{
  "task_id": "DEV-000024",
  "task_revision": 1,
  "architecture_revision": "bootstrap-1",
  "base_repo_revision": "9b136621ef17982ae118705f9d0663dc014e5fa6",
  "risk_tier": "C",
  "intent": "Expose a session-authenticated, read-only Creator API for the Creator's own Focus, focus-matched Task, and Capability Health without granting mutation authority.",
  "allowed_change_scope": {"paths": ["cmd/core-runtime/**", "tests/creator_api/**", "dev/tasks/DEV-000024-authenticated-creator-read-api.json"]},
  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "modules/commit/**", "contracts/**", "adapters/**", "deploy/**"]},
  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0},
  "semantic_owner": "none-read-composition",
  "acceptance_scenarios": ["missing or invalid Creator session is denied", "Creator can read only a Focus bound to its Actor", "Task read must match the authenticated active Focus goal and scope", "Capability Health read does not mutate canonical state"],
  "required_tests": ["unit", "runtime HTTP", "wrong-focus denial", "architecture"],
  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP"]
}