{
  "schema_version": "review-contract/v1",
  "contract_key": "WARDEN-WP-0027-T02-DRILL-20260822-01-INFRA",
  "subject": {
    "kind": "task",
    "id": "WARDEN-WP-0027-T02"
  },
  "scenario_id": "WARDEN-WP-0027-T02-DRILL-20260822-01",
  "expires_at": "2026-08-23T20:00:00Z",
  "authorizes_execution": false,
  "evidence_boundary": "metadata_only",
  "allowed_dispositions": [
    "approve",
    "request_changes"
  ],
  "artifacts": {
    "docs/evidence/WARDEN-WP-0027-T02-drill-scenario-2026-08-22.md": {
      "algorithm": "sha256",
      "digest": "ffa69764ad391db633f57ac70444e5781eee698bf9e362dfef31614fa43152dc"
    }
  },
  "owners": [
    {
      "id": "railiance-infra",
      "artifact_ids": [
        "docs/evidence/WARDEN-WP-0027-T02-drill-scenario-2026-08-22.md"
      ],
      "assertions": [
        {
          "id": "scenario-and-expiry-bound",
          "statement": "This receipt applies only to scenario WARDEN-WP-0027-T02-DRILL-20260822-01 and expires at 2026-08-23T20:00:00Z."
        },
        {
          "id": "provider-console-access-explicit",
          "statement": "railiance-infra has independently verified provider-console access; it is not inferred from SSH, Warden, or cluster reachability."
        },
        {
          "id": "distinct-abort-authority-accepted",
          "statement": "railiance-infra accepts the distinct abort-authority role for this scenario and its bounded live window."
        },
        {
          "id": "metadata-only-evidence",
          "statement": "The receipt and its checks disclose no credential, token, recovery share, secret value, value-derived fingerprint, or provider-console detail."
        },
        {
          "id": "execution-not-authorized",
          "statement": "Approval is owner coordination evidence only and authorizes no console action, reboot, OpenBao seal or unseal, or other live execution."
        }
      ],
      "check_ids": [
        "scenario-artifact-sha256",
        "provider-console-access-attestation",
        "distinct-abort-role-attestation",
        "metadata-only-boundary"
      ]
    }
  ],
  "gates": [
    {
      "id": "WARDEN-WP-0027-T02-DRILL-20260822-01-INFRA",
      "policy": "all_required",
      "owners": [
        "railiance-infra"
      ]
    }
  ]
}