{
  "schema": "RoomManifestV1",
  "room_id": "APPROVAL",
  "version": 1,
  "body": {
    "purpose": "Show an exact frozen staging plan for Owner-only approval or rejection.",
    "prefix": "[ARC/APPROVAL/v1]",
    "allowed": [
      "Read exact plan/hash/nonce/expiry",
      "Display Owner decision state"
    ],
    "prohibited": [
      "private, production, credential, personal, market-live or voice-raw payload",
      "Telegram or model text interpreted as shell",
      "absolute path, traversal, symlink or cross-run access",
      "candidate self-evaluation or model-granted execution authority",
      "target Ubuntu, service, Nginx, firewall, package, permission or schema mutation"
    ],
    "tools": [
      "changeplan.read",
      "approval.status"
    ],
    "read_scope": [
      "exact staging plan metadata/hash"
    ],
    "write_scope": [],
    "data_class": "SYNTHETIC_PUBLIC_ONLY",
    "quota": {
      "message_chars": 2000,
      "single_object_bytes": 1048576,
      "workspace_bytes": 8388608,
      "workspace_objects": 128
    },
    "ttl": {
      "admission_seconds": 3600,
      "workspace_seconds": 3600,
      "session_seconds": 86400
    },
    "approval": "Owner-only exact staging plan; no target-host authority",
    "retention": "No server message-body persistence; metadata/hash only; workspace deleted at completion or 3600 seconds",
    "output": "Canonical JSON envelope with object IDs and SHA-256; no OS path",
    "risk_ceiling": "PROVISIONAL_PILOT_SYNTHETIC_STAGING_ONLY",
    "comprehension": [
      {
        "id": "APPROVAL-ACK-1",
        "question": "Can an Agent or model vote approve a plan?",
        "answer": "NO"
      },
      {
        "id": "APPROVAL-ACK-2",
        "question": "Is target Ubuntu installation authorized?",
        "answer": "NO"
      }
    ]
  },
  "content_sha256": "ea96676ddd6418e9d52e3a071a8628015f897042745ab65e867a4a12c9960f07"
}