Commit Graph
3117 Commits
Author SHA1 Message Date
weichen 05fa14050d Record the sync checkpoint
Why: bind the task validation checkpoint to the integration baseline.

Evidence: SELF recursive component checks; sync_base=d23fb4363dcc0a206e71e47f9cd23a644c7e1c70; before_record=1f063f5df3aec5f9a5317f7599711d4eccebeed9.

Impact: task metadata only.

Refs: .task/feature-iam-u3-account-directory-recovery.md
2026-10-14 07:38:40 +00:00
weichen 1f063f5df3 Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=d23fb4363dcc0a206e71e47f9cd23a644c7e1c70.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-14 07:38:14 +00:00
weichen f120418461 Record U3 account fence candidate and review blocker
Why: Approved A1-A4 fixes have a committed Backend candidate, while independent review found that delegated rename still loses the real operator at the Backend write.

Evidence: The task card contains tool-written SELF receipts for exact Backend adcd8fe SQLite full test/build, isolated PostgreSQL suites, and RDM source-overlay full test/build.

Impact: Keeps stage 6 paused and records the pending Documents 5783940 stage 4-5 contract review. No component pin, PR, merge, production migration, deployment, or real-account action.

Refs: Documents U3 r1 c236d30, approved amendment fb3a821, delegated actor proposal 5783940.
2026-10-14 07:38:04 +00:00
weichen d23fb4363d Merge pull request 'Close the merged svc-pidcheck-leak task card' (#541) from feature/card-close-pidcheck-20261014-072240Z into main
ci / svc-realcombo (push) Successful in 1m57s
ci / test (push) Successful in 6m45s
ci / test-pg (push) Successful in 8m3s
2026-10-14 07:33:17 +00:00
weichen 221afaeb16 Close the merged svc-pidcheck-leak task card and archive it
ci / svc-realcombo (pull_request) Successful in 2m2s
ci / test (pull_request) Successful in 5m26s
ci / test-pg (pull_request) Successful in 8m34s
Why: PR #457 landed as a squash so main has no "from
feature/svc-pidcheck-leak into main" merge commit and task-close's
card_merge did not pick the card up; user authorized wrap-up on
2026-10-14. R2 (service restoration, rdmcand independent data) was
verified live today before closure.

Evidence: merge 226a4af157 verified as
origin/main ancestor; SELF receipts /tmp/svc-list-verify-20261014T072236.json
and /tmp/svc-info-rdmcand-verify-20261014T072259.json record the live
svc-list and svc-info checks; in-card test-governance receipts back R1.

Impact: backfills status, results, merge and cleanup records on the
card and moves it to .task/archive/; no code changes.
2026-10-14 07:24:20 +00:00
weichen d40579ed7f Merge pull request 'Fix facts registry commands and make precheck parsing escape-aware' (#539) from fix/facts-registry-commands into main
ci / svc-realcombo (push) Successful in 1m55s
ci / test (push) Successful in 5m9s
ci / test-pg (push) Successful in 7m32s
2026-10-14 06:40:53 +00:00
weichen 3b0e100fba Fix facts registry commands and make precheck parsing escape-aware
ci / svc-realcombo (pull_request) Successful in 1m59s
ci / test (pull_request) Successful in 5m13s
ci / test-pg (pull_request) Successful in 8m6s
Why: F2 token extraction predates the two-section (HOME/IMC) layout of
~/.secrets/gitea so it concatenated both tokens and always failed; F6
registered a grep BRE alternation that facts-verify unescapes into a
literal pipe, failing re-verification and misaligning precheck's naive
pipe split into a spurious F6 date-format expiry warning, while both
underlying facts still hold.

Evidence: make facts-verify now 6/6 PASS with last_verified refreshed
to 2026-10-14; new regression test for escaped pipes in facts rows;
full governance suite 342 tests OK (18 skipped); precheck [facts] line
reports all facts fresh on the fixed parser.

Impact: policy/facts.md F2 (HOME-section awk extraction) and F6
(negated pipe-free grep); scripts/task.sh precheck neutralizes escaped
pipes the same way facts-verify does; tests/test_task.py covers it.

Refs: precheck WARN 过期事实 F6(日期格式); AGENTS.md 证据与验证门禁.
2026-10-14 06:13:51 +00:00
weichen 427e9faf47 Merge pull request 'Close merged task cards (feature/card-close-20261012-123313Z)' (#471) from feature/card-close-20261012-123313Z into main
ci / svc-realcombo (push) Successful in 1m48s
ci / test (push) Successful in 5m13s
ci / test-pg (push) Successful in 8m39s
2026-10-14 06:13:17 +00:00
weichen 7c183b8821 Merge remote-tracking branch 'origin/main' into feature/card-close-20261012-123313Z
ci / svc-realcombo (pull_request) Successful in 1m56s
ci / test (pull_request) Successful in 5m15s
ci / test-pg (pull_request) Successful in 7m56s
2026-10-14 06:00:11 +00:00
weichen 519716602b Record U3 stage-six review blockers
Why: independent review found account write fencing, implicit API-key creation, lock order, and cursor scope gaps in the submitted source.

Evidence: SELF read-only reviewer range 8e80e26..4053c4d; Documents fb3a821 records triggers and replay plan.

Impact: suspend stage-six approval request pending amended stage-four and stage-five review; retain earlier receipts as historical SELF.

Refs: IAM U3 r1; policy/delivery.md
2026-10-14 05:52:23 +00:00
weichen 3b38eacacd Record U3 integration evidence after U7 mainline sync
Why: Stage-six review needs the current Backend and RDM source identities and a clear boundary between local overlay checks and formal pin validation.

Evidence: SELF task-sync, exact-head Backend SQLite/PostgreSQL tests and build, RDM overlay checks, and Dev governance results are recorded by make evidence.

Impact: Review record only; no production migration, deployment, or formal acceptance.

Refs: IAM U3 r1; U7 PR #185
2026-10-14 05:38:33 +00:00
weichen 2c90814709 Record the sync checkpoint
Why: bind the task validation checkpoint to the integration baseline.

Evidence: SELF recursive component checks; sync_base=4f84c2e1630cd0311643529fae1c3a99f1dd5d64; before_record=11d3b10b97ec31618bcb6517da01a4b0aba71ade.

Impact: task metadata only.

Refs: .task/feature-iam-u3-account-directory-recovery.md
2026-10-14 05:28:23 +00:00
weichen 11d3b10b97 Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=4f84c2e1630cd0311643529fae1c3a99f1dd5d64.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-14 05:28:00 +00:00
weichen 37b700196e Record U3 replay variance and release-tag dependency
Why: Stage 6 reviewers need the observed flaky-test replays and the exact order needed to move from local overlay to a fixed RDM pin.

Evidence: SELF receipts named in the task card; this commit changes only review metadata, so the prior exact-head Dev governance result remains applicable to unchanged scripts.

Impact: Keeps formal stage 7/GATE and user-executed version publication explicit; no component source or production state changes.

Refs: IAM U3 r1; policy/delivery.md stage 6
2026-10-14 05:11:09 +00:00
weichen 4f84c2e163 Merge pull request 'Close three trial task cards and fix long-history detection' (#538) from feature/card-close-merge-queue-trial-20261014 into main
ci / svc-realcombo (push) Successful in 3m5s
ci / test (push) Successful in 7m53s
ci / test-pg (push) Successful in 9m31s
2026-10-14 05:08:39 +00:00
weichen ee11d95bf5 Identify the stage 6 Dev review object from its task card
Why: The stage 6 row should point to the committed Dev candidate without leaving a pending-commit placeholder.

Evidence: SELF git diff --cached --check at the task-card follow-up commit.

Impact: Reviewers use this card HEAD for the Dev help/guard diff; component SHAs and the pin limitation remain explicit.

Refs: IAM U3 r1; feature/iam-u3-account-directory-recovery
2026-10-14 05:05:40 +00:00
weichen 1d42933aa1 Record U3 implementation candidate and close obsolete account help
Why: Operators need the approved no-password initialization and owner-confirmed recovery contract, and stage 6 reviewers need an exact component/evidence map.

Evidence: SELF task-card precheck and make test-governance receipts; component receipts listed in the task card with separate source identities.

Impact: svc rejects obsolete credential commands before storage binding, help points to protected delivery and recovery proposals, and the task card records stage 6 scope with formal pin/CI dependencies still pending.

Refs: IAM U3 r1 Documents c236d309; Backend 3e01614; RDM 265d33e; Frontend a961b19
2026-10-14 05:05:21 +00:00
weichen 2221a099b7 Backfill the three archived trial card outcomes
ci / svc-realcombo (pull_request) Successful in 2m12s
ci / test (pull_request) Successful in 5m19s
ci / test-pg (pull_request) Successful in 7m44s
Why: The archive move staged the path changes while leaving the status and merge receipts as unstaged content; each archived card must carry its actual completed result.

Evidence: The recorded merge commits f00165e8, d852c159, and 05b997b8 are present in origin/main and match Dev PR #489/#488/#486.

Impact: Mark exactly three authorized cards complete and record their merge subjects without changing other task cards.

Refs: Dev merge queue #518; Dev #489, #488, #486
2026-10-14 04:50:27 +00:00
weichen deff43ae59 Close trial task cards and keep long histories visible
Why: pipefail treated a recent merged-card match as a failed git log after grep exited early, hiding completed cards from precheck and task-close.

Evidence: A disposable long-history regression failed before the fix and passed after it; make test-governance passed 341 cases. Git history confirms PR #489/#488/#486 merge SHAs.

Impact: Detect merged cards reliably and archive only the three authorized trial cards; four unrelated eligible cards remain untouched.

Refs: Dev merge queue #518; Dev #489, #488, #486
2026-10-14 04:50:06 +00:00
weichen 05b997b84d Merge pull request 'Deliver U7 account transactions on the current combination' (#486) from feature/u7-account-tx-audit into main
ci / svc-realcombo (push) Successful in 2m13s
ci / test (push) Successful in 5m3s
ci / test-pg (push) Successful in 7m52s
2026-10-14 04:36:00 +00:00
weichen d805cc1697 Record U7 integration evidence and correct the specification
ci / svc-realcombo (pull_request) Successful in 1m54s
ci / test (pull_request) Successful in 5m1s
ci / test-pg (pull_request) Successful in 7m19s
Why: The account task needs the actual synchronized combination and raw local checks before freezing its final Dev candidate; two spec lines overstated identity and test behavior.

Evidence: SELF make test, isolated PostgreSQL and Redis backend tests, make build, and task-sync receipts are imported; Backend #185 has independent REPLAY and exact-head GATE.

Impact: Keep current component pins, clarify read-only identity verification and test coverage, and prepare the Dev PR for final exact-head admission.

Refs: Dev #486; Backend #185; merge queue #518
2026-10-14 04:23:31 +00:00
weichen d2783e4061 Record the sync checkpoint
Why: bind the task validation checkpoint to the integration baseline.

Evidence: SELF recursive component checks; sync_base=d852c159b6b3387a2f418a42ab6d3696ac873d01; before_record=665955279bac407e2f55bbba9f7299e48fd70031.

Impact: task metadata only.

Refs: .task/feature-u7-account-tx-audit.md
2026-10-14 04:17:13 +00:00
weichen 665955279b Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=d852c159b6b3387a2f418a42ab6d3696ac873d01.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-14 04:16:47 +00:00
weichen 1f347c5ec4 Pin the merged account transaction backend
Why: The Dev U7 task must consume the actual reviewed Backend merge and record the current agent-only delivery authorization.

Evidence: Backend #185 merged as 8e80e261 after independent REPLAY and exact-head GATE run 3062; task card preserves the original SELF resume receipt.

Impact: Advance the Backend gitlink to the merged component; parent combination and CI remain pending final synchronization.

Refs: Dev #486; Backend #185; Dev queue #518
2026-10-14 04:15:55 +00:00
weichen d852c159b6 Merge pull request 'Deliver RDM audit export in the controlled integration window' (#488) from feature/rdm-audit-export-entry into main
ci / svc-realcombo (push) Successful in 1m59s
ci / test (push) Successful in 5m16s
ci / test-pg (push) Successful in 7m35s
2026-10-14 03:46:36 +00:00
weichen a70de2c54a Validate export delivery in the controlled integration window
ci / svc-realcombo (pull_request) Successful in 1m54s
ci / test (pull_request) Successful in 5m12s
ci / test-pg (pull_request) Successful in 8m42s
Why: Finish Dev #488 with delivered Frontend and RDM objects, explicit audit grants in private browser fixtures, and owned process cleanup.

Evidence: Tool-imported SELF precheck, final sync, make test, and real-browser runs retain failures and passes; latest isolated runtime completed seven browser cases. Final exact-head GATE and independent parent Review follow.

Impact: Preserves other main components and existing CI jobs while the one final candidate is fixed for formal checks.

Refs: Dev PR #488; Frontend PR #73; RDM PR #301; queue Issue #518
2026-10-14 03:35:17 +00:00
weichen 925c6a989d Record the sync checkpoint
Why: bind the task validation checkpoint to the integration baseline.

Evidence: SELF recursive component checks; sync_base=f00165e8d71e4dc8ba0ceb7dc50c1a8a3deb6d60; before_record=3e39e8fcdbb885dfe6537b578c20bbcac647b5a3.

Impact: task metadata only.

Refs: .task/feature-rdm-audit-export-entry.md
2026-10-14 03:22:16 +00:00
weichen 3e39e8fcdb Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=f00165e8d71e4dc8ba0ceb7dc50c1a8a3deb6d60.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-14 03:21:51 +00:00
weichen 000eb75245 Pin delivered frontend export and record current dependency
Why: Prepare genuine Dev #488 for its final window using actually merged component versions and the authorized agent merge scope.

Evidence: Frontend PR 73 tree-identical merge and independent review; RDM PR 301 GATE3044, independent replay, Root merge ef510. Full Dev combination and exact-head CI remain pending.

Impact: Advances the frontend pin and task record only; current target main sync follows in the scheduled final window.

Refs: Dev PR #488; Frontend PR #73; RDM PR #301; Issue #518
2026-10-14 03:19:40 +00:00
weichen f00165e8d7 Merge pull request 'Pin proposal status and start the controlled merge queue trial' (#489) from feature/proposal-status-20261012 into main
ci / svc-realcombo (push) Successful in 1m56s
ci / test (push) Successful in 5m14s
ci / test-pg (push) Successful in 7m47s
2026-10-14 02:30:51 +00:00
weichen c451fb92b9 Preserve the U3 review synchronization and document receipts
Why: bind the human review checkpoint to the authoritative baseline and fixed contract.

Evidence: SELF task-sync and document-check receipts captured by make evidence.

Impact: evidence metadata only; business tests, CI and runtime delivery remain NOT_RUN.

Refs: Documents c236d3099dd3e20f7bdd35caf162e0be9a7d52eb; IAM U3 phase 4-5
2026-10-14 02:19:23 +00:00
weichen 5e6bf4aa05 Pin proposal status and start the controlled merge queue trial
ci / svc-realcombo (pull_request) Successful in 1m46s
ci / test (pull_request) Successful in 5m10s
ci / test-pg (pull_request) Successful in 7m22s
Why: retain the approved status changes and current documentation while adopting the already approved manual delivery window after real platform validation.
Evidence: original startup, conflict resolution, combination test and writer inventory receipts are preserved in the task card; independent Doc89 and platform replay reports are referenced. Final candidate CI and review remain required.
Impact: publish the delivered Documents merge, manual trial policy and truthful capability state; keep all workflow triggers/checks and original task baseline unchanged.
Refs: Dev PR #489; Documents PR #89; Issue #518; approved merge queue implementation plan r1; user continuation authorization on 2026-10-14
2026-10-14 02:10:35 +00:00
weichen 9ac3f55284 Record the U3 contract review candidate and authorization boundary
Why: preserve the authorized U3 scope and concrete contract for human phase review.

Evidence: SELF startup and document-check receipts; independent document review of fixed drafts.

Impact: task metadata only; no product code, runtime data, production operations or gitlink changes.

Refs: Documents c236d3099dd3e20f7bdd35caf162e0be9a7d52eb; IAM r1 U3
2026-10-14 02:05:40 +00:00
weichen 839b2a3af0 Synchronize proposal status delivery with the current integration baseline
Why: restore the assigned task against the current target while retaining its original baseline and all newer component capabilities.
Evidence: startup precheck and real parent/component sync receipts capture the original conflict; Documents PR89 was independently reviewed, merged by the agent, and its tree verified.
Impact: include origin/main and the delivered documentation merge 7bd4e17827d4c7c88647bf3c9199c495b60cb107 without rewriting task history or pushing waiting branches.
Refs: Dev PR #489; Documents PR #89; merge queue Issue #518; user takeover authorization on 2026-10-14
2026-10-14 01:18:47 +00:00
weichen de360c0d5e Record the task card for feature-iam-u3-account-directory-recovery
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-iam-u3-account-directory-recovery.md; R0=add097d06137c4912a4ed9279e98ca353e4e4cf1.

Impact: task metadata only; the feature workspace starts at add097d061.

Refs: .task/feature-iam-u3-account-directory-recovery.md
2026-10-14 01:09:34 +00:00
weichen add097d061 Merge pull request 'Require agent-only merges and archive the delivered merge queue increment' (#536) from feature/card-close-merge-queue-20261014 into main
ci / svc-realcombo (push) Successful in 1m42s
ci / test (push) Successful in 4m51s
ci / test-pg (push) Successful in 7m34s
2026-10-13 18:22:26 +00:00
weichen 03ad9136e3 Merge authoritative main into the task branch
ci / svc-realcombo (pull_request) Successful in 1m52s
ci / test (pull_request) Successful in 4m58s
ci / test-pg (pull_request) Successful in 7m17s
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=57bcb17ea212a531186b6e21617a7f3bea65a791.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-13 17:34:21 +00:00
weichen 4c71058162 Close 1 merged task card(s) and archive them
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-merge-queue-policy-draft.md(PR#519) — merges verified via git log --merges against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
2026-10-13 17:22:20 +00:00
weichen c02043f2c4 Require agent execution for every pull request merge
Why: The user requires all merges to follow agent-run synchronization, review, current-head CI and platform admission.

Evidence: Existing delivery stages and owner-only protection boundary reviewed; exact current Gitea Chinese labels verified from runtime resources.

Impact: Strengthen the merge executor rule only; retain human stage reviews, owner protection actions and actual CI requirements.

Refs: User instruction; merge-queue implementation plan U4/U5; Dev PR #519; Issue #518
2026-10-13 17:11:13 +00:00
weichen 57bcb17ea2 Merge pull request 'Archive the merged IAM integration task and preserve actual CI results' (#535) from feature/iam-i1-permission-boundaries into main
ci / svc-realcombo (push) Successful in 1m47s
ci / test (push) Failing after 4m18s
ci / test-pg (push) Successful in 7m11s
2026-10-13 17:09:27 +00:00
weichen 59414e2e16 Archive the merged IAM integration task with actual gate results
ci / svc-realcombo (pull_request) Successful in 1m49s
ci / test (pull_request) Successful in 5m24s
ci / test-pg (pull_request) Successful in 7m14s
Why: Close the delivered I1 task without modifying unrelated task records or shared workspaces.

Evidence: Dev PR 534 merged after all three exact-head CI jobs passed; RDM 360/362 and Documents 98/99 actual results and independent reviews are retained.

Impact: Archive this task card and preserve original receipts only; leave all worktrees, branches, production services and later IAM increments unchanged.

Refs: Dev PR 534; policy/delivery.md task closure authorization; IAM I1.
2026-10-13 16:55:34 +00:00
weichen 28dcfcea78 Record the sync checkpoint
Why: bind the task validation checkpoint to the integration baseline.

Evidence: SELF recursive component checks; sync_base=415f9ac58ece9d9b63bd9b3fea39978bb847fcce; before_record=415f9ac58ece9d9b63bd9b3fea39978bb847fcce.

Impact: task metadata only.

Refs: .task/feature-iam-i1-permission-boundaries.md
2026-10-13 16:54:52 +00:00
weichen 415f9ac58e Merge pull request 'Adopt the reviewed IAM permission contract and merged RDM evidence' (#534) from feature/iam-i1-permission-boundaries into main
ci / svc-realcombo (push) Successful in 2m4s
ci / test (push) Failing after 3m29s
ci / test-pg (push) Successful in 7m13s
2026-10-13 16:53:16 +00:00
weichen ccbbdec74b Record the sync checkpoint
ci / svc-realcombo (pull_request) Successful in 2m2s
ci / test (pull_request) Successful in 5m1s
ci / test-pg (pull_request) Successful in 8m22s
Why: bind the task validation checkpoint to the integration baseline.

Evidence: SELF recursive component checks; sync_base=e793e9804a1f5ecf49b29a40b4baac90ceb04e55; before_record=49dac767dcb32a21f2f9f703126c7aba09bedca8.

Impact: task metadata only.

Refs: .task/feature-iam-i1-permission-boundaries.md
2026-10-13 16:40:53 +00:00
weichen 49dac767dc Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=e793e9804a1f5ecf49b29a40b4baac90ceb04e55.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-13 16:40:27 +00:00
weichen 9c052a25e6 Fix the reviewed IAM integration candidate for final CI
Why: Preserve independent final review and current-source equivalence before platform admission.

Evidence: Final document and integration metadata review has zero findings; full composition test and source equivalence receipts are retained with precise SELF object boundaries.

Impact: Delivery evidence only; no production, provider, guideline or document changes from the reviewed candidate.

Refs: IAM I1 integration task; Documents 98/99; RDM 360/362.
2026-10-13 16:40:23 +00:00
weichen 19b02b3cad Record merged IAM delivery and validate the final integration
Why: Preserve actual component merge results and current delivery authorization before integration CI.

Evidence: RDM PR 360 merged at exact successful CI head; new Dev make test passed and independent metadata checks preserved approved digests and pins.

Impact: Clarify historical task records and current approved repair scope; preserve documentation and delivery evidence only.

Refs: Documents PRs 98 and 99; RDM PRs 360 and 362; IAM I1 task record.
2026-10-13 16:36:35 +00:00
weichen e793e9804a Merge pull request 'Record the stage-7 acceptance verdict on the archived Dev card' (#533) from feature/rdm-increment-acceptance-note into main
ci / svc-realcombo (push) Successful in 1m53s
ci / test (push) Successful in 5m18s
ci / test-pg (push) Successful in 7m42s
2026-10-13 16:31:23 +00:00
weichen a8c42d9a59 Record the sync checkpoint
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=1e5c6b9c10ba77ed34663fd670138621a17342bd; candidate=72d67216ef52730c17cc304f79307eed8b10c559.

Impact: task metadata only.

Refs: .task/feature-iam-i1-permission-boundaries.md
2026-10-13 16:26:32 +00:00
weichen 72d67216ef Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=1e5c6b9c10ba77ed34663fd670138621a17342bd.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-13 16:26:08 +00:00