The framework defines three roles: Run Owner (writes the run row, maintains the five assumptions, pastes the preflight report into the Wiki, and has no authority to declare the task ready), Box Steward (maintains the outbound allowlist and is the only person who can sign exceptions), and Reviewer (reads the run row and report hash before merging and judges whether the report is stale or whether the run row has added outbound hosts).