06 — P4 C1 Grant / Ownership / Authority Binding — 2026-06-22

Dependency

A C1-scoped build/dry-run grant + ownership binding is only meaningful after the C1 surface and DOT_C1_* contracts exist (P2/P3). Since P2/P3 are blocked (files 04/05), P4 is not reachable in this pass.

Live authority state (read-only)

• governance_build_authorization grants for C1 = 0 (no draft/active/consumed/expired/revoked grant for any DOT_C1_*).
• Ownership bindings for C1 = 0.
• The grant lifecycle is itself a governed surface; minting a grant is a governed write — same channel problem as P2/P3.

What a correct C1 grant WOULD require (design, not executed)

• C1-scoped, test/dry-run scoped, single-use (or dry-run-safe), manifest-bound (cser-v1 manifest hash of R_C1 ops), plan-bound, with expiry/revocation, an ownership binding, and a rollback_plan_ref.
• Rejects: no-grant / generic-grant / wrong-scope / stale / reused.

Result

P4 = no C1 grant minted; no ownership bound — correctly, because there is nothing yet to bind a grant to and no governed channel to mint one. ⇒ subordinate to C1_DRYRUN_CAPABILITY_LOCKED_OPERATOR_ACTION_REQUIRED (would otherwise read C1_DRYRUN_HOLD_C1_GRANT_FAILED). No authority artifact was fabricated.