{
  "schema_version": "1.3",
  "release_version": "1.25.0",
  "reviewed_date": "2026-08-11",
  "kind": "verification_profile_migration_authorization",
  "claim_status": "PREREQUISITES_DOCUMENTED_NOT_AUTHORIZED",
  "canonical_human_page": "/stewardship-and-provenance/",
  "profile_id": "FUTURE_AUTHENTICATED_SCOPE",
  "active": false,
  "authorization_state": "NOT_AUTHORIZED",
  "owner_authorization": {
    "required": true,
    "grant_present": false,
    "grant_id": null,
    "required_fields": [
      "grant_id",
      "owner_identity_reference",
      "owner_identity_authenticated",
      "approved_profile",
      "approved_dimensions",
      "approved_trust_roots_or_issuer_policy",
      "approved_time_policy",
      "approved_transparency_or_offline_policy",
      "release_binding",
      "approval_date",
      "grant_sequence",
      "replay_nonce",
      "test_only_structural_only",
      "activation_effect",
      "signature_material_present"
    ],
    "authorization_must_be_separate_from_this_envelope": true
  },
  "migration_dimensions": [
    {
      "dimension": "signing",
      "current": "UNAVAILABLE_NOT_AUTHORIZED",
      "required_before_activation": "SEPARATE_OWNER_AUTHORIZATION_PLUS_VERIFIABLE_SIGNATURE_POLICY",
      "authorized": false
    },
    {
      "dimension": "identity",
      "current": "UNAVAILABLE",
      "required_before_activation": "SEPARATE_OWNER_AUTHORIZATION_PLUS_EXPECTED_SIGNER_OR_WORKLOAD_IDENTITY",
      "authorized": false
    },
    {
      "dimension": "trust_root",
      "current": "UNAVAILABLE",
      "required_before_activation": "SEPARATE_OWNER_AUTHORIZATION_PLUS_GOVERNED_ISSUER_OR_TRUST_ROOT",
      "authorized": false
    },
    {
      "dimension": "trusted_time",
      "current": "UNAVAILABLE",
      "required_before_activation": "SEPARATE_OWNER_AUTHORIZATION_PLUS_GOVERNED_TIME_POLICY",
      "authorized": false
    },
    {
      "dimension": "transparency_or_offline_evidence",
      "current": "UNAVAILABLE",
      "required_before_activation": "SEPARATE_OWNER_AUTHORIZATION_PLUS_GOVERNED_TRANSPARENCY_OR_OFFLINE_BUNDLE_POLICY",
      "authorized": false
    },
    {
      "dimension": "production_connectors",
      "current": "NOT_CONFIGURED",
      "required_before_activation": "SEPARATE_OWNER_AUTHORIZATION_AND_EXPLICIT_PRODUCTION_CHANGE",
      "authorized": false
    }
  ],
  "activation_guard": {
    "future_profile_must_remain_inactive": true,
    "production_signing_prohibited_now": true,
    "real_identity_configuration_prohibited_now": true,
    "trust_root_configuration_prohibited_now": true,
    "trusted_time_activation_prohibited_now": true,
    "transparency_activation_prohibited_now": true,
    "production_connector_change_prohibited_now": true,
    "failure_behavior": "FAIL_CLOSED"
  },
  "truth_boundary": "v1.25 adds local checkpoint-succession/recovery controls only. No owner grant, signer identity, trust root, trusted time, transparency evidence, signature, or production connector is activated.",
  "envelope_digest_sha256": "afb6d5b96ccb90684b7e10387dec82c5fdf87c5a66b30dab7c23918f9282677c",
  "grant_schema": {
    "path": "data/future-owner-authorization-grant-schema.json",
    "sha256": "ed16e7c5e17fd6a69403cbff21276047c2020d511f057b6d3d5d5859bc3d90df",
    "status": "TEST_ONLY_STRUCTURAL_ONLY"
  },
  "grant_validation_defense": {
    "state": "ACTIVE_STRUCTURAL_FAIL_CLOSED_NO_ACTIVATION",
    "schema_validation_only": true,
    "production_grant_acceptance_enabled": false,
    "consumed_or_accepted_grant_ids": [],
    "consumed_or_accepted_grant_digests": [],
    "consumed_or_accepted_decision_digests": [],
    "replayed_grant_behavior": "REJECT",
    "release_binding_required": "1.25.0",
    "wrong_release_behavior": "REJECT",
    "required_dimensions_exact_set": [
      "signing",
      "identity",
      "trust_root",
      "trusted_time",
      "transparency_or_offline_evidence",
      "production_connectors"
    ],
    "partial_dimension_behavior": "REJECT",
    "trust_root_change": {
      "separate_authorization_reference_required": true,
      "authorized_change_references": [],
      "unauthorized_change_behavior": "REJECT"
    },
    "trusted_time": {
      "bypass_allowed": false,
      "missing_or_bypass_behavior": "REJECT"
    },
    "transparency_or_offline_evidence": {
      "bypass_allowed": false,
      "missing_or_bypass_behavior": "REJECT"
    },
    "authorization_decision": {
      "decision_ledger_required_for_future_configuration": true,
      "allowed_states": [
        "PROPOSED",
        "REJECTED",
        "EXPIRED",
        "AUTHORIZED_FOR_FUTURE_CONFIGURATION"
      ],
      "expired_decision_reuse_behavior": "REJECT",
      "decision_rewrite_behavior": "REJECT",
      "grant_decision_digest_substitution_behavior": "REJECT",
      "authorized_for_future_configuration_activation_effect": "NONE",
      "revoked_decision_reuse_behavior": "REJECT",
      "replacement_without_predecessor_behavior": "REJECT",
      "replacement_predecessor_digest_mismatch_behavior": "REJECT"
    },
    "structural_validity_is_authorization": false,
    "structural_validity_activation_effect": "NONE"
  },
  "authorization_decision_ledger": {
    "path": "data/future-owner-authorization-decision-ledger.json",
    "sha256": "366ad1f1c37c6090f948433334e721775cbfd1ad9655afdc0efac2ca8a6137cf",
    "status": "TEST_ONLY_STRUCTURAL_DECISION_EVIDENCE",
    "production_acceptance": "PROHIBITED"
  },
  "authorization_decision_lifecycle": {
    "path": "data/future-owner-authorization-decision-lifecycle.json",
    "sha256": "11ad5479086a6f5f4c9e434a483c24dab86ba426fe76d2c6486140c67df6c491",
    "status": "TEST_ONLY_APPEND_ONLY_DECISION_LIFECYCLE"
  },
  "authorization_decision_currentness": {
    "path": "data/future-owner-authorization-decision-currentness.json",
    "sha256": "bea6ee8a0f525db09c1a59d7f4618747846d4f57ce98331c20fba4ba81c064e3",
    "status": "TEST_ONLY_DETERMINISTIC_CURRENTNESS"
  },
  "api_surface": "stewardship_verification_migration_authorization"
}