Live GitHub is not connected. Refresh can only revalidate the snapshot stamped 2026-08-27 23:26 UTC; it will not claim that unchanged data is live.
GREENStanding authority

Merge a safe PR after exact-head CI and expected-head verification

Accountable authority

Codex / Utilization Manager
AMBERGuarded execution

Close gaps through the semantic owner with refusal tests

Accountable authority

Sessions A–F + Codex
REDOwner decision only

Production release, destructive data action and risk acceptance

Accountable authority

Meshal Al-Faisal
HOLDAwait trustworthy IdP amr/acr

Platform-admin MFA enforcement

Accountable authority

Owner + Session A
BLOCKExternal block tracked in #316

Protected mainline ruleset

Accountable authority

Repository owner
DECISION FLOW

No gray area between discovery and execution

1Verify

Use owner decisions, live GitHub, exact heads, migrations and CI.

2Classify

GREEN execution, AMBER guarded closure or RED owner authority.

3Act

Fix safely, contain with a repair PR or isolate the RED slice.

4Prove

Tests, exact-head CI, report/index and mainline verification.

ACTIVE OWNER / EXTERNAL DEPENDENCIES

Explicit holds

HOLD
Platform-admin MFA enforcementKeep OFF until trustworthy IdP amr/acr is emitted and persisted.
BLOCK
Protected mainline ruleset#316 remains an external enforcement block; exact-head guards continue.
RED
Production and residual risk acceptanceOwner-controlled. Never inferred from a green build.
STANDING MANAGER AUTHORITY

Actions Codex may execute

Correct safe GREEN defectsSmall PR, fail-before evidence and exact-head CI

Prevent collisions and stale mergesOne concern, one semantic owner, current mainline

Merge with expected-head protectionOnly after all required gates pass

Open the smallest successor reportWhen implementation evidence is incomplete

Delivery sourcemeshal236/NexGen / NexGen
Plan sourceMaster Plan v2.3.0 · blob 67dc1f0
Last delivery verification2026-08-27 23:26 UTC
Data modeVerified snapshot — GitHub not connected