{
  "task_id": "task-2483",
  "captured_at": "2026-05-07T22:22:32.850695",
  "source": "memory/tasks/task-2483.md",
  "source_sha256": "79725f471cfb56f05fb56a845405e224a1cd0ea8fd0a49938f1118c32ff52a84",
  "allowed_resources": {
    "paths": [
      "scripts/refresh_bot_token.py",
      "scripts/refresh_bot_token/**",
      "utils/github_app_token*.py",
      "utils/bot_token_loader*.py",
      "tests/regression/test_refresh_bot_token*.py",
      "tests/regression/test_github_app_token*.py",
      "memory/tasks/task-2483*",
      "memory/reports/task-2483*",
      "memory/plans/tasks/task-2483/**",
      "memory/events/task-2483*",
      "memory/orchestration-audit/bot-token-refresh.jsonl",
      "/home/jay/.config/systemd/user/refresh-bot-token.service",
      "/home/jay/.config/systemd/user/refresh-bot-token.timer"
    ],
    "forbidden_paths": [
      ".github/workflows/**",
      "scripts/dispatch.py",
      "scripts/finish-task.sh",
      "scripts/done-watcher.sh",
      "scripts/taskctl.py",
      "memory/events/task-2472*",
      "memory/events/task-2479*",
      "memory/events/task-2481*",
      ".secrets/**",
      "memory/capabilities/**"
    ],
    "forbidden_actions": [
      "admin_override",
      "branch_protection_bypass",
      "force_merge",
      "workflow_modification",
      "personal_pat_substitution",
      "token_secret_logging",
      "dispatch_surface_overlap_logic_change",
      "finish_task_surface_contract_change",
      "task_2481_unauthorized_done",
      "insuro_required_checks_structure_change"
    ]
  }
}