schema: 1
owner:
scope:
  control_host_apps_and_binaries: []
  linux_packages_and_kernels: []
  container_and_application_releases: []
  firmware_and_storage_formats: []
principles:
  available_update_discovery_is_read_only: true
  automatic_distribution_security_updates:
  automatic_reboot: false
  ordinary_owner_brew_or_apt_upgrade_forbidden: false
  enterprise_equivalent_staging_exists: false
  one_operational_layer_per_change: true
classification:
  urgent_security:
  routine_patch:
  feature_or_minor:
  major_or_platform:
  firmware:
before_installation:
  work_size: null # allowed: tiny, small, medium, large, XL
  quota_size: null # allowed: tiny, small, medium, large, XL
  selected_model_and_reasoning:
  affected_tiers: []
  service_disruption:
  network_disruption:
  storage_disruption:
  household_disruption:
  duration_evidence: null # allowed: measured, sourced, guess-with-basis-and-uncertainty, unknown
  current_versions_and_config_reference:
  proposed_transaction_reference:
  release_notes_and_advisories: []
  compatibility_or_schema_changes: []
  recovery_point_reference:
  downgrade_limits:
  recovery_method: null # allowed: package-downgrade, previous-kernel, snapshot, pinned-reinstall, rebuild, owner-reviewed-fix-forward
  independent_access_test:
application:
  human_packet_reference:
  single_invocation:
  maintenance_window:
  stop_conditions: []
  transaction_local_failure_cleanup:
    mode: none # allowed: none, preauthorized-inside-sealed-transaction
    actor:
    exact_scope:
    recorded_pre_state_reference:
    authorization_reference:
    valid_until:
    validators: []
    evidence_reference:
    requirements:
      owner_hold_overrides: true
      same_invocation_only: true
      no_target_action_or_scope_expansion: true
validation:
  native_checks: []
  consumer_checks: []
  denial_checks: []
  reboot_checks: []
  evidence_reference:
failure:
  freeze_mutation: true
  preserve_evidence: true
  rollback_is_usual_first_recommendation_when_justified: true
  new_rollback_requires_owner_choice: true
  owner_choice_for_new_rollback: not-yet-asked # allowed after asking: rollback, hold, reviewed-fix-forward
unplanned_owner_upgrade:
  transaction_log_reference:
  observed_versions:
  reconciliation_tests: []
  desired_state_decision:
