{
  "schemaVersion": "ga-authorization-validity-window-preflight-v1.0",
  "sourceSchemas": {
    "launchAuthorizationSeparation": "ga-launch-authorization-separation-envelope-v1.0",
    "authorizationProvenance": "ga-authorization-provenance-preflight-v1.0",
    "separationOfDuties": "ga-separation-of-duties-matrix-v1.0",
    "authorityBoundaryLedger": "ga-authority-boundary-ledger-v1.0"
  },
  "mode": "deterministic_authorization_validity_window_preflight_only",
  "generatedAt": "2026-08-02T23:18:00-06:00",
  "status": "blocked_no_active_time_bound_authorization",
  "targetRing": "controlled_ga",
  "prerequisiteSnapshot": {
    "launchAuthorizationRecords": 0,
    "signedAuthorizationLinks": 0,
    "completedProvenanceStages": 0,
    "assignedDuties": 0,
    "satisfiedSeparationConstraints": 0,
    "authorizedAuthorityDomains": 0
  },
  "fields": [
    {
      "id": "authorization_ref",
      "order": 1,
      "label": "Separate launch authorization reference",
      "required": true,
      "value": null
    },
    {
      "id": "scope_ref",
      "order": 2,
      "label": "Authorized scope reference",
      "required": true,
      "value": null
    },
    {
      "id": "audience_ref",
      "order": 3,
      "label": "Authorized audience reference",
      "required": true,
      "value": null
    },
    {
      "id": "authorized_ring",
      "order": 4,
      "label": "Authorized ring",
      "required": true,
      "value": null
    },
    {
      "id": "not_before",
      "order": 5,
      "label": "Not-before timestamp",
      "required": true,
      "value": null
    },
    {
      "id": "expires_at",
      "order": 6,
      "label": "Expiry timestamp",
      "required": true,
      "value": null
    },
    {
      "id": "timezone",
      "order": 7,
      "label": "Authorization timezone",
      "required": true,
      "value": null
    },
    {
      "id": "issued_by",
      "order": 8,
      "label": "Authorization issuer identity",
      "required": true,
      "value": null
    },
    {
      "id": "issued_at",
      "order": 9,
      "label": "Authorization issue timestamp",
      "required": true,
      "value": null
    },
    {
      "id": "revocation_contact",
      "order": 10,
      "label": "Revocation contact identity",
      "required": true,
      "value": null
    },
    {
      "id": "supersedes_authorization_ref",
      "order": 11,
      "label": "Superseded authorization reference",
      "required": true,
      "value": null
    },
    {
      "id": "policy_ref",
      "order": 12,
      "label": "Authorization policy reference",
      "required": true,
      "value": null
    }
  ],
  "checks": [
    {
      "id": "validity-authorization-exists",
      "order": 1,
      "type": "authorization_exists",
      "label": "A separately signed authorization record exists",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "validity-scope-bound",
      "order": 2,
      "type": "scope_bound",
      "label": "Exact scope is bound",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "validity-audience-bound",
      "order": 3,
      "type": "audience_bound",
      "label": "Exact audience and ring are bound",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "validity-issuer-separated",
      "order": 4,
      "type": "issuer_separated",
      "label": "Issuer identity is separated from execution",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "validity-not-before",
      "order": 5,
      "type": "not_before_present",
      "label": "Not-before timestamp and timezone are present",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "validity-expiry",
      "order": 6,
      "type": "expiry_present",
      "label": "Explicit expiry is present",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "validity-revocation",
      "order": 7,
      "type": "revocation_path_present",
      "label": "Revocation contact and policy are present",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    },
    {
      "id": "validity-provenance",
      "order": 8,
      "type": "provenance_bound",
      "label": "Immutable signed provenance is bound",
      "status": "not_evaluated",
      "satisfied": false,
      "evidenceRef": null,
      "evaluatedBy": null,
      "evaluatedAt": null
    }
  ],
  "lifecycle": {
    "authorizationActive": false,
    "currentlyEffective": false,
    "expired": false,
    "revoked": false,
    "superseded": false,
    "activationRef": null
  },
  "prohibitedClaims": [
    "blank_window_as_perpetual_authorization",
    "future_schedule_as_current_authority",
    "ci_success_as_time_bound_authorization",
    "draft_pr_as_active_authorization"
  ],
  "summary": {
    "requiredFields": 12,
    "completedFields": 0,
    "checks": 8,
    "evaluatedChecks": 0,
    "satisfiedChecks": 0,
    "activeAuthorizations": 0,
    "effectiveAuthorizations": 0,
    "expiredAuthorizations": 0,
    "revokedAuthorizations": 0,
    "supersededAuthorizations": 0
  },
  "nextHumanAction": {
    "action": "After a separately signed launch authorization exists, bind exact scope, audience, issuer, not-before, expiry, timezone, revocation path and immutable provenance before considering it effective.",
    "executed": false
  },
  "recommendation": {
    "value": "do_not_treat_authorization_as_active",
    "reasonCodes": [
      "authorization_record_absent",
      "validity_fields_blank",
      "validity_checks_not_evaluated",
      "expiry_absent",
      "provenance_absent"
    ],
    "canOverrideHumanDecision": false
  },
  "authority": {
    "fieldMutationAllowed": false,
    "checkEvaluationAllowed": false,
    "evidenceLinkingAllowed": false,
    "authorizationActivationAllowed": false,
    "notBeforeSettingAllowed": false,
    "expirySettingAllowed": false,
    "timezoneSettingAllowed": false,
    "issuerAssignmentAllowed": false,
    "revocationContactAssignmentAllowed": false,
    "supersessionBindingAllowed": false,
    "policyBindingAllowed": false,
    "lifecycleMutationAllowed": false,
    "decisionRecordingAllowed": false,
    "launchAuthorizationAllowed": false,
    "executorAssignmentAllowed": false,
    "executionWindowSettingAllowed": false,
    "transitionExecutionAllowed": false,
    "rollbackExecutionAllowed": false,
    "audienceOrCustomerActivationAllowed": false,
    "communicationDispatchAllowed": false,
    "billingConnectorOrCustomerDataMutationAllowed": false,
    "productionMutationAllowed": false,
    "readyForReviewAllowed": false,
    "mergeAllowed": false,
    "deploymentAllowed": false,
    "productionReleaseAllowed": false,
    "externalEffect": false,
    "timeBoundAuthorizationRequired": true,
    "explicitExpiryRequired": true,
    "revocationPathRequired": true
  }
}