Operations-control schema
READYExpect schema 55 after migration 0055.
Provider Operations Acceptance Authorization + Bounded Steady-State Control Activation Foundation
This gate separates an operations-acceptance decision from the authorization that could transition provider control into managed steady state. Staging can rehearse only a HOLD-bound, dual-control, short-lived authorization and dry-run control activation. It cannot claim production acceptance, active production control, live requests, or provider network activity.
Cloudflare-safe operations-control matrix
READYEach case runs in its own Worker invocation.
Rehearse control authorization without accepting production operations
READYSafe QA must remain source HOLD / accepted NO, qa-rehearsal authorization, dry-run control activation, live requests 0, network NO.
Operations-control authorizations that must fail closed
Control activation attempts that must fail closed
Production actions must remain blocked from staging
READYEvery attack should show EXPECTED BLOCK.
QA policy / immutable events
Load state after starting a QA admin.
Recent validation evidence
Operations-control production gates — do not fake these green
Leave these open until a real production operations-acceptance decision has been independently approved and an intentional production control activation has been executed. Staging cannot satisfy them.