Why: delivery policy requires the final candidate to include the
latest authoritative target before review and merge.
Evidence: git merge; conflicts resolved below if any.
Impact: composition update only; component pins unchanged.
Refs: policy/delivery.md
Why: run 5 (antigravity re-verify) returned success with a transport;
host applied it (b59e53de..de3d3aff) and re-ran make image-build /
make image-verify on the applied HEAD, both passing (SELF evidence in
card). R1-R4 acceptance conditions met; CI GATE and review pending.
Evidence: /tmp/docker-image-unit5-receipt.json; evidence blocks in card.
Impact: .task metadata only.
Refs: policy/governance.md
Why: run 4 (antigravity) fully implemented and verified the unit, but a
trailing backend API EOF polluted the result envelope, so the controller
fail-closed without a transport. Host independently re-ran
image verify-env.sh (PASS). Redispatch as a pure re-verify run with
docker layer cache; bound set: if transport mechanics fail again,
return to owner decision instead of looping.
Evidence: /tmp/docker-image-unit4-receipt.json; raw log tail EOF;
verify-env PASS re-run by host.
Impact: .task metadata only.
Refs: AGENT-EXECUTION.md; policy/governance.md
Why: close the task card inside its own PR so landing it needs no post-merge backfill or separate close PR.
Evidence: .task/feature-cursor-explicit-model-auto.md -> .task/archive/feature-cursor-explicit-model-auto.md; status 已完成（合入前闭合）; PR #644https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/644.
Impact: task metadata only; the card is archived within PR #644 and lands with its merge commit.
Refs: task.sh close --self
Why: branches merged into their immediate or root target had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-iam-role-permission-linked-capabilities.md(PR#643 into main) — merges verified via git log --merges plus Gitea API squash lookup against each card's origin target.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: owner approved option 1 - disabled the cursor profile by their
own authority (commit 16776aa) after monthly usage cap exhausted;
dispatch now routes to antigravity (probe ok).
Evidence: AGENT-EXECUTION.md diff in 16776aa; agent-exec validate ok.
Impact: .task metadata only.
Refs: AGENT-EXECUTION.md; policy/delivery.md
Why: Cursor Ultra monthly usage cap exhausts on every dispatch
(ActionRequiredError); owner approved disabling via option 1 of the
task decision point, keeping antigravity/pi as active candidates.
Evidence: /tmp/docker-image-unit2-receipt.json (failed-unknown,
usage cap); agy probe ok; agent-exec validate ok.
Impact: execution routing only; re-enable enabled: true after 2026-11-10.
Refs: AGENT-EXECUTION.md; .task/feature-docker-test-image.md
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-cursor-explicit-model-auto.md; R0=ac594c90e536cfb670e94680f045a6c8247a2513.
Impact: task metadata only; the feature workspace starts at ac594c90e5.
Refs: .task/feature-cursor-explicit-model-auto.md
Why: run 2 failed-unknown on Cursor monthly usage cap (deterministic,
resets 2026-11-10); host attempt to disable the cursor profile was
rejected by pre-commit admit (non-exempt path needs transport
provenance), and the routing change itself requires a successful run,
so the dispatch path is dead-locked pending a human decision.
Evidence: /tmp/docker-image-unit2-receipt.json,
/tmp/docker-image-unit3-receipt.json; agy probe ok, pi backend 529.
Impact: .task metadata only.
Refs: AGENT-EXECUTION.md; policy/delivery.md
Why: user requested a Docker test image (system env + SSH + headless
browser) for isolated container-based testing; card records the
authorized boundary, requirements R1-R4 and the unit plan before
dispatching the bounded implementation unit.
Evidence: triage NEW receipt /tmp/docker-image-triage.json; startup
precheck READY at R0=162c5a0160 (SELF, in-card).
Impact: .task metadata only; no code behavior change.
Refs: policy/delivery.md; AGENT-EXECUTION.md
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-docker-test-image.md; R0=162c5a0160955989608f325b4be30458e3717d16.
Impact: task metadata only; the feature workspace starts at 162c5a0160.
Refs: .task/feature-docker-test-image.md
Why: close the task card inside its own PR so landing it needs no post-merge backfill or separate close PR.
Evidence: .task/feature-auth-one-time-password.md -> .task/archive/feature-auth-one-time-password.md; status 已完成（合入前闭合）; PR #642https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/642.
Impact: task metadata only; the card is archived within PR #642 and lands with its merge commit.
Refs: task.sh close --self
Why: the Dev repin passed a fresh-session review and full CI on 115ca51.
Evidence: code-reviewer PASS on 162c5a0..8e7e3c9; ci_wait CI_SUCCESS on 115ca518 (GATE).
Impact: task card only.
Refs: PR #642
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=162c5a0160955989608f325b4be30458e3717d16.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: ci/test was failing on pre-existing TestDSNFileMode in modules/backend pkg/identity. Backend main has progressed past 3f4b34a to b351fd5 (PR #220 fix).
Evidence: Backend origin/main b351fd5 includes PR #220 TestDSNFileMode fix; pre-existing pkg/identity/TestDSNFileMode fails on 3f4b34a in this Dev's environment (umask 0077 prevents the test's expected 0644 file mode).
Refs: PR #220.
Why: U6 (delivery) prepared PR #628 with comprehensive description; CI runs but fails on pins mismatch (Backend 3f4b34a expects agent-intent=651a2e1 etc., Dev pins=343b1e6 etc.) and missing services (test-pg / svc-realcombo).
Evidence: PR #628https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/628; CI run #4294 failed on test-pins + test-pg + svc-realcombo; PR base gate passed after archiving 17 child task cards; receipts /tmp/iam-link-u6-pr-gate-20261019.json + /tmp/iam-link-integration-final-20261019.json.
Impact: U6 blocked at CI gate; subsequent session must either bump Dev submodule pins (separate change) or coordinate Backend/RDM/Frontend main merges before L1→main.
Refs: plan revision 3 U6; PR #628.
Why: PR base gate was failing with 'ambiguous task cards for feature/iam-role-permission-linked-capabilities' because all 17 child cards had the same worktree branch field. Archive child cards so only the L1 main card matches the branch.
Evidence: scripts/task_pr_check.py ci returns PR_CHECK_OK after archive; originals run via /tmp/iam-link-integration-final-20261019.json etc.
Impact: PR #628 PR base gate now passes; CI can proceed.
Why: cursor attempt 1+2+3 all returned blocked (Playwright needs running dev backend; vitest-only-only-rejected).
Evidence: receipts /tmp/iam-link-u5-frontend-run.json (latest attempt); U5-Frontend child card.
Impact: U5-Frontend in blocked state; Playwright e2e deferred to a session with dev backend; vitest-only deferred to a session with revised constraints.
Refs: plan revision 3 U5; PR #628.
Why: cursor attempt 1 (run_id=2c62b42a…) + attempt 2 (run_id=f13f176d…) + attempt 3 (run_id=6b1bb5cc…) all returned terminal_status because the agent correctly refused to modify production code (which the unit packet strictly forbade) to add test helpers.
Evidence: receipts /tmp/iam-link-u5-rdm-run.json run_ids 2c62b42a / f13f176d / 6b1bb5cc; U5-RDM child card .task/feature-iam-role-permission-linked-capabilities-u5-rdm-integration-tests.md.
Impact: U5-RDM in blocked state per explicit fail-stop; worktrees show agent did modify allowed test files but couldn't complete without touching production; subsequent session should split U5-RDM further or relax the production-edit constraint.
Refs: plan revision 3 U5; PR #628.
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=f07a53d86aa10d35be0d3519fcf3c493b3391fec.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: close the task card inside its own PR so landing it needs no post-merge backfill or separate close PR.
Evidence: .task/feature-fast-slow-o2-route-contract-eof.md -> .task/archive/feature-fast-slow-o2-route-contract-eof.md; status 已完成（合入前闭合）; PR #639https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/639.
Impact: task metadata only; the card is archived within PR #639 and lands with its merge commit.
Refs: task.sh close --self
Why: U5-Backend (first sub-unit of U5) succeeded with cursor-agent attempt 2 (run_id=9af431f5…) terminal_status=success; transport refs/agent-exec/9af431f5…/be45632be6b8 fast-forwarded to feature/iam-link-u1-capability-association @ 1214ad43 on Agent-System-Backend, then pushed.
Evidence: agent-exec run receipt /tmp/iam-link-u5-backend-run.json terminal_status=success, transport.commit=1214ad43f7ca6d6c81d2fa2335ce17f3b8143a7e; host verification: 7+ new IAM integration tests pass; full server/store/app/extension test suite green (pkg/identity/TestDSNFileMode pre-existing issue from U1 merge).
Impact: U5-Backend complete in Backend (project_iam_integration_test.go with 7+ new IAM chain integration tests); U5-RDM and U5-Frontend sub-units still pending.
Refs: plan revision 3 U5; PR #628.
Why: record authorization, R1 and the stage 4/5 review state for O2.
Evidence: card fields only (SELF).
Impact: task card only.
Refs: docs/superpowers/specs/2026-10-19-fast-slow-o2-route-contract-eof-design.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: user chose O2 in the completion signal evaluation; stage 4/5 docs precede any code.
Evidence: read-only code location in Agent-Native runtime/llm and Backend runtime (SELF).
Impact: docs only; no product code, no paid requests.
Refs: docs/superpowers/specs/2026-10-19-fast-slow-completion-signal-evaluation.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-fast-slow-o2-route-contract-eof.md; R0=2b7fdc39a1f44163f4766701429d61ffd6926f1a.
Impact: task metadata only; the feature workspace starts at 2b7fdc39a1.
Refs: .task/feature-fast-slow-o2-route-contract-eof.md
weichen
agent-exec-transport