{
  "task_id": "DEV-000025",
  "task_revision": 1,
  "architecture_revision": "bootstrap-1",
  "base_repo_revision": "cef59b709e7f39fb4b90ec6c1609b206833b0de6",
  "risk_tier": "C",
  "intent": "Provide a production Docker-hosted Domovoy Creator web console through a narrow gateway that exposes only the authenticated read API from DEV-000024.",
  "allowed_change_scope": {"paths": ["cmd/creator-web/**", "deploy/docker-compose.prod.yml", "deploy/docker-compose.dev.yml", "tests/creator_web/**", "dev/tasks/DEV-000025-creator-web-console.json"]},
  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "modules/**", "contracts/**", "adapters/**", "cmd/core-runtime/**", "cmd/commit-runtime/**", "cmd/continuity-runtime/**"]},
  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0},
  "semantic_owner": "none-interface-adapter",
  "assumptions": ["Port 18080 is currently unused on docker.cin.su", "Creator bootstrap credentials remain runtime-only and are never persisted by the browser"],
  "acceptance_scenarios": ["Creator can exchange a bootstrap credential for a bounded session", "the gateway exposes only allowlisted Creator endpoints", "Creator can inspect own Focus, focus-matched Task, and Capability Health", "the console is usable on desktop and mobile", "no internal mutation endpoint is externally reachable"],
  "required_tests": ["unit", "gateway allowlist", "runtime HTTP", "responsive browser", "architecture", "remote Docker smoke"],
  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
}