Why: include the current integration baseline before verification.
Evidence: fetched origin/main=6ced938a126981ee2a4fab671a2da94f49cb56c5.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: Owner confirmed the binary switch and required instant rollback readiness.
Evidence: cutover stopped 08:43:27 and healthy 08:43:30 CST (downtime 6.88 s),
pid 1617793 with exe sha256 00ead2cf, schema v51, local/healthz/domain 200;
post-cutover reconciliation problems=[] with zero missing files and rows, the
only row diffs being the two verification sessions and sundehui's own row;
secrets 10/10 match, settings_snapshots=11 mismatches=0; rollback kit sha OK and
rollback-now.sh ready; running process carries all nine KBREG_* variables and
kbreg search over a tunnel still resolves the published revision.
Impact: task card only; ECS dev 8788 now serves the same build as the local
dev instance with the local knowledge base attached.
Refs: feature/ecs-deploy-dev8788-and-kb
Why: Owner asked to prepare configuration first: use the existing sundehui
account on imc-tx-ecs as the super administrator with password 12345678 and a
forced password reset on first login.
Evidence: rehearsal on the 8789 copy — migrate-only start (auth off) v35 to v51
in 0.27 s, seed-superadmin.py elevates sundehui without creating an account
(users still 18), auth-on start logs 'already established', login returns
isSuperAdmin with sessionScope set_password_only, no errors in the log. Remote
super-admin.env (600) and the two-file EnvironmentFile drop-in are in place;
the live service was not stopped.
Impact: task card only. Product startup refuses to elevate an existing account
from env, so the elevation is an explicit, rehearsal-verified write mirroring
the product bootstrap; cutover script now runs migrate, seed, start phases.
Refs: feature/ecs-deploy-dev8788-and-kb
Why: include the current integration baseline before merge.
Evidence: fetched origin/main=c3fc389b.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: Owner asked to deploy the local 8788 dev binary service and the local
knowledge base to imc-tx-ecs, with a remote backup first and a minimal-downtime
cutover that needs owner confirmation.
Evidence: make evidence receipts for the remote warm backup (629 files, sha OK),
the offsite copy, the knowledge base fingerprint comparison, the end-to-end KB
search through a tunnel, the remote inventory, and the 8789 rehearsal instance
(schema v35 -> v51, healthy in 1.02 s, no errors).
Impact: .task card only; no product code, no runtime change yet. The live ECS
service was not stopped (pid 4080336 unchanged since 2026-10-18).
Refs: feature/ecs-deploy-dev8788-and-kb; supersedes none; related to
.task/archive/feature-ecs-sync-local-dev.md
Why: the intent-session tests were load-sensitive in CI (409 races
against the prior run settling); the hardening rides the A2 pin.
Evidence: repair receipt (a1ff-run.json) and 3x race verification
(verify-a1ff.json exit=0) on the merged tip; full make test green
(verify-a2-combo3.json exit=0).
Impact: one component gitlink.
Refs: PR #704
Why: branches merged into their immediate or root target had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: fix-svc-test-port-governance-deploy-txn.md(PR#705 into main) — merges verified via git log --merges plus Gitea API squash lookup against each card's origin target.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: close the task card inside its own PR so landing it needs no post-merge backfill or separate close PR.
Evidence: .task/feature-exec-recovery-diagnostics-a2.md -> .task/archive/feature-exec-recovery-diagnostics-a2.md; status 已完成（合入前闭合）; PR #704https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/704.
Impact: task metadata only; the card is archived within PR #704 and lands with its merge commit.
Refs: task.sh close --self
Why: branches merged into their immediate or root target had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: fix-svc-test-port-governance-batch1.md(PR#702 into main) — merges verified via git log --merges plus Gitea API squash lookup against each card's origin target.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-ecs-deploy-dev8788-and-kb.md; R0=cb36b59accd0418c5ca952912d7c181b83038a4c.
Impact: task metadata only; the feature workspace starts at cb36b59acc.
Refs: .task/feature-ecs-deploy-dev8788-and-kb.md
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/fix-svc-test-port-governance-deploy-txn.md; R0=cb36b59accd0418c5ca952912d7c181b83038a4c.
Impact: task metadata only; the feature workspace starts at cb36b59acc.
Refs: .task/fix-svc-test-port-governance-deploy-txn.md
Why: audit trail for the diagnostics endpoint unit, the baseline edge
registration and the green full combination run.
Evidence: verify-a2b.json and verify-a2-combo2.json exit=0.
Impact: task metadata only.
Refs: feature/exec-recovery-diagnostics-a2
Why: the A2 diagnostics package reuses the cmdbus operation query and
store reads, mediated by the server; the three edges are the reviewed
design, recorded in the task card.
Evidence: lint-architecture passes (verify-a2arch.json); boundaries
and full combination re-run below.
Impact: three baseline edge lines.
Refs: feature/exec-recovery-diagnostics-a2
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=c92443280ef8e9ed29bf5bf5250df650c01b4478.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: land the read-only run diagnostics endpoint (A2) per the approved
feature scope.
Evidence: integration transport (a2git2-run.json); unit tests green
(verify-a2b.json exit=0); combination re-run below.
Impact: one component gitlink.
Refs: feature/exec-recovery-diagnostics-a2
Why: fix the read-only diagnostics contract (single GET endpoint,
aggregated responsibility/wait-reason/checkpoint/side-effects/next-step,
no write endpoints) before implementation.
Evidence: scoping over server routes, store recovery/HITL methods and
cmdbus audit records.
Impact: task metadata only.
Refs: docs/superpowers/plans/2026-10-21-agent-stack-audit-remediation-plan.md (A2)
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-exec-recovery-diagnostics-a2.md; R0=c92443280ef8e9ed29bf5bf5250df650c01b4478.
Impact: task metadata only; the feature workspace starts at c92443280e.
Refs: .task/feature-exec-recovery-diagnostics-a2.md
Why: include the current integration baseline before merge.
Evidence: fetched origin/main=3d3474a7.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: close the task card inside its own PR so landing it needs no post-merge backfill or separate close PR.
Evidence: .task/feature-intent-multi-turn-a1.md -> .task/archive/feature-intent-multi-turn-a1.md; status 已完成（合入前闭合）; PR #700https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/700.
Impact: task metadata only; the card is archived within PR #700 and lands with its merge commit.
Refs: task.sh close --self
Why: the independent review of the A1 multi-turn closure raised two
real blockers (cross-action slot inheritance; cancel store errors
swallowed); the report documents them for the repair that follows.
Evidence: review receipt /tmp/agent-stack-b2/reviewa1-run.json
(pi-glm attempt1 success).
Impact: review report only.
Refs: PR #700
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/fix-svc-test-port-governance-batch1.md; R0=3d3474a731f9ef3ee1f41935e63bca3afb70db56.
Impact: task metadata only; the feature workspace starts at 3d3474a731.
Refs: .task/fix-svc-test-port-governance-batch1.md
Why: audit trail for U-A1b/U-A1c, the baseline and manifest repairs,
and the known environment-dependent governance flake.
Evidence: verify-a1b/a1c/a1sr/a1-rest exit=0.
Impact: task metadata only.
Refs: feature/intent-multi-turn-a1
Why: the backend branch advanced with the intent_session manifest fix.
Evidence: integration transport (a1git2-run.json); combination re-run
below.
Impact: one component gitlink.
Refs: feature/intent-multi-turn-a1
Why: the A1 session package reuses the gate's result/command types,
persists via the store and is mediated by the server; the three edges
are the reviewed design, recorded in the task card.
Evidence: lint-architecture passes (verify-a1arch.json); boundaries
and full combination re-run below.
Impact: three baseline edge lines.
Refs: feature/intent-multi-turn-a1
Why: land U-A1b (conversation-scoped intent sessions) and U-A1c (cancel
intent routed through cmdbus with explicit targets) per the approved
A1 feature scope.
Evidence: unit transports (a1b/a1c-run.json) and host verifications
(verify-a1b.json, verify-a1c.json exit=0); combination re-run below.
Impact: one component gitlink.
Refs: feature/intent-multi-turn-a1
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=98ee59c477785b2d5094fcbea3e67a4dc864c388.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: close the task card inside its own PR so landing it needs no post-merge backfill or separate close PR.
Evidence: .task/fix-svc-test-port-governance-final.md -> .task/archive/fix-svc-test-port-governance-final.md; status 已完成（合入前闭合）; PR #698https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/698.
Impact: task metadata only; the card is archived within PR #698 and lands with its merge commit.
Refs: task.sh close --self
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/fix-svc-test-port-governance-final.md; R0=955a32de2bb49171348bad5f566cce935df19212.
Impact: task metadata only; the feature workspace starts at 955a32de2b.
Refs: .task/fix-svc-test-port-governance-final.md
Why: fix the design decisions (run-cancel as the first business action,
store-backed conversation intent session with TTL and revision,
cmdbus confirmation unchanged) before implementation.
Evidence: scoping over intentgate/route/server and the intent lib.
Impact: task metadata only.
Refs: docs/superpowers/plans/2026-10-21-agent-stack-audit-remediation-plan.md (A1)
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-intent-multi-turn-a1.md; R0=955a32de2bb49171348bad5f566cce935df19212.
Impact: task metadata only; the feature workspace starts at 955a32de2b.
Refs: .task/feature-intent-multi-turn-a1.md
Why: include the current integration baseline before merge.
Evidence: fetched origin/main=9a80897c.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: the CI test-pg timeout on TestMaterialAckAttachmentOnlyDoesNot-
CallParentModel is environmental (the product never sets a Writable
write-set, so the M5 preflight cannot trigger there; the same commit
and test pass locally in 0.05s against real PG/Redis).
Evidence: verify-materialack.json exit=0.
Impact: task metadata only.
Refs: PR #695
Why: branches merged into their immediate or root target had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: fix-svc-test-port-governance.md(PR#694 into main) — merges verified via git log --merges plus Gitea API squash lookup against each card's origin target.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
weichen
agent-exec-transport