Why: permux-U5 delivered the truthful subset of project effective-permission
explanations: consume the L1-U1 linkedCapabilities field from /api/me,
document-duty condition notes, creator/role source label mappings, and an
explanation card in the RDM self-check view. Creator-source display and
member shared-read semantics remain NOT_RUN pending L1 U2/U7 and are
recorded as such, not mocked.
Evidence: host verification receipt /tmp/permux-u5-verify.json (vitest
permission-explanations/role-members/design-guard, tsc -b); run receipt
/tmp/permux-u5-run.json.
Impact: task card only.
Refs: L1 PR #628; plan U5.
Why: permux-U4 (user table role column, explicit cross-page multi-select,
previewed batch assignment, copy-role-and-assign dialog, role member
sub-view wired from the matrix) was implemented by a fresh external cursor
session and applied as transport d965732.
Evidence: host verification receipt /tmp/permux-u4-verify.json (vitest
account-users/role-members/role-permissions suites + design guard, tsc -b);
run receipt /tmp/permux-u4-run.json.
Impact: task card only.
Refs: L1 PR #628; plan U4.
Why: permux-U3 (category matrix default view, three-state controls,
multi-role draft with unified preview and atomic batch save, narrow-screen
focus) was implemented by a fresh external cursor session and applied as
transport 4be7362 on the frontend working branch.
Evidence: host verification receipt /tmp/permux-u3-verify-b.json (vitest
role-permissions suites + design guard, tsc -b); run receipt
/tmp/permux-u3-run.json. Note: first capture attempt aborted on a missing
modules/ui node_modules (environment, fixed by npm ci in the ui submodule).
Impact: task card only.
Refs: L1 PR #628; plan U3.
Why: permux-U2 (atomic batch patch, batch role assignment, copy-and-assign,
role member directory, user directory role projection) was implemented by a
fresh external cursor session and applied as transport 6851ee6; host review
confirmed patch-preserves-unmentioned-rows, single epoch step per batch and
read-only previews.
Evidence: host verification receipt /tmp/permux-u2-verify.json (build,
filtered tests incl. Batch/CopyAssign/Members, vet, deps untouched);
run receipt /tmp/permux-u2-run.json.
Impact: task card only.
Refs: L1 PR #628; plan U2.
Why: permux-U1 (catalog categories + read-only multi-role preview) was
implemented by an external cursor session and applied as transport
bc09721 on the backend working branch; the first successful run was not
transportable because the host invoked run with a relative --repo, which
is recorded verbatim.
Evidence: host verification receipt /tmp/permux-u1-verify.json (build,
filtered go tests, vet, deps untouched); run receipts /tmp/permux-u1-run.json
and /tmp/permux-u1-run2.json.
Impact: task card only.
Refs: L1 PR #628; plan U1.
Why: the child task implements the approved permission UX plan U1-U6 on
top of the L1 association contract (afb65c5); governance requires the
scope, component branch strategy and coordination notes on the card
before the first project write.
Evidence: precheck READY receipt /tmp/iam-perm-ux-precheck.json; L1
state verified via task-sync (sync_base a99dbfc, L1 U1 completed).
Impact: task card only (.task/** host-exempt path).
Refs: plan /tmp/iam-permission-ux-plan-20261019-1dehpj7l/plan.md; L1 PR #628
Why: include the current parent initiative baseline before verification.
Evidence: resolved feature/iam-role-permission-linked-capabilities=a99dbfcd9ac48d09038c76e09dc59e074c11ab7d.
Impact: integrate parent initiative changes without rewriting task history.
Refs: task-sync
Why: enable U2 dispatch via agent-exec run on Agent-System-RDM; child branch lives on the L1 initiative until host bumps Dev's RDM gitlink.
Evidence: parent L1 charter .task/feature-iam-role-permission-linked-capabilities.md (PR #628, head=f23ce7b).
Impact: U2 child card registered; RDM-side dependency recorded in the goal (no Backend edits from this unit).
Refs: /tmp/iam-role-permission-plan-20261019-sqfu_4g4/plan.md revision 3 U2; PR #628; U1 commit afb65c5.
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-iam-role-permission-linked-capabilities-perm-ux.md; R0=7716b28cfff5200e7cfe9ec75aff5bcd71b234ed.
Impact: task metadata only; the feature workspace starts at 90317d02a7.
Refs: .task/feature-iam-role-permission-linked-capabilities-perm-ux.md
Why: enable U1 dispatch via agent-exec run; the child branch lives on the L1 initiative and will be merged back via transport apply, not its own PR.
Evidence: parent L1 charter task card .task/feature-iam-role-permission-linked-capabilities.md (L1 PR #628, head=90317d0).
Impact: child card registry updated; U1 implementation unit now schedulable per AGENT-EXECUTION.md (cursor → agy → pi, 3 attempts each + codex emergency).
Refs: /tmp/iam-role-permission-plan-20261019-sqfu_4g4/plan.md revision 3 U1; PR #628.
Why: establish the initiative's charter, scope, and registered children before any implementation unit starts.
Evidence: precheck receipt /tmp/iam-perm-precheck-20261019.json receipt_sha256=8ff8d4dd5f4fe50bf0b779d5de7c989c8eab122babf7bee5ba6237de8640f2af; triage receipt /tmp/iam-perm-triage-20261019.json verdict=NEW.
Impact: L1 initiative charter for plan revision 3 (R1-R17, KTD1-KTD10, C01-C31); U1/U2/U3/U4/U5/U6 registered as required children; feature/iam-role-project-design (R0=3fb8210, 52 behind) explicitly deprecated.
Refs: /tmp/iam-role-permission-plan-20261019-sqfu_4g4/plan.md; PR #628
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-iam-role-permission-linked-capabilities.md; R0=7716b28cfff5200e7cfe9ec75aff5bcd71b234ed.
Impact: task metadata only; the feature workspace starts at 7716b28cff.
Refs: .task/feature-iam-role-permission-linked-capabilities.md
Why: close the task card inside its own PR so landing it needs no post-merge backfill or separate close PR.
Evidence: .task/feature-iam-u3-account-directory-recovery.md -> .task/archive/feature-iam-u3-account-directory-recovery.md; status 已完成（合入前闭合）; PR #626https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/626.
Impact: task metadata only; the card is archived within PR #626 and lands with its merge commit.
Refs: task.sh close --self
Why: card must reflect the re-sync, reviews and component merges before closing.
Evidence: card text only; CI and merge records refer to platform runs.
Impact: task card only.
Refs: Dev PR #626, Frontend PR #86, RDM PR #380
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=d9ac28f89159e17781e2a8ef3094965130f29d2f.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: the user approved Frontend PR #86 stage 7 on 2026-10-14; the card still showed it pending.
Evidence: card text only.
Impact: task card only.
Refs: Frontend PR #86
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: close the task card inside its own PR so landing it needs no post-merge backfill or separate close PR.
Evidence: .task/feature-regkb-corpus-wiring.md -> .task/archive/feature-regkb-corpus-wiring.md; status 已完成（合入前闭合）; PR #625https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/625.
Impact: task metadata only; the card is archived within PR #625 and lands with its merge commit.
Refs: task.sh close --self
Why: Test evidence is written by make evidence.
Evidence: tests/integration/regulations-kb/run.sh PASS on rdm 377d427 / kb 393555b (SELF).
Impact: Task card only.
Refs: .task/feature-regkb-corpus-wiring.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=2d35fb6b1ad5e5de7c3e41e9c1af8531a329e2ab.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: fail-stop attempts are recorded before any new dispatch.
Evidence: /tmp/regkb-dev-pin-receipt.json terminal failed-unknown (timeout, no changes).
Impact: Task card only.
Refs: .task/feature-regkb-corpus-wiring.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: close the task card inside its own PR so landing it needs no post-merge backfill or separate close PR.
Evidence: .task/feature-norm-remediation.md -> .task/archive/feature-norm-remediation.md; status 已完成（合入前闭合）; PR #616https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/616.
Impact: task metadata only; the card is archived within PR #616 and lands with its merge commit.
Refs: task.sh close --self
Why: finish the approved U1-U7 delivery with accurate review and test provenance.
Evidence: preserve failed combination receipts and the successful unchanged-source continuation.
Impact: task metadata only; implementation remains at f52df0e.
Refs: PR #616; U1-U7 remediation plan
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=eef7e5e778cabcb6216f74b74213a3d7511f383b.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: Keep the approved plan accessible after task worktrees are recycled and mark all child delivery results.
Evidence: Plan snapshot matches original bytes; U6 #624 merged as 84aa411 with exact-head CI success.
Impact: Task and plan metadata only; final main verification remains pending.
Refs: PR #616
Why: close the task card inside its own PR so landing it needs no post-merge backfill or separate close PR.
Evidence: .task/feature-norm-remediation-u6.md -> .task/archive/feature-norm-remediation-u6.md; status 已完成（合入前闭合）; PR #624https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/624.
Impact: task metadata only; the card is archived within PR #624 and lands with its merge commit.
Refs: task.sh close --self
Why: Preserve successful target synchronization after task metadata was saved.
Evidence: task-sync passed with changed=0 against 38c5b93; implementation paths unchanged from reviewed 847fb002.
Impact: Task record only; no candidate source changes.
Refs: PR #616
Why: Preserve the successful materialized dependency checks before final sync.
Evidence: Full receipt 079c7647661d7879 was imported by evidence; the earlier missing-dependency failure remains recorded.
Impact: Task metadata only.
Refs: PR #616
Why: include the current parent initiative baseline before verification.
Evidence: resolved feature/norm-remediation=38c5b93b79a8f383dbb7d7883b26d8432355a52c.
Impact: integrate parent initiative changes without rewriting task history.
Refs: task-sync
Why: Persist U5 and executor delivery results and the exact U6 continuation state.
Evidence: Merged Dev #623 and DM #27; controlled pin/document transports and local validators.
Impact: Task metadata only; final main delivery remains explicitly pending.
Refs: PR #616
Why: Bind the final adoption unit to reviewed merged Guidelines and executor revisions.
Evidence: Guidelines PR #11 a15db508; DM PR #27 6c019595 with independent review and exact-head CI.
Impact: Task metadata only; controlled gitlink transport remains required.
Refs: PR #616
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-norm-remediation-u6.md; R0=eef7e5e778cabcb6216f74b74213a3d7511f383b.
Impact: task metadata only; the feature workspace starts at 69174fcb69.
Refs: .task/feature-norm-remediation-u6.md
agent-exec-transport
weichen