L12-01 — Define immutable promotion and authorization #86

Outcome

Specify workflow version, trigger, inputs, allowed operation plan, approver, scope, expiry, revocation, and audit receipt.

Parent and boundary

Parent: #13. Owner: proposed Automation module. This issue owns one bounded slice of Automation Runtime; consume accepted upstream contracts and keep PDF/verdict/publication authority with Core.

Acceptance

• Only promoted exact versions can enter runtime; change requires new approval.
• Failure case: Repeat frequency or model output cannot self-promote a workflow.

Required proof

Promotion policy vectors and concurrent revocation tests. Record the exact source SHA, test command or hosted run, fixture/artifact identity, and any skipped or unavailable lane. Run the repository's mapped proof and check-change gate for a PR.

Handoff

Record changed files, observed result, remaining risk, and a 1–3 sentence anti-slop review. Completion means acceptance evidence, not merely a merged implementation.

Sources

Approved master roadmap · Legacy/research input (legacy #455).