# AMENDMENT REQUEST — [Constraint ID / State Name]

TRIGGER:
  [REGULATORY | STRUCTURAL_SIGNAL | PRODUCTION_INCIDENT]

CURRENT CONSTRAINT:
  [The governed behavior as ratified today]

PROPOSED CONSTRAINT:
  [The governed behavior as amended]

STRUCTURAL CASE:
  [The unnamed state, external conflict, or the three overrides.
   Absent this section, the request is returned at intake.]

BLAST RADIUS:
  [Surfaces, squads, and tenants governed by this constraint]

BLAST RADIUS VERIFIED:
  [Confirmed by the Ratifier against centralized override telemetry
   before the priority tier is accepted. A submitted radius that
   understates what the telemetry shows does not clear at the
   submitted tier — it escalates to the tier the telemetry supports.]

FALLBACK STATE:
  [Required at HIGH / CRITICAL. Behavior on halt:
   HUMAN_QUEUE | REVERT_LAST_CERTIFIED | DEGRADE_READ_ONLY]

FALLBACK CAPACITY:
  [Required if FALLBACK STATE is HUMAN_QUEUE. Maximum volume
   per hour the receiving queue can absorb, and the terminal
   state above that ceiling: HARD_BLOCK | SHED_TO_SCHEDULED |
   DEGRADE_READ_ONLY | AUTO_RESOLVE_TO_DEFAULT.
   AUTO_RESOLVE_TO_DEFAULT is prohibited where the decision
   itself is the consequential act. A queue with no stated
   ceiling, or a ceiling with no stated terminal state, is not
   a ratified fallback.]

VENDOR ENVELOPE:
  [Required if the surface is a third-party or vendor agent.
   State what is ratified: data reach, authorized actions,
   states routed to the agent, and halted-state fallback.
   If a CRITICAL constraint cannot be held by the envelope,
   name the vendor-relationship owner and the dated
   commitment. An exception with no owner and no date is
   not a ratified envelope.]

COST IF LEFT UNAMENDED:
  [Organizational consequence and severity: CRITICAL / HIGH / MEDIUM]

RATIFICATION:
  [Named function. Not a committee.]