executionlisted

# Approved Execution Approval resumes work in a fresh dispatch owned by the relevant specialist. It does not turn the orchestrator into an executor and does not broaden scope. ## Source boundary For Gaia components, edit only the canonical `gaia/` source tree. Never write, copy, generate, or stage anything under `.claude/`; installation propagates source changes. The same prohibition applies to fixtures and bulk operations. ## Ordered execution 1. Read the granted request from the trusted handoff/DB and confirm its exact id, scope, order, and next unconsumed index. 2. Execute exactly one command per tool call using `command-execution`. 3. For COMMAND_SET, run only the exact next index. Never join commands, skip an index, substitute an equivalent spelling, or add an unapproved command. 4. After every result, checkpoint the exact command, index, exit status, and runtime progress fields when exposed. 5. On failure, stop immediately. Record stderr/stdout, failed index, completed indexes, remaining unexecuted indexes, and the state uncertainty. The grant is terminal/frozen `FAILED`; neither retry nor remainder may execute under it. Grouping consent is not atomicity or a continue-on-error policy. 6. After successful mutations, verify desired state with separate read-only checks. Success exit codes alone are insufficient. 7. Checkpoint verification and emit `NEEDS_VERIFICATION` for a plan-task-bound producer; only an eligible unbound turn/verifier may re