Why: The Dev combination must test the workspace-tool opening and the build
pipeline.
Evidence: SELF - gitlink equals backend feature/agent-quality-phase03 head.
Impact: Pointer only.
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-agent-quality-phase03.md; R0=02f2c1bcfb1b8ac936e357b90fa7a2973f4ce0c0.
Impact: task metadata only; the feature workspace starts at 02f2c1bcfb.
Refs: .task/feature-agent-quality-phase03.md
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=7d52861f15f2b25dd5121301ac1e92b5a5e16f8d.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=13e03ab15d89d13e0b1cc6848d76776c723a6f96.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: Backend #114 (EXT-14, commands-as-tools) added the runmgr -> cmdbus
production import but its Dev-side ratchet update went missing, so make test
fails on any Dev head combining it (backend CI does not run the Dev
architecture check). Recorded here with the merge that surfaces it.
Evidence: SELF - lint-boundaries passes after the entry; the edge exists in
backend main (internal/runmgr/runmgr.go imports cmdbus).
Impact: Ratchet baseline only; unblocks the Dev combination for all in-flight
work.
Why: git receive-pack runs 'gc --auto' in the background after a push;
the fixture's TemporaryDirectory teardown then races the gc writer and
fails with OSError 39 (remote.git not empty) — observed on the PR #285
runner (job 1967). The fixture remote holds no durable value, so auto-gc
is pure flake surface.
Evidence: the failing test passes 5/5 locally after the fix; full
make test-governance green (104 tests).
Impact: test fixture only; no governance-script behavior change.
Refs: Dev CI run 1438 job 1967; same race family as the upload-host
TempDir flake fixed earlier.
Why: Backend #115 (transcript-authoritative switch) and #118 (squad pin
alignment) merged; the Dev combination tests the merged head.
Evidence: SELF - gitlink equals backend origin/main head; make test recorded
on the task card after this commit.
Impact: Pointer only.
Why: the EXT-16 acceptance is escape-negative driven; the tool-written
evidence row captures the local bwrap run (all probes blocked, product
task visible) and the card summary states scope and follow-ups.
Evidence: go test -run 'TestSetExecBackendValidation|TestSandboxArgvShape|
TestSandbox|TestDirect' via CMD=... make evidence exit 0 (10 tests,
bwrap 0.11.1); make test row recorded earlier at this head.
Impact: task card only.
Refs: proposal 2026-10-09-ext-g1-b1-b3 (EXT-16); Backend #119.
Why: EXT-16 abstracts the interpreter launch point into an ExecBackend
port (direct = byte-identical status quo; sandbox = bwrap isolation:
ro root, tmpfs /home+/tmp, session/skills-only writable mounts, no
network, ulimit -u fork cap, timeout kills the namespace) with config
key execBackend, env AGENT_SYSTEM_EXEC_BACKEND, CLI --exec-backend and
extension.Options.ExecBackend (SurfaceVersion 2.6.0-experimental).
DisableExecTools stays the top-priority fail-closed switch; RDM keeps
DisableExecTools=true until G3-7.
Evidence: Backend #119 head 4badecb vet-and-test CI success, merged as
1a55089; local escape negatives all blocked (home secret, sibling
session, network, 400-proc spawn storm, 60s-sleep timeout kill,
orphan die-with-namespace) recorded in the task card evidence rows;
full make test at this head recorded on the card.
Impact: umbrella gitlink only; no source edits outside modules/backend.
Refs: proposal modules/documents docs/proposals/2026-10-09-ext-g1-b1-b3
(EXT-16); Backend #119; Backend #110 (DisableExecTools).
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-ext-16-exec-backend.md; R0=13e03ab15d89d13e0b1cc6848d76776c723a6f96.
Impact: task metadata only; the feature workspace starts at 13e03ab15d.
Refs: .task/feature-ext-16-exec-backend.md
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-agent-quality-phase02.md(PR#280) feature-g1-ext-b1-b3.md(PR#279) — merges verified via git log --merges against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: the EXT-14 umbrella bump now carries the full pin cascade
(backend 31965fd, agent-command 5c6dd0c, agent-native 3b92cb63,
agent-squad 8bbf850) and the combined suite is green; the completion
declaration needs the tool-written evidence row plus the result summary.
Evidence: make test via 'CMD=make test make evidence' exit 0 at HEAD
(receipt appended, SELF); GATE rows cited in the summary (Backend
#114/#116/#117 CI success).
Impact: task card only.
Refs: Backend #114/#116/#117; Squad #49; agent-command lib #4/#5.
Why: consuming backend main (#115 kernel-transcript + #116 EXT-14
dependency inversion) moves backend pins for agent-native (3b92cb63)
and agent-squad (8bbf850, Squad #49 nested native bump); the umbrella
check-pins requires Dev's top-level pins and every container gitlink to
agree, and Dev's agent-command pin must follow backend's EXT-14 lib bump
(5c6dd0c, lib PRs #4/#5).
Evidence: Backend #116 (6337cd8) and #117 (5544a03) vet-and-test CI
success, merged as 8157e68/31965fd; Squad #49 merge 8bbf850 records
deps/agent-native=3b92cb63 (ls-tree verified); umbrella
lint-boundaries pre-verified green at 6337cd8 (77 edges, negative probe
ok); full make test recorded on the task card at the final head.
Impact: gitlink-only changes (modules/backend, deps/agent-squad,
deps/agent-command, deps/agent-native); no source edits in the umbrella.
Refs: Backend #115/#116/#117; Squad #49; agent-command lib #4/#5;
proposal 2026-10-09-ext-g1-b1-b3 (EXT-14).
Why: Squad #49 aligned its nested agent-native pin with the Dev top-level
pointer; the Dev worktree records the merged head.
Evidence: SELF - gitlink equals Agent-Squad main head.
Impact: Pointer only.
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=6c763cc1cf4b3e980835de0ad864220f97f3c93c.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: Backend #115 merged the transcript-authoritative switch; the Dev
combination must test the merged head (with main's concurrent EXT-14).
Evidence: SELF - gitlink equals backend origin/main head.
Impact: Pointer only.
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=6c763cc1cf4b3e980835de0ad864220f97f3c93c.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: EXT-14 lands commands-as-tools in the base — CommandTool projection
from the command bus (ExposeAsTool+Enabled only) and ExecuteTool dispatch
through DispatchCommand with Entrance=agent, Actor/Owner bound to the
conversation owner and high-risk commands gated by the confirm card.
The Dev umbrella must carry the backend gitlink forward so combined CI
and downstream pins consume it.
Evidence: Backend #114 head 0209262 CI success (vet-and-test), merged as
545dc404e50d2a739ab29d83f320ccf54049e190; go test ./... 32/32 packages
green on the branch; main push CI status checked before this bump.
Impact: umbrella-only gitlink change; no source edits outside
modules/backend; RDM pins unaffected until a separate bump task.
Refs: docs/proposals/2026-10-09-ext-g1-b1-b3-exec-backend.md (EXT-14);
Backend PR #114; agent-command lib PRs #4/#5 (merge 9effe90/5c6dd0c).
Why: RDM G1 sequence-4 needs the base to share retrieval inside runs and
open project listing/conversations to adapter-authorized members; the
implementation is merged on Backend main and the Dev gitlink is the
delivery vehicle.
Evidence: SELF - Backend PR #113 CI success at the merge head 9fa1787
(run rerun green after an unrelated ordering flake; the full suite passed
locally 32/32 first); Dev composite CI on this PR is the GATE.
Impact: modules/backend gitlink 449d8a6 -> 9fa1787. No other pin changes.
Refs: Backend #113; proposal 2026-10-09-ext-g1-b1-b3-exec-backend (EXT-13/15)
Why: I2 switches the direct path to the kernel transcript as the authoritative
context; the backend head carries that switch plus the nested kernel pin.
Evidence: SELF - gitlinks equal the pushed branch heads; combined make test
recorded on the task card after this commit.
Impact: Pointer only.
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-ext-13-15-shared-runs.md; R0=bc74b9a0c5ac4f137b00aa53af37ec67e4aeb1cb.
Impact: task metadata only; the feature workspace starts at bc74b9a0c5.
Refs: .task/feature-ext-13-15-shared-runs.md
weichen