{
  "task_id": "ARCH-000011",
  "task_revision": 1,
  "architecture_revision": "generation-1",
  "base_repo_revision": "6f8c4e2bc7d4f86cad3fc0e773c8c580b19a29ee",
  "risk_tier": "E",
  "intent": "Produce a proposal-only architecture decision for a test Exploration profile with independent external audit, preserving useful local research and evidence while moving review visibility outside Domovoy without creating a direct model-to-world path.",
  "requirement_ids": ["FD-009", "FD-015", "FD-017", "FD-018", "FD-019", "FD-025", "INV-AUTH-001", "INV-EPI-001", "INV-PROJ-001", "USER-EXTERNAL-AUDIT-WITH-EXPLORATION-FREEDOM"],
  "allowed_change_scope": {
    "modules": [],
    "paths": [
      "docs/EXTERNAL_AUDIT_EXPLORATION_PROPOSAL.md",
      "dev/ACTIVE_TASK.json",
      "dev/tasks/ARCH-000011-external-audit-exploration-proposal.json"
    ]
  },
  "forbidden_change_scope": {
    "paths": ["architecture/**", "ci/**", ".gitea/**", "contracts/**", "modules/**", "adapters/**", "cmd/**", "database/**", "deploy/**", "security/**", "tests/**"]
  },
  "allowed_architecture_delta": {
    "new_cross_module_dependencies": 0,
    "new_canonical_owners": 0,
    "new_privileges": 0,
    "new_third_party_dependencies": 0,
    "new_database_owner_roles": 0
  },
  "contracts": {
    "consume": ["FD-009 model output boundary", "existing Work/Capability/Epistemics/Commit ownership", "existing transactional outbox direction"],
    "may_change": []
  },
  "semantic_owner": "proposal-only; no architectural decision, runtime behavior, audit deployment, or execution privilege is accepted by this task",
  "canonical_state": [],
  "state_transitions": [],
  "side_effects_and_privileges": ["select this proposal in the active task pointer", "no runtime action, provider call, credential handling, deployment, canonical mutation, or external action"],
  "persistence_and_migrations": [],
  "failure_retry_restart": ["proposal specifies reviewer loss as a non-failure for read-only exploration and a pending state for gated proposals", "no automatic execution or retry is introduced"],
  "assumptions": ["the user's explicit instruction authorizes analysis and proposal only, not removal of secret isolation, canonical history, authority validation, or commit/executor ownership", "external audit is independent observation rather than a competing executor", "docker-test remains prohibited"],
  "acceptance_scenarios": ["proposal defines useful local behavior during provider loss", "proposal separates canonical owners, audit projection, reviewer evidence and executor", "proposal defines audit outage and unknown-outcome semantics", "proposal identifies staged implementation and explicit decisions required", "no production behavior or protected architecture artifact changes"],
  "required_tests": ["task schema", "architecture preflight", "exact diff scope", "documentation review", "CI"],
  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
}