Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-rdm-u5-closeout.md; R0=0933a3be588739f867abebaa3aa4c0283d005e40.
Impact: task metadata only; the feature workspace starts at 0933a3be58.
Refs: .task/feature-rdm-u5-closeout.md
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-collab-storage-u5-ownership.md(PR#352) feature-svc-seed-auth.md(PR#371) — merges verified via git log --merges against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: main gained the U5 ownership feature during the previous CI window; branch protection requires latest main in head.
Evidence: fresh make test receipt exit=0 on the resynced head.
Impact: card only.
Refs: feature/svc-seed-auth
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=5cbb38e788ab3050b8d9f23c21d98d2fd1587a31.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: main advanced again during the CI cycle; branch protection requires latest main in head.
Evidence: fresh make test receipt exit=0 on the resynced head (3a1b16f7 sync base 0b53094).
Impact: card only.
Refs: feature/svc-seed-auth
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=0b53094b0d5a6699cccdbc7ca45e649f6bef477b.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-rdm-u4-closeout.md(PR#374) — merges verified via git log --merges against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: main advanced after the first review cycle; branch protection requires the head to contain latest main with fresh gate evidence.
Evidence: fresh make test receipt exit=0 on the synced head.
Impact: card only.
Refs: feature/svc-seed-auth
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=97002721485662c1e2abfa793f63d46f12cb14ce.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=97002721485662c1e2abfa793f63d46f12cb14ce.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: Close automation filled the header (Dev PR #372) but the merge
and cleanup lines still described the in-progress state.
Evidence: CI ci/test green on PR head (one 405 race auto-resynced);
task-finish recycled the worktree at 0c83a54 on 2026-10-11.
Impact: Archived task-card text only.
Refs: PR #372; PR #375
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-generative-ui-u6-gate-record.md(PR#372) — merges verified via git log --merges against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-rdm-u4-closeout.md; R0=c0e123b35eeb61ee45d268a7c597b7e844f0d222.
Impact: task metadata only; the feature workspace starts at c0e123b35e.
Refs: .task/feature-rdm-u4-closeout.md
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-rdm-u4-audit-workspace.md(PR#368) — merges verified via git log --merges against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-generative-ui-u6-gate-record.md; R0=fefb3e060ec05cdadc6ee8bc55abff730fe79e21.
Impact: task metadata only; the feature workspace starts at fefb3e060e.
Refs: .task/feature-generative-ui-u6-gate-record.md
Why: task-sync merged newer main (fefb3e06) after the last receipt; the gate requires evidence on the exact head proposed for merge.
Evidence: fresh make test receipt exit=0 appended by make evidence.
Impact: card only.
Refs: feature-svc-seed-auth
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=fefb3e060ec05cdadc6ee8bc55abff730fe79e21.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: seed_settings PUTs /api/settings/user without credentials, so under the PG tier's always-on auth the seed always 401s and model config silently never lands (reproduced on the dev instance 2026-10-11; settings had to be written by hand).
Evidence: make test-governance && make test exit=0 (receipt 8ffc3a89); tests/test_svc.py adds three stub-based cases - auth-on seeds with a Bearer header and create/revoke around the PUT, --seed-owner skips account lookup, auth-off stays credential-free; 14/14 svc tests green.
Impact: deployments that pass SVC_MODEL_*/SVC_TAVILY_KEYS now seed reliably regardless of auth mode; a temporary apikey (name=svc-seed) is minted for the first admin (or --seed-owner/SVC_SEED_OWNER) and revoked right after; auth-off path unchanged.
Refs: task card feature-svc-seed-auth.
weichen