{
  "task_id": "DEV-000021",
  "task_revision": 1,
  "architecture_revision": "bootstrap-1",
  "base_repo_revision": "AFTER_DEV_000020",
  "risk_tier": "E",
  "intent": "Strengthen the Architecture Sentinel without changing architecture: validate declared module contract dependencies and prove critical enforcement with negative self-tests.",
  "allowed_change_scope": {"paths": ["cmd/devctl/**", "tests/architecture/**", "dev/tasks/DEV-000021-architecture-sentinel-negative-tests.json"]},
  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "ci/architecture/**", "modules/**", "contracts/**", "adapters/**", "database/**"]},
  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0},
  "semantic_owner": "development-control-plane",
  "acceptance_scenarios": ["domain infrastructure import is rejected", "cross-module internal import is rejected", "undeclared contract dependency is rejected", "clean repository passes unchanged architecture registry"],
  "required_tests": ["negative guardrail self-tests", "full architecture sentinel", "go test", "go vet"],
  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_CONFLICT"]
}