{
  "task_id": "DEV-000283",
  "task_revision": 1,
  "architecture_revision": "ADR-0018",
  "base_repo_revision": "94baf98",
  "risk_tier": "E",
  "intent": "Add an independent deterministic envelope verifier before a generic local Work Graph candidate is recorded.",
  "requirement_ids": ["independent candidate envelope verification", "model output is not truth", "graph success still requires synthesis"],
  "allowed_change_scope": {"modules": ["work"], "paths": ["dev/ACTIVE_TASK.json", "dev/tasks/DEV-000283-generic-candidate-verifier.json", "contracts/work/graph.go", "cmd/task-verifier/**", "cmd/agent-execution-bridge/**"]},
  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "modules/identity/**", "modules/authority/**", "LLM-local/**", "deploy/**"]},
  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
  "contracts": {"consume": ["contracts/work@v1", "task-verifier internal endpoint", "work graph result callback"], "may_change": ["contracts/work graph candidate verification payload"]},
  "semantic_owner": "work",
  "canonical_state": ["verification evidence is an integrity envelope only; candidate remains unverified semantically"],
  "state_transitions": ["generic model output -> deterministic envelope verification -> candidate recording -> VERIFYING"],
  "side_effects_and_privileges": ["local verifier call and work graph callback; no external mutation"],
  "persistence_and_migrations": ["reuse existing candidate evidence refs; no migration"],
  "failure_retry_restart": ["verifier unavailable returns retryable failure", "invalid envelope returns WAITING", "graph success remains gated by independent synthesis"],
  "assumptions": ["deterministic verification proves attribution/integrity only, not factual truth", "task-verifier is an independently running local service"],
  "acceptance_scenarios": ["valid generic candidate obtains verifier evidence", "invalid candidate is not recorded as completed", "model output remains unverified", "existing task evaluation path remains unchanged"],
  "required_tests": ["go test ./...", "go vet ./...", "preflight", "check-diff", "check-architecture", "independent", "git diff --check", "CI"],
  "terminal_gap_states": ["BLOCKED_BY_MISSING_CAPABILITY"]
}