{
  "schema_version": "1.0",
  "baseline": "A-runtime-admin-phase-2b",
  "phase": "Phase 2b seed",
  "updated_at": "2026-04-19",
  "owner": "session_a",
  "honest_note": "Seed approval rows grounded in docs/runtime/admin-control-plane/approval_queue_model.json#queue_shape.item_fields. Loaded at service startup from ADMIN_APPROVAL_STORE_PATH (default: this file). READ-ONLY in Phase 2b — no CRUD endpoint. Rows cover: valid-within-TTL (single + dual signed_full), signed_partial for dual, expired (past sla_due_at), pending, withdrawn, rejected. `sla_due_at` doubles as the TTL deadline; engine computes ttl_remaining at read time. Every row carries an audit_event_refs[] with synthetic ids — those refs are DISPLAY-ONLY (no audit store consulted in this phase). The time base for demo vectors is 2026-04-19T06:00:00Z.",
  "store_policy": "read once at startup · no hot reload · no writes · no background TTL sweeper (expired state is compute-at-read from sla_due_at, not flipped)",

  "approvals": [
    {
      "approval_id": "APP-260419-V100",
      "queue_id": "queue-row-wizard-bundle-finalize",
      "matrix_row": "row-wizard-bundle-finalize",
      "target_type": "wizard_bundle",
      "target_id": "BUNDLE-42",
      "target_snapshot_ref": "snap-2026-04-19T05-00-bundle-42",
      "submitted_by": "U-42",
      "submitter_role": "end_user",
      "required_signer_roles": ["tenant_admin"],
      "required_signer_count": 1,
      "current_signers": [
        {"user_id": "U-TA-1", "role": "tenant_admin", "decision": "approve",
         "signed_at": "2026-04-19T05:30:00Z",
         "rationale": "All content complete · PDPA boxes checked",
         "signed_jwt_hash": "sha256:aa11bb22..."}
      ],
      "sensitive_flag": false,
      "state": "signed_full",
      "sla_band": "routine-4h",
      "sla_due_at": "2026-04-19T09:00:00Z",
      "opened_at": "2026-04-19T05:00:00Z",
      "closed_at": "2026-04-19T05:30:00Z",
      "audit_event_refs": ["aud-260419-1a2b3c4d"],
      "rationale": "Pilot-tenant wizard bundle finalize · single signer path",
      "source": "demo-seed"
    },
    {
      "approval_id": "APP-260419-V200",
      "queue_id": "queue-row-sensitive-override",
      "matrix_row": "row-sensitive-override",
      "target_type": "asset",
      "target_id": "GEN-ASSET-87",
      "target_snapshot_ref": "snap-2026-04-19T05-40-gen-87",
      "submitted_by": "U-SP-1",
      "submitter_role": "support_success",
      "required_signer_roles": ["tenant_dpo", "platform_governance"],
      "required_signer_count": 2,
      "current_signers": [
        {"user_id": "U-DPO-1", "role": "tenant_dpo", "decision": "approve",
         "signed_at": "2026-04-19T05:45:00Z",
         "rationale": "Tenant side clear · medical data category verified",
         "signed_jwt_hash": "sha256:cc33dd44..."},
        {"user_id": "U-PG-1", "role": "platform_governance", "decision": "approve",
         "signed_at": "2026-04-19T05:55:00Z",
         "rationale": "Platform governance sign-off · k-anon enforced downstream",
         "signed_jwt_hash": "sha256:ee55ff66..."}
      ],
      "sensitive_flag": true,
      "state": "signed_full",
      "sla_band": "priority-1h",
      "sla_due_at": "2026-04-19T06:45:00Z",
      "opened_at": "2026-04-19T05:45:00Z",
      "closed_at": "2026-04-19T05:55:00Z",
      "audit_event_refs": ["aud-260419-2b3c4d5e", "aud-260419-3c4d5e6f"],
      "rationale": "Sensitive data category · dual signer path satisfied",
      "source": "demo-seed"
    },
    {
      "approval_id": "APP-260419-P300",
      "queue_id": "queue-row-sensitive-override",
      "matrix_row": "row-sensitive-override",
      "target_type": "case",
      "target_id": "CASE-999",
      "target_snapshot_ref": "snap-2026-04-19T05-50-case-999",
      "submitted_by": "U-TA-2",
      "submitter_role": "tenant_admin",
      "required_signer_roles": ["tenant_dpo", "platform_governance"],
      "required_signer_count": 2,
      "current_signers": [
        {"user_id": "U-DPO-2", "role": "tenant_dpo", "decision": "approve",
         "signed_at": "2026-04-19T05:55:00Z",
         "rationale": "Tenant-side reviewed · awaiting platform governance",
         "signed_jwt_hash": "sha256:gg77hh88..."}
      ],
      "sensitive_flag": true,
      "state": "signed_partial",
      "sla_band": "priority-1h",
      "sla_due_at": "2026-04-19T06:55:00Z",
      "opened_at": "2026-04-19T05:50:00Z",
      "closed_at": null,
      "audit_event_refs": ["aud-260419-4d5e6f70"],
      "rationale": "Dual signer path · 1 of 2 signed · provisional only",
      "source": "demo-seed"
    },
    {
      "approval_id": "APP-260419-E400",
      "queue_id": "queue-row-marketplace-propose",
      "matrix_row": "row-marketplace-propose",
      "target_type": "tenant_publish",
      "target_id": "TENANT-pty-expired",
      "target_snapshot_ref": "snap-2026-04-18T09-00-expired",
      "submitted_by": "U-TA-3",
      "submitter_role": "tenant_admin",
      "required_signer_roles": ["tenant_admin"],
      "required_signer_count": 1,
      "current_signers": [
        {"user_id": "U-TA-3", "role": "tenant_admin", "decision": "approve",
         "signed_at": "2026-04-18T09:30:00Z",
         "rationale": "Originally self-approved · past SLA now",
         "signed_jwt_hash": "sha256:jj99kk00..."}
      ],
      "sensitive_flag": false,
      "state": "signed_full",
      "sla_band": "routine-4h",
      "sla_due_at": "2026-04-18T13:00:00Z",
      "opened_at": "2026-04-18T09:00:00Z",
      "closed_at": "2026-04-18T09:30:00Z",
      "audit_event_refs": ["aud-260418-5e6f7081"],
      "rationale": "Expired-by-SLA row · state still signed_full but ttl past · engine must treat as expired at read time (prec-8 fail-safe)",
      "source": "demo-seed"
    },
    {
      "approval_id": "APP-260419-P500",
      "queue_id": "queue-row-tenant-canonical-promote",
      "matrix_row": "row-tenant-canonical-promote",
      "target_type": "canonical_promote",
      "target_id": "DOC-tenant-pty-zeroth-v4",
      "target_snapshot_ref": "snap-2026-04-19T04-30-canonical",
      "submitted_by": "U-TA-1",
      "submitter_role": "tenant_admin",
      "required_signer_roles": ["platform_governance"],
      "required_signer_count": 1,
      "current_signers": [],
      "sensitive_flag": false,
      "state": "pending",
      "sla_band": "routine-4h",
      "sla_due_at": "2026-04-19T08:30:00Z",
      "opened_at": "2026-04-19T04:30:00Z",
      "closed_at": null,
      "audit_event_refs": ["aud-260419-6f708192"],
      "rationale": "Awaiting platform governance to claim + sign",
      "source": "demo-seed"
    },
    {
      "approval_id": "APP-260419-W600",
      "queue_id": "queue-row-marketplace-go-live",
      "matrix_row": "row-marketplace-go-live",
      "target_type": "tenant_publish",
      "target_id": "TENANT-pty-beta",
      "target_snapshot_ref": "snap-2026-04-19T03-00-beta",
      "submitted_by": "U-TA-2",
      "submitter_role": "tenant_admin",
      "required_signer_roles": ["platform_governance"],
      "required_signer_count": 1,
      "current_signers": [],
      "sensitive_flag": false,
      "state": "withdrawn",
      "sla_band": "routine-4h",
      "sla_due_at": "2026-04-19T07:00:00Z",
      "opened_at": "2026-04-19T03:00:00Z",
      "closed_at": "2026-04-19T04:00:00Z",
      "audit_event_refs": ["aud-260419-70819203"],
      "rationale": "Submitter withdrew after spotting tenant scope issue · must resubmit",
      "source": "demo-seed"
    },
    {
      "approval_id": "APP-260419-R700",
      "queue_id": "queue-row-sensitive-override",
      "matrix_row": "row-sensitive-override",
      "target_type": "asset",
      "target_id": "GEN-ASSET-11",
      "target_snapshot_ref": "snap-2026-04-19T02-00-gen-11",
      "submitted_by": "U-SP-1",
      "submitter_role": "support_success",
      "required_signer_roles": ["tenant_dpo", "platform_governance"],
      "required_signer_count": 2,
      "current_signers": [
        {"user_id": "U-DPO-1", "role": "tenant_dpo", "decision": "reject",
         "signed_at": "2026-04-19T02:30:00Z",
         "rationale": "Insufficient evidence · please re-submit with case ref",
         "signed_jwt_hash": "sha256:ll11mm22..."}
      ],
      "sensitive_flag": true,
      "state": "rejected",
      "sla_band": "priority-1h",
      "sla_due_at": "2026-04-19T03:00:00Z",
      "opened_at": "2026-04-19T02:00:00Z",
      "closed_at": "2026-04-19T02:30:00Z",
      "audit_event_refs": ["aud-260419-81920314"],
      "rationale": "Rejected state · approval_ref cannot be consumed as valid",
      "source": "demo-seed"
    },
    {
      "approval_id": "APP-260419-S800",
      "queue_id": "queue-row-platform-global-propose",
      "matrix_row": "row-platform-global-propose",
      "target_type": "flag_transition",
      "target_id": "flag:admin.control_plane_v1:transition:draft-to-internal",
      "target_snapshot_ref": "snap-2026-04-19T05-00-flag-admin-cp",
      "submitted_by": "U-PO-1",
      "submitter_role": "product_ops",
      "required_signer_roles": ["platform_governance", "dec_board"],
      "required_signer_count": 2,
      "current_signers": [
        {"user_id": "U-PG-1", "role": "platform_governance", "decision": "approve",
         "signed_at": "2026-04-19T05:20:00Z",
         "rationale": "Ready for DEC seal · metrics within tolerance",
         "signed_jwt_hash": "sha256:nn33oo44..."},
        {"user_id": "U-DEC-1", "role": "dec_board", "decision": "approve",
         "signed_at": "2026-04-19T05:45:00Z",
         "rationale": "DEC seal granted · quorum 3/3",
         "signed_jwt_hash": "sha256:pp55qq66..."}
      ],
      "sensitive_flag": true,
      "state": "signed_full",
      "sla_band": "routine-4h",
      "sla_due_at": "2026-04-19T09:00:00Z",
      "opened_at": "2026-04-19T05:00:00Z",
      "closed_at": "2026-04-19T05:45:00Z",
      "audit_event_refs": ["aud-260419-92031425", "aud-260419-a3142536"],
      "rationale": "Flag-transition approval · dual governance + DEC · fully signed",
      "source": "demo-seed"
    }
  ]
}