{
  "scope": "Complete supported maintenance dispatch needed by Oficina provisioning; no live invocation until all approved launch gates are implemented and reviewed",
  "base": "006e7825",
  "current_slice": "Strict private launch codec and inert Linux subprocess supervisor; no worker mounting",
  "authority": "Decoded context is metadata only. It cannot construct a retained lease, executor, lifecycle claim, approval or trusted invocation.",
  "remaining": [
    "Native cgroup/lease integration evidence for reviewed subprocess supervisor",
    "Retained worker lease/executor and closed-checkpoint preparation proof",
    "Home startup adapter binding signed input, image, descriptors and opened database",
    "Owner-reviewed prepare/approval/status/result/retry/resume CLI and console workflow",
    "Private encrypted request/result publication with authenticated worker provenance",
    "Integrated native tests and Fable review before worker mounting",
    "Preview owner-approved provisioning, restore drill, and public gateway cutover"
  ],
  "verification": [
    "Required closed fields and exact numeric ranges",
    "Canonical timestamps, identifiers and binding digests",
    "UTF-8 and surrogate validity",
    "8KiB hard limit and overflow detection",
    "Nested v2 checkpoint evidence bindings",
    "No command mounting or execution authority from decoded bytes",
    "Focused race tests for descendants, expired-lease termination, exact private input and descriptor/environment isolation",
    "Fable approved codec at 01b82bde; supervisor refusal preserved and fixes awaiting re-review"
  ]
}