{"schemaVersion":"developer.reits.tech/d05-final-acceptance-qualification/v1","status":"T08_REPOSITORY_IMPLEMENTED_LIVE_G01_G11_AND_FOUR_OWNER_ACCEPTANCE_BLOCKED","observedAt":"2026-07-24T10:32:32Z","program":{"acceptedKnives":4,"totalKnives":36,"currentOrdinal":5,"currentKnife":"D05","remainingIncludingCurrent":32,"remainingAfterCurrentAcceptance":31,"candidateAfterAcceptance":"D06"},"task":{"id":"D05-T08","title":"Obtain independent four-owner D05 final acceptance","owner":"FinOps + Runtime Owner + Security Owner + Product Owner","repositoryImplementationComplete":true,"repositorySequenceComplete":true,"liveGatesSatisfied":0,"liveGatesRequired":11,"liveT07QualificationObserved":false,"finalApprovalsObserved":0,"finalApprovalsRequired":4,"productionAccepted":false,"nextRepositoryTask":null,"currentExecutionTask":"D05-T02","nextProgramKnife":"D06","nextProgramKnifeBlocked":true},"trustCorrection":{"decision":"CURRENT_T07_AND_T08_PACKETS_REPLACE_HISTORICAL_PORTAL_RELEASE_AND_THREE_LANE_OWNER_EVIDENCE","historicalReleaseEvidence":"data/runner-controller-release-evidence.json","canonicalReleaseEvidence":"data/controller-release-rollback-qualification.json","historicalOwnerEvidence":"data/runner-controller-owner-approval-evidence.json","canonicalFinalAcceptanceEvidence":"data/d05-final-acceptance-qualification.json","developerPortalEligibleForFinalAcceptance":false,"sitesEligibleForFinalAcceptance":false,"onlyEligibleSubject":"the exact production-qualified runner-controller release on the dedicated control-plane host"},"planBinding":{"planId":"D05-T08-FOUR-OWNER-FINAL-ACCEPTANCE-V1","path":"ops/runner-factory/acceptance/d05-final-acceptance-plan.json","sha256":"f02a9fb91a93bdaefacfc93d8764cb45c968c4f9cd6f442b7ea21d4b9f930d3e","maximumReceiptAgeMinutes":30,"maximumGateEvidenceAgeMinutes":120,"compareAndSwapRequired":true},"repositoryPacket":{"planPresent":true,"baselineCollectorPresent":true,"verifierPresent":true,"pendingReceiptPresent":true,"publicKeyringTemplatePresent":true,"gateContracts":11,"finalApprovalContracts":4,"hostileCases":18},"currentObservation":{"source":"EC2_READ_ONLY_AND_SITES_DEPLOYMENT_OBSERVATION","portal":{"releaseId":"developer-portal@8ae9d1b4511f-0d1595ec4569","sourceRevision":"8ae9d1b4511f1e1fc5a902cd41eef248a81fd743","artifactDigest":"sha256:0d1595ec4569cbe5a4cacc6a0b543c27d4c453086cba6b657fff61614b0c15e3","serviceActive":true,"listener8100":1,"eligibleControllerEvidence":false},"sites":{"version":259,"sourceRevision":"8ae9d1b4511f1e1fc5a902cd41eef248a81fd743","deploymentStatus":"succeeded","access":"OWNER_ONLY_CUSTOM","eligibleControllerEvidence":false},"controller":{"unitLoadState":"not-found","unitActiveState":"inactive","listener8110":0,"publicRoutes":0,"dedicatedHostMarkerPresent":false,"qualifiedT07Receipts":0,"positiveGateReceipts":0,"closureDossiers":0,"finalApprovalSignatures":0}},"gateSummary":{"required":11,"satisfied":0,"denied":11,"allExactReleaseBound":false,"allFresh":false,"allIndependentlySigned":false},"gates":[{"id":"D05-G01","group":"CAPACITY","title":"Linux organization Runner capacity","owner":"Platform SRE","sourceTask":"D05-T04","positiveReceiptsObserved":0,"state":"DENIED"},{"id":"D05-G02","group":"CAPACITY","title":"Native Mac Runner capacity","owner":"Mobile Platform","sourceTask":"D05-T05","positiveReceiptsObserved":0,"state":"DENIED"},{"id":"D05-G03","group":"READINESS","title":"Credential and network isolation","owner":"Security","sourceTask":"D05-T06","positiveReceiptsObserved":0,"state":"DENIED"},{"id":"D05-G04","group":"READINESS","title":"Controller production assembly","owner":"Architecture","sourceTask":"D05-T06","positiveReceiptsObserved":0,"state":"DENIED"},{"id":"D05-G05","group":"ACTIVATION","title":"Eleven readiness checks","owner":"Controller Owner","sourceTask":"D05-T06","positiveReceiptsObserved":0,"state":"DENIED"},{"id":"D05-G06","group":"ACTIVATION","title":"Single loopback listener on 8110","owner":"Runtime Owner","sourceTask":"D05-T06","positiveReceiptsObserved":0,"state":"DENIED"},{"id":"D05-G07","group":"INSTALLATION","title":"Hardened dedicated-host installation","owner":"Platform SRE","sourceTask":"D05-T06","positiveReceiptsObserved":0,"state":"DENIED"},{"id":"D05-G08","group":"INSTALLATION","title":"Live negative and recovery probes","owner":"Independent QA","sourceTask":"D05-T06","positiveReceiptsObserved":0,"state":"DENIED"},{"id":"D05-G09","group":"RELEASE","title":"Exact signed Controller release identity","owner":"Supply Chain","sourceTask":"D05-T07","positiveReceiptsObserved":0,"state":"DENIED"},{"id":"D05-G10","group":"RELEASE","title":"Intentional rollback and exact recovery","owner":"Release Engineering","sourceTask":"D05-T07","positiveReceiptsObserved":0,"state":"DENIED"},{"id":"D05-G11","group":"FINAL","title":"Four-owner final acceptance","owner":"Product Owner","sourceTask":"D05-T08","positiveReceiptsObserved":0,"state":"DENIED"}],"dossier":{"required":1,"observed":0,"content":["exact source, artifact, SBOM, configuration, migration and runtime release identity","eleven ordered fresh independently signed gate receipts","live T07 rollback qualification bound to the same host and release","bounded budget and one private 8110 listener with zero public routes","four distinct final principals and public keys"],"state":"ABSENT"},"approvalSeats":[{"ordinal":1,"role":"FINOPS","responsibility":"budget ceiling, hold and expiry","observed":false,"state":"MISSING"},{"ordinal":2,"role":"RUNTIME_OWNER","responsibility":"11/11 readiness, listener, rollback and final runtime","observed":false,"state":"MISSING"},{"ordinal":3,"role":"SECURITY_OWNER","responsibility":"subject, signatures, freshness, isolation and zero public route","observed":false,"state":"MISSING"},{"ordinal":4,"role":"PRODUCT_OWNER","responsibility":"final business acceptance after all independent reviews","observed":false,"state":"MISSING"}],"decisionPath":[{"ordinal":1,"id":"GATES","requirement":"G01-G11 are satisfied for one exact release","observed":"0/11","state":"BLOCKED"},{"ordinal":2,"id":"DOSSIER","requirement":"seal the exact fresh closure dossier","observed":"0/1","state":"BLOCKED"},{"ordinal":3,"id":"INDEPENDENT_REVIEWS","requirement":"FinOps, Runtime and Security sign independently","observed":"0/3","state":"BLOCKED"},{"ordinal":4,"id":"PRODUCT_DECISION","requirement":"Product signs after all independent reviewers","observed":"0/1","state":"BLOCKED"},{"ordinal":5,"id":"CAS","requirement":"external ledger authority compares 4/36 D05 then advances to 5/36 D06","observed":"0/1","state":"BLOCKED"}],"acceptanceContract":{"requiredGateReceipts":11,"observedGateReceipts":0,"requiredClosureDossiers":1,"observedClosureDossiers":0,"requiredLiveT07Receipts":1,"observedLiveT07Receipts":0,"requiredFinalApprovals":4,"observedFinalApprovals":0,"requiredLedgerCompareAndSwap":1,"observedLedgerCompareAndSwap":0,"d05Accepted":false},"controls":[{"id":"EXACT-SUBJECT","title":"One Controller release only","mechanism":"Every receipt binds the same service, host, source, artifact, configuration and runtime identity.","state":"REPOSITORY_BOUND"},{"id":"ELEVEN-OF-ELEVEN","title":"No partial gate closure","mechanism":"Missing, duplicate, reordered, cross-release or unsigned G01-G11 evidence denies final acceptance.","state":"REPOSITORY_BOUND"},{"id":"FRESHNESS","title":"Point-in-time truth","mechanism":"Final receipt lasts at most 30 minutes and no gate evidence may exceed 120 minutes.","state":"REPOSITORY_BOUND"},{"id":"DOSSIER-SEAL","title":"Exact byte closure","mechanism":"A canonical SHA-256 dossier binds release identity, receipts and runtime outcome.","state":"REPOSITORY_BOUND"},{"id":"SEPARATION-OF-DUTIES","title":"Four independent principals","mechanism":"FinOps, Runtime, Security and Product use distinct principals and Ed25519 public keys.","state":"REPOSITORY_BOUND"},{"id":"PRODUCT-LAST","title":"Product cannot pre-approve","mechanism":"Product acceptance must be signed strictly after all three independent reviews.","state":"REPOSITORY_BOUND"},{"id":"ZERO-EFFECT-VERIFIER","title":"Verification does not mutate","mechanism":"The verifier authorizes a candidate transition but executes zero ledger, runtime or cloud writes.","state":"REPOSITORY_BOUND"},{"id":"LEDGER-CAS","title":"No stale program advance","mechanism":"A separate authority must compare current 4/36 D05 before advancing exactly once to 5/36 D06.","state":"REPOSITORY_BOUND"}],"liveEvidence":{"readOnlyAuditPerformed":true,"controllerServiceRestarts":0,"controllerListenerStarts":0,"controllerRollbackDrills":0,"finalApprovalsIssued":0,"ledgerMutationsExecuted":0,"publicRouteChanges":0,"externalWritesExecuted":0,"credentialsRecorded":false,"paidResourcesCreated":0},"invariants":{"repositorySequenceComplete":true,"nextRepositoryTask":null,"currentExecutionTask":"D05-T02","portalReleaseExcluded":true,"sitesReleaseExcluded":true,"controllerListener8110":0,"programAdvanced":false,"d05Accepted":false},"sources":[{"id":"EC2","kind":"READ_ONLY","observedAt":"2026-07-24T10:32:32Z"},{"id":"SITES","kind":"DEPLOYMENT_RECORD","version":259},{"id":"T07","kind":"CANONICAL_QUALIFICATION","path":"data/controller-release-rollback-qualification.json"},{"id":"REPOSITORY","kind":"EXACT_BYTES","plan":"ops/runner-factory/acceptance/d05-final-acceptance-plan.json"}],"boundary":"D05-T08 completes the eighth and final repository task, not the production acceptance. The eligible subject is only an exact production-qualified Controller release on its dedicated host. With G01-G11 at 0/11, no closure dossier, no live T07 receipt, no four-owner signatures and no ledger compare-and-swap, D05 remains unaccepted at 4/36. Repository work has no successor task; live execution returns to D05-T02 and D06 remains blocked."}