{
  "task_id": "DEV-000034",
  "task_revision": 1,
  "architecture_revision": "ADR-0004",
  "base_repo_revision": "5fca81531a9d1ee26050a5d48e2d5b199135aa4e",
  "risk_tier": "E",
  "intent": "Make the existing project-specific production-host-only rule explicit and fail closed against accidental use of the shared docker-test host.",
  "requirement_ids": ["USER-DOCKER-PROD-ONLY", "CONSTITUTION-1.3.36"],
  "allowed_change_scope": {
    "modules": [],
    "paths": [
      "AGENTS.md",
      "dev/ACTIVE_TASK.json",
      "dev/tasks/DEV-000034-production-host-only-policy.json"
    ]
  },
  "forbidden_change_scope": {
    "paths": [
      "architecture/**",
      "ci/**",
      ".gitea/**",
      "cmd/**",
      "contracts/**",
      "modules/**",
      "database/**",
      "deploy/**",
      "security/**"
    ]
  },
  "allowed_architecture_delta": {
    "new_cross_module_dependencies": 0,
    "new_canonical_owners": 0,
    "new_privileges": 0
  },
  "contracts": {
    "consume": [],
    "may_change": []
  },
  "semantic_owner": "none; repository operations policy only",
  "canonical_state": ["none"],
  "state_transitions": ["none"],
  "side_effects_and_privileges": ["future project operations are limited to docker.cin.su unless the user explicitly re-authorizes another host"],
  "persistence_and_migrations": ["none"],
  "failure_retry_restart": ["operations targeting docker-test must stop before mutation and report the policy conflict"],
  "assumptions": [
    "The user explicitly reconfirmed that this project has a hard rule prohibiting docker-test",
    "The production Docker host remains docker.cin.su"
  ],
  "acceptance_scenarios": [
    "AGENTS.md explicitly prohibits docker-test aliases and hostname for all project operations",
    "the rule allows an exception only after new explicit project-specific user authorization",
    "no runtime, contract, schema, dependency, privilege or deployment configuration changes",
    "exact diff validation observes only this policy task's three declared paths"
  ],
  "required_tests": [
    "architecture preflight",
    "exact diff scope",
    "repository status",
    "production runner and application health"
  ],
  "terminal_gap_states": [
    "BLOCKED_BY_ARCHITECTURE_GAP",
    "BLOCKED_BY_CONFLICT"
  ]
}