{
  "wave": "61G",
  "name": "Execution Permission Ledger",
  "status": "permission-ledger-ready",
  "generatedAt": "2026-07-08T18:31:02.105Z",
  "commit": "e6641e2",
  "branch": "main",
  "route": "/execution-permission-ledger",
  "endpoint": "/api/live/execution-permission-ledger",
  "textEndpoint": "/api/live/execution-permission-ledger?view=text",
  "shell": "/agent-arena/shell",
  "upstream": {
    "selectorWave": "61B",
    "selectorRoute": "/runtime-path-selector",
    "shellBindingWave": "61C",
    "shellBindingRoute": "/runtime-path-selector-shell-binding-receipt",
    "missionPacketWave": "61D",
    "missionPacketRoute": "/runtime-path-mission-packet-registry",
    "reviewQueueWave": "61E",
    "reviewQueueRoute": "/mission-packet-review-queue",
    "promotionGateWave": "61F",
    "promotionGateRoute": "/mission-promotion-gate",
    "selectorMarker": "data-runtime-path-selector-61b",
    "bindingMarker": "data-runtime-path-selector-shell-binding-receipt-61c",
    "packetMarker": "data-runtime-path-mission-packet-registry-61d",
    "reviewMarker": "data-mission-packet-review-queue-61e",
    "promotionMarker": "data-mission-promotion-gate-61f"
  },
  "purpose": "Create an execution permission ledger that records permission states after promotion gates while keeping execution runtime inactive.",
  "permissionClasses": [
    {
      "id": "no-execution",
      "label": "No Execution",
      "meaning": "Packet may be reviewed, routed, or documented but cannot execute.",
      "executionAllowed": false
    },
    {
      "id": "approval-required-before-execution",
      "label": "Approval Required Before Execution",
      "meaning": "Packet requires explicit source, budget, freshness, scope, and human approval before any future execution.",
      "executionAllowed": false
    },
    {
      "id": "future-build-required-before-execution",
      "label": "Future Build Required Before Execution",
      "meaning": "Packet requires a future browser extension, native helper, or device bridge before execution can even be considered.",
      "executionAllowed": false
    },
    {
      "id": "forbidden-without-credential-consent",
      "label": "Forbidden Without Credential Consent",
      "meaning": "No credential, account, provider, or device access is allowed without explicit future consent and a revocation path.",
      "executionAllowed": false
    }
  ],
  "ledgerEntries": [
    {
      "id": "observe-system-state",
      "promotionState": "promote-to-internal-review",
      "permissionClass": "no-execution",
      "permissionResult": "read-only-review",
      "executionAllowed": false,
      "requiredBeforeExecution": [
        "human-reviewed-action-plan",
        "fresh-receipt"
      ],
      "blockedActions": [
        "write",
        "send",
        "purchase",
        "delete",
        "credential-access"
      ]
    },
    {
      "id": "open-external-account-app",
      "promotionState": "promote-to-user-browser-handoff-review",
      "permissionClass": "no-execution",
      "permissionResult": "user-browser-handoff-only",
      "executionAllowed": false,
      "requiredBeforeExecution": [
        "user-owned-browser-session",
        "explicit-user-action"
      ],
      "blockedActions": [
        "credential-copy",
        "session-harvest",
        "iframe-control",
        "account-automation"
      ]
    },
    {
      "id": "fetch-live-public-data",
      "promotionState": "hold-for-provider-approval",
      "permissionClass": "approval-required-before-execution",
      "permissionResult": "provider-held",
      "executionAllowed": false,
      "requiredBeforeExecution": [
        "source",
        "budget",
        "freshness",
        "scope",
        "kill-switch",
        "operator-approval"
      ],
      "blockedActions": [
        "provider-spend",
        "secret-access",
        "unbounded-fetch"
      ]
    },
    {
      "id": "coordinate-agent-work",
      "promotionState": "promote-to-internal-review",
      "permissionClass": "no-execution",
      "permissionResult": "agent-handoff-review-only",
      "executionAllowed": false,
      "requiredBeforeExecution": [
        "agent-scope",
        "task-boundary",
        "human-approval"
      ],
      "blockedActions": [
        "autonomous-execution",
        "external-send",
        "provider-spend"
      ]
    },
    {
      "id": "move-across-browser-tabs",
      "promotionState": "route-to-extension-build-plan",
      "permissionClass": "future-build-required-before-execution",
      "permissionResult": "extension-build-plan-only",
      "executionAllowed": false,
      "requiredBeforeExecution": [
        "extension-build",
        "permission-receipt",
        "user-install",
        "revocation-path"
      ],
      "blockedActions": [
        "tab-control",
        "page-context-read",
        "browser-automation"
      ]
    },
    {
      "id": "operate-desktop-device",
      "promotionState": "route-to-native-device-build-plan",
      "permissionClass": "future-build-required-before-execution",
      "permissionResult": "native-device-build-plan-only",
      "executionAllowed": false,
      "requiredBeforeExecution": [
        "native-helper-build",
        "device-permission-receipt",
        "local-install",
        "revocation-path"
      ],
      "blockedActions": [
        "keyboard-control",
        "mouse-control",
        "file-write",
        "device-control"
      ]
    }
  ],
  "visualPolicy": {
    "shellVisualMutation": "data binding only",
    "newShellIconsAdded": false,
    "newShellPanelsAdded": false,
    "browserWidgetAdded": false,
    "centerSurfaceContentChanged": false,
    "externalDockChanged": false
  },
  "activationPolicy": {
    "browserControlActivated": false,
    "deviceBridgeActivated": false,
    "externalAccountAutomationActivated": false,
    "providerSpendActivated": false,
    "credentialAccessActivated": false,
    "executionRuntimeActivated": false,
    "permissionLedgerOnly": true
  },
  "next": "61G-R1 Execution Permission Ledger Live Audit"
}