TASK-6e4ff870 record existing read-only Work contract WIP

.torch/backlog/TASK-6e4ff870-a386-4a11-a59c-444ebc23732e.json

@@ -2,7 +2,7 @@
   "schema": "torch.dev/backlog-item/v1alpha1",
   "id": "TASK-6e4ff870-a386-4a11-a59c-444ebc23732e",
   "title": "Separate candidate source qualification from live control-plane initialization",
-  "description": "Explicit owner a970326b-87a5-4292-8f22-e1bec0c15f11/92f7fd36 corrects the inventory: no explicit existing check-engine separation item exists. Add ONE proposed bounded item in the existing backlog. Incident observed on canonical cb145e56 and Kernel reservation candidate be1ae951: candidate CLI initialized production schema3 during qualification, installed/canonical schema2 writers relabel it, and native CONTROL_PLANE_SCHEMA_DOWNGRADE_DETECTED currentVersion2 requiredVersion3 then prevents qualification, causing activation/landing circularity. Design supported separation of exact candidate-source execution engine from a versioned, independently fingerprinted compatible receipt/control-plane adapter without migrating live production state merely to test candidate. Preserve actual authenticated native project/area/commit/definition/run/resource/guard/outcome evidence and immutable artifacts. Work owns src/checks, Kernel src/control-plane, Release CLI wiring and QA scenarios/acceptance; agree exact contract, owned paths and scenario consent before any implementation. No old-checker shortcut, fake isolated real-project receipts, gate waiver, install activation, production DB recovery, new identity or parallel queue. TASK-4dc metadata/candidate preparation remains completed; its retained deeper provenance roadmap was not an explicit task until this proposal.\n\nCurrent authorized phase (owner36788020/21997bf1, QAa0e8ae17): bounded Phase A implementation preparation/development on this SAME Work assignment. Only NEW src/checks/candidate-engine.mjs and src/checks/artifact-manifest.mjs, new QA-consented test/fleet/candidate-engine.test.mjs and test/fleet/candidate-artifact-manifest.test.mjs, and append-only docs/TEST_INTEGRITY.md. Extract reviewed pure raw-terminal execution and trusted parent artifact-collection seams; frozen inputs/args/env/artifact limits, parent-only observed terminal/envelope with no candidate writer capability, capped canonical regular-file manifest and strict traversal/link/special/overwrite/seal-drift rejection. Hermetic fixture/fake-adapter evidence is permanently development-only/nonpromotable. No existing conditions behavior changes or CheckService/CLI/integration/consumer wiring; no store/provisioner/schema/DDL/receipt-consumer/gate-policy/resource-lease changes, live recovery, installation/host/provider/wake/publication actions. QA remains final test owner. Phase A does not complete this full task or qualify native/operational acceptance. Later Kernel store/context/adapter, Release CLI and Work explicit source-consumer phases remain proposed and require separate scoped decisions; retain actual native guards and all existing full acceptance criteria.\n\nCurrent B1 contribution is separately authorized by actual owner b819ecbc after corrected QA c3e0241 exact-path/scenario consent and Work4a3c8ab6 protocol agreement. SAME Work-owned task, named Kernel contributor only: NEW src/kernel/managed-subject-metadata.mjs, NEW src/kernel/check-subject-context.mjs, NEW test/fleet/check-subject-context.test.mjs, append-only docs/TEST_INTEGRITY.md. Bounded data-only V1 fixture/untrusted observation parsing, opaque issued fixtures, strict clone/expiry/reuse/selectors-before-parse negatives and explicit missing native composition. V1 refuses parent/native/loaded-engine claims and V2-shaped fields; no fixture promotion. V2 dependency/snapshot binding remains reserved, not implemented parent/consumer authority. Exact source candidate needs independent QA; actual frozen execution, enforced fences, compatible native adapter/consumers and operational acceptance remain mandatory later phases. No DB/DDL/writer/adapter/receipt/parent/consumer/CLI/runtime/host/provider/wake/publication scope. Owner reports existing Kernel active3473803; no new assignment or manager start.\n\nCurrent B1 exact955672c fixture-source is independently ACCEPTED by QAa13 after actual prefix/blob verification, not native or whole-branch acceptance. Existing9b pre-copy defect and b375 TIN rejection retained. Next concrete B2 packet is in the Manager PhaseB report: named Kernel no-args parent/explicitV2, Work new bounded frozen-input/actual-child execution/fence modules with positive black-box consumption and escaped-descendant coverage scenarios, followed by compatible no-DDL Kernel store/adapter and later actual Work/Release consumers. Exact contributors/scenarios/backend/native compatibility decisions requested; no B2 source authority or new assignment. Full real native/operational criteria remain mandatory.\n\nCurrent17:58 B2 remains READ-ONLY decision, not code. Workacc1/Kernel9752 plus owner792 corrections pin Work NEW candidate-source-bootstrap/private candidate-execution-fence-init; existing Kernel config.mjs additive V2 policy and proposed task-scoped Kernel .torch/torch.yaml applier. Real npm/Node/Chromium/transitive dependencies mandatory. PhaseB17:53 report pins positive native one-shot issuer/actual child/fLine truncated
+  "description": "Explicit owner a970326b-87a5-4292-8f22-e1bec0c15f11/92f7fd36 corrects the inventory: no explicit existing check-engine separation item exists. Add ONE proposed bounded item in the existing backlog. Incident observed on canonical cb145e56 and Kernel reservation candidate be1ae951: candidate CLI initialized production schema3 during qualification, installed/canonical schema2 writers relabel it, and native CONTROL_PLANE_SCHEMA_DOWNGRADE_DETECTED currentVersion2 requiredVersion3 then prevents qualification, causing activation/landing circularity. Design supported separation of exact candidate-source execution engine from a versioned, independently fingerprinted compatible receipt/control-plane adapter without migrating live production state merely to test candidate. Preserve actual authenticated native project/area/commit/definition/run/resource/guard/outcome evidence and immutable artifacts. Work owns src/checks, Kernel src/control-plane, Release CLI wiring and QA scenarios/acceptance; agree exact contract, owned paths and scenario consent before any implementation. No old-checker shortcut, fake isolated real-project receipts, gate waiver, install activation, production DB recovery, new identity or parallel queue. TASK-4dc metadata/candidate preparation remains completed; its retained deeper provenance roadmap was not an explicit task until this proposal.\n\nCurrent authorized phase (owner36788020/21997bf1, QAa0e8ae17): bounded Phase A implementation preparation/development on this SAME Work assignment. Only NEW src/checks/candidate-engine.mjs and src/checks/artifact-manifest.mjs, new QA-consented test/fleet/candidate-engine.test.mjs and test/fleet/candidate-artifact-manifest.test.mjs, and append-only docs/TEST_INTEGRITY.md. Extract reviewed pure raw-terminal execution and trusted parent artifact-collection seams; frozen inputs/args/env/artifact limits, parent-only observed terminal/envelope with no candidate writer capability, capped canonical regular-file manifest and strict traversal/link/special/overwrite/seal-drift rejection. Hermetic fixture/fake-adapter evidence is permanently development-only/nonpromotable. No existing conditions behavior changes or CheckService/CLI/integration/consumer wiring; no store/provisioner/schema/DDL/receipt-consumer/gate-policy/resource-lease changes, live recovery, installation/host/provider/wake/publication actions. QA remains final test owner. Phase A does not complete this full task or qualify native/operational acceptance. Later Kernel store/context/adapter, Release CLI and Work explicit source-consumer phases remain proposed and require separate scoped decisions; retain actual native guards and all existing full acceptance criteria.\n\nCurrent B1 contribution is separately authorized by actual owner b819ecbc after corrected QA c3e0241 exact-path/scenario consent and Work4a3c8ab6 protocol agreement. SAME Work-owned task, named Kernel contributor only: NEW src/kernel/managed-subject-metadata.mjs, NEW src/kernel/check-subject-context.mjs, NEW test/fleet/check-subject-context.test.mjs, append-only docs/TEST_INTEGRITY.md. Bounded data-only V1 fixture/untrusted observation parsing, opaque issued fixtures, strict clone/expiry/reuse/selectors-before-parse negatives and explicit missing native composition. V1 refuses parent/native/loaded-engine claims and V2-shaped fields; no fixture promotion. V2 dependency/snapshot binding remains reserved, not implemented parent/consumer authority. Exact source candidate needs independent QA; actual frozen execution, enforced fences, compatible native adapter/consumers and operational acceptance remain mandatory later phases. No DB/DDL/writer/adapter/receipt/parent/consumer/CLI/runtime/host/provider/wake/publication scope. Owner reports existing Kernel active3473803; no new assignment or manager start.\n\nCurrent B1 exact955672c fixture-source is independently ACCEPTED by QAa13 after actual prefix/blob verification, not native or whole-branch acceptance. Existing9b pre-copy defect and b375 TIN rejection retained. Next concrete B2 packet is in the Manager PhaseB report: named Kernel no-args parent/explicitV2, Work new bounded frozen-input/actual-child execution/fence modules with positive black-box consumption and escaped-descendant coverage scenarios, followed by compatible no-DDL Kernel store/adapter and later actual Work/Release consumers. Exact contributors/scenarios/backend/native compatibility decisions requested; no B2 source authority or new assignment. Full real native/operational criteria remain mandatory.\n\nCurrent17:58 B2 remains READ-ONLY decision, not code. Workacc1/Kernel9752 plus owner792 corrections pin Work NEW candidate-source-bootstrap/private candidate-execution-fence-init; existing Kernel config.mjs additive V2 policy and proposed task-scoped Kernel .torch/torch.yaml applier. Real npm/Node/Chromium/transitive dependencies mandatory. PhaseB17:53 report pins positive native one-shot issuer/actual child/fLine truncated
   "priority": "high",
   "affectedDomains": [
     "work-integration",
@@ -89,14 +89,15 @@
     "message:9752d155-91cb-4a49-9dca-3f85ef3c60c8:current-reviewed-decision-see-17:57-handoff",
     "message:7921552a-15f6-4335-b81e-a447ed365efe:current-reviewed-decision-see-17:57-handoff",
     "message:e137bf05-115c-4868-a1bf-2bc0f0df35b1:current-reviewed-decision-see-17:57-handoff",
-    "message:056cbde7-b080-44a5-bff8-00ffe9992fc2:current-reviewed-decision-see-17:57-handoff"
+    "message:056cbde7-b080-44a5-bff8-00ffe9992fc2:current-reviewed-decision-see-17:57-handoff",
+    "message:28e814a2-9742-4a40-a156-1b9e39dedc26:actual-existing-Work-read-only-contract-WIP"
   ],
   "commit": "316d8b7480c2e10925ebdff8310fe26ef5a881a8",
   "integrationRequest": "a1789e46-b91e-496c-9204-ab204dac6a6d",
   "blockedReason": null,
   "createdAt": "2026-10-01T10:14:01.401Z",
-  "updatedAt": "2026-10-01T17:58:30.000Z",
-  "revision": 14,
+  "updatedAt": "2026-10-01T18:15:19.000Z",
+  "revision": 15,
   "history": [
     {
       "from": null,
@@ -195,6 +196,13 @@
       "actorId": "session-manager",
       "at": "2026-10-01T17:58:30.000Z",
       "note": "Reviewed metadata-only current evidence/recipient decision reconciliation under owner5d8/4646/c3be/93b8. Preserve state, owner, original candidate/request, all historical evidence/criteria and history. No new assignment, source authority, broad acceptance, live/schema/activation or integration."
+    },
+    {
+      "from": "verification",
+      "to": "verification",
+      "actorId": "session-manager",
+      "at": "2026-10-01T18:15:19.000Z",
+      "note": "Record actual owner28 existing Work read-only contract turn WIP; no new assignment/status/schema field, implementation permission, consent assumption or lifecycle change. All original source/criteria/history/refusals preserved; concrete returned contract and QA contributor decisions remain required."
     }
   ]
 }

.torch/backlog/TASK-a65500ed-a505-4664-badc-a1483d6f6f11.json

@@ -2,7 +2,7 @@
   "schema": "torch.dev/backlog-item/v1alpha1",
   "id": "TASK-a65500ed-a505-4664-badc-a1483d6f6f11",
   "title": "Preserve test-integrity evidence in immutable per-change records with a validated index",
-  "description": "Owner795de3fc observes repeated independent additive docs/TEST_INTEGRITY.md prepend merge conflicts in Runtime/Kernel convergence, requiring lossless peer reconciliation. Propose ONE bounded QA-led evidence organization change with Work Integration validation/discovery consent. Design immutable per-task/change integrity records and discoverable gate-validated index, preserving all historical notes, IDs, strict scenarios, hashes and original QA ownership. No immediate migration, current merge-protocol bypass, assertion weakening, acceptance shortcut or provider start. Existing frozen candidates must still reconcile notes under QA consent; this proposal remains unassigned until reliability sequence and peer review.\n\nCurrent17:58 owner5d8/4646 identifies INTERNAL QA decision, not human strategic permission wait. Actual QA1e477 as reported by owner4646 needs concrete Work version-pinned integrity-record schema/canonical preimage/exact YAML/test paths/scenarios; old6a935/157 references alone insufficient. Managerca0b requests durable read-only packet and named QA/Work decisions. No usable consent yet, no code/migration/enforcement or second Work implementation; full6e4 continuity preserved.",
+  "description": "Owner795de3fc observes repeated independent additive docs/TEST_INTEGRITY.md prepend merge conflicts in Runtime/Kernel convergence, requiring lossless peer reconciliation. Propose ONE bounded QA-led evidence organization change with Work Integration validation/discovery consent. Design immutable per-task/change integrity records and discoverable gate-validated index, preserving all historical notes, IDs, strict scenarios, hashes and original QA ownership. No immediate migration, current merge-protocol bypass, assertion weakening, acceptance shortcut or provider start. Existing frozen candidates must still reconcile notes under QA consent; this proposal remains unassigned until reliability sequence and peer review.\n\nCurrent17:58 owner5d8/4646 identifies INTERNAL QA decision, not human strategic permission wait. Actual QA1e477 as reported by owner4646 needs concrete Work version-pinned integrity-record schema/canonical preimage/exact YAML/test paths/scenarios; old6a935/157 references alone insufficient. Managerca0b requests durable read-only packet and named QA/Work decisions. No usable consent yet, no code/migration/enforcement or second Work implementation; full6e4 continuity preserved.\n\nCurrent owner28e814a2 confirms existing Work actually resumed READ-ONLY for concrete integrity-record schema/preimage/YAML/test/scenario contract and B2 native plan/bootstrap/private-init positive protocol against pinned17:53 packet. Bounded WIP on existing task metadata only; full6e4 verification and integrity-record blocked lifecycle remain. No source/docs/tests/config implementation, new assignment or code authority. Await actual returned contract and named QA/Kernel decisions, not generic human permission.",
   "priority": "high",
   "affectedDomains": [
     "qa",
@@ -39,14 +39,15 @@
     "baseline:07a2bc:TEST_INTEGRITY:sha256:239fb5539e9f7cfc8562ac5351c61e7e1d345f00737a557ce9fa1b6d702e941a",
     "message:5d8c8f1d-7c77-45b5-84b7-4860f8e90f0c:current-reviewed-decision-see-17:57-handoff",
     "message:4646e5ce-c535-48f8-a3fc-3922ce683e08:current-reviewed-decision-see-17:57-handoff",
-    "message:ca0b2674-b5ad-40db-994c-68ea50fb85c0:current-reviewed-decision-see-17:57-handoff"
+    "message:ca0b2674-b5ad-40db-994c-68ea50fb85c0:current-reviewed-decision-see-17:57-handoff",
+    "message:28e814a2-9742-4a40-a156-1b9e39dedc26:actual-existing-Work-read-only-contract-WIP"
   ],
   "commit": null,
   "integrationRequest": null,
   "blockedReason": "Read-only preparation complete. Actionable INTERNAL Work/QA contract decision: return concrete version-pinned record schema/canonical preimage/exact YAML/test paths/scenarios requested by actual QA1e477 (owner4646), then obtain named contributor/gate consent and sequence bounded implementation. Historical61de permits evidence preparation only. This is not an owner strategic permission hold; no code/migration/acceptance or automatic dependency unblocking.",
   "createdAt": "2026-10-01T07:36:25.425Z",
-  "updatedAt": "2026-10-01T17:58:30.000Z",
-  "revision": 6,
+  "updatedAt": "2026-10-01T18:15:19.000Z",
+  "revision": 7,
   "history": [
     {
       "from": null,
@@ -89,6 +90,13 @@
       "actorId": "session-manager",
       "at": "2026-10-01T17:58:30.000Z",
       "note": "Reviewed metadata-only current evidence/recipient decision reconciliation under owner5d8/4646/c3be/93b8. Preserve state, owner, original candidate/request, all historical evidence/criteria and history. No new assignment, source authority, broad acceptance, live/schema/activation or integration."
+    },
+    {
+      "from": "blocked",
+      "to": "blocked",
+      "actorId": "session-manager",
+      "at": "2026-10-01T18:15:19.000Z",
+      "note": "Record actual owner28 existing Work read-only contract turn WIP; no new assignment/status/schema field, implementation permission, consent assumption or lifecycle change. All original source/criteria/history/refusals preserved; concrete returned contract and QA contributor decisions remain required."
     }
   ]
 }

reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md

@@ -1,5 +1,12 @@
 # Current pilot remaining-work handoff
 
+Current owner **28e814a2** confirms arbiter actually resumed EXISTING Work read-only
+for the concrete integrity-record and B2 native plan/bootstrap/private-init decisions
+against the pinned17:53 packet. This replaces the prospective Work re-entry below:
+Work contract WIP is running alongside existing Release privacy correction; no
+Manager launch, source authority, new assignment or full-task acceptance. Existing
+6e4verification and a655blocked metadata record this bounded WIP without new fields.
+
 ## Latest reviewed outcome and concrete session handoff, 18:12 UTC
 
 Fresh addressed unread/current56 tasks/actual queue/check-in18:11 reviewed.