{
  "schema": "aios.gitea-native-approval/v1",
  "approval_type": "IMPLEMENTATION",
  "task_id": "AIOS-INTEGRATION-REFRESH-PROVISIONER-IMPLEMENTATION-20260726",
  "repository": "aios/aios",
  "branch": "patch/integration-refresh-grant-provisioner-20260726",
  "base_oid": "875d41c3101093149414292067fd700dc214d4d3",
  "actor_identity": "chatgpt-gitops-bot",
  "writer_audience": "aios-integration-refresh-provisioner-development-writer",
  "risk": "high",
  "allowed_paths": [
    "active-runtime/app/**",
    "tests/test_integration_refresh_provisioner.py",
    "tests/test_isolated_writer_integration_merge.py",
    "tests/test_gitea_branch_read_projection.py",
    "tests/test_isolated_writer_token_policy_v2.py",
    "deploy/systemd/aios-integration-refresh-*.service",
    "docs/autonomous-release/**"
  ],
  "allowed_operations": [
    "repository.source_map.read",
    "runtime.unit_metadata.read",
    "git.ref.read",
    "git.diff.read",
    "git.branch.patch.create",
    "commit_file.atomic",
    "git.push.patch_branch",
    "test.execute.allowlisted",
    "artifact.build.control_plane_patch",
    "evidence.write.task_runtime"
  ],
  "denied_operations": [
    "main.write",
    "main.merge",
    "tag.write",
    "tag.delete",
    "tag.rewrite",
    "force_push",
    "history.rewrite",
    "baseline.write",
    "registry.write",
    "production.deploy",
    "production.rollback",
    "secret.read",
    "secret.export",
    "bare_ref_direct_write"
  ],
  "expires_at": "2026-07-27T03:35:55Z"
}