{
  "schema": "RoomManifestV1",
  "room_id": "JOB",
  "version": 1,
  "body": {
    "purpose": "Lease synthetic jobs and persist metadata/hash-only checkpoints.",
    "prefix": "[ARC/JOB/v1]",
    "allowed": [
      "Read own eligible job metadata",
      "Acquire one lease with fencing",
      "Write compare-and-swap hash checkpoint"
    ],
    "prohibited": [
      "private, production, credential, personal, market-live or voice-raw payload",
      "Telegram or model text interpreted as shell",
      "absolute path, traversal, symlink or cross-run access",
      "candidate self-evaluation or model-granted execution authority",
      "target Ubuntu, service, Nginx, firewall, package, permission or schema mutation"
    ],
    "tools": [
      "job.read",
      "job.lease",
      "checkpoint.read",
      "checkpoint.write"
    ],
    "read_scope": [
      "eligible synthetic job metadata",
      "own checkpoint hashes"
    ],
    "write_scope": [
      "own checkpoint metadata/hash rows"
    ],
    "data_class": "SYNTHETIC_PUBLIC_ONLY",
    "quota": {
      "message_chars": 2000,
      "single_object_bytes": 1048576,
      "workspace_bytes": 8388608,
      "workspace_objects": 128
    },
    "ttl": {
      "admission_seconds": 3600,
      "workspace_seconds": 3600,
      "session_seconds": 86400
    },
    "approval": "Owner-only exact staging plan; no target-host authority",
    "retention": "No server message-body persistence; metadata/hash only; workspace deleted at completion or 3600 seconds",
    "output": "Canonical JSON envelope with object IDs and SHA-256; no OS path",
    "risk_ceiling": "PROVISIONAL_PILOT_SYNTHETIC_STAGING_ONLY",
    "comprehension": [
      {
        "id": "JOB-ACK-1",
        "question": "Can checkpoint content include private message bodies?",
        "answer": "NO"
      },
      {
        "id": "JOB-ACK-2",
        "question": "Are stale fencing tokens accepted?",
        "answer": "NO"
      }
    ]
  },
  "content_sha256": "91a5bc71f9680a6f580a260d361f289da43d6299b0c24cbba9ad4411f522c28c"
}