# MANDATE — <id>

| Property | Required value |
|---|---|
| Intent / requester | |
| Authorized repositories and exact paths | |
| Baseline branch / commit / dirty fingerprint | |
| In scope / out of scope | |
| Read / write / exec / network / merge / deploy permissions | |
| Explicit forbidden actions | |
| Output artifact and location | |
| Acceptance gates (RED/GREEN) | |
| Independent evidence | |
| Stop / rollback protocol | |
| Owner and adoption decision | |

**No silent scope expansion.** Any authority increase requires a distinct explicit grant. All unverified facts must be marked.