Skip to content

Prohibited Actions

Purpose

Explicit list of actions agents and automated workflows must not perform. Ambiguity is resolved against this page and governance-state.yaml.

Agents May Not

agents_may_not:
  - authorize_governance
  - authorize_ws2
  - retire_akoda
  - transfer_fsmo
  - demote_domain_controller
  - modify_ad
  - sign_attestations
  - create_manifests_as_authorization
  - generate_receipts_as_authorization
  - mutate_progress_ledger_as_authorization
  - promote_artifacts_as_authorization
  - execute_cutover
  - reclaim_resources
  - promote_writable_dc
  - treat_review_comments_as_verified_evidence
  - treat_planned_state_as_current_state

Blocked Until Separate WS2 Authorization

blocked_until_ws2:
  - fsmo_transfer
  - dc_demotion
  - akoda_retirement
  - akoda_decommission_execution
  - resource_reclamation
  - oluso_cutover
  - writable_dc_promotion
  - manifest_generation_for_execution
  - receipt_generation
  - progressledger_mutation
  - artifact_promotion
  - ws2_execution

Quarantined Artifacts (not part of WS1 review package)

  • approved_script_manifest-v51.csv
  • Test-OjuWS1Staging.ps1
  • Any CUTOVER_AUTHORIZED narrative