weichen 0bc4b0f794 Merge current account hardening into work checkpoint branch ...

Why: Preserve the newest protected main for the combined review candidate.

Evidence: Exact incoming object fetched; affected checks will replay.

Impact: Retain both histories without relaxing source or task authority.

Refs: Dev main aa6364f

2026-10-13 06:24:35 +00:00

..

account_lifecycle_test.go

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

admission_pg_test.go

Add shared execution budgets and the action-authz matrix (U3 slice 2)

2026-10-11 05:18:12 +00:00

admission.go

Add shared execution budgets and the action-authz matrix (U3 slice 2)

2026-10-11 05:18:12 +00:00

audit_test.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

audit.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

auth.go

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

borrow.go

Store secrets apart from settings and assemble context at the end

2026-10-04 18:20:10 +00:00

card_version_test.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

cards.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

config.go

Expand dotted setting keys and mask secret pools

2026-10-04 13:01:38 +00:00

content.go

Preserve source authority and task identity through delivery and recovery

2026-10-13 03:55:04 +00:00

dialect.go

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

empty_json_test.go

Advance the core gitlink and serialize empty lists as arrays

2026-09-30 03:20:57 +00:00

execution.go

Add same-transaction outbox, S3-compatible blobstore, and real-process acceptance (U5 remainder)

2026-10-11 15:57:12 +00:00

lease_pg_test.go

Add execution ownership leases with epoch fencing and persistent run commands (U5)

2026-10-11 12:25:31 +00:00

login_keys_test.go

Harden login-key recovery flow with auth-version transactions

2026-10-13 03:36:38 +00:00

login_keys.go

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

messages.go

Persist task projections and replay cursors atomically

2026-10-13 01:31:46 +00:00

migrate_atomic_test.go

Retry transient SQLITE_BUSY at migration Begin and race on a materialized db

2026-10-11 04:08:50 +00:00

migrate_compat_test.go

Publish schema target and compatibility floor

2026-10-12 14:11:07 +00:00

migrate_compat.go

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

migrate.go

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

notices.go

Bind background lifecycle and recovery to persistent tasks

2026-10-13 01:39:02 +00:00

outbox_tx_test.go

Add same-transaction outbox, S3-compatible blobstore, and real-process acceptance (U5 remainder)

2026-10-11 15:57:12 +00:00

pgvector_test.go

Add model identity and in-database vector top-k via pgvector (U6 slice 3)

2026-10-11 16:31:12 +00:00

platform_test.go

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

platform.go

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

projects.go

Share retrieval inside runs and open project listing/conversations to members (EXT-13/15)

2026-10-09 15:44:48 +00:00

prompts.go

Move prompts into a layered data library with trigger-based assembly

2026-09-30 10:35:23 +00:00

recovery_holds_test.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

recovery_holds.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

recovery_test.go

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00

recovery.go

Add execution ownership leases with epoch fencing and persistent run commands (U5)

2026-10-11 12:25:31 +00:00

search_postgres.go

Implement shared knowledge retrieval, card mirror switch, and SSE project gate

2026-10-08 16:18:07 +00:00

store_test.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

store.go

Fall back to local artifacts when the blob store is a typed nil

2026-10-13 01:22:57 +00:00

surface_actions.go

Add the surface action pipeline: ledger, guards, dispatch, submit (U5)

2026-10-11 14:24:31 +00:00

surfaces_test.go

Add the Surface store, activation guard, and EXT-17 host capability

2026-10-11 08:26:24 +00:00

surfaces.go

Add project-level surface aggregation and task-phase guidance (U6)

2026-10-12 02:12:42 +00:00

system_identity_test.go

Open identity commands on an existing database only

2026-10-12 14:04:41 +00:00

system_identity.go

Open identity commands on an existing database only

2026-10-12 14:04:41 +00:00

task_deletion_test.go

Preserve source authority and task identity through delivery and recovery

2026-10-13 03:55:04 +00:00

task_projection_test.go

Publish validated material findings during background work

2026-10-13 02:29:23 +00:00

task_projection.go

Publish validated material findings during background work

2026-10-13 02:29:23 +00:00

typed_nil_blob_test.go

Fall back to local artifacts when the blob store is a typed nil

2026-10-13 01:22:57 +00:00

vectors.go

Add model identity and in-database vector top-k via pgvector (U6 slice 3)

2026-10-11 16:31:12 +00:00