):
+        adapter = BranchProtectionCASMigrationAdapter()
+        old, new = legacy_protection(), single_owner_protection()
+        plan = adapter.plan(old, new, snapshot_sha256(old))
+        store = MemoryProtectionStore(old)
+        self.assertEqual(adapter.apply_fixture(store, plan), new)
+        self.assertEqual(adapter.rollback_fixture(store, plan), old)
+
+    def test_branch_protection_cas_conflict_fails_closed(self):
+        adapter = BranchProtectionCASMigrationAdapter()
+        old, changed, new = legacy_protection(), legacy_protection(7), single_owner_protection()
+        plan = adapter.plan(old, new, snapshot_sha256(old))
+        store = MemoryProtectionStore(changed)
+        with self.assertRaises(CASConflict):
+            adapter.apply_fixture(store, plan)
+
+    def test_partial_activation_recovery_saga(self):
+        adapter = BranchProtectionCASMigrationAdapter()
+        old, new = legacy_protection(), single_owner_protection()
+        plan = adapter.plan(old, new, snapshot_sha256(old))
+        saga = ProtectionCompensationSaga(adapter, MemoryProtectionStore(old), plan)
+        saga.execute_fixture()
+        self.assertEqual(saga.compensate_fixture(), old)
+        self.assertTrue(saga.applied and saga.rolled_back)
+
+    def test_rollback_configuration_fixture_install(self):
+        adapter = BranchProtectionCASMigrationAdapter()
+        old, new = legacy_protection(), single_owner_protection()
+        plan = adapter.plan(old, new, snapshot_sha256(old))
+        manager = RollbackConfigurationManager()
+        config = manager.build(plan)
+        with DisposableGiteaFixture(old) as fixture:
+            path = manager.install_fixture(fixture.root, config)
+            self.assertTrue(path.exists())
+            self.assertTrue(manager.verify(config, plan))
+
+    def test_maintenance_lock_fences_concurrent_holder(self):
+        with tempfile.TemporaryDirectory(prefix="aios-governance-fixture-") as root:
+            path = Path(root) / "maintenance.lock"
+            with MaintenanceLock(path):
+                with self.assertRaises(BlockingIOError):
+                    with MaintenanceLock(path):
+                        pass
+
+
+if __name__ == "__main__":
+    unittest.main()
@@ -0,0 +1,45 @@
+from __future__ import annotations
+
+from pathlib import Path
+import unittest
+
+
+ROOT = Path(__file__).resolve().parents[2]
+
+
+class SystemdContractTests(unittest.TestCase):
+    def test_units_are_static_dormant_and_credential_free(self):
+        units = sorted(
+            unit for unit in (ROOT / "deploy" / "systemd").glob("aios-governance-*.service")
+            if unit.name != "aios-governance-single-owner-activation.service"
+        )
+        self.assertEqual(len(units), 2)
+        for unit in units:
+            text = unit.read_text(encoding="utf-8")
+            with self.subTest(unit=unit.name):
+                self.assertIn("AIOS_SINGLE_OWNER_GOVERNANCE_ENABLED=false", text)
+                self.assertIn("AIOS_SINGLE_OWNER_ACTIVATION_ACTIVE=false", text)
+                self.assertIn("AIOS_GITOPS_WRITES_ENABLED=false", text)
+                self.assertIn("ProtectSystem=strict", text)
+                self.assertNotIn("EnvironmentFile=", text)
+                self.assertNotIn("LoadCredential=", text)
+                self.assertNotIn("WantedBy=", text)
+                self.assertNotIn("[Install]", text)
+                self.assertIn("--checkpoint-dir /var/lib/aios-gitops/runtime/single-owner-governance", text)
+                self.assertNotIn("/data/aios-gitops/production", text)
+
+    def test_activation_verifier_is_static_and_has_no_credential_or_install_hook(self):
+        unit = ROOT / "deploy" / "systemd" / "aios-governance-single-owner-activation.service"
+        text = unit.read_text(encoding="utf-8")
+        self.assertIn("AIOS_GITOPS_WRITES_ENABLED=false", text)
+        self.assertIn("--verify", text)
+        self.assertIn("ProtectSystem=strict", text)
+        self.assertNotIn("EnvironmentFile=", text)
+        self.assertNotIn("LoadCredential=", text)
+        self.assertNotIn("WantedBy=", text)
+        self.assertNotIn("[Install]", text)
+        self.assertNotIn("--activate", text)
+
+
+if __name__ == "__main__":
+    unittest.main()
@@ -1,440 +0,0 @@
-from __future__ import annotations
-
-from datetime import datetime, timedelta, timezone
-import json
-from pathlib import Path
-import sys
-import subprocess
-import tempfile
-import unittest
-from unittest import mock
-import urllib.error
-
-
-ROOT = Path(__file__).resolve().parents[2]
-sys.path.insert(0, str(ROOT / "services" / "aios-single-owner-governance"))
-
-from aios_single_owner_governance.task_status_merge_broker import (  # noqa: E402
-    ALLOWED_CONTEXTS,
-    ContractDenied,
-    MergeBroker,
-    QuotaJournal,
-    StatusBroker,
-    TaskGrant,
-    _time,
-    _utc_timestamp,
-    canonical,
-    load_signed_task_grant,
-    read_runtime_secret,
-)
-from aios_single_owner_governance.task_credential_broker import TaskCredentialBroker  # noqa: E402
-from aios_single_owner_governance import task_credential_expiry_sweeper as sweeper  # noqa: E402
-
-
-HEAD = "d" * 40
-OLD_HEAD = "a8644fc172bd8ebbba17a16e6bf586c93fd1e793"
-BASE = "8814dff20222625b60454c613b61ccf15fa20e51"
-
-
-def grant() -> dict:
-    now = datetime.now(timezone.utc).replace(microsecond=0)
-    value = {
-        "schema_id": "AIOS_TASK_STATUS_MERGE_GRANT",
-        "schema_version": 1,
-        "repository": "aios/aios",
-        "pr_number": 36,
-        "base_oid": BASE,
-        "target_commit": HEAD,
-        "approved_tree_oid": "3649be2dac8fcea3a79cb1604b2cfb63f6cc0307",
-        "manifest_path": "approvals/release-campaign/AIOS-V2R1C4-PHASE-B-RENEWAL.json",
-        "manifest_blob_oid": "d6e4431992e4315799c7f0487f2b12a20d0e2890",
-        "manifest_sha256": "2555c5e37f77f1d0aac51864733b55ee3e91169ae76bf67e8817de6d1874eea4",
-        "payload_sha256": "4db7d3fd5aaa00a65eabfce7501f275b5f6c8a2587b6153fa8066ec0dafa5d6d",
-        "status_evidence_sha256": {context: "1" * 64 for context in ALLOWED_CONTEXTS},
-        "supersedes_pr_number": 36,
-        "supersedes_head_oid": OLD_HEAD,
-        "renewal_required": True,
-        "timestamp_contract": "RFC3339_OFFSET_AWARE_V2",
-        "canonical_timezone": "UTC",
-        "raw_timestamp_preserved": True,
-        "naive_datetime_allowed": False,
-        "status_identity": "codex",
-        "merge_identity": "codex",
-        "status_contexts": sorted(ALLOWED_CONTEXTS),
-        "status_write_quota": 5,
-        "merge_quota": 1,
-        "merge_method": "fast-forward-only",
-        "branch_push_allowed": False,
-        "tag_write_allowed": False,
-        "main_write_allowed": False,
-        "registry_write_allowed": False,
-        "baseline_write_allowed": False,
-        "production_write_allowed": False,
-        "issued_at": now.isoformat().replace("+00:00", "Z"),
-        "expires_at": (now + timedelta(hours=1)).isoformat().replace("+00:00", "Z"),
-        "audit_key_ref": "systemd-credential://task-audit-hmac",
-        "grant_signer_identity": "aios-task-grant-signer",
-        "grant_signature_namespace": "aios-task-status-merge-grant-v1",
-    }
-    value["pr_number"] = 37
-    return value
-
-
-class FakeAPI:
-    def __init__(self, *, with_statuses: bool = False, fail_status_after: int | None = None,
-                 fail_after_merge: bool = False, review_timestamp: str | None = None,
-                 reviewer: str = "owner", review_commit: str = HEAD):
-        self.posts: list[tuple[str, dict]] = []
-        self.merged = False
-        self.status_rows = [{"id": index + 1, "context": value, "status": "success", "sha": HEAD,
-                             "description": "task-scoped PASS evidence_sha256=" + "1" * 64,
-                             "creator": {"login": "codex"}} for index, value in enumerate(ALLOWED_CONTEXTS)] if with_statuses else []
-        self.fail_status_after = fail_status_after
-        self.fail_after_merge = fail_after_merge
-        self.base = BASE
-        self.review_timestamp = review_timestamp or datetime.now(timezone.utc).isoformat().replace("+00:00", "Z")
-        self.reviewer = reviewer
-        self.review_commit = review_commit
-
-    def get(self, path: str):
-        if path.endswith("/reviews"):
-            return [{
-                "id": 76,
-                "state": "APPROVED",
-                "commit_id": self.review_commit,
-                "official": True,
-                "stale": False,
-                "dismissed": False,
-                "submitted_at": self.review_timestamp,
-                "user": {"id": 2 if self.reviewer == "owner" else 42, "login": self.reviewer},
-            }]
-        if path.endswith("/statuses"):
-            return list(self.status_rows)
-        if path.endswith("/branches/governance%2Fapprovals"):
-            return {"name": "governance/approvals", "commit": {"id": HEAD if self.merged else BASE}}
-        if path.endswith("/pulls/37"):
-            return {
-                "number": 37,
-                "state": "closed" if self.merged else "open",
-                "merged": self.merged,
-                "mergeable": True,
-                "head": {"sha": HEAD},
-                "base": {"sha": self.base, "ref": "governance/approvals"},
-                "merge_commit_sha": HEAD if self.merged else None,
-            }
-        raise AssertionError(path)
-
-    def post(self, path: str, payload: dict):
-        self.posts.append((path, payload))
-        if path.endswith("/merge"):
-            assert payload == {
-                "Do": "fast-forward-only",
-                "head_commit_id": HEAD,
-                "force_merge": False,
-                "delete_branch_after_merge": False,
-            }
-            self.merged = True
-            if self.fail_after_merge:
-                raise ContractDenied("SIMULATED_POST_MERGE_LOSS")
-            return {"merged": True}
-        if self.fail_status_after is not None and len(self.status_rows) >= self.fail_status_after:
-            raise ContractDenied("SIMULATED_STATUS_FAILURE")
-        row = {"id": len(self.posts), "context": payload["context"], "status": "success", "sha": HEAD,
-               "description": payload["description"],
-               "creator": {"login": "codex"}}
-        self.status_rows.append(row)
-        return row
-
-
-def evidence() -> list[dict]:
-    return [{"context": value, "evidence_sha256": "1" * 64} for value in sorted(ALLOWED_CONTEXTS)]
-
-
-class TaskStatusMergeBrokerTests(unittest.TestCase):
-    def setUp(self):
-        self.temporary = tempfile.TemporaryDirectory()
-        self.root = Path(self.temporary.name)
-        self.journals: list[QuotaJournal] = []
-
-    def tearDown(self):
-        for journal in self.journals:
-            journal.close()
-        self.temporary.cleanup()
-
-    def journal(self, item: TaskGrant) -> QuotaJournal:
-        value = QuotaJournal(self.root / "journal.sqlite3", item)
-        self.journals.append(value)
-        return value
-
-    def test_status_broker_publishes_exact_five_and_quota_is_single_use(self):
-        item = TaskGrant.from_dict(grant())
-        api = FakeAPI()
-        journal = self.journal(item)
-        receipt = StatusBroker(item, journal, api, b"audit-key").publish(evidence())
-        self.assertEqual(receipt["status"], "PASS")
-        self.assertEqual(receipt["published_count"], 5)
-        self.assertEqual({entry[1]["context"] for entry in api.posts}, ALLOWED_CONTEXTS)
-        with self.assertRaisesRegex(ContractDenied, "STATUS_QUOTA_EXHAUSTED"):
-            StatusBroker(item, journal, api, b"audit-key").publish(evidence())
-
-    def test_rfc3339_offset_parser_normalizes_to_utc(self):
-        cases = {
-            "2026-08-01T02:03:02Z": "2026-08-01T02:03:02Z",
-            "2026-08-01T10:03:02+08:00": "2026-08-01T02:03:02Z",
-            "2026-07-31T18:03:02-08:00": "2026-08-01T02:03:02Z",
-            "2026-08-01T10:03:02.123456+08:00": "2026-08-01T02:03:02.123456Z",
-        }
-        for raw, expected in cases.items():
-            with self.subTest(raw=raw):
-                self.assertEqual(_utc_timestamp(_time(raw)), expected)
-
-    def test_rfc3339_offset_parser_rejects_ambiguous_or_invalid_values(self):
-        invalid = [
-            "2026-08-01T10:03:02", "2026-08-01", "2026-08-01T10:03:02+0800",
-            "2026-08-01T10:03:02+25:00", "2026-08-01T10:03:02z",
-            " 2026-08-01T10:03:02+08:00", "2026-08-01T10:03:02+08:00 ",
-            None, 1, [],
-        ]
-        for raw in invalid:
-            with self.subTest(raw=raw):
-                with self.assertRaisesRegex(ContractDenied, "TIMESTAMP_INVALID"):
-                    _time(raw)  # type: ignore[arg-type]
-
-    def test_offset_review_preserves_raw_and_canonical_utc_in_receipt(self):
-        value = grant()
-        value["issued_at"] = "2026-08-01T00:00:00Z"
-        value["expires_at"] = "2026-08-01T12:00:00Z"
-        item = TaskGrant.from_dict(value, now=datetime(2026, 8, 1, 3, tzinfo=timezone.utc))
-        api = FakeAPI(review_timestamp="2026-08-01T10:03:02+08:00")
-        receipt = StatusBroker(item, self.journal(item), api, b"audit-key").publish(evidence())
-        self.assertEqual(receipt["review_timestamp_raw"], "2026-08-01T10:03:02+08:00")
-        self.assertEqual(receipt["review_timestamp_utc"], "2026-08-01T02:03:02Z")
-
-    def test_review_expiry_boundary_is_fail_closed(self):
-        value = grant()
-        value["issued_at"] = "2026-08-01T00:00:00Z"
-        value["expires_at"] = "2026-08-01T02:03:02Z"
-        item = TaskGrant.from_dict(value, now=datetime(2026, 8, 1, 1, tzinfo=timezone.utc))
-        for raw in ("2026-08-01T02:03:02Z", "2026-08-01T02:03:03Z"):
-            with self.subTest(raw=raw), self.assertRaisesRegex(ContractDenied, "OWNER_APPROVAL_EXPIRED"):
-                StatusBroker(item, self.journal(item), FakeAPI(review_timestamp=raw), b"audit-key").publish(evidence())
-
-    def test_wrong_reviewer_and_reviewed_head_remain_rejected(self):
-        item = TaskGrant.from_dict(grant())
-        for api in (FakeAPI(reviewer="codex"), FakeAPI(review_commit="e" * 40)):
-            with self.assertRaisesRegex(ContractDenied, "OWNER_EXACT_HEAD_APPROVAL_MISSING"):
-                StatusBroker(item, self.journal(item), api, b"audit-key").publish(evidence())
-
-    def test_merge_broker_uses_fast_forward_only_and_binds_exact_head(self):
-        item = TaskGrant.from_dict(grant())
-        api = FakeAPI(with_statuses=True)
-        journal = self.journal(item)
-        receipt = MergeBroker(item, journal, api, b"audit-key").merge()
-        self.assertEqual(receipt["status"], "PASS")
-        self.assertEqual(receipt["governance_oid"], HEAD)
-        self.assertTrue(api.merged)
-        with self.assertRaisesRegex(ContractDenied, "MERGE_QUOTA_EXHAUSTED"):
-            MergeBroker(item, journal, FakeAPI(with_statuses=True), b"audit-key").merge()
-
-    def test_contract_rejects_scope_expansion_secret_and_wrong_identity(self):
-        value = grant()
-        value["main_write_allowed"] = True
-        with self.assertRaisesRegex(ContractDenied, "WRITE_SCOPE_EXPANDED"):
-            TaskGrant.from_dict(value)
-
-    def test_unbound_evidence_fails_closed(self):
-        item = TaskGrant.from_dict(grant())
-        changed = evidence()
-        changed[0]["evidence_sha256"] = "2" * 64
-        with self.assertRaisesRegex(ContractDenied, "EVIDENCE_SET_INVALID"):
-            StatusBroker(item, self.journal(item), FakeAPI(), b"audit-key").publish(changed)
-
-    def test_grant_requires_detached_asymmetric_signature(self):
-        grant_path = self.root / "grant.json"
-        signature_path = self.root / "grant.sig"
-        allowed_signers = self.root / "allowed_signers"
-        raw = canonical(grant()) + b"\n"
-        grant_path.write_bytes(raw)
-        signature_path.write_text("ssh-signature", encoding="utf-8")
-        allowed_signers.write_text("aios-task-grant-signer ssh-ed25519 AAAA", encoding="utf-8")
-        with mock.patch("aios_single_owner_governance.task_status_merge_broker.subprocess.run") as runner:
-            item = load_signed_task_grant(grant_path, signature_path, allowed_signers)
-        self.assertEqual(item.raw["pr_number"], 37)
-        self.assertEqual(runner.call_args.kwargs["input"], raw)
-        with mock.patch(
-            "aios_single_owner_governance.task_status_merge_broker.subprocess.run",
-            side_effect=subprocess.CalledProcessError(255, ["ssh-keygen"]),
-        ):
-            with self.assertRaisesRegex(ContractDenied, "GRANT_SIGNATURE_INVALID"):
-                load_signed_task_grant(grant_path, signature_path, allowed_signers)
-
-    def test_base_movement_blocks_status_publication_before_side_effect(self):
-        item = TaskGrant.from_dict(grant())
-        api = FakeAPI()
-        api.base = "c" * 40
-        with self.assertRaisesRegex(ContractDenied, "PR_BINDING_INVALID"):
-            StatusBroker(item, self.journal(item), api, b"audit-key").publish(evidence())
-        self.assertEqual(api.posts, [])
-
-    def test_credential_provision_rechecks_local_owner_and_refs_before_issuance(self):
-        item = TaskGrant.from_dict(grant())
-        broker = TaskCredentialBroker(item, self.root / "audit", b"audit-key")
-        with mock.patch("aios_single_owner_governance.task_credential_broker.os.geteuid", return_value=0, create=True), \
-             mock.patch("aios_single_owner_governance.task_credential_broker._safe_absolute"), \
-             mock.patch("aios_single_owner_governance.task_credential_broker._verify_local_governance_binding", side_effect=ContractDenied("LOCAL_OWNER_APPROVAL_MISSING")), \
-             mock.patch("aios_single_owner_governance.task_credential_broker.subprocess.run") as runner:
-            with self.assertRaisesRegex(ContractDenied, "LOCAL_OWNER_APPROVAL_MISSING"):
-                broker.provision(
-                    identity="codex",
-                    token_name="pr37-dddddddddddd-status",
-                    encrypted_path=Path("/run/aios-task-credential-broker/status.cred"),
-                )
-        runner.assert_not_called()
-        value = grant()
-        value["status_identity"] = "gitops-bot"
-        with self.assertRaisesRegex(ContractDenied, "IDENTITY_NOT_ALLOWED"):
-            TaskGrant.from_dict(value)
-
-    def test_systemd_credential_projection_mode_and_name_are_supported_exactly(self):
-        metadata = mock.Mock(st_mode=0o100440, st_uid=0, st_gid=0)
-        credential = Path("/run/credentials/unit/gitea-token")
-        with mock.patch.dict("os.environ", {"CREDENTIALS_DIRECTORY": str(credential.parent)}), \
-             mock.patch("aios_single_owner_governance.task_status_merge_broker.os.open", return_value=7), \
-             mock.patch("aios_single_owner_governance.task_status_merge_broker.os.fstat", return_value=metadata), \
-             mock.patch("aios_single_owner_governance.task_status_merge_broker.os.read", return_value=b"x" * 40), \
-             mock.patch("aios_single_owner_governance.task_status_merge_broker.os.close"):
-            self.assertEqual(read_runtime_secret(credential), b"x" * 40)
-        item = TaskGrant.from_dict(grant())
-        broker = TaskCredentialBroker(item, self.root / "provision-audit", b"audit-key")
-        connection = mock.MagicMock()
-        connection.execute.return_value.fetchall.return_value = [(101, 42)]
-        issued = mock.Mock(stdout=b"x" * 40)
-        encrypted = mock.Mock(stdout=b"")
-        with mock.patch("aios_single_owner_governance.task_credential_broker.os.geteuid", return_value=0, create=True), \
-             mock.patch("aios_single_owner_governance.task_credential_broker._safe_absolute"), \
-             mock.patch("aios_single_owner_governance.task_credential_broker._verify_local_governance_binding"), \
-             mock.patch("aios_single_owner_governance.task_credential_broker.os.chmod"), \
-             mock.patch("aios_single_owner_governance.task_credential_broker.subprocess.run", side_effect=[issued, encrypted]) as runner, \
-             mock.patch("aios_single_owner_governance.task_credential_broker.sqlite3.connect", return_value=connection):
-            broker.provision(identity="codex", token_name="pr37-dddddddddddd-status", encrypted_path=Path("/run/aios-task-credential-broker/status.cred"))
-        self.assertIn("--name=gitea-token", runner.call_args_list[1].args[0])
-
-    def test_expiry_sweeper_revokes_projected_token_after_grant_expiry(self):
-        item = TaskGrant.from_dict(grant())
-        runtime_root = self.root / "runtime"
-        credential_root = self.root / "credentials"
-        task_dir = runtime_root / "task-37"
-        audit_dir = task_dir / "audit"
-        audit_dir.mkdir(parents=True)
-        credential_root.mkdir()
-        (task_dir / "grant.json").write_text("{}", encoding="utf-8")
-        (task_dir / "grant.sig").write_text("signature", encoding="utf-8")
-        token_name = "pr37-dddddddddddd-status"
-        encrypted_path = credential_root / "status.cred"
-        encrypted_path.write_text("encrypted", encoding="utf-8")
-        (credential_root / "task-37-audit.cred").write_text("encrypted-audit-key", encoding="utf-8")
-        real_broker = TaskCredentialBroker(item, audit_dir, b"audit-key")
-        receipt = real_broker._audit({
-            "status": "PASS", "operation": "credential_provision", "identity": "codex",
-            "token_name": token_name, "token_id": 101, "token_uid": 7,
-            "grant_sha256": item.digest,
-            "credential_ref": "systemd-credential-encrypted://status.cred",
-        })
-        real_broker.validate_provision_receipt(receipt, encrypted_path)
-        tampered = dict(receipt)
-        tampered["token_id"] = 102
-        with self.assertRaisesRegex(ContractDenied, "PROVISION_RECEIPT_INVALID"):
-            real_broker.validate_provision_receipt(tampered, encrypted_path)
-        fake_broker = mock.Mock()
-        fake_broker.revoke.return_value = {"status": "PASS", "old_token_http_status": 401}
-        with mock.patch.object(sweeper, "RUNTIME_ROOT", runtime_root), \
-             mock.patch.object(sweeper, "CREDENTIAL_ROOT", credential_root), \
-             mock.patch.object(sweeper.os, "geteuid", return_value=0, create=True), \
-             mock.patch.object(sweeper, "load_signed_task_grant", return_value=item), \
-             mock.patch.object(sweeper.subprocess, "run", return_value=mock.Mock(stdout=b"audit-key")), \
-             mock.patch.object(sweeper, "TaskCredentialBroker", return_value=fake_broker) as broker_type:
-            results = sweeper.sweep(runtime_root, self.root / "allowed_signers", now=item.expires_at)
-        self.assertEqual(results, [{"status": "PASS", "old_token_http_status": 401}])
-        broker_type.assert_called_once_with(item, audit_dir, b"audit-key")
-        fake_broker.revoke.assert_called_once()
-
-    def test_revocation_is_exact_access_token_row_only_and_proves_http_401(self):
-        item = TaskGrant.from_dict(grant())
-        broker = TaskCredentialBroker(item, self.root / "revoke-audit", b"audit-key")
-        token_name = "pr37-dddddddddddd-status"
-        receipt = broker._audit({
-            "status": "PASS", "operation": "credential_provision", "identity": "codex",
-            "token_name": token_name, "token_id": 101, "token_uid": 7,
-            "grant_sha256": item.digest,
-            "credential_ref": "systemd-credential-encrypted://status.cred",
-        })
-        response = mock.MagicMock()
-        response.__enter__.return_value.status = 200
-        unauthorized = urllib.error.HTTPError("http://127.0.0.1:3000/api/v1/repos/aios/aios", 401, "Unauthorized", {}, None)
-        write_connection = mock.MagicMock()
-        write_connection.execute.return_value.rowcount = 1
-        read_connection = mock.MagicMock()
-        read_connection.execute.return_value.fetchone.return_value = (0,)
-        with mock.patch("aios_single_owner_governance.task_credential_broker.os.geteuid", return_value=0, create=True), \
-             mock.patch("aios_single_owner_governance.task_credential_broker._safe_absolute"), \
-             mock.patch("aios_single_owner_governance.task_credential_broker.subprocess.run", return_value=mock.Mock(stdout=b"x" * 40)), \
-             mock.patch("aios_single_owner_governance.task_credential_broker.sqlite3.connect", side_effect=[write_connection, read_connection]) as connect, \
-             mock.patch("aios_single_owner_governance.task_credential_broker.urllib.request.urlopen", side_effect=[response, unauthorized]) as urlopen:
-            result = broker.revoke(receipt=receipt, encrypted_path=Path("/run/aios-task-credential-broker/status.cred"))
-        self.assertEqual(result["old_token_http_status"], 401)
-        self.assertIn("/repos/aios/aios", urlopen.call_args_list[0].args[0].full_url)
-        delete_sql = write_connection.execute.call_args_list[1].args[0]
-        self.assertIn("DELETE FROM access_token", delete_sql)
-        self.assertNotIn("commit_status", delete_sql)
-        self.assertIn("mode=ro", connect.call_args_list[1].args[0])
-        value = grant()
-        value["token"] = "plaintext"
-        with self.assertRaisesRegex(ContractDenied, "GRANT_FIELDS_INVALID"):
-            TaskGrant.from_dict(value)
-
-    def test_audit_chain_is_content_addressed_and_contains_no_secret(self):
-        item = TaskGrant.from_dict(grant())
-        journal = self.journal(item)
-        receipt = StatusBroker(item, journal, FakeAPI(), b"audit-key").publish(evidence())
-        serialized = json.dumps(receipt, sort_keys=True)
-        self.assertNotIn("audit-key", serialized)
-        self.assertEqual(len(receipt["audit_signature"]), 64)
-        self.assertTrue(journal.verify_chain())
-
-    def test_credential_broker_is_root_only_and_never_returns_a_token(self):
-        item = TaskGrant.from_dict(grant())
-        broker = TaskCredentialBroker(item, self.root / "audit", b"audit-key")
-        with mock.patch("aios_single_owner_governance.task_credential_broker.os.geteuid", return_value=1000, create=True):
-            with self.assertRaisesRegex(ContractDenied, "ROOT_BROKER_REQUIRED"):
-                broker.provision(
-                    identity="codex",
-                    token_name="pr36-a8644fc172bd-status",
-                    encrypted_path=Path("/run/aios-task-credential-broker/status.cred"),
-                )
-
-    def test_partial_status_side_effects_are_reconciled_without_duplicate_writes(self):
-        item = TaskGrant.from_dict(grant())
-        api = FakeAPI(fail_status_after=2)
-        journal = self.journal(item)
-        with self.assertRaisesRegex(ContractDenied, "SIMULATED_STATUS_FAILURE"):
-            StatusBroker(item, journal, api, b"audit-key").publish(evidence())
-        self.assertEqual(len(api.status_rows), 2)
-        api.fail_status_after = None
-        receipt = StatusBroker(item, journal, api, b"audit-key").publish(evidence())
-        self.assertEqual(receipt["published_count"], 5)
-        self.assertEqual(len(api.status_rows), 5)
-
-    def test_post_merge_response_loss_is_reconciled_from_exact_remote_ref(self):
-        item = TaskGrant.from_dict(grant())
-        api = FakeAPI(with_statuses=True, fail_after_merge=True)
-        journal = self.journal(item)
-        with self.assertRaisesRegex(ContractDenied, "SIMULATED_POST_MERGE_LOSS"):
-            MergeBroker(item, journal, api, b"audit-key").merge()
-        api.fail_after_merge = False
-        receipt = MergeBroker(item, journal, api, b"audit-key").merge()
-        self.assertTrue(receipt["reconciled"])
-        self.assertEqual(receipt["governance_oid"], HEAD)
-
-
-if __name__ == "__main__":
-    unittest.main()
@@ -0,0 +1,77 @@
+from __future__ import annotations
+
+from dataclasses import replace
+from datetime import timedelta
+import unittest
+
+from aios_single_owner_governance.models import Review
+from aios_single_owner_governance.validator import SingleOwnerApprovalValidator, ValidationDenied
+
+from .helpers import HEAD, NOW, context, gates, owner_review
+
+
+class ValidatorTests(unittest.TestCase):
+    def setUp(self):
+        self.validator = SingleOwnerApprovalValidator()
+
+    def denied(self, code, **changes):
+        with self.assertRaises(ValidationDenied) as caught:
+            self.validator.validate(context(**changes))
+        self.assertEqual(caught.exception.code, code)
+
+    def test_owner_current_head_and_machine_gates_pass(self):
+        result = self.validator.validate(context())
+        self.assertEqual(result.owner_review.reviewer, "owner")
+        self.assertEqual(len(result.machine_contexts), 3)
+
+    def test_requester_self_approval_denied(self):
+        self.denied("REQUESTER_SELF_APPROVAL", requester="owner")
+
+    def test_executor_self_approval_denied(self):
+        self.denied("EXECUTOR_SELF_APPROVAL", executor="owner")
+
+    def test_codex_as_owner_denied(self):
+        codex = owner_review(reviewer="codex", reviewer_id=42)
+        self.denied("OWNER_APPROVAL_REQUIRED", reviews=(codex,))
+
+    def test_gpt_as_owner_denied(self):
+        gpt = owner_review(reviewer="gpt", reviewer_id=43)
+        self.denied("OWNER_APPROVAL_REQUIRED", reviews=(gpt,))
+
+    def test_non_owner_approval_denied(self):
+        other = owner_review(reviewer="other", reviewer_id=77)
+        self.denied("OWNER_APPROVAL_REQUIRED", reviews=(other,))
+
+    def test_stale_owner_approval_denied(self):
+        self.denied("STALE_OWNER_APPROVAL", reviews=(owner_review(stale=True),))
+
+    def test_dismissed_owner_approval_denied(self):
+        self.denied("DISMISSED_OWNER_APPROVAL", reviews=(owner_review(dismissed=True),))
+
+    def test_old_head_owner_approval_denied(self):
+        self.denied("OWNER_APPROVAL_NOT_LATEST_HEAD", reviews=(owner_review(head_oid="b" * 40),))
+
+    def test_wip_denied(self):
+        self.denied("WIP_BLOCKED", wip=True)
+
+    def test_machine_gate_failure_denied(self):
+        self.denied("MACHINE_GATE_FAILED", machine_gates=gates(state="failure"))
+
+    def test_secret_scan_failure_denied(self):
+        failed = list(gates())
+        failed[1] = replace(failed[1], state="failure")
+        self.denied("MACHINE_GATE_FAILED", machine_gates=tuple(failed))
+
+    def test_machine_gate_wrong_head_denied(self):
+        self.denied("MACHINE_GATE_NOT_LATEST_HEAD", machine_gates=gates(head_oid="c" * 40))
+
+    def test_expired_request_denied(self):
+        self.denied("APPROVAL_EXPIRED", now=NOW + timedelta(hours=2))
+
+    def test_review_after_expiry_denied(self):
+        late = owner_review(reviewed_at=NOW + timedelta(hours=2))
+        self.denied("OWNER_APPROVAL_EXPIRED", reviews=(late,))
+
+
+if __name__ == "__main__":
+    unittest.main()
Author	SHA1	Message	Date
Codex Agent	310ab2af90	evidence: close live activation hardening candidate	2026-07-29 12:30:10 +08:00
Codex Agent	71def340e7	governance: harden single-owner live activation	2026-07-29 12:28:37 +08:00
Codex Agent	e1e438564c	feat(governance): add fail-closed live activation	2026-07-29 11:27:04 +08:00
AIOS Task-Bound Prerequisites Writer	fa038d17b2	governance: add dormant single-owner activation prerequisites	2026-07-29 04:00:00 +08:00
				`@@ -1 +0,0 @@`
				{"approved_evidence_ref":{"commit":"015185d7e5191d18c5c1596160807ac228782a0a","observed_at":"2026-08-08T10:46:49Z","path":"approvals/governance-policy/AIOS-AUTONOMOUS-MERGE-GOVERNANCE-SCOPE-EXTENSION-V1.preapproval-evidence.json"},"approved_semantic_digest":"ba15d512ed8c1f43e5f72c84125a3a71a7347ef59e18000bbfca24d6e69f1b19","approved_transport_digest":"8b3370add21cd23c2b4f41d8d84d3eaaa09ddf0451549b72c7941bbd92d5d60a","classification":"SNAPSHOT_SCHEMA_DRIFT","drift_source":"UNKNOWN","field_diff_artifact":"/var/lib/aios-gitops/runtime/tasks/AIOS-PROTECTION-SNAPSHOT-DRIFT-FORENSICS-V1/protection-drift/semantic-analysis.json","governance":{"direct_gitea_db_write":false,"force_push":false,"new_scope":false,"owner_pat_used":false,"protection_mutation":false},"legacy_schema":{"created_unix":"server_metadata","merge_whitelist_user_i_ds":"JSON_STRING_ARRAY","status_check_contexts":"JSON_STRING_ARRAY","updated_unix":"server_metadata"},"live_schema":{"created_at":"server_metadata","merge_whitelist_usernames":"TYPED_ARRAY","status_check_contexts":"TYPED_ARRAY","updated_at":"server_metadata"},"observed_semantic_digest":"ba15d512ed8c1f43e5f72c84125a3a71a7347ef59e18000bbfca24d6e69f1b19","observed_transport_digest":"d4d3652cbdf012b57d7e24a066325a4d0ca779a8ca24255e0d578c1bb0276d10","production":{"unchanged":true,"version":"V2R1C7"},"protection_identity":{"branch":"main","id":2},"repository_identity":{"repo_id":1,"repository":"aios/aios"},"request_id":"AIOS-PROTECTION-SEMANTIC-SNAPSHOT-RECONCILIATION-V1","schema":"aios.semantic-governance-reconciliation-evidence.v1","security_relevant_field_diff":"none","semantic_equal":true}
				`@@ -1 +0,0 @@`
				{"existing_operation_rebindings":{"stage1":{"operation":"ADD_EXISTING_MACHINE_TO_MAIN_MERGE_WHITELIST","subject_user_id":153},"stage2":{"operation":"MIGRATE_LEGACY_OWNER_APPROVAL_GATE_TO_CAMPAIGN_APPROVAL_GATE"}},"new_governance_scope":false,"operation":"SEMANTIC_RECONCILIATION_REQUEST","original_governance_scope":{"pr54":{"head":"015185d7e5191d18c5c1596160807ac228782a0a","manifest_sha256":"1b11ee42d53a9f6c1646e5f5ddd8ce5b7ecf301483b9f3d47a068290d541ba4b","number":54,"owner_id":2,"review_id":104},"pr55":{"head":"9f98e15d37371af755c644d70575354099d21f76","number":55,"review_id":106}},"purpose":"migrate_execution_binding_schema_only","repository":"aios/aios","request_branch":"governance/request/protection-semantic-reconciliation-v1-20260808","request_id":"AIOS-PROTECTION-SEMANTIC-SNAPSHOT-RECONCILIATION-V1","schema":"aios.semantic-governance-reconciliation-manifest.v1","snapshot_reconciliation":{"approved_semantic_digest":"ba15d512ed8c1f43e5f72c84125a3a71a7347ef59e18000bbfca24d6e69f1b19","approved_transport_digest":"8b3370add21cd23c2b4f41d8d84d3eaaa09ddf0451549b72c7941bbd92d5d60a","canonicalizer_version":1,"classification":"SNAPSHOT_SCHEMA_DRIFT","drift_source":"UNKNOWN","observed_semantic_digest":"ba15d512ed8c1f43e5f72c84125a3a71a7347ef59e18000bbfca24d6e69f1b19","observed_transport_digest":"d4d3652cbdf012b57d7e24a066325a4d0ca779a8ca24255e0d578c1bb0276d10","protection_identity":{"id":2},"repository_identity":{"repo_id":1},"security_relevant_field_diff":"none","semantic_equal":true,"semantic_schema":"aios.semantic-protection.v1"},"stage1_predicate":{"branch":"main","mutation":{"add_merge_whitelist_user_id":153},"preserve_all_other_security_fields":true,"repository":"aios/aios","require":{"can_force_push":false,"can_push":false,"enable_status_check":true,"merge_whitelist_contains":[2],"merge_whitelist_not_contains":[153],"required_approvals":0},"semantic_precondition_digest":"ba15d512ed8c1f43e5f72c84125a3a71a7347ef59e18000bbfca24d6e69f1b19"},"stage2_predicate":{"mutation":{"add_required_context":"campaign-approval-gate","remove_required_context":"owner-approval-gate"},"preserve_all_other_security_fields":true,"require":{"campaign_active":true,"campaign_revoked":false,"can_force_push":false,"can_push":false,"merge_whitelist_contains":[2,153],"required_contexts_contains":["owner-approval-gate"],"required_contexts_not_contains":["campaign-approval-gate"]}},"target_branch":"governance/approvals"}