{
  "documentKind": "illustrative_update_policy",
  "policyVersion": "0.1-proposed",
  "nonExecutableExample": true,
  "enforcementImplemented": false,
  "enabled": false,
  "mode": "candidate-only",
  "activation": {
    "authority": "creative-director-operator",
    "approvalRecordId": null,
    "approvedPolicySha256": null,
    "requiredRehearsals": [
      "independent-evaluator-detects-seeded-regression",
      "interrupted-job-recovers-without-duplicate-action",
      "save-migration-preserves-original-and-validates-copy",
      "release-and-compatible-restore-verified"
    ],
    "successCountNeverGrantsAuthority": true
  },
  "limits": {
    "maxActiveCandidatesPerSubsystem": 1,
    "maxActiveCandidatesTotal": 2,
    "maxAttemptsPerJobIncludingNestedCalls": 3,
    "maxJobWallClockMinutes": 45,
    "spendCapCurrency": "USD",
    "spendCapPerJob": null,
    "spendCapPerDay": null,
    "paidWorkWithoutExplicitCap": "blocked",
    "silentPaidFallback": false
  },
  "jobRequirements": [
    "evidence-linked-player-benefit",
    "baseline-manifest-hash",
    "permitted-paths-and-actions",
    "budget-reservation",
    "idempotency-key",
    "durable-lease-and-state",
    "candidate-artifact-hashes",
    "independent-evaluation-receipt",
    "fresh-base-check-before-integration"
  ],
  "candidateCannotChange": [
    "release-policy",
    "protected-design-baseline",
    "held-out-evaluation-cases",
    "evaluator-code-and-thresholds",
    "signing-keys",
    "production-state",
    "permissions-and-budgets"
  ],
  "promotion": {
    "automaticPublicReleaseClasses": [],
    "default": "review-required",
    "independentReleaseServiceOnly": true,
    "bindEvidenceToExactArtifactHashes": true,
    "applyOrdinaryUpdatesBetweenSessions": true,
    "unknownRiskClass": "review-required"
  },
  "releaseBundleRequires": [
    "code-commit",
    "toolchain-lock",
    "asset-manifest",
    "rules-content-schema-versions",
    "platform-package-hashes",
    "independent-check-results",
    "human-review-when-required",
    "policy-version-and-authorization",
    "compatible-restore-path"
  ],
  "savePolicy": {
    "pinSessionContentAndRules": true,
    "preservePreMigrationCopy": true,
    "validateMigratedCopyBeforeActivation": true,
    "binaryRollbackDoesNotImplySaveRollback": true,
    "retainSupportedCompatibleRuntimeOrRecovery": true
  },
  "schedule": {
    "activeJobs": [],
    "proposedTriggers": ["approved-task", "new-defect", "new-candidate-needs-evaluation"],
    "unchangedEvidence": "no-op",
    "engineAndModelUpgrades": "isolated-benchmark-only"
  },
  "notifications": {
    "routineSuccess": "quiet",
    "notifyOn": ["meaningful-improvement-ready", "failure", "required-decision", "budget-intervention"]
  },
  "emergencyControls": ["pause-queue", "revoke-promotion", "stop-paid-calls", "restore-compatible-release"]
}