{
  "$schema": "../schemas/solution-release.schema.json",
  "schema_version": "1.2.0",
  "release_id": "bounded_workflow_release",
  "version": "0.1.0",
  "release_status": "draft",
  "release_digest": "sha256:f90362c4397545497a892f133b653e3c70ab3318ae1ec121280e0f554df31549",
  "owner": "technical-owner",
  "created_at": "2026-08-07T16:00:00Z",
  "workflow_charter_uri": "workflow-charter.json",
  "agent_system_uri": "agent-system.json",
  "evaluation_report_uri": "evaluation-report.json",
  "target_segments": [
    "one low-risk workflow segment"
  ],
  "autonomy_level": "recommend",
  "artifacts": [
    {
      "role": "workflow_charter",
      "uri": "workflow-charter.json",
      "version": "0.1.0",
      "schema_version": "1.2.0",
      "digest": "sha256:fd2f57dc49e43bbe899c95fa7b2696a29637a4b067d6d5f8db5b9f0644d9b1e5",
      "change_summary": "Bind the approved workflow and value decision."
    },
    {
      "role": "data_context",
      "uri": "data-context-manifest.json",
      "version": "0.1.0",
      "schema_version": "1.0.0",
      "digest": "sha256:61e468248aa0e9c4bc856296c266562b3acb76dc429d4ce58db8ac29d2994a5b",
      "change_summary": "Bind the four data planes, decision-critical quality, preparation lineage, and operating contract."
    },
    {
      "role": "domain_model",
      "uri": "operational-ontology.json",
      "version": "0.1.0",
      "schema_version": "1.1.0",
      "digest": "sha256:dd5a1f5ec5bb48609e2e2847abaea6d8c99b66f5bf5bd184b7884ecb1bd63928",
      "change_summary": "Version the operational objects, policies, and actions."
    },
    {
      "role": "agent_system",
      "uri": "agent-system.json",
      "version": "0.1.0",
      "schema_version": "1.2.0",
      "digest": "sha256:87a9eb0ac9daf09c06058cf5f71b66ab5603ba0831918d1f197bb21b42170659",
      "change_summary": "Version the workflow topology and behavior contract."
    },
    {
      "role": "behavior_bundle",
      "uri": "behavior-bundle.json",
      "version": "0.1.0",
      "schema_version": "1.0.0",
      "digest": "sha256:4437d91ff17fe266a6754d495a9fdf430b7cbea72a0484cbb60d4f05a2c1aaf0",
      "change_summary": "Bind exact model-route, prompt, harness, context, tool-bundle, and guardrail configuration bytes."
    },
    {
      "role": "tool_contract",
      "uri": "tool-contract.json",
      "version": "0.1.0",
      "schema_version": "1.1.0",
      "digest": "sha256:6f589f84fdd8aa1fd3b68e7f3cbf11f79c8b5ec3a29961aec2f68ffcba88b17c",
      "change_summary": "Bind one exact capability and authorization contract."
    },
    {
      "role": "capability_manifest",
      "uri": "capability-manifest.json",
      "version": "0.1.0",
      "schema_version": "1.1.0",
      "digest": "sha256:4fe9e3f8ddb9a904f0e85889699369179dd66e0123600ef16167e5d415fded74",
      "change_summary": "Bind the exact admitted build, tool contract, authority, provenance, and registry decision."
    },
    {
      "role": "security_policy",
      "uri": "authorization-policy.mjs",
      "version": null,
      "schema_version": null,
      "digest": "sha256:94d1613d8de02f02be155fcdd6bfa145808ea4dfd314fb6b4271ea92819f274e",
      "change_summary": "Bind the generic fail-closed authorization skeleton."
    },
    {
      "role": "threat_model",
      "uri": "threat-model.json",
      "version": null,
      "schema_version": "1.0.0",
      "digest": "sha256:901aa5a5a4d91b5fc2ccfde0fe7c32988244b5133082d8753388c8f0c3144633",
      "change_summary": "Bind threat controls and negative tests."
    },
    {
      "role": "evaluation",
      "uri": "evaluation-report.json",
      "version": "0.1.0",
      "schema_version": "1.1.0",
      "digest": "sha256:58419a4a697d0933b0f6a65ade7540fc5ed16a9dd3ba289902b5b421523dad62",
      "change_summary": "Bind the tested claim and evaluation environment."
    },
    {
      "role": "runtime",
      "uri": "reference-runtime.mjs",
      "version": "0.1.0",
      "schema_version": null,
      "digest": "sha256:c7fa90936171f0fc6036bfa98976d1c26480c813f6693f1b964b15f57162d22d",
      "change_summary": "Bind the generic fail-closed runtime skeleton."
    },
    {
      "role": "user_surface",
      "uri": "operator-surface.mjs",
      "version": null,
      "schema_version": null,
      "digest": "sha256:785d0e77faa34653cc120575cd7fe65bb5ceb4bc4be826fc0c68c0fbb4254c37",
      "change_summary": "Bind the explicit fail-closed operator-surface skeleton."
    },
    {
      "role": "operations",
      "uri": "operations-bundle.mjs",
      "version": null,
      "schema_version": null,
      "digest": "sha256:c9b77b3ada36e40759b6f3728e8e58fbfd64a2612080845fd62f498bc602f663",
      "change_summary": "Bind the explicit fail-closed health, kill-switch, and rollback skeleton."
    }
  ],
  "compatibility": {
    "environment_id": "not-executed-template-environment",
    "migration_required": false,
    "migrations": [],
    "known_incompatibilities": [
      "Canonical skeleton only; executable environment and evidence are not supplied."
    ],
    "verification": [
      "Validate the complete artifact bundle and execute the declared release suite in the target environment."
    ]
  },
  "rollout": {
    "strategy": "shadow",
    "traffic_percent": 0,
    "soak_seconds": 86400,
    "success_criteria": [
      "All declared outcome, safety, adoption, cost, and service thresholds pass for the target segment."
    ],
    "rollback_criteria": [
      "Any prohibited effect, evaluator-integrity failure, or declared rollback threshold pauses the segment."
    ],
    "kill_switch": "workflow-gateway-segment-deny",
    "rollback_owner": "rollback-owner",
    "service_owner": "service-owner"
  },
  "approvals": [],
  "deployment_evidence": null,
  "rollback_evidence": null,
  "retirement_evidence": null,
  "control_ids": [
    "DEL-001",
    "DEL-002",
    "TOL-006",
    "SEC-007",
    "EVA-006",
    "ADP-002",
    "OPS-007"
  ]
}