weichen fec2d16cc6 Close Task 10 renderer delivery gaps ...

Why:
- Independent review found trusted-boundary, semantic parity, replay-budget,
  comparison, persistence, cancellation, provenance, and routing gaps.
- Storage migration must include the new durable delivery table.

Evidence:
- go test -count=1 ./...
- go test -race ./internal/docgen ./internal/tools ./internal/runmgr
- go test ./... (deps/agent-document-renderer)
- go vet ./...
- go build ./...
- CGO_ENABLED=0 go build -trimpath ./cmd/agent-system
- Python house-style unittest suite and git diff --check

Impact:
- Word delivery now uses host-owned freezes, Markdown-first resumable persistence,
  closed registration boundaries, semantic shared rendering, and real comparison.
- Controlled/project documents still fail closed to RDM and non-Word flows remain
  unchanged.

Refs:
- Unified Document Renderer implementation plan Task 10
- /tmp/task10-backend-review-last.md
- Renderer d5cd8c126045a27d5a5cc5da23f64d3c737e116a

2026-10-15 21:44:03 +00:00

..

account_budget_read_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

account_cursor_key_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

account_directory_test.go

Implement owner-confirmed account recovery and account controls

2026-10-14 04:20:48 +00:00

account_directory.go

Implement owner-confirmed account recovery and account controls

2026-10-14 04:20:48 +00:00

account_event_fence_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

account_lifecycle_test.go

Integrate atomic account maintenance with current authentication

2026-10-14 03:42:03 +00:00

account_lock_order_pg_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

account_model_test.go

Integrate U3 account contract with serialized account transactions

2026-10-14 05:27:42 +00:00

account_model.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

account_process_crash_test.go

Serialize account credential and session changes

2026-10-14 04:08:14 +00:00

account_security_integration_test.go

Integrate U3 account contract with serialized account transactions

2026-10-14 05:27:42 +00:00

account_serialization_pg_test.go

Integrate U3 account contract with serialized account transactions

2026-10-14 05:27:42 +00:00

account_settle_test.go

Fence final run settlement against account disable

2026-10-14 04:48:53 +00:00

account_state_test.go

Implement owner-confirmed account recovery and account controls

2026-10-14 04:20:48 +00:00

account_state.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

account_two_process_pg_test.go

Serialize account credential and session changes

2026-10-14 04:08:14 +00:00

account_tx_lifecycle_test.go

Integrate atomic account maintenance with current authentication

2026-10-14 03:42:03 +00:00

account_tx.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

account_u3_audit_test.go

Integrate U3 account contract with serialized account transactions

2026-10-14 05:27:42 +00:00

account_write_guard.go

Fence delegated project projection by its real operator

2026-10-14 08:17:31 +00:00

admission_pg_test.go

Add shared execution budgets and the action-authz matrix (U3 slice 2)

2026-10-11 05:18:12 +00:00

admission.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

artifact_account_write_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

audit_test.go

Scope command audit storage and queries to the requesting owner

2026-10-08 14:02:19 +00:00

audit.go

Combine project context and audit with account main

2026-10-14 15:41:11 +00:00

auth_account_key_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

auth.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

borrow_account_write_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

borrow.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

card_version_test.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

cards_account_write_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

cards_account_write.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

cards.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

config.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

content.go

Deliver background results through durable nonblocking work cards

2026-10-15 07:05:57 +00:00

context_manifest_test.go

Merge layered exec environments into project decision work

2026-10-15 17:58:14 +00:00

context_manifest.go

Recheck project workflow sources without storing prompts

2026-10-14 05:38:11 +00:00

conversation_account_write.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

conversation_metadata_fence_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

dialect.go

Serialize account credential and session changes

2026-10-14 04:08:14 +00:00

document_delivery_test.go

Close Task 10 renderer delivery gaps

2026-10-15 21:44:03 +00:00

document_delivery.go

Close Task 10 renderer delivery gaps

2026-10-15 21:44:03 +00:00

empty_json_test.go

Advance the core gitlink and serialize empty lists as arrays

2026-09-30 03:20:57 +00:00

exec_env.go

Add immutable layered Python environments for the sandbox.

2026-10-15 13:52:48 +00:00

execution_account_write_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

execution.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

hitl_account_write.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

human_decision.go

Add optional proofs for an exact human structure decision

2026-10-15 02:33:37 +00:00

knowledge_account_write_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

knowledge_authorization_test.go

Recheck resumed project work and isolate publication replacement

2026-10-13 09:04:06 +00:00

knowledge_owned_account_write.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

lease_pg_test.go

Add execution ownership leases with epoch fencing and persistent run commands (U5)

2026-10-11 12:25:31 +00:00

login_key_admin_write.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

login_keys_test.go

Implement owner-confirmed account recovery and account controls

2026-10-14 04:20:48 +00:00

login_keys.go

Integrate U3 account contract with serialized account transactions

2026-10-14 05:27:42 +00:00

message_choice_account_write.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

messages.go

Merge layered exec environments into project decision work

2026-10-15 17:58:14 +00:00

migrate_atomic_test.go

Merge layered exec environments into project decision work

2026-10-15 17:58:14 +00:00

migrate_compat_test.go

Close Task 10 renderer delivery gaps

2026-10-15 21:44:03 +00:00

migrate_compat.go

Close Task 10 renderer delivery gaps

2026-10-15 21:44:03 +00:00

migrate.go

Close Task 10 renderer delivery gaps

2026-10-15 21:44:03 +00:00

notices.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

outbox_tx_test.go

Add same-transaction outbox, S3-compatible blobstore, and real-process acceptance (U5 remainder)

2026-10-11 15:57:12 +00:00

owner_initialization_audit.go

Integrate U3 account contract with serialized account transactions

2026-10-14 05:27:42 +00:00

owner_initialization_test.go

Implement owner-confirmed account recovery and account controls

2026-10-14 04:20:48 +00:00

owner_initialization.go

Integrate U3 account contract with serialized account transactions

2026-10-14 05:27:42 +00:00

pgvector_test.go

Add model identity and in-database vector top-k via pgvector (U6 slice 3)

2026-10-11 16:31:12 +00:00

plan_todo_account_write.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

platform_account_write.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

platform_test.go

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

platform.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

plugin_account_write_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

plugin_account_write.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

profile_prompt_fence_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

project_audit_links_test.go

Bind trusted operation IDs before domain handlers

2026-10-14 04:11:09 +00:00

project_audit_links.go

Bind trusted operation IDs before domain handlers

2026-10-14 04:11:09 +00:00

project_audit_sequence_test.go

Merge layered exec environments into project decision work

2026-10-15 17:58:14 +00:00

project_audit_test.go

Make PostgreSQL project audit cutoffs commit ordered

2026-10-14 05:41:37 +00:00

project_events_test.go

Protect private project event replay and live delivery

2026-10-13 11:12:47 +00:00

project_events.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

project_fence_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

project_projection_fence_test.go

Fence delegated project projection by its real operator

2026-10-14 08:17:31 +00:00

project_projection_test.go

Add project lifecycle delegation and private member work

2026-10-13 08:43:02 +00:00

project_projection.go

Fence delegated project projection by its real operator

2026-10-14 08:17:31 +00:00

project_work_outbox_test.go

Capture actual project work sources before reuse

2026-10-14 16:25:22 +00:00

project_work_outbox.go

Capture actual project work sources before reuse

2026-10-14 16:25:22 +00:00

project_work_run_source_test.go

Capture actual project work sources before reuse

2026-10-14 16:25:22 +00:00

project_work_source_status.go

Capture actual project work sources before reuse

2026-10-14 16:25:22 +00:00

projects.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

prompts.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

recovery_holds_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

recovery_holds.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

recovery_proposals_test.go

Require password lineage and make recovery retries metadata-only

2026-10-14 04:58:31 +00:00

recovery_proposals.go

Integrate U3 account contract with serialized account transactions

2026-10-14 05:27:42 +00:00

recovery_test.go

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00

recovery.go

Persist private project message observations atomically

2026-10-14 15:52:42 +00:00

regeneration_account_write_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

regeneration_account_write.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

run_account_write.go

Persist private project message observations atomically

2026-10-14 15:52:42 +00:00

runtime_account_sink_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

search_postgres.go

Filter private knowledge before applying shared result limits

2026-10-13 08:47:19 +00:00

settings_account_write_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

store_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

store.go

Close Task 10 renderer delivery gaps

2026-10-15 21:44:03 +00:00

surface_account_write_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

surface_actions.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

surfaces_test.go

Add the Surface store, activation guard, and EXT-17 host capability

2026-10-11 08:26:24 +00:00

surfaces.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

system_identity_test.go

Open identity commands on an existing database only

2026-10-12 14:04:41 +00:00

system_identity.go

Open identity commands on an existing database only

2026-10-12 14:04:41 +00:00

typed_nil_blob_test.go

Fall back to local artifacts when the blob store is a typed nil

2026-10-13 01:22:57 +00:00

vectors.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

work_dispatch.go

Deliver background results through durable nonblocking work cards

2026-10-15 07:05:57 +00:00

work_tasks.go

Add trusted project context to work model calls

2026-10-14 04:09:58 +00:00

workflow_step_source_test.go

Recheck project workflow sources without storing prompts

2026-10-14 05:38:11 +00:00

workflow_step_source.go

Recheck project workflow sources without storing prompts

2026-10-14 05:38:11 +00:00