Why: two-process HTTP acceptance (Dev tests/integration/multi-instance, added in
the matching Dev-side change) exposed three real cross-instance defects that the
U5 library-level tests bypassed via direct Manager calls, plus the U7 fault
matrix needs explicit disk-full rejection evidence.
Evidence: go test ./... green on SQLite and real PG (AGENT_PG_TEST_DSN);
new regressions TestCrossInstanceResolveDoesNotSettleCard (runmgr, PG-gated),
TestUploadRejectsCleanlyWhenObjectDirUnwritable and
TestArtifactOverwriteRejectsCleanlyWhenObjectDirUnwritable (server).
Impact: ResolveHITL no longer settles the card when the run executes on another
instance (command-bus fallback stays available); cancelRun enqueues the command
with the real conversation id and no longer reports a false local success;
object-store failures now provably leave zero DB/object residue.
Refs: collaboration storage proposal U7 (sections 3/5/7); task card
feature/u7-load-fault-release.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
协作存储 U7（方案 §5/§7）：
ResolveHITL非执行实例先落卡状态，短路 server 层命令 fallback（执行者永远等不到答案）——改为本地无句柄即返回未决错误，命令总线转交。conversation_id传空串，消费侧执行权 JOIN 永远无法匹配——回填真实值。CancelRun在非执行实例返回 nil 假成功，HTTP 200 吞掉命令路径——跨实例判定前置。TestCrossInstanceResolveDoesNotSettleCard（真库门控）。Why/Evidence/Impact 详见提交信息；测试 SQLite 与真 PG 双档全绿。配套 Dev 侧双进程验收与压测入口见 Agent-System-Dev 任务卡 feature/u7-load-fault-release。