diff --git a/.torch/backlog/TASK-125dd886-6859-4e3c-a0c7-abbfde9eac24.json b/.torch/backlog/TASK-125dd886-6859-4e3c-a0c7-abbfde9eac24.json index 47b5e5e..f7ead80 100644 --- a/.torch/backlog/TASK-125dd886-6859-4e3c-a0c7-abbfde9eac24.json +++ b/.torch/backlog/TASK-125dd886-6859-4e3c-a0c7-abbfde9eac24.json @@ -2,7 +2,7 @@ "schema": "torch.dev/backlog-item/v1alpha1", "id": "TASK-125dd886-6859-4e3c-a0c7-abbfde9eac24", "title": "Provide the Kernel-owned atomic identity reservation contract for startup presence", - "description": "Explicit owner57e4712e requests one bounded Project Kernel-owned reservation contract/schema phase after TASK-bounded-routine-coordination safely lands/closes. Native Kernel24a4625a declined Runtime edits to src/control-plane/** and requires separately assigned owned implementation. This is a dependency of SAME TASK-pilot-starting-presence, whose Runtime owner retains lifecycle/schedule integration and Release exact CLI consent; it is not a second Runtime assignment or ownership transfer. Implement only the reviewed durable per-project identity reservation API/storage contract required by that slice; agree exact interface with Runtime and strict paths/tests with QA. Unknown interruption must prevent duplicate starts; no elapsed-time offline inference, wake activation, provider launch, installation or broader owner-grant/approval schema changes. Current Kernel task continuity outranks this proposal. Preserve all history/state/unique commits and exact-commit QA/integration gates.", + "description": "Explicit owner57e4712e requests one bounded Project Kernel-owned reservation contract/schema phase after TASK-bounded-routine-coordination safely lands/closes. Native Kernel24a4625a declined Runtime edits to src/control-plane/** and requires separately assigned owned implementation. This is a dependency of SAME TASK-pilot-starting-presence, whose Runtime owner retains lifecycle/schedule integration and Release exact CLI consent; it is not a second Runtime assignment or ownership transfer. Implement only the reviewed durable per-project identity reservation API/storage contract required by that slice; agree exact interface with Runtime and strict paths/tests with QA. Unknown interruption must prevent duplicate starts; no elapsed-time offline inference, wake activation, provider launch, installation or broader owner-grant/approval schema changes. Current Kernel task continuity outranks this proposal. Preserve all history/state/unique commits and exact-commit QA/integration gates.\n\nCurrent owner5d8 confirms completed bounded-routine dependency does not resolve genuine required3/current2 writer-isolation/schema refusal. Record explicit full6e4 compatibility dependency, no automatic unblocking/migration. Preserve this earlier Kernel recovery history separately from satisfied Runtime PNG approval and pending human75.", "priority": "high", "affectedDomains": [ "project-kernel", @@ -11,7 +11,8 @@ "release-self-host" ], "dependencies": [ - "TASK-bounded-routine-coordination" + "TASK-bounded-routine-coordination", + "TASK-6e4ff870-a386-4a11-a59c-444ebc23732e" ], "acceptanceCriteria": [ "Runtime and Kernel agree a precise owned reservation interface and storage/schema contract for TASK-pilot-starting-presence before edits; peer consent covers any additional path, without transferring ownership.", @@ -35,14 +36,15 @@ "message:8a668aba-192e-4188-9cd0-3eb4b6241f10:fresh-exact-fivepath-consent", "message:1996ccdc-377b-4776-ba51-cd0fdb2d012e:cleanrecoveredbe1/testPASS/schema-refusal", "message:aa6f5d58-ac0d-45a6-93a4-d948e59cc84d:actualDBshape/zeroRows/strict-owned-recovery-plan", - "git:be1ae9511e74e3c4c7d8f3d3a5f1212b25c24cc2:independently-clean" + "git:be1ae9511e74e3c4c7d8f3d3a5f1212b25c24cc2:independently-clean", + "message:5d8c8f1d-7c77-45b5-84b7-4860f8e90f0c:current-reviewed-decision-see-17:57-handoff" ], "commit": "be1ae9511e74e3c4c7d8f3d3a5f1212b25c24cc2", "integrationRequest": null, "blockedReason": "Recovered five PNGs under fresh exact QA consent; independently clean be1ae951. Candidate CLI test185e9d68 passed, next check refused before execution CONTROL_PLANE_SCHEMA_DOWNGRADE_DETECTED currentVersion2 requiredVersion3. Owner verified reservation table12 columns/0rows/integrityok and oldv2 writers relabel after v3 initialization. Await exact Kernel-owned recovery/compatibility plan, strict QA consent and supported writer isolation; no migration retry, directPRAGMA reset, leaseclear, oldchecker qualification or provider relaunch.", "createdAt": "2026-10-01T07:57:28.590Z", - "updatedAt": "2026-10-01T09:28:27.110Z", - "revision": 5, + "updatedAt": "2026-10-01T17:58:30.000Z", + "revision": 6, "history": [ { "from": null, @@ -78,6 +80,13 @@ "actorId": "session-manager", "at": "2026-10-01T09:28:27.110Z", "note": "Honest external-statequalification blocker, sameowner/currentcandidate/history. Exactowned recovery plan/QAstrictscenarios required before actualdatabasechange; oldguard preserved, noPNGbaseline rewrite or broadcleanup, current fourgate qualification incomplete. ConfigQA-prefix applier remainsdeferred during currentunresolvedKernelreliabilitywork; no secondKernelitem/activation/wakes." + }, + { + "from": "blocked", + "to": "blocked", + "actorId": "session-manager", + "at": "2026-10-01T17:58:30.000Z", + "note": "Reviewed metadata-only current evidence/recipient decision reconciliation under owner5d8/4646/c3be/93b8. Preserve state, owner, original candidate/request, all historical evidence/criteria and history. Explicitly relate actual full6e4 compatibility blocker; no health auto-fix. No new assignment, source authority, broad acceptance, live/schema/activation or integration." } ] } diff --git a/.torch/backlog/TASK-6e4ff870-a386-4a11-a59c-444ebc23732e.json b/.torch/backlog/TASK-6e4ff870-a386-4a11-a59c-444ebc23732e.json index 2e4b499..6f4fdba 100644 --- a/.torch/backlog/TASK-6e4ff870-a386-4a11-a59c-444ebc23732e.json +++ b/.torch/backlog/TASK-6e4ff870-a386-4a11-a59c-444ebc23732e.json @@ -2,7 +2,7 @@ "schema": "torch.dev/backlog-item/v1alpha1", "id": "TASK-6e4ff870-a386-4a11-a59c-444ebc23732e", "title": "Separate candidate source qualification from live control-plane initialization", - "description": "Explicit owner a970326b-87a5-4292-8f22-e1bec0c15f11/92f7fd36 corrects the inventory: no explicit existing check-engine separation item exists. Add ONE proposed bounded item in the existing backlog. Incident observed on canonical cb145e56 and Kernel reservation candidate be1ae951: candidate CLI initialized production schema3 during qualification, installed/canonical schema2 writers relabel it, and native CONTROL_PLANE_SCHEMA_DOWNGRADE_DETECTED currentVersion2 requiredVersion3 then prevents qualification, causing activation/landing circularity. Design supported separation of exact candidate-source execution engine from a versioned, independently fingerprinted compatible receipt/control-plane adapter without migrating live production state merely to test candidate. Preserve actual authenticated native project/area/commit/definition/run/resource/guard/outcome evidence and immutable artifacts. Work owns src/checks, Kernel src/control-plane, Release CLI wiring and QA scenarios/acceptance; agree exact contract, owned paths and scenario consent before any implementation. No old-checker shortcut, fake isolated real-project receipts, gate waiver, install activation, production DB recovery, new identity or parallel queue. TASK-4dc metadata/candidate preparation remains completed; its retained deeper provenance roadmap was not an explicit task until this proposal.\n\nCurrent authorized phase (owner36788020/21997bf1, QAa0e8ae17): bounded Phase A implementation preparation/development on this SAME Work assignment. Only NEW src/checks/candidate-engine.mjs and src/checks/artifact-manifest.mjs, new QA-consented test/fleet/candidate-engine.test.mjs and test/fleet/candidate-artifact-manifest.test.mjs, and append-only docs/TEST_INTEGRITY.md. Extract reviewed pure raw-terminal execution and trusted parent artifact-collection seams; frozen inputs/args/env/artifact limits, parent-only observed terminal/envelope with no candidate writer capability, capped canonical regular-file manifest and strict traversal/link/special/overwrite/seal-drift rejection. Hermetic fixture/fake-adapter evidence is permanently development-only/nonpromotable. No existing conditions behavior changes or CheckService/CLI/integration/consumer wiring; no store/provisioner/schema/DDL/receipt-consumer/gate-policy/resource-lease changes, live recovery, installation/host/provider/wake/publication actions. QA remains final test owner. Phase A does not complete this full task or qualify native/operational acceptance. Later Kernel store/context/adapter, Release CLI and Work explicit source-consumer phases remain proposed and require separate scoped decisions; retain actual native guards and all existing full acceptance criteria.\n\nCurrent B1 contribution is separately authorized by actual owner b819ecbc after corrected QA c3e0241 exact-path/scenario consent and Work4a3c8ab6 protocol agreement. SAME Work-owned task, named Kernel contributor only: NEW src/kernel/managed-subject-metadata.mjs, NEW src/kernel/check-subject-context.mjs, NEW test/fleet/check-subject-context.test.mjs, append-only docs/TEST_INTEGRITY.md. Bounded data-only V1 fixture/untrusted observation parsing, opaque issued fixtures, strict clone/expiry/reuse/selectors-before-parse negatives and explicit missing native composition. V1 refuses parent/native/loaded-engine claims and V2-shaped fields; no fixture promotion. V2 dependency/snapshot binding remains reserved, not implemented parent/consumer authority. Exact source candidate needs independent QA; actual frozen execution, enforced fences, compatible native adapter/consumers and operational acceptance remain mandatory later phases. No DB/DDL/writer/adapter/receipt/parent/consumer/CLI/runtime/host/provider/wake/publication scope. Owner reports existing Kernel active3473803; no new assignment or manager start.\n\nCurrent B1 exact955672c fixture-source is independently ACCEPTED by QAa13 after actual prefix/blob verification, not native or whole-branch acceptance. Existing9b pre-copy defect and b375 TIN rejection retained. Next concrete B2 packet is in the Manager PhaseB report: named Kernel no-args parent/explicitV2, Work new bounded frozen-input/actual-child execution/fence modules with positive black-box consumption and escaped-descendant coverage scenarios, followed by compatible no-DDL Kernel store/adapter and later actual Work/Release consumers. Exact contributors/scenarios/backend/native compatibility decisions requested; no B2 source authority or new assignment. Full real native/operational criteria remain mandatory.", + "description": "Explicit owner a970326b-87a5-4292-8f22-e1bec0c15f11/92f7fd36 corrects the inventory: no explicit existing check-engine separation item exists. Add ONE proposed bounded item in the existing backlog. Incident observed on canonical cb145e56 and Kernel reservation candidate be1ae951: candidate CLI initialized production schema3 during qualification, installed/canonical schema2 writers relabel it, and native CONTROL_PLANE_SCHEMA_DOWNGRADE_DETECTED currentVersion2 requiredVersion3 then prevents qualification, causing activation/landing circularity. Design supported separation of exact candidate-source execution engine from a versioned, independently fingerprinted compatible receipt/control-plane adapter without migrating live production state merely to test candidate. Preserve actual authenticated native project/area/commit/definition/run/resource/guard/outcome evidence and immutable artifacts. Work owns src/checks, Kernel src/control-plane, Release CLI wiring and QA scenarios/acceptance; agree exact contract, owned paths and scenario consent before any implementation. No old-checker shortcut, fake isolated real-project receipts, gate waiver, install activation, production DB recovery, new identity or parallel queue. TASK-4dc metadata/candidate preparation remains completed; its retained deeper provenance roadmap was not an explicit task until this proposal.\n\nCurrent authorized phase (owner36788020/21997bf1, QAa0e8ae17): bounded Phase A implementation preparation/development on this SAME Work assignment. Only NEW src/checks/candidate-engine.mjs and src/checks/artifact-manifest.mjs, new QA-consented test/fleet/candidate-engine.test.mjs and test/fleet/candidate-artifact-manifest.test.mjs, and append-only docs/TEST_INTEGRITY.md. Extract reviewed pure raw-terminal execution and trusted parent artifact-collection seams; frozen inputs/args/env/artifact limits, parent-only observed terminal/envelope with no candidate writer capability, capped canonical regular-file manifest and strict traversal/link/special/overwrite/seal-drift rejection. Hermetic fixture/fake-adapter evidence is permanently development-only/nonpromotable. No existing conditions behavior changes or CheckService/CLI/integration/consumer wiring; no store/provisioner/schema/DDL/receipt-consumer/gate-policy/resource-lease changes, live recovery, installation/host/provider/wake/publication actions. QA remains final test owner. Phase A does not complete this full task or qualify native/operational acceptance. Later Kernel store/context/adapter, Release CLI and Work explicit source-consumer phases remain proposed and require separate scoped decisions; retain actual native guards and all existing full acceptance criteria.\n\nCurrent B1 contribution is separately authorized by actual owner b819ecbc after corrected QA c3e0241 exact-path/scenario consent and Work4a3c8ab6 protocol agreement. SAME Work-owned task, named Kernel contributor only: NEW src/kernel/managed-subject-metadata.mjs, NEW src/kernel/check-subject-context.mjs, NEW test/fleet/check-subject-context.test.mjs, append-only docs/TEST_INTEGRITY.md. Bounded data-only V1 fixture/untrusted observation parsing, opaque issued fixtures, strict clone/expiry/reuse/selectors-before-parse negatives and explicit missing native composition. V1 refuses parent/native/loaded-engine claims and V2-shaped fields; no fixture promotion. V2 dependency/snapshot binding remains reserved, not implemented parent/consumer authority. Exact source candidate needs independent QA; actual frozen execution, enforced fences, compatible native adapter/consumers and operational acceptance remain mandatory later phases. No DB/DDL/writer/adapter/receipt/parent/consumer/CLI/runtime/host/provider/wake/publication scope. Owner reports existing Kernel active3473803; no new assignment or manager start.\n\nCurrent B1 exact955672c fixture-source is independently ACCEPTED by QAa13 after actual prefix/blob verification, not native or whole-branch acceptance. Existing9b pre-copy defect and b375 TIN rejection retained. Next concrete B2 packet is in the Manager PhaseB report: named Kernel no-args parent/explicitV2, Work new bounded frozen-input/actual-child execution/fence modules with positive black-box consumption and escaped-descendant coverage scenarios, followed by compatible no-DDL Kernel store/adapter and later actual Work/Release consumers. Exact contributors/scenarios/backend/native compatibility decisions requested; no B2 source authority or new assignment. Full real native/operational criteria remain mandatory.\n\nCurrent17:58 B2 remains READ-ONLY decision, not code. Workacc1/Kernel9752 plus owner792 corrections pin Work NEW candidate-source-bootstrap/private candidate-execution-fence-init; existing Kernel config.mjs additive V2 policy and proposed task-scoped Kernel .torch/torch.yaml applier. Real npm/Node/Chromium/transitive dependencies mandatory. PhaseB17:53 report pins positive native one-shot issuer/actual child/fence/native adapter direction; recipient agreement on exact transport/policy/scenarios remains required. Current four undeclared policies and schema3/2 refusal preserved; namespace availability not terminal proof. B1 fixture-source955 acceptance resolved, seven full criteria still mandatory; no new assignment/registration.", "priority": "high", "affectedDomains": [ "work-integration", @@ -84,14 +84,19 @@ "message:82157432-0001-4aaa-89e3-9f56ea14486c:Work-exact-B2-input/fence-protocol-decision-request", "message:6797e181-cfbd-4f70-a370-a5c7d9cc1407:Kernel-exact-B2-parentV2/native-transport-request", "message:239ebf46-7050-4ae1-be74-2b7f548553cb:QA-positive-parent/realinput/fence-scenario-scope-request", - "report:reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md:17:02-B2a-parent-frozeninput-B2b-fence-B2c-adapter-B2d-nativeconsumers-exact-map" + "report:reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md:17:02-B2a-parent-frozeninput-B2b-fence-B2c-adapter-B2d-nativeconsumers-exact-map", + "message:acc1d43e-4b6b-4a6f-b84b-2f5aa6354826:current-reviewed-decision-see-17:57-handoff", + "message:9752d155-91cb-4a49-9dca-3f85ef3c60c8:current-reviewed-decision-see-17:57-handoff", + "message:7921552a-15f6-4335-b81e-a447ed365efe:current-reviewed-decision-see-17:57-handoff", + "message:e137bf05-115c-4868-a1bf-2bc0f0df35b1:current-reviewed-decision-see-17:57-handoff", + "message:056cbde7-b080-44a5-bff8-00ffe9992fc2:current-reviewed-decision-see-17:57-handoff" ], "commit": "316d8b7480c2e10925ebdff8310fe26ef5a881a8", "integrationRequest": "a1789e46-b91e-496c-9204-ab204dac6a6d", "blockedReason": null, "createdAt": "2026-10-01T10:14:01.401Z", - "updatedAt": "2026-10-01T17:03:00.000Z", - "revision": 13, + "updatedAt": "2026-10-01T17:58:30.000Z", + "revision": 14, "history": [ { "from": null, @@ -183,6 +188,13 @@ "actorId": "session-manager", "at": "2026-10-01T17:03:00.000Z", "note": "Reviewed metadata-only expectedrev12 records actual QAa13 narrow exact955 acceptance and owner29e corrected EPERM chronology; b375 placement wait resolved, no source/native/wholebranch gate waiver. Retain Work verification/316a178/sevencriteria/history. Concrete B2a-d owned-path/positive-scenario/native qualification packet requested from existing peers, no implementation or second assignment." + }, + { + "from": "verification", + "to": "verification", + "actorId": "session-manager", + "at": "2026-10-01T17:58:30.000Z", + "note": "Reviewed metadata-only current evidence/recipient decision reconciliation under owner5d8/4646/c3be/93b8. Preserve state, owner, original candidate/request, all historical evidence/criteria and history. No new assignment, source authority, broad acceptance, live/schema/activation or integration." } ] } diff --git a/.torch/backlog/TASK-a65500ed-a505-4664-badc-a1483d6f6f11.json b/.torch/backlog/TASK-a65500ed-a505-4664-badc-a1483d6f6f11.json index b8013ae..e49cb99 100644 --- a/.torch/backlog/TASK-a65500ed-a505-4664-badc-a1483d6f6f11.json +++ b/.torch/backlog/TASK-a65500ed-a505-4664-badc-a1483d6f6f11.json @@ -2,7 +2,7 @@ "schema": "torch.dev/backlog-item/v1alpha1", "id": "TASK-a65500ed-a505-4664-badc-a1483d6f6f11", "title": "Preserve test-integrity evidence in immutable per-change records with a validated index", - "description": "Owner795de3fc observes repeated independent additive docs/TEST_INTEGRITY.md prepend merge conflicts in Runtime/Kernel convergence, requiring lossless peer reconciliation. Propose ONE bounded QA-led evidence organization change with Work Integration validation/discovery consent. Design immutable per-task/change integrity records and discoverable gate-validated index, preserving all historical notes, IDs, strict scenarios, hashes and original QA ownership. No immediate migration, current merge-protocol bypass, assertion weakening, acceptance shortcut or provider start. Existing frozen candidates must still reconcile notes under QA consent; this proposal remains unassigned until reliability sequence and peer review.", + "description": "Owner795de3fc observes repeated independent additive docs/TEST_INTEGRITY.md prepend merge conflicts in Runtime/Kernel convergence, requiring lossless peer reconciliation. Propose ONE bounded QA-led evidence organization change with Work Integration validation/discovery consent. Design immutable per-task/change integrity records and discoverable gate-validated index, preserving all historical notes, IDs, strict scenarios, hashes and original QA ownership. No immediate migration, current merge-protocol bypass, assertion weakening, acceptance shortcut or provider start. Existing frozen candidates must still reconcile notes under QA consent; this proposal remains unassigned until reliability sequence and peer review.\n\nCurrent17:58 owner5d8/4646 identifies INTERNAL QA decision, not human strategic permission wait. Actual QA1e477 as reported by owner4646 needs concrete Work version-pinned integrity-record schema/canonical preimage/exact YAML/test paths/scenarios; old6a935/157 references alone insufficient. Managerca0b requests durable read-only packet and named QA/Work decisions. No usable consent yet, no code/migration/enforcement or second Work implementation; full6e4 continuity preserved.", "priority": "high", "affectedDomains": [ "qa", @@ -36,14 +36,17 @@ "message:3d41bc12-0adb-4d94-9250-d14a93a518fa:read-only-preparation-complete", "message:6a93540b-8ae0-4966-87d6-13d1ceba6775:existing-QA-contract-review", "message:157b01bd-2c90-42fc-8ac4-81a97442fa38:bounded-QA-followup", - "baseline:07a2bc:TEST_INTEGRITY:sha256:239fb5539e9f7cfc8562ac5351c61e7e1d345f00737a557ce9fa1b6d702e941a" + "baseline:07a2bc:TEST_INTEGRITY:sha256:239fb5539e9f7cfc8562ac5351c61e7e1d345f00737a557ce9fa1b6d702e941a", + "message:5d8c8f1d-7c77-45b5-84b7-4860f8e90f0c:current-reviewed-decision-see-17:57-handoff", + "message:4646e5ce-c535-48f8-a3fc-3922ce683e08:current-reviewed-decision-see-17:57-handoff", + "message:ca0b2674-b5ad-40db-994c-68ea50fb85c0:current-reviewed-decision-see-17:57-handoff" ], "commit": null, "integrationRequest": null, - "blockedReason": "Read-only preparation complete; awaiting named QA schema/record/scenario path review of existing6a93540b and reviewed implementation-phase authorization. Current61de approval permits durable evidence only, no repository edits/migration/enforcement; full task criteria remain unsatisfied.", + "blockedReason": "Read-only preparation complete. Actionable INTERNAL Work/QA contract decision: return concrete version-pinned record schema/canonical preimage/exact YAML/test paths/scenarios requested by actual QA1e477 (owner4646), then obtain named contributor/gate consent and sequence bounded implementation. Historical61de permits evidence preparation only. This is not an owner strategic permission hold; no code/migration/acceptance or automatic dependency unblocking.", "createdAt": "2026-10-01T07:36:25.425Z", - "updatedAt": "2026-10-01T08:24:30.299Z", - "revision": 5, + "updatedAt": "2026-10-01T17:58:30.000Z", + "revision": 6, "history": [ { "from": null, @@ -79,6 +82,13 @@ "actorId": "session-manager", "at": "2026-10-01T08:24:30.299Z", "note": "Record actual completed preparation and actual remaining phase gates, not full task completion or new implementation assignment. Preserve owner Work Integration, QA scenario/record authority, immutable full criteria and all evidence. Existing peer request followed up without duplicate approval/queue." + }, + { + "from": "blocked", + "to": "blocked", + "actorId": "session-manager", + "at": "2026-10-01T17:58:30.000Z", + "note": "Reviewed metadata-only current evidence/recipient decision reconciliation under owner5d8/4646/c3be/93b8. Preserve state, owner, original candidate/request, all historical evidence/criteria and history. No new assignment, source authority, broad acceptance, live/schema/activation or integration." } ] } diff --git a/.torch/backlog/TASK-console-attention-actions.json b/.torch/backlog/TASK-console-attention-actions.json index 6ab61a9..3d6b434 100644 --- a/.torch/backlog/TASK-console-attention-actions.json +++ b/.torch/backlog/TASK-console-attention-actions.json @@ -2,7 +2,7 @@ "schema": "torch.dev/backlog-item/v1alpha1", "id": "TASK-console-attention-actions", "title": "Make attention findings specific, deduplicated and actionable", - "description": "Owner sees six vague attention cards: MESSAGE_BACKLOG, three indistinguishable WORKTREE_PROBLEM, ONE-DISK RECOVERABILITY and duplicate unacknowledged message count. Show human-readable problem, owning agent, branch/path, severity and actual consequence. Deduplicate the same message queue, group worktree issues by identity, distinguish normal ahead/unique commits from broken operations or unprotected work. Offer contextual quick actions when supported: owner approval/rejection with existing preview-confirm/revision/evidence checks, open exact message/thread, inspect exact worktree, request owning-agent review or retry a qualified operation. Non-owner approvals must not gain approve buttons. No generic dismiss, mass acknowledgement, automatic merge/cleanup or silent remote push. Actions must preserve drafts under refresh and report pending/error/unknown honestly. Owner 9590d8b1 (2026-10-01) authorizes bounded implementation using the committed observed desktop audit findings while TASK-console-ux-audit remains blocked and incomplete. Full-audit completion is no longer an implementation-start prerequisite; actual browser desktop/mobile visual acceptance remains required before completion. Scope: separate Waiting on you (genuine authenticated owner decision with consequence/options), Fleet handling (named responsible domain and next step), and Arbiter handling (provider starts/install activation). Do not rewrite the dashboard architecture or hide unresolved risks. QA path consent is required before assignment; existing frozen assertions, ownership and verification controls remain enforced. Owner25e645bf current live4174 incident: healthy/status ok plus aggregate MESSAGE_BACKLOG101 and stale idle rows disagreed with separately observed running sessions. The additive timestamp/freshness/recipient/availability criteria capture that observation without granting implementation, startup, host or activation authority; historical scope and full roadmap remain.\n\nCurrent bounded Console Overview source phase WIP is authorized by actual owner6a6e4830 under exact QAa6b consent: ONLY site/console.html, site/console.js, site/attention-projection.js, site/styles.css, NEW test/fleet/console-overview-density.test.mjs, append-only docs/TEST_INTEGRITY.md. Arbiter manually resumes existing Console; no Manager launch/new task/assignment. Preserve ten destinations/safe actions/drafts/Work347 refresh/old attention tones/cohort49 references. Compact owner/urgent first bounded Fleet preview with exact totals and full View all evidence; 1440x1000/390x844 crowded49+17 strict scenarios. Fresh clean exactcandidate four native gates/immutable artifacts and independent QA precede one guarded submission. Separate active Release helper and unimplemented provenance consumer excluded. Overall blocked state reflects incomplete actual live/installed/browser/APIengine/blockedReason acceptance, not absence of ongoing scoped source work.", + "description": "Owner sees six vague attention cards: MESSAGE_BACKLOG, three indistinguishable WORKTREE_PROBLEM, ONE-DISK RECOVERABILITY and duplicate unacknowledged message count. Show human-readable problem, owning agent, branch/path, severity and actual consequence. Deduplicate the same message queue, group worktree issues by identity, distinguish normal ahead/unique commits from broken operations or unprotected work. Offer contextual quick actions when supported: owner approval/rejection with existing preview-confirm/revision/evidence checks, open exact message/thread, inspect exact worktree, request owning-agent review or retry a qualified operation. Non-owner approvals must not gain approve buttons. No generic dismiss, mass acknowledgement, automatic merge/cleanup or silent remote push. Actions must preserve drafts under refresh and report pending/error/unknown honestly. Owner 9590d8b1 (2026-10-01) authorizes bounded implementation using the committed observed desktop audit findings while TASK-console-ux-audit remains blocked and incomplete. Full-audit completion is no longer an implementation-start prerequisite; actual browser desktop/mobile visual acceptance remains required before completion. Scope: separate Waiting on you (genuine authenticated owner decision with consequence/options), Fleet handling (named responsible domain and next step), and Arbiter handling (provider starts/install activation). Do not rewrite the dashboard architecture or hide unresolved risks. QA path consent is required before assignment; existing frozen assertions, ownership and verification controls remain enforced. Owner25e645bf current live4174 incident: healthy/status ok plus aggregate MESSAGE_BACKLOG101 and stale idle rows disagreed with separately observed running sessions. The additive timestamp/freshness/recipient/availability criteria capture that observation without granting implementation, startup, host or activation authority; historical scope and full roadmap remain.\n\nCurrent bounded Console Overview source phase WIP is authorized by actual owner6a6e4830 under exact QAa6b consent: ONLY site/console.html, site/console.js, site/attention-projection.js, site/styles.css, NEW test/fleet/console-overview-density.test.mjs, append-only docs/TEST_INTEGRITY.md. Arbiter manually resumes existing Console; no Manager launch/new task/assignment. Preserve ten destinations/safe actions/drafts/Work347 refresh/old attention tones/cohort49 references. Compact owner/urgent first bounded Fleet preview with exact totals and full View all evidence; 1440x1000/390x844 crowded49+17 strict scenarios. Fresh clean exactcandidate four native gates/immutable artifacts and independent QA precede one guarded submission. Separate active Release helper and unimplemented provenance consumer excluded. Overall blocked state reflects incomplete actual live/installed/browser/APIengine/blockedReason acceptance, not absence of ongoing scoped source work.\n\nCurrent17:58 SAME Overview source phase exact clean0c2 is now under actual existing QA review after Console terminal handoff. Four native PASS/invalidReason null and exact six-path diff observed; source acceptance still pending. Earlier7ad/fcd correction history retained; accepted/landed4fa cohort stays resolved. Next owner93b8 health-label/mobile-header findings are separately proposed, not current source scope. Full task remains blocked on actual installed/live desktop/mobile flow.\n\nCurrent18:07 source review/landing RESOLVED: actual QAe454 independently accepts exact0c2 six-path Overview, four current native PASS/11 immutable hashes; single guarded cb83a211 natively LANDED18:06:20 from clean4fa after Manager authorization/plan blockers[]. Canonical independently clean0c2. Prior pending source-review text is historical. Full task remains blocked on actual installed/live/API/browser/provenance/blockedReason and separately scoped next93b UX criteria; no closure or expanded code/activation. Release9a0 separately under existing QA including malformed-pointer privacy edge; target advance requires subsequent clean convergence/fresh exact gates.", "priority": "high", "affectedDomains": [ "owner-console", @@ -28,7 +28,8 @@ "Given the measured14:18 doctor healthytrue/56warnings with48 stale-SHA findings,49-task activity warning and only1 ownerpending activation, attention explicitly separates actionable owner decisions, Fleet-owned exceptions and advisory recheck cohorts with measured counts. Deduplicate/collapse repeated stale-commit cohorts with per-task/current-owner/current-reproduction drilldown while retaining every observedAt recheck requirement, unsafe recovery warning and pending owner approval. Dirty active implementations and unique commits are evidence, never automatic owner cleanup requests; do not suppress findings, auto-close or acknowledge peers.", "Given actual15:14:01.981 live4174 snapshot projected by canonical316 yields owner1/fleet67/arbiter0 with49 distinct stale/missing task cards plus the duplicate49-record cohort, the reviewed advisory grouping preserves all49 task references, responsible owners, observedAt/current evidence and reproduction drilldown; identical doctor/backlogHealth observations share one advisory record retaining both origins, conflicting/unsafe/unknown conditions remain visible. Projection/scenario evidence is not desktop/mobile/live visual acceptance.", "Later separately scoped doctor/projection scenario distinguishes clean branches with unique preserved commits as informational integration-review state with responsible owner/next step from dirty/conflicting/lost-work hazards; retain unsafe findings and all unique commits, never auto-clean or suppress. Owner0bf measured Manager83/Kernel14/Console3 unique commits and MESSAGE_BACKLOG176; aggregate counts do not transfer acknowledgement authority.", - "Later compact Overview count/preview distinguishes actionable named-next-step items from advisory/recheck cohorts, retains full queue and evidence with explicit View all destination and no draft loss; exact source/scenario scope and QA holdout precede edits. Existing accepted4fa cohort source is not expanded or final visual acceptance." + "Later compact Overview count/preview distinguishes actionable named-next-step items from advisory/recheck cohorts, retains full queue and evidence with explicit View all destination and no draft loss; exact source/scenario scope and QA holdout precede edits. Existing accepted4fa cohort source is not expanded or final visual acceptance.", + "Next separately consented UX phase labels doctor-derived health as repository checks or truthfully represents overall review/unknown while urgent Fleet hazards stay visible. At390x844, adaptive compact header/navigation brings useful owner decision/risk context near the first screen, preserving ten keyboard/deeplink/BackForward destinations, drafts/safe actions and no clipping/overflow. Owner93b8 inspected generated39044f9d artifacts, not live computer use; this criterion grants no expansion of current0c2 review." ], "observedAt": "0224abf2e08d", "feature": null, @@ -88,14 +89,20 @@ "message:d2feed55-f6dc-4c72-92c3-9b55a39af808:message-cohort/newestdecision/supersession-fullhistory-requirement", "message:a6b8dfa4-a8b4-43b9-908d-bc8d13f84e1f:usable-Overview-sixpath-five-strict-scenario-consent-crowded49plus17-density1440/390-not-sourceauthority", "message:06f94f44-4789-47f9-a689-1c6b5c9429d6:actual-current-source-uniqueinfo/Work347baseline-preserve-no-duplicatefix-browser-disconnected-Releaseactive", - "message:6a6e4830-f8be-4dea-aeca-fc106bdd1f77:owner-existing-Console-Overview-exact-sixpath-implementation-authorized-WIP-not-fulltaskacceptance" + "message:6a6e4830-f8be-4dea-aeca-fc106bdd1f77:owner-existing-Console-Overview-exact-sixpath-implementation-authorized-WIP-not-fulltaskacceptance", + "message:6c203789-3fec-474f-a280-982ededfc639:current-reviewed-decision-see-17:57-handoff", + "message:c3be1176-3a25-46ec-b7be-b8b1f09ad6b2:current-reviewed-decision-see-17:57-handoff", + "message:93b8eb98-0d4d-4773-8962-6d428be21146:current-reviewed-decision-see-17:57-handoff", + "message:e454442e-efcf-4d2b-b131-e94f71e41c70:exact0c2-independent-source-acceptance-only", + "integration:cb83a211-9f3f-4688-98fe-3faaece76da6:native-landed18:06:20:clean0c2", + "message:3f465710-525d-47e7-beb1-b4b7eab34e2d:exact-current-guarded-Manager-delegation" ], - "commit": "4fa9bd7d490fb740eb1d0bdf3dc9cafa2f309ba1", - "integrationRequest": "0d46fb5c-1027-4ead-b969-f760afb72e9f", - "blockedReason": "Exact 4fa9 source independently accepted by QA33d44dad/6dfa and landed once via native request0d46 at16:25:59 with authorized Manager plan no blockers/four native PASS/eleven hashes. Source review and integration are resolved. Full acceptance remains blocked on actual live/installed desktop/mobile owner flow and served UI/API provenance; generated demo artifact checks do not establish live visual acceptance. Pending human runtime75 is separate from satisfied PNG recovery; pointer switch alone cannot qualify missing blockedReason. No installation, host, provider, wakes, schema or publication action.", + "commit": "0c2aeed1db670d1c7ffd68d55ee129871362afe4", + "integrationRequest": "cb83a211-9f3f-4688-98fe-3faaece76da6", + "blockedReason": "Exact scoped Overview0c2 source independently QAe454 accepted and single native cb83a211 landed18:06:20; canonical clean0c2 independently observed. Prior accepted4fa/e8 source and histories preserved. Full task remains blocked on actual live/installed desktop/mobile owner flow, truthful served UI/API engine provenance and current durable blockedReason visibility; generated demo/native artifacts do not qualify installed/live acceptance. Human runtime75 remains pending, browser disconnected, alpha3 pointer switch alone cannot fix missing fields. Later93b health/mobile UX is separately proposed; Release9a0 pending actual QA privacy edge and exact post-advance convergence. No installation/host/provider/wake/schema/publication.", "createdAt": "2026-09-30T22:56:50.255Z", - "updatedAt": "2026-10-01T17:10:00.000Z", - "revision": 21, + "updatedAt": "2026-10-01T18:08:05.000Z", + "revision": 23, "history": [ { "from": null, @@ -243,6 +250,20 @@ "actorId": "session-manager", "at": "2026-10-01T17:10:00.000Z", "note": "Metadata-only current sourcephase WIP after actual owner6a6e and QAa6b consent, expectedrev20. Record named existing Console exactsixpath Overview implementation, separate Releasehelper/consumer scopes; no newassignment/start/sourcecandidate/acceptance inferred. Preserve wholeblocked live/API/browser/blockedReason criteria and source4fa history/current owner. No new schema/statusfield or authority expansion." + }, + { + "from": "blocked", + "to": "blocked", + "actorId": "session-manager", + "at": "2026-10-01T17:58:30.000Z", + "note": "Reviewed metadata-only current evidence/recipient decision reconciliation under owner5d8/4646/c3be/93b8. Preserve state, owner, original candidate/request, all historical evidence/criteria and history. No new assignment, source authority, broad acceptance, live/schema/activation or integration." + }, + { + "from": "blocked", + "to": "blocked", + "actorId": "session-manager", + "at": "2026-10-01T18:08:05.000Z", + "note": "Reconcile actual QAe454/owner55c/3f465 and single native cb83 landing; update latest partial source commit/request, preserving older source candidates/requests in full evidence/history. All full task criteria/state/owner retained; source acceptance/landing resolved but installed/live/API/browser and later UX remain open. No broad completion, approval substitution or source expansion." } ] } diff --git a/.torch/backlog/TASK-console-ux-audit.json b/.torch/backlog/TASK-console-ux-audit.json index af768f2..405ca41 100644 --- a/.torch/backlog/TASK-console-ux-audit.json +++ b/.torch/backlog/TASK-console-ux-audit.json @@ -2,7 +2,7 @@ "schema": "torch.dev/backlog-item/v1alpha1", "id": "TASK-console-ux-audit", "title": "Audit Console through computer use and design a focused multi-screen workspace", - "description": "Real owner feedback: excessive scrolling, everything on one page feels like a generic Bootstrap layout. Clean, clear and functional first. Session Manager must assign existing owner-console web UI specialist. Inspect actual live installed Console http://127.0.0.1:4174/console with computer use, not source-only review. Cover every navigation area, nested operational panels and action flows; read-only on live, explore writes only in isolated demo. Actually view screenshot evidence desktop and mobile, keyboard navigation, navigation position/history, refresh/draft retention, density, scrolling and empty/failure/loading states. Document visited screens and concrete issues with screenshot references. Propose focused routes/views, compact overview, contextual drilldowns and per-agent conversations, conditional pipelines, accessible navigation and honest runtime/approval status. Retain dark mode/TORCH mark. Audit and proposal only; do not rewrite UI before review. Use applicable frontend/browser skills and disclose computer-use capability blockers instead of claiming completion.", + "description": "Real owner feedback: excessive scrolling, everything on one page feels like a generic Bootstrap layout. Clean, clear and functional first. Session Manager must assign existing owner-console web UI specialist. Inspect actual live installed Console http://127.0.0.1:4174/console with computer use, not source-only review. Cover every navigation area, nested operational panels and action flows; read-only on live, explore writes only in isolated demo. Actually view screenshot evidence desktop and mobile, keyboard navigation, navigation position/history, refresh/draft retention, density, scrolling and empty/failure/loading states. Document visited screens and concrete issues with screenshot references. Propose focused routes/views, compact overview, contextual drilldowns and per-agent conversations, conditional pipelines, accessible navigation and honest runtime/approval status. Retain dark mode/TORCH mark. Audit and proposal only; do not rewrite UI before review. Use applicable frontend/browser skills and disclose computer-use capability blockers instead of claiming completion.\n\nOwner93b8 observed native39044f9d generated demo desktop1440x1000/mobile390x844: doctor-only Healthy misleads beside two urgent hazards; header/ten-link nav consumes first844px before owner/urgent panel. Record next separately consented health-label/adaptive-header scope. Generated screenshot observation is not actual live computer-use audit; browser disconnected/live desktop/mobile coverage remains incomplete, prior CDP failures retained.", "priority": "high", "affectedDomains": [ "owner-console", @@ -17,7 +17,8 @@ "Prioritized usability findings trace to observed screens, not generic recommendations", "Information architecture proposes genuinely separate focused views, not anchor links on another long page", "Desktop/mobile and keyboard/refresh/draft behavior are covered; branding and permission gates preserved", - "Report defines measurable implementation acceptance criteria; no implementation or release is implied" + "Report defines measurable implementation acceptance criteria; no implementation or release is implied", + "Next separately consented UX phase labels doctor-derived health as repository checks or truthfully represents overall review/unknown while urgent Fleet hazards stay visible. At390x844, adaptive compact header/navigation brings useful owner decision/risk context near the first screen, preserving ten keyboard/deeplink/BackForward destinations, drafts/safe actions and no clipping/overflow. Owner93b8 inspected generated39044f9d artifacts, not live computer use; this criterion grants no expansion of current0c2 review." ], "observedAt": "ed1f7614d1ea", "feature": null, @@ -25,14 +26,15 @@ "state": "blocked", "owner": "owner-console", "evidence": [ - "reports/design-system/task-console-ux-audit-owner-console-2026-09-30.md" + "reports/design-system/task-console-ux-audit-owner-console-2026-09-30.md", + "message:93b8eb98-0d4d-4773-8962-6d428be21146:current-reviewed-decision-see-17:57-handoff" ], "commit": "13fe10b765736984d02f6bca02f690d63dbb3a64", "integrationRequest": null, "blockedReason": "The audit requires visible mobile screenshots at desktop and mobile sizes. With a fresh browser session/tab, viewport set before navigation to 351x760 at DPR 0.9, DOM confirmed exactly 390x844 CSS and visible Overview content. The one fullPage:false screenshot attempt failed with `Timed out after 5000ms waiting for CDP command Page.captureScreenshot.` Previous 433x938 capture is not exact-size evidence; prior blank capture is retained as failure evidence. QA and Provider Runtime advise against retry loops or substituting another viewport. Other mobile views remain uninspected.", "createdAt": "2026-09-30T22:15:39.356Z", - "updatedAt": "2026-10-01T00:43:04.639Z", - "revision": 5, + "updatedAt": "2026-10-01T17:58:30.000Z", + "revision": 6, "history": [ { "from": null, @@ -68,6 +70,13 @@ "actorId": "owner-console", "at": "2026-10-01T00:43:04.639Z", "note": "Current audit checkpoint and exact screenshot blocker recorded. Desktop views and interactions are documented; mobile visual coverage remains incomplete after one fresh exact-viewport capture attempt. No completion or integration claimed." + }, + { + "from": "blocked", + "to": "blocked", + "actorId": "session-manager", + "at": "2026-10-01T17:58:30.000Z", + "note": "Reviewed metadata-only current evidence/recipient decision reconciliation under owner5d8/4646/c3be/93b8. Preserve state, owner, original candidate/request, all historical evidence/criteria and history. No new assignment, source authority, broad acceptance, live/schema/activation or integration." } ] } diff --git a/.torch/backlog/TASK-conversation-console-workflow.json b/.torch/backlog/TASK-conversation-console-workflow.json index e40dad4..861bd7b 100644 --- a/.torch/backlog/TASK-conversation-console-workflow.json +++ b/.torch/backlog/TASK-conversation-console-workflow.json @@ -2,7 +2,7 @@ "schema": "torch.dev/backlog-item/v1alpha1", "id": "TASK-conversation-console-workflow", "title": "Complete scoped owner workflow controls and live dashboard qualification", - "description": "Existing Console supports several previewed actions and live refresh. Audit remaining desired owner controls (assignment/routing, lifecycle, integration and release views) against spec and current capabilities; implement only individually authorized operations. Qualify real provider activity and native background/back-cache refresh while preserving edits and private artifact provenance.\n\nCurrent partial Release contribution is authorized by owner15c48fa3 under actual QA818/f0bad: ONLY NEW src/self-host/runtime-metadata.mjs, NEW test/fleet/runtime-metadata.test.mjs, append-only docs/TEST_INTEGRITY.md after guarded clean convergence to4fa. Console retains full owner. Inventory-only internal relative links hash bounded link text without target content traversal; metadata/UI file links refuse; fixed active pointer separate. readerModuleEvaluation reports only reader/local artifact observations, authunknown and memory/delivery null. Native authority and Console consumer/source UI changes excluded. Four exact native source gates/immutable artifacts and independent QA precede single guarded integration. Separate future Overview four-sitepath/newdensitytest and snapshot.mjs consumer proposals require their own exact QA scopes; no code authority from this metadata recording.\n\nCurrent bounded Console Overview source phase WIP is authorized by actual owner6a6e4830 under exact QAa6b consent: ONLY site/console.html, site/console.js, site/attention-projection.js, site/styles.css, NEW test/fleet/console-overview-density.test.mjs, append-only docs/TEST_INTEGRITY.md. Arbiter manually resumes existing Console; no Manager launch/new task/assignment. Preserve ten destinations/safe actions/drafts/Work347 refresh/old attention tones/cohort49 references. Compact owner/urgent first bounded Fleet preview with exact totals and full View all evidence; 1440x1000/390x844 crowded49+17 strict scenarios. Fresh clean exactcandidate four native gates/immutable artifacts and independent QA precede one guarded submission. Separate active Release helper and unimplemented provenance consumer excluded. Overall blocked state reflects incomplete actual live/installed/browser/APIengine/blockedReason acceptance, not absence of ongoing scoped source work.", + "description": "Existing Console supports several previewed actions and live refresh. Audit remaining desired owner controls (assignment/routing, lifecycle, integration and release views) against spec and current capabilities; implement only individually authorized operations. Qualify real provider activity and native background/back-cache refresh while preserving edits and private artifact provenance.\n\nCurrent partial Release contribution is authorized by owner15c48fa3 under actual QA818/f0bad: ONLY NEW src/self-host/runtime-metadata.mjs, NEW test/fleet/runtime-metadata.test.mjs, append-only docs/TEST_INTEGRITY.md after guarded clean convergence to4fa. Console retains full owner. Inventory-only internal relative links hash bounded link text without target content traversal; metadata/UI file links refuse; fixed active pointer separate. readerModuleEvaluation reports only reader/local artifact observations, authunknown and memory/delivery null. Native authority and Console consumer/source UI changes excluded. Four exact native source gates/immutable artifacts and independent QA precede single guarded integration. Separate future Overview four-sitepath/newdensitytest and snapshot.mjs consumer proposals require their own exact QA scopes; no code authority from this metadata recording.\n\nCurrent bounded Console Overview source phase WIP is authorized by actual owner6a6e4830 under exact QAa6b consent: ONLY site/console.html, site/console.js, site/attention-projection.js, site/styles.css, NEW test/fleet/console-overview-density.test.mjs, append-only docs/TEST_INTEGRITY.md. Arbiter manually resumes existing Console; no Manager launch/new task/assignment. Preserve ten destinations/safe actions/drafts/Work347 refresh/old attention tones/cohort49 references. Compact owner/urgent first bounded Fleet preview with exact totals and full View all evidence; 1440x1000/390x844 crowded49+17 strict scenarios. Fresh clean exactcandidate four native gates/immutable artifacts and independent QA precede one guarded submission. Separate active Release helper and unimplemented provenance consumer excluded. Overall blocked state reflects incomplete actual live/installed/browser/APIengine/blockedReason acceptance, not absence of ongoing scoped source work.\n\nCurrent17:58: actual QA9e0 narrowly REJECTS Release978 for aggregate order and absolute-path privacy despite four valid native PASS/11 hashes. Owner4646 already resumed SAME three-path correction; new cleanSHA/four fresh gates/QA required before one integration. Console6c203/c3be returns exact clean0c2aeed1db670d1c7ffd68d55ee129871362afe4, six paths, four native PASS with invalidReason null; existing QA independently reviewing, no acceptance/request/landing. Earlier7ad/fcd count oracle/overflow history retained. Next owner93b8 health/mobile findings are separately proposed, metadata consumer remains separately proposed. Whole installed/live/browser/blockedReason/provenance criteria remain open.\n\nCurrent18:07 source review/landing RESOLVED: actual QAe454 independently accepts exact0c2 six-path Overview, four current native PASS/11 immutable hashes; single guarded cb83a211 natively LANDED18:06:20 from clean4fa after Manager authorization/plan blockers[]. Canonical independently clean0c2. Prior pending source-review text is historical. Full task remains blocked on actual installed/live/API/browser/provenance/blockedReason and separately scoped next93b UX criteria; no closure or expanded code/activation. Release9a0 separately under existing QA including malformed-pointer privacy edge; target advance requires subsequent clean convergence/fresh exact gates.", "priority": "normal", "affectedDomains": [ "owner-console", @@ -17,7 +17,8 @@ "A later independently qualified current release and actual desktop/mobile live owner flow display each current blocked task's durable blockedReason with provenance; missing or stale runtime fields remain explicit unknown/mismatch. Canonical316 source already contains blockedReason, while reported activealpha2 and immutablealpha3 omit it; alpha3 pointer switch alone does not satisfy this criterion", "Observed local runtime version, declared source commit and recomputed artifact/UI hash consistency remain useful visible diagnostic observations separately from authentication unknown. Local unsigned metadata is not loaded-memory or delivered-browser-byte proof; absent signing infrastructure does not erase observations or prevent bounded dashboard diagnostics. Mixed/stale/unavailable provenance and actual live blockedReason coverage remain explicit.", "Later independently reviewed compact Overview prioritizes genuine owner decisions and urgent hazards with safe existing quick actions, summary counts and explicit View all Fleet handling destination/filter. Bounded previews retain every item and full evidence in dedicated queue/detail views; advisory/recheck counts are separate from actionable named-next-step counts. Preserve drafts, unsafe risks and show-all access. Owner9ab observed generated1440x1000 d469 desktop artifact, not actual live desktop/mobile acceptance; exact paths/scenarios/QA holdout and authorization precede later edits.", - "Future reviewed message/thread UX supports version-pinned shared contract or artifact references with concise attributable recipient-specific decision/delta, exact permission provenance/current task revision and explicit supersession, retaining all recipients/history/failed decisions and full referenced content. Grouping never auto-acknowledges/resolves/discards messages or hides older failures; newest actionable decisions remain accessible. Pagination/unread completeness uses existing Kernel565/Runtimee440 identity-bound observation contract. Ownerd2feed aggregate115messages/275123bodybytes/22repeatedgroups-cover57 since16:00 is local traffic evidence, not provider token/cost data or proof multi-recipient copies are invalid." + "Future reviewed message/thread UX supports version-pinned shared contract or artifact references with concise attributable recipient-specific decision/delta, exact permission provenance/current task revision and explicit supersession, retaining all recipients/history/failed decisions and full referenced content. Grouping never auto-acknowledges/resolves/discards messages or hides older failures; newest actionable decisions remain accessible. Pagination/unread completeness uses existing Kernel565/Runtimee440 identity-bound observation contract. Ownerd2feed aggregate115messages/275123bodybytes/22repeatedgroups-cover57 since16:00 is local traffic evidence, not provider token/cost data or proof multi-recipient copies are invalid.", + "Next separately consented UX phase labels doctor-derived health as repository checks or truthfully represents overall review/unknown while urgent Fleet hazards stay visible. At390x844, adaptive compact header/navigation brings useful owner decision/risk context near the first screen, preserving ten keyboard/deeplink/BackForward destinations, drafts/safe actions and no clipping/overflow. Owner93b8 inspected generated39044f9d artifacts, not live computer use; this criterion grants no expansion of current0c2 review." ], "observedAt": "ff0712534829", "feature": "Self-host development readiness", @@ -105,14 +106,22 @@ "message:d2feed55-f6dc-4c72-92c3-9b55a39af808:aggregate-local115messages275123bodybytes22repeatedgroups57messages-since16:00-not-providercost", "message:a6b8dfa4-a8b4-43b9-908d-bc8d13f84e1f:usable-Overview-sixpath-five-strict-scenario-consent-crowded49plus17-density1440/390-not-sourceauthority", "message:06f94f44-4789-47f9-a689-1c6b5c9429d6:actual-current-source-uniqueinfo/Work347baseline-preserve-no-duplicatefix-browser-disconnected-Releaseactive", - "message:6a6e4830-f8be-4dea-aeca-fc106bdd1f77:owner-existing-Console-Overview-exact-sixpath-implementation-authorized-WIP-not-fulltaskacceptance" + "message:6a6e4830-f8be-4dea-aeca-fc106bdd1f77:owner-existing-Console-Overview-exact-sixpath-implementation-authorized-WIP-not-fulltaskacceptance", + "message:9e0b3a39-b5f4-407c-a8f2-e6a1eab92732:current-reviewed-decision-see-17:57-handoff", + "message:4646e5ce-c535-48f8-a3fc-3922ce683e08:current-reviewed-decision-see-17:57-handoff", + "message:6c203789-3fec-474f-a280-982ededfc639:current-reviewed-decision-see-17:57-handoff", + "message:c3be1176-3a25-46ec-b7be-b8b1f09ad6b2:current-reviewed-decision-see-17:57-handoff", + "message:93b8eb98-0d4d-4773-8962-6d428be21146:current-reviewed-decision-see-17:57-handoff", + "message:e454442e-efcf-4d2b-b131-e94f71e41c70:exact0c2-independent-source-acceptance-only", + "integration:cb83a211-9f3f-4688-98fe-3faaece76da6:native-landed18:06:20:clean0c2", + "message:3f465710-525d-47e7-beb1-b4b7eab34e2d:exact-current-guarded-Manager-delegation" ], - "commit": "e8c4c4249e49d91393394ac205d918826ddd1891", - "integrationRequest": "6cbac9cb-445f-45d7-8bb1-10902e840211", - "blockedReason": "Exact e8c source QA acceptance and native6cb serialized landing remain RESOLVED with four native PASS/11 hashes. Attention cohort exact4fa is independently QA accepted and natively landed once0d46; canonical4fa is clean as observed16:27, not whole-workflow acceptance. Actualownereb1 live4174 eight blocked entries omit blockedReason: activealpha2 and immutablealpha3 omit a field already present canonical316. Served UI/APIengine exact version/artifact/source provenance must be distinct from repositoryHEAD and truthful for mixed/stale/unknown state; alpha3switch75 alone cannot qualify current UI. Full workflow remains blocked on later qualified current release and actual live/installed/desktop/mobile owner-flow/full-criteria acceptance; current owner browser list remains empty. Source/demo artifact PASS is not live acceptance. Human75 remains pending revision1; PNG recovery is not activation. No install/restart/hotpatch/host/provider/wake/schema action.", + "commit": "0c2aeed1db670d1c7ffd68d55ee129871362afe4", + "integrationRequest": "cb83a211-9f3f-4688-98fe-3faaece76da6", + "blockedReason": "Exact scoped Overview0c2 source independently QAe454 accepted and single native cb83a211 landed18:06:20; canonical clean0c2 independently observed. Prior accepted4fa/e8 source and histories preserved. Full task remains blocked on actual live/installed desktop/mobile owner flow, truthful served UI/API engine provenance and current durable blockedReason visibility; generated demo/native artifacts do not qualify installed/live acceptance. Human runtime75 remains pending, browser disconnected, alpha3 pointer switch alone cannot fix missing fields. Later93b health/mobile UX is separately proposed; Release9a0 pending actual QA privacy edge and exact post-advance convergence. No installation/host/provider/wake/schema/publication.", "createdAt": "2026-09-30T19:30:23.720Z", - "updatedAt": "2026-10-01T17:10:00.000Z", - "revision": 22, + "updatedAt": "2026-10-01T18:08:05.000Z", + "revision": 24, "history": [ { "from": null, @@ -267,6 +276,20 @@ "actorId": "session-manager", "at": "2026-10-01T17:10:00.000Z", "note": "Metadata-only current sourcephase WIP after actual owner6a6e and QAa6b consent, expectedrev21. Record named existing Console exactsixpath Overview implementation, separate Releasehelper/consumer scopes; no newassignment/start/sourcecandidate/acceptance inferred. Preserve wholeblocked live/API/browser/blockedReason criteria and source4fa history/current owner. No new schema/statusfield or authority expansion." + }, + { + "from": "blocked", + "to": "blocked", + "actorId": "session-manager", + "at": "2026-10-01T17:58:30.000Z", + "note": "Reviewed metadata-only current evidence/recipient decision reconciliation under owner5d8/4646/c3be/93b8. Preserve state, owner, original candidate/request, all historical evidence/criteria and history. No new assignment, source authority, broad acceptance, live/schema/activation or integration." + }, + { + "from": "blocked", + "to": "blocked", + "actorId": "session-manager", + "at": "2026-10-01T18:08:05.000Z", + "note": "Reconcile actual QAe454/owner55c/3f465 and single native cb83 landing; update latest partial source commit/request, preserving older source candidates/requests in full evidence/history. All full task criteria/state/owner retained; source acceptance/landing resolved but installed/live/API/browser and later UX remain open. No broad completion, approval substitution or source expansion." } ] } diff --git a/reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md b/reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md index e040816..a3282ae 100644 --- a/reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md +++ b/reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md @@ -1,5 +1,136 @@ # Current pilot remaining-work handoff +## Current guarded source landing, 18:07 UTC + +Console's single actual request **cb83a211-9f3f-4688-98fe-3faaece76da6** is native +**LANDED at18:06:20.428Z**, source0c2/base4fa/targetrewrite/portable-agent-fleet. +Fresh addressed inbox/current tasks, exact ready evaluation, clean source and +canonical HEAD were checked. Actual QAe454 accepts exact six-path source; four +current native PASS receipts were independently read. Manager authorization18:06:06 +and native plan18:06:10 returned blockers[]/canProceedtrue; serialized native land +succeeded. Canonical is independently clean at exact0c2 afterward. No manual merge, +second request, duplicatec532 landing, cce override or native guard waiver occurred. +Arbiter's concrete next handoff is exact LANDED provenance/current remote recheck +then permitted nonforce push ONLY existing origin development branch. Manager +does not push. Prior queue dispositions/history and all56 full-task states remain. + +Workflow and attention metadata now distinguish resolved0c2 source review/landing +from open installed/live/browser/provenance/blockedReason and separately scoped +later93b UX criteria. No full-task closure. Earlier pending-review text below is +timestamped history. Human75 and disconnected live browser remain genuine gaps. + +Release9a0 is under actual existing QA review per owner380; root flags an additional +malformed absolute/external active-pointer privacy edge (raw invalid link target), +not acceptance from green gates. After actual verdict, any candidate must converge +clean to advanced0c2, preserve unique corrections/TIN and rerun four native checks +on its resulting exact SHA with independent QA/artifacts before ONE request. +No existing Release integration, source acceptance, installation or service change. + +## Fresh QA verdict and corrective candidate, 18:02 UTC + +Actual **QAe454442e** independently ACCEPTS exact clean Console0c2 source only: +six consented paths, five strict scenarios with literal independent count oracle, +old161664-byte TIN prefix unchanged/physical-end append, four exact native PASS +under current definitions/invalidReason null and all eleven immutable PNG hashes. +The earlier pending-review wording below is historical. Owner55c58 authorizes ONE +normal native submission and has resumed existing Console for submission only; +no source edits/new assignment or Manager launch. Current observed queue18:00 has +no request for0c2 yet; use the actual forthcoming ID and current guarded evaluation/ +authority/plan before landing. Never land duplicatec532 or oldcce. Full workflow +and attention tasks stay blocked on actual installed/live desktop/mobile acceptance; +source acceptance does not resolve separate later93b UX criteria or human75. + +Release **8bb88290** returns corrected exact clean **9a0d635c7cddbf81f9b41405c14cc8fdbba1445d** +on the same three paths: sorted aggregate positive acc9/declaration6bfe negative, +relative-only reader identity, serialized path privacy and zero-argument regression, +true TIN append/unchanged old prefix. Eight focused scenarios and fresh native +d75732ec/b7d45c3e/b8e81b64/94e27b71 PASS are implementer handoff evidence pending +actual independent QA. Preserve978 rejection and18a92 lint failure. No Release +request/acceptance or whole-workflow/live claim from this handoff. If Console target +advances, Release must converge clean preserving unique commits, rerun native gates +on the resulting exact candidate and get independent QA of that exact source. + +## Actual decisions, source WIP and recipient handoffs, 17:57 UTC + +Refreshed installed Manager brief d7e6d69, explicit addressed unread100, all56 +current tasks, direct-report check-in17:48:58, queue, approval waits and Fleet/ +hierarchy assessments. Roadmap remains39 proposed/9blocked/6completed/1verification/ +1assigned. Check-in heartbeat badges are observations; actual owner4646/c3be says +existing Release correction and existing Console QA review are running, not idle +from an old badge. No assignment/start/identity/activation or task completion here. +Canonical clean4fa and its earlier single0d46 landing/development-ref push remain +resolved. cce needs_convergence; duplicatec532 ready/unauthorized; c178 proposed1. +Neither current contribution has an integration request. Preserve both old records. + +Actual **QA9e0b3a39** REJECTS Release exact **978d83462418b61ccd7b7be3a2d818ac9108c95e** +only for consented UI aggregate ordering and absolute-path privacy. Independent +literal14-file/422-byte preimage yields sorted acc9d453ee6d2256c6efb9dafff17057e3a6a501328d2eb5a6509349567587fc, +while declaration order produces6bfe963481147c4c0add95e79df883c9fd7b67eab7d01556973e7a14850afe97. +Remove public moduleUrl/modulePath/packageRoot absolute leaks, expose approved +relative identity, recursive serialization privacy regression and export.length0. +QA confirms eight focused strict PASS, true append TIN with old161664-byte prefix +SHA8f82a2ed5e84577b11f03b4c909f3c241ed641b450a5c01e54ed4e2b0cfd5e2a, +four native exact PASS with invalidReason null and eleven immutable artifact hashes. +Native receipts exist independently; they do not override the source rejection. +Owner4646 authorizes correction ONLY inside same three paths and has already +resumed existing Release. Manager163fe routes exact next candidate requirements; +978 is not landable, earlier18a92 lint failure remains failure. Fresh clean newSHA, +all four native gates/artifacts and actual independent QA precede one submission. + +Actual **Console6c203789/c3be1176** returns clean exact +**0c2aeed1db670d1c7ffd68d55ee129871362afe4**, cumulative4fa delta exactly six paths +and diffcheck clean. Corrected independent literal49+17/count/6shown/11remaining/ +overflow scenarios supersede earlier7ad/fcd candidate evidence without erasing it. +Native exact receipts2c071e17/4f3a7f6e/645903f7/73b574c9 exist with invalidReason null; +implementer reports four PASS and11 external PNG hashes. Existing QA has actually +been resumed by arbiter for this exact source and provenance; verdict is pending, +not acceptance or another consent/owner wait. SAMEworkflow/attention source WIP is +now independent verification, not a second assignment. Do not submit or land until +actual QA verdict and current guards. Generated demo artifacts are not live4174. + +Owner93b8's separately proposed UX findings are retained in existing workflow/audit: +doctor-derived green Healthy must disclose its repository-check scope or truthfully +reflect unresolved urgent Fleet hazards. At390x844 the first screen must give useful +decision/risk context through compact adaptive header/nav while preserving ten +keyboard/deeplink/BackForward destinations, safe actions and no clipping/overflow. +Observed exact native39044f9d demo screenshots are generated evidence, not live +computer use. These are NEXT separately consented paths/scenarios, not a change to +current0c2 review or silent scope expansion. Metadata consumer snapshot/server/API +and visible provenance renderer remain separately proposed after helper acceptance. + +B2 current proposed map and recipient decisions are pinned in the PhaseB report's +17:53 section: added Work native bootstrap/private fence-init, existing Kernel +config.mjs correction, real npm/Node/browser/transitive support, Kernel proposed +task-scoped .torch/torch.yaml applier with no present registration permission. +Positive native plan -> one-shot private parent admission -> issuedV2 -> frozen +child consumption -> independently observed descendant closure -> compatible +atomic receipt is the required direction. Actual issuer transport/policy bytes/ +exact QA scopes still need recipient agreement. Same-UID OS containment is not +claimed; namespace availability is not closure proof; current schema3/2 and absent +policy refusals remain. Full6e4verification13 seven criteria stay open; B1 fixture +source acceptance955 is resolved, not a new approval hold or native acceptance. + +Owner5d8 distinguishes advisory completed-dependency flags from true blockers: +reservation125 retains genuine writer-isolation/schema refusal and explicitly links +full6e4 compatibility. Integrity-recorda655 is an internal Work/QA contract decision; +owner4646 reports QA1e477 needs version-pinned complete schema/preimage/YAML/test +paths/scenarios before usable consent. Managerca0b requests that actual Work packet, +not a generic human permission loop. Keep a655 blocked until it arrives and QA +decides; no second active Work implementation. Historical61de preparation approval +does not authorize migration or record enforcement. Owner9d036 also queues Kernel's +owned one-path docs/TODO current-handoff refresh, preserving all historical content +and single ledger; no manager source/doc-boundary edit or provider start. + +Human runtime switch75 remains pending revision1. Owner e20's five-PNG recovery +was already satisfied for exact completed Runtime recovery; no activation approval. +Browser disconnected and live installed alpha2 blockedReason/API/UI provenance/full +desktop/mobile owner-flow criteria remain open; alpha3switch alone cannot qualify +those missing fields. Automatic wakesOFF, no install/host/schema/provider/publication. +Fleet evolution8 recurring-domain and hierarchy10 signals favor existing domain +ownership, concise pinned references and explicit boundary tests over extra roles. +Health49 stale-observed warnings are advisory; two resolved-dependency warnings +require the above actual blocker review, never automatic closure or cleanup. + ## Authorized bounded Overview source work, 17:10 UTC Actual owner **6a6e4830** now authorizes existing Console's exact six-path compact diff --git a/reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md b/reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md index 639f0d5..4bce2d2 100644 --- a/reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md +++ b/reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md @@ -10,6 +10,137 @@ no new assignment, identity, queue or full-task closure is requested here. Current authoritative brief is d7e6d69. Kernel's proposed sections18/20 and ADR026 at 6fdb88ea supply design context, not normative gate changes. +## Current B2 owned decisions and remaining registration seam, 17:53 UTC + +This section supersedes the 17:02 proposed map only by the specific deltas below. +Actual Work **acc1d43e** and Kernel **9752d155**, with owner **7921552a** correcting +two factual errors, are read-only protocol decisions. No B2 implementation, +policy registration, DDL, source receipt or consumer permission follows. B1 exact955 +fixture-source acceptance remains resolved; full6e4 stays Work-owned verification +with seven unchanged criteria. Legacy schema2 evidence and current3/2 refusal stay. + +Live ownership confirms existing **src/kernel/config.mjs**, not a new file. Actual +registered test-dashboard invokes npm run test:dashboard; scripts/test-dashboard-demo.mjs +imports Chromium at line3 and launches it at line49. A Node entry does not remove +the browser/runtime/transitive dependency requirement. Browser-using test scenarios +also require the relevant pinned dependencies. All four current check declarations +lack a V2 snapshot policy; current undeclared-policy refusal is correct. + +### Exact additions to the owned map + +| Recipient | Exact proposed path and decision | Scope boundary | +| --- | --- | --- | +| Kernel | NEW src/kernel/candidate-source-parent.mjs; additive V2 src/kernel/check-subject-context.mjs; additive existing src/kernel/config.mjs | Derive and validate ParentSubjectBindingV2, policy schema/bytes and E/S/A admission; preserve fixtureV1 and existing config compatibility. Parent does not open ControlPlane. | +| Work | NEW src/checks/candidate-source-bootstrap.mjs | Trusted installed native entry, bound registered plan and private one-shot parent transport. Requires the positive issuer protocol below, not a caller-selectable issuer. | +| Work | NEW src/checks/candidate-input-snapshot.mjs; NEW src/checks/candidate-source-execution.mjs | Actual bounded frozen files and real npm/Node/browser consumption under the issued binding. No PhaseA fixture promotion. | +| Work | NEW src/checks/candidate-execution-fence.mjs; NEW private src/checks/candidate-execution-fence-init.mjs | Fixed Linux user/PID namespace backend and independently proved init/descendant/closure observations. Private init is not a public executor selector. | +| Kernel, proposed named config applier | .torch/torch.yaml | Manager names Project Kernel as task-scoped proposed applier of the reviewed four-check policy declaration. Native ownership still reports this file unowned; no permanent ownership-map change or present edit authority. Require Kernel agreement, exact QA policy consent and arbiter's bounded registration scope before applying anything. | +| Work later native plan seam | Existing src/checks/service.mjs | Precisely reviewed registered-plan/private-bootstrap admission only, separate from eventual result consumer integration. It remains excluded from current authority; return exact needed hunk/API before code. | +| Kernel later native adapter | src/control-plane/candidate-attempt-store.mjs; candidate-attempt-store-provisioner.mjs; NEW check-receipt-adapter.mjs | Compatibility, issuer/attempt transport and atomic finalization must be qualified without a migrating initializer. Existing writer edits, live DDL or schema repair are not implied. | +| Work / Release later consumers | Existing src/integration/service.mjs / src/cli.mjs, with later CheckService result wiring | Independent exact-path consent and native compatibility precede real consumption. No default installed-engine equivalence. | + +Work ratifies V2-only snapshot exports capture/verify/describe/disposeCandidateInputSnapshotV2 +and execution exports create/run/cancel/closeCandidateSourceExecutionV2, with schema +and limits constants. Their only state arguments are genuinely issued opaque +parentBinding/snapshot/execution handles, plus a bounded cancel reason. No caller +cwd/root/commit/definition/argv/env/manifest/DB/adapter/token/executor selector. +Private paths never serialize. Kernel must return the exact zero-argument parent +export name/version and canonical V2 bytes; the earlier proposed V1 parent name +is not a ratified V2 API. Work must return exact bootstrap/fence-init entry contracts. + +Snapshot limits ratified by Work:8192 records,64MiB/file,512MiB total,4096 UTF8 path, +1MiB descriptor/policy/manifest frame; enforce before allocation, bytewise canonical +relative records, regular files/directories only. Stream-copy into unique owned +scratch outside source and verify source/frozen manifests before and after. +No atomic-directory or same-user filesystem containment claim. Proposed execution +limits remain QA decisions:300s wall,1MiB each stdout/stderr; artifact limits retain +actual ARTIFACT_MANIFEST_LIMITS(64 files,1MiB/file,8MiB total,4096 path,64KiB frame). +No exit0 override for timeout/error/signal/ENOBUFS/overflow/artifact or input drift. + +E must bind registered definition bytes, fixed Node executable, npm CLI entry, +raw package scripts/package metadata/lock, dependency-tree and necessary browser +binary/runtime/transitive manifests. Frozen S plus separately pinned dependency +domain is the sole execution root; explicit scrubbed env, no live cwd/PATH/HOME/cache +fallback, install or network. Product links refuse. Dependency .bin links require +both lexical and resolved targets inside the pinned domain with target bytes in +its manifest. Missing real dependencies refuse, not an echo or all-refusal substitute. +Kernel's policy canonicalization proposal is fixed UTF8/LF/noBOM length framing over +schema/version/checkId/definition/raw-script/input rules/env/dependencies/limits; +exact executable framing vectors and the YAML field name still need its decision. +Preserve existing snapshot and source-definition semantics rather than silently +reinterpreting them. Config changes are declarations for reviewed qualification, +not automatic registered provisioning or runtime activation. + +### Positive native issuance decision to ratify + +The trust boundary is a trusted installed native coordinator/registered actor and +an untrusted candidate child/caller. Candidate output, branch labels, JSON, same +UID, WeakMap presence or namespace availability cannot assert native identity. +A private capability is an in-process admission mechanism, not OS authentication. +This bounded proposal excludes hostile same-user host processes/ptrace or privileged +host interference; it does not claim containment against them. If that stronger +threat model is required or the supported execution boundary cannot be established, +refuse qualification explicitly. Do not conceal that limitation behind TerminalProof. + +Proposed actual positive path for Work/Kernel agreement: the fixed installed native +plan seam authenticates the existing identity/project/check/lease/guard context +through the supported compatible native authority, resolves a registered V2 policy, +and creates a nonce/run/generation-bound one-shot private parent channel. The fixed +bootstrap consumes that channel exactly once, verifies origin/tuple/policy/expiry, +and issues the opaque V2 binding. The candidate receives only frozen input and +bounded output/artifact channels; never the admission channel, nonce, writer/DB, +receipt adapter or binding capability. Parent-only descriptor setup closes admission +handles before candidate spawn. No public caller token/selector or copied fixture +can enter this path. Work owns native plan/transport/bootstrap; Kernel owns policy, +parent admission and native adapter compatibility. Name actual identity source, +channel creation/closure, replay handling and exact additional shared paths before +implementation. A pipe by itself is not proof of origin; the trusted native creation +and validation boundary must be independently tested. This is the next concrete +decision, not an implemented/authenticated seam or permission to open a migrating CP. + +Required positive qualification includes a real registered plan issuing an unchanged +binding and invoking all four actual npm gate definitions with their dependencies, +before landing any candidate that needs this protocol. Candidate/caller attempts to +forge/replay/spread/cross-project/cross-generation or inherit the admission channel +must refuse. Missing registration and current incompatible schema must still refuse. +Real receipt issuance remains a separate adapter/CAS qualification; fixture tests +and an all-refusal parent cannot complete full6e4 or satisfy native landing gates. + +### Fence and QA decisions still attributable to recipients + +Owner e137 observed unprivileged user/PID namespace creation available on util-linux +2.39.3. That is a precondition only. Work proposes fixed absolute unshare with +--user --map-current-user --pid --fork and pinned private init. Pin exact init API, +argv/version/content digests, host PID and namespace identity/generation, PID1 +admission, child barriers, reaping and independently observed closure. Process-group +emptiness, direct-parent exit or a successful kill is insufficient. Timeout/cancel +ambiguity, changed/unreadable namespace or absent closure yields UNKNOWN with no +TerminalProof/PASS. Positive setsid/double-fork descendants must remain covered +beyond direct-parent exit; include actual browser subprocess lifetimes. No host +services/cgroup setup, provider launches or automatic wakes. + +QA decisions requested on exact NEW candidate-source-parent.test.mjs, +candidate-input-consumption.test.mjs and candidate-execution-fence.test.mjs under +test/fleet, additive V2-only check-subject-context.test.mjs, proposed NEW +test/fleet/candidate-source-bootstrap.test.mjs and NEW +test/fleet/candidate-snapshot-policy.test.mjs, plus append-only docs/TEST_INTEGRITY.md. +The last two paths are proposed additions requiring actual QA consent, not an +invented approved scope. Positive scenarios: registered one-shot issuance; fixed +Node/npm/browser dependency consumption; actual nested and >1MiB frozen-file reads +after source mutation barrier; supported escaped-descendant closure; compatible +native single-receipt CAS. Negatives include policy/frame/preimage drift, authority +inheritance/replay, frozen mutation, E/A substitution, false group-only coverage, +timeout/cancellation ambiguity and schema incompatibility. Independent literals/ +preimages and boundary outcomes must kill trivial echoes or production-helper oracles. + +Immediate recipient decisions are narrow: Kernel ratifies existing parser/four-policy +canonical bytes, proposed config-applier role and parent admission; Work ratifies +native positive issuer/private-channel and fixed init protocol, with exact existing +service scope; QA grants the concrete source/test/policy/limit scenario list or +names exact corrections. Arbiter can then review one bounded implementation scope. +Until those decisions, this is pinned read-only progress, not a new assignment, +source authority, live DDL/registration, gate waiver or full-task acceptance. + ## Current B1 acceptance and concrete B2 implementation packet, 17:02 UTC Actual QA **a13b5c37-12a3-4757-832c-1938b392f962** ACCEPTS only clean exact