---
name: CTO Hermes Consumed Approval Evidence Issues
status: validated
lifecycle_classification: sot
owner: jp
created: 2026-06-01
last_reviewed: 2026-06-01
core_promotion_status: not-promoted
---

# CTO Hermes Consumed Approval Evidence Issues

Local planning SOT only. Not a Core Protocol. Not active Core authority.

## Issue: CTO-WORK-072 - Hermes Consumed Approval Evidence PRD

Status: validated.

Acceptance:

- Define Hermes consumed approval evidence.
- Record `governed_execution`.
- Record `approval_consumed`.
- Record `consumed_by_pass_evidence`.
- Require execution_allowed: false after approval consumption.
- Preserve Case runtime default active: false.
- Preserve target repository mutation: false.
- State: Do not activate Case as default backend.
- State: This closeout does not authorize another Case run.

## Issue: CTO-WORK-073 - Hermes Consumed Approval Evidence Closeout

Status: validated.

Acceptance:

- Record Hermes consumed approval evidence.
- Reference `6f694b4 feat(plugin): surface consumed CTO approval evidence`.
- Reference `/api/cto/control-summary`.
- Reference `cto_control_panel.js`.
- Reference `routes/cto_control_summary.py`.
- Record `python3 -m pytest tests/ -q`.
- Record `108 passed`.
- Record `python3 scripts/ast-connection-map.py --check`.
- Record `CONNECTION-MAP.md is fresh`.
- Record upstream `hermes-webui` edited: false.
- Record upstream `hermes-agent` edited: false.

## Required Phrases

- Hermes consumed approval evidence
- CTO-WORK-072
- CTO-WORK-073
- 6f694b4 feat(plugin): surface consumed CTO approval evidence
- /api/cto/control-summary
- governed_execution
- approval_consumed
- consumed_by_pass_evidence
- execution_allowed: false
- approval_granted: true
- approval_required: true
- Stage 5 pass replay path
- Stage 5 proof replay path
- cto_control_panel.js
- routes/cto_control_summary.py
- python3 -m pytest tests/ -q
- 108 passed
- python3 scripts/ast-connection-map.py --check
- CONNECTION-MAP.md is fresh
- Case runtime default active: false
- target repository mutation: false
- upstream `hermes-webui` edited: false
- upstream `hermes-agent` edited: false
- Do not activate Case as default backend.
- This closeout does not authorize another Case run.