{"schemaVersion":"developer.reits.tech/runner-controller-owner-approval-evidence/v1","status":"G11_DENIED_INCOMPLETE_DOSSIER_AND_NO_INDEPENDENT_APPROVALS","observedAt":"2026-07-21T10:01:38Z","observationMode":"READ_ONLY_EXACT_DOSSIER_AND_OWNER_APPROVAL_AUDIT_NO_DECISION_NO_EFFECT","program":{"acceptedKnives":4,"totalKnives":36,"currentKnife":"D05","closeoutCut":7,"remainingIncludingCurrent":32,"remainingAfterAcceptance":31,"d05Accepted":false},"gateSummary":{"targetedGates":1,"satisfiedGates":0,"upstreamGatesSatisfied":0,"upstreamGatesRequired":10,"dossierInputsPresent":6,"dossierInputsRequired":6,"independentApprovalsObserved":0,"independentApprovalsRequired":3,"productOwnerDecisionsObserved":0,"productOwnerDecisionsRequired":1,"decision":"DENY_AND_ESCALATE_TO_FINOPS_RUNTIME_SECURITY_AND_PRODUCT_OWNER"},"gate":{"id":"D05-G11","name":"COST_RUNTIME_SECURITY_APPROVAL","owner":"PRODUCT_OWNER","target":"independent cost, runtime and security approvals bound to one exact qualified closure dossier","observed":"six dossier inputs are present, but G01-G10 remain 0/10, the inputs do not share one signed release binding, all three independent approvals are absent and Product Owner has issued no decision","positiveReceiptsObserved":0,"decision":"DENIED_DOSSIER_UNQUALIFIED_AND_APPROVALS_ABSENT"},"dossier":{"id":"d05-closure@9e55ad16425d-e2c9f1bb15d9","digest":"sha256:95f659b0d787f96c07ede0399f1eacfa5960279d8cb0add80d337e8c63495c49","exactSourceRevision":"9e55ad16425d8fe37dd62b4538dfbe8c73d5fc7b","releaseId":"developer-portal@9e55ad16425d-43d5e9c736f3","rollbackReleaseId":"developer-portal@2619505ae534-be4aefef59cd","inputsPresent":6,"inputsRequired":6,"crossArtifactReleaseBinding":false,"independentlySigned":false,"qualified":false,"inputSet":[{"id":"closure-contract","path":"ops/runner-factory/controller-d05-acceptance-closure-contract.json","digest":"sha256:e4fd93d445dadb27accaed3b2e32942df39591f1966af172423aba3da33e4faa","covers":"D05-G01..D05-G11","gatesSatisfied":0,"gatesRequired":11,"state":"PRESENT_DIRECTORY_ONLY"},{"id":"capacity-evidence","path":"data/runner-capacity-evidence.json","digest":"sha256:ba0d2a531345df8c7f3d9a35295e06f33de1b7f4b807b65563a4b793e2f8e384","covers":"D05-G01..D05-G02","gatesSatisfied":0,"gatesRequired":2,"state":"PRESENT_DENIED"},{"id":"readiness-evidence","path":"data/runner-controller-readiness-evidence.json","digest":"sha256:352d240a17946d9379fc413c8f95c0695c618a52976bfba85671bf38828e9970","covers":"D05-G03..D05-G04","gatesSatisfied":0,"gatesRequired":2,"state":"PRESENT_DENIED"},{"id":"activation-evidence","path":"data/runner-controller-activation-evidence.json","digest":"sha256:925770e4bd387025d3d68e3201f4cbfe72d3d32392864eaee5b1a5eed10d63c3","covers":"D05-G05..D05-G06","gatesSatisfied":0,"gatesRequired":2,"state":"PRESENT_DENIED"},{"id":"installation-evidence","path":"data/runner-controller-installation-evidence.json","digest":"sha256:d49def40575baa7e2f037ec4cfc22b4cd1776ad9e6b3c732c1c4fc7c7ee01e95","covers":"D05-G07..D05-G08","gatesSatisfied":0,"gatesRequired":2,"state":"PRESENT_DENIED"},{"id":"release-evidence","path":"data/runner-controller-release-evidence.json","digest":"sha256:e68c85757768c65b34b6a308769e56e94cb83f238cd02660b771dfcbfe1555c1","covers":"D05-G09..D05-G10","gatesSatisfied":0,"gatesRequired":2,"state":"PRESENT_DENIED"}],"eligibility":{"allInputsPresent":true,"allElevenGatesSatisfied":false,"allReceiptsFresh":false,"allReceiptsIndependentlySigned":false,"allArtifactsBoundToExactRelease":false,"eligibleForOwnerReview":false,"reason":"A complete file list is not a qualified closure dossier: G01-G10 are denied, freshness and signatures are absent, and the evidence snapshots do not bind one exact current release."}},"productionSnapshot":{"observedAt":"2026-07-21T10:01:38Z","identityValuesMatch":true,"provenanceSigned":false,"ec2":{"releaseId":"developer-portal@9e55ad16425d-43d5e9c736f3","sourceRevision":"9e55ad16425d8fe37dd62b4538dfbe8c73d5fc7b","artifactDigest":"sha256:43d5e9c736f37c70514c3ae9f9cb192fac49ae7975338ea38e07a5c62bab4871","serviceState":"ACTIVE","portalListener":"127.0.0.1:8100","controllerListener8110Observed":false},"sites":{"releaseId":"developer-portal@9e55ad16425d-43d5e9c736f3","sourceRevision":"9e55ad16425d8fe37dd62b4538dfbe8c73d5fc7b","artifactDigest":"sha256:43d5e9c736f37c70514c3ae9f9cb192fac49ae7975338ea38e07a5c62bab4871","version":137,"environmentRevision":17,"archiveDigest":"sha256:eea6b2b60f88a4929cf103285751a9c1ef210f337cafe6735d3158af4014a30d","accessMode":"OWNER_ONLY_CUSTOM","allowedUsers":1,"allowedGroups":0}},"approvalLanes":[{"id":"cost","label":"Cost authority","owner":"FINOPS_OWNER","requiredBinding":"exact dossier + live quote + hard ceiling + budget owner + expiry","observedFacts":["user cost authorizations 0","live price quotes 0","durable budget holds 0"],"receiptObserved":false,"independent":false,"exactDossierBound":false,"status":"MISSING"},{"id":"runtime","label":"Runtime authority","owner":"CONTROLLER_OWNER","requiredBinding":"exact dossier + SLO + maintenance window + readiness + rollback/recovery outcome","observedFacts":["Controller readiness 0/11","Controller listener 0","intentional rollback steps 0/8"],"receiptObserved":false,"independent":false,"exactDossierBound":false,"status":"MISSING"},{"id":"security","label":"Security authority","owner":"SECURITY_OWNER","requiredBinding":"exact dossier + threat review + root-owned config + negative webhook + secret boundary","observedFacts":["production configuration 0/12","negative webhook proofs 0/8","signed provenance false"],"receiptObserved":false,"independent":false,"exactDossierBound":false,"status":"MISSING"}],"approvalRequirements":[{"lane":"cost","id":"COST-01","requirement":"fresh provider quote, maximum spend and currency bound to the dossier","status":"MISSING"},{"lane":"cost","id":"COST-02","requirement":"independent budget owner identity, detached signature and expiry","status":"MISSING"},{"lane":"cost","id":"COST-03","requirement":"durable budget hold and compensation owner for every cost-bearing step","status":"MISSING"},{"lane":"runtime","id":"RUNTIME-01","requirement":"reviewed SLO, capacity envelope and 11/11 readiness receipts","status":"MISSING"},{"lane":"runtime","id":"RUNTIME-02","requirement":"named maintenance window and two-person activation boundary","status":"MISSING"},{"lane":"runtime","id":"RUNTIME-03","requirement":"observed rollback/recovery outcome with time and zero-loss evidence","status":"MISSING"},{"lane":"security","id":"SECURITY-01","requirement":"root-owned configuration and verify-only key review","status":"MISSING"},{"lane":"security","id":"SECURITY-02","requirement":"replay, signature, scope and unready negative webhook evidence","status":"MISSING"},{"lane":"security","id":"SECURITY-03","requirement":"signed provenance, immutable materialization and least-visible SecretRef attestation","status":"MISSING"},{"lane":"product-owner","id":"OWNER-01","requirement":"Product Owner detached decision over the exact qualified dossier and all three independent approval receipts","status":"MISSING"}],"productOwnerDecision":{"owner":"PRODUCT_OWNER","requiredIndependentApprovals":3,"observedIndependentApprovals":0,"exactDossierBound":false,"decisionReceiptObserved":false,"decision":"NOT_ISSUED","mayAcceptD05":false,"reason":"Product Owner cannot review or accept an unqualified 0/11 dossier without three independent bound approvals."},"decisionPath":[{"id":"PO-01","label":"Materialize exact dossier","observed":"6/6 files","status":"PRESENT_UNQUALIFIED"},{"id":"PO-02","label":"Validate eleven production gates","observed":"0/11 satisfied","status":"DENIED"},{"id":"PO-03","label":"Collect independent approvals","observed":"0/3 signed","status":"NOT_STARTED"},{"id":"PO-04","label":"Issue Product Owner decision","observed":"0/1 receipt","status":"NOT_ISSUED"},{"id":"PO-05","label":"Enter five-seat D05 review","observed":"0/5 signatures","status":"NOT_ELIGIBLE"}],"operatorPlan":{"nextAction":"Owners must first satisfy G01-G10 with fresh independently signed receipts, regenerate one exact release-bound dossier, then FinOps, Runtime and Security may sign independently before Product Owner review.","forbiddenActions":["Do not treat six present JSON files as a qualified dossier.","Do not convert a Portal deployment or active 8100 listener into Runtime approval.","Do not reuse one person or one signature for Cost, Runtime and Security lanes.","Do not ask Product Owner to sign before the three independent receipts exist.","Do not set D05 accepted or open 8110 from this evidence directory."]},"safetyTruth":{"readOnlyAuditPerformed":true,"credentialsRecorded":false,"approvalRequestsSent":0,"approvalReceiptsWritten":0,"productOwnerDecisionsWritten":0,"d05AcceptanceDecisionsWritten":0,"controllerListenerStarts":0,"productionSwitches":0,"externalWritesExecuted":0,"paidResourcesCreated":false,"g11Satisfied":false,"d05Accepted":false},"verification":{"status":"PASS_READ_ONLY_EXACT_DOSSIER_AND_OWNER_APPROVAL_OBSERVATION","targetedGates":1,"satisfiedGates":0,"upstreamGatesSatisfied":0,"dossierInputsPresent":6,"dossierInputsRequired":6,"independentApprovalsObserved":0,"independentApprovalsRequired":3,"productOwnerDecisionsObserved":0,"productOwnerDecisionsRequired":1,"approvalRequestsSent":0,"controllerListenerStarts":0,"externalWritesExecuted":0,"d05Accepted":false},"discovery":{"workbench":"/release-foundation#runner-controller-owner-approval-evidence","schema":"/schemas/runner-controller-owner-approval-evidence.v1.schema.json","releaseEvidence":"/api/runner-controller/release-evidence","closure":"/api/runner-factory/controller/d05-acceptance-closure","runtimeIdentity":"/api/release-unit","releaseRegistry":"/api/release-units"}}