Engineering Control.
Real work, explicit permission, inspectable proof. The runner is not autonomous until an authorized execution environment is connected.
No unverified deployment claims
Mission register
Loading authorized engineering work…
Connect the worker without weakening the gate.
Open the Genesis project Setup and configure the already-declared X7301_RUNNER_BEARER_SECRET using a unique 48+ character value. Keep it out of chat, source code, email, and browser URLs.
Use a source-capable external coding environment with its own authorized Hatchable collaborator session. For the bearer route it must also hold the matching secret in its secure vault; OAuth MCP is a separate governed option.
Claim only an authorized low-risk mission. Record a real SHA-256 source change, a canonical same-origin test artifact, affirmative passing tests and a lease-bound runner identity.
The operator separately inspects source and tests before staging eligibility. This is not a professional reviewer approval, financial authorization, or production cutover.