{
  "task_id": "DEV-000017",
  "task_revision": 1,
  "architecture_revision": "bootstrap-1",
  "base_repo_revision": "AFTER_DEV_000016",
  "risk_tier": "D",
  "intent": "Require Commit Runtime to construct AuthorizedAction only after live owner validation of Identity binding, Authority grant, Scope, and Work task revision over typed runtime queries.",
  "allowed_change_scope": {"paths": ["contracts/identity/**", "contracts/authority/**", "contracts/commit/**", "contracts/work/**", "modules/identity/**", "modules/authority/**", "modules/commit/**", "modules/work/**", "adapters/**", "cmd/core-runtime/**", "cmd/commit-runtime/**", "database/bootstrap/**", "database/migrations/**", "deploy/**", "tests/action_commit/**", "tests/runtime_authorization/**", "dev/tasks/DEV-000017-runtime-authorized-action-validation.json"]},
  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "modules/continuity/**", "modules/capability/**"]},
  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0},
  "semantic_owner": "commit",
  "acceptance_scenarios": ["revoked or stale Authority grant cannot create AuthorizedAction", "missing Actor-Principal binding cannot create AuthorizedAction", "stale Work target revision cannot create AuthorizedAction", "Commit Runtime has no direct access to identity or work schemas"],
  "required_tests": ["unit", "authority rejection", "runtime HTTP", "negative ACL", "architecture"],
  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_MISSING_CAPABILITY", "REQUIRES_MIGRATION_DECISION"]
}