Frames promotions follow a fail-closed process:
1. Design and implement the capability.
2. Build from sealed source.
3. Run the external QEMU/OVMF certification workflow.
4. Preserve serial logs, evidence JSON and exact hashes.
5. Promote only when the required markers, media invariants and fatal sweeps pass.
When a run fails, the prior authoritative baseline remains authoritative until a corrected revision passes.
1. Design and implement the capability.
2. Build from sealed source.
3. Run the external QEMU/OVMF certification workflow.
4. Preserve serial logs, evidence JSON and exact hashes.
5. Promote only when the required markers, media invariants and fatal sweeps pass.
When a run fails, the prior authoritative baseline remains authoritative until a corrected revision passes.