{
  "task_id": "DEV-000157",
  "task_revision": 1,
  "architecture_revision": "ADR-0010",
  "base_repo_revision": "077f16e50ca22e14dbf00214005f0fe98a1c8308",
  "risk_tier": "E",
  "intent": "Capture fresh production PostgreSQL backup checksum and isolated restore verification evidence without changing the production database.",
  "requirement_ids": ["WP-002", "AUDIT-RECOVERY-TRUTH"],
  "allowed_change_scope": {"modules": [], "paths": ["docs/evidence/**", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000157-postgres-restore-evidence.json"]},
  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "cmd/**", "modules/**", "contracts/**", "adapters/**", "database/**", "deploy/**", ".gitea/**"]},
  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
  "contracts": {"consume": ["backup artifact format", "restore verification output"], "may_change": []},
  "semantic_owner": "none; evidence projection",
  "canonical_state": [],
  "state_transitions": ["evidence only; no production database mutation"],
  "side_effects_and_privileges": ["isolated temporary restore container created and removed by the existing verifier"],
  "persistence_and_migrations": ["immutable JSON evidence artifact only"],
  "failure_retry_restart": ["checksum or restore failure is recorded as failure; no blind retry claim"],
  "assumptions": ["the standard verifier uses tmpfs and cleans up its temporary container", "backup contents and credentials are not copied into repository evidence"],
  "acceptance_scenarios": ["latest backup directory is selected", "checksums pass", "isolated restore reports expected schema/table counts", "production database remains untouched"],
  "required_tests": ["JSON validation", "go test", "go vet", "preflight", "check-diff", "git diff --check", "independent", "CI"],
  "terminal_gap_states": ["BLOCKED_BY_MISSING_CAPABILITY", "BLOCKED_BY_CONFLICT"]
}