Why: the current heads are not green, so the merge chain stops before any repository is merged.
Evidence: SELF query of the open pull requests and their current-head Actions runs.
Impact: task card only. This commit stays local so the open Dev pull request head does not move.
Refs: Agent-System-Dev pulls/558
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: the backend branch moved forward to include the OOXML gate fix, and this checkout should name that commit.
Evidence: Agent-System-Backend feature/svc-plugin-host-options is bffd37c.
Impact: modules/backend gitlink only.
Refs: Agent-System-Backend bffd37c42f809332499d3227ba1377c8d40c9459
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: bootstrap-admin now refuses a database that has no agent_system_identity row, and serve does not insert one.
Evidence: Dev CI run 3266 job 5008 failed with system identity missing on 7eef723.
Impact: test setup only.
Refs: Agent-System-Dev pulls/558
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: the synced backend rejects password-bearing user create, so the shared-PG acceptance could not open its first account.
Evidence: Backend CI run 3261 succeeded on 8c60ed0; Dev test-pg run 3263 failed in TestTwoInstancesOverSharedPG before this change.
Impact: test setup only. Alice remains a non-admin account and still receives an API key after setting a password.
Refs: Agent-System-Dev pulls/558
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=cc40e10f3b4b6e41cb3a7aa0826e08dd3b8b7270.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: Backend and Documents were rebased onto their current main, so the Dev links must name those commits before this branch syncs.
Evidence: backend 8c60ed0 includes the host-option hooks and origin/main; documents 2a8deac keeps the proposal pending review.
Impact: gitlinks only. The proposal stays pending review.
Refs: Agent-System-Backend 8c60ed092bd12ce3f20da0d09d39a67abce47041; Agent-System-Documents 2a8deac89d2d03e75b717203665021fb6724f7a2
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: the --with path had only stub tests, so the closeout needs a SELF record of a real combined binary.
Evidence: bash /tmp/svc-compose-real.sh via make evidence, exit 0, before=516b35cd57848a68ce0614d64936861374023a50. make test-lifecycle stays NOT_RUN because AGENT_PG_TEST_DSN and SVC_RDM_SRC_DIR are unset.
Impact: task card only. Temporary service cmpchk was removed.
Refs: .task/feature-svc-plugin-compose.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-merge-queue-simple-policy.md(PR#554) — merges verified via git log --merges plus Gitea API squash lookup against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=803a73e5d6621f7b5aac792f81f0fd449bd00be2.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: Preserve the one changed-base sync before freezing the final candidate.
Evidence: task-sync merged main b8edf13 without conflicts and reported tested checkpoint 4272d55.
Impact: Task record only; policy content and runtime behavior are unchanged.
Refs: Agent-System-Dev #518#554
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=b8edf13dc7b818d6e61b829f6e88202ec553f2fc.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: fix-8788-message-permission.md(PR#553) — merges verified via git log --merges plus Gitea API squash lookup against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: make PR #553 the durable task record before final CI and merge.
Evidence: the Gitea API reports PR #553 open and mergeable at head 3138221.
Impact: task metadata only; the next push creates the final PR candidate.
Refs: .task/fix-8788-message-permission.md; PR #553
Why: preserve the exact pre-PR baseline and complete local regression output.
Evidence: task-sync fixed origin/main at 3326192; make test passed all required local checks.
Impact: task evidence only; no source, component pin, or runtime configuration change.
Refs: .task/fix-8788-message-permission.md
Why: Keep final sync and conflict handling with the merge agent and avoid treating pre-freeze SELF checks as final evidence.
Evidence: Review found one stale anchor, one ownership ambiguity, and one evidence-scope overclaim; all three are corrected.
Impact: Documentation only; no runtime or platform behavior changes.
Refs: Agent-System-Dev #518
Why: the user confirmed normal conversation behavior and authorized task closeout.
Evidence: user acceptance on 2026-10-15 supplements the preserved SELF runtime checks.
Impact: advances the task record to integration preparation; no production code change.
Refs: .task/fix-8788-message-permission.md
Why: Freeze the queue attempt and exact base before final validation.
Evidence: task-sync returned changed=0 on base 33261925; Issue #518 comment 6408 records the window.
Impact: Task record only; policy content is unchanged.
Refs: Agent-System-Dev #518
Why: bind the active runtime repair, rollback point, and review state to the synchronized task record.
Evidence: SELF runtime checks passed for message delivery, completed run, privacy, cleanup, credential revocation, and final database state.
Impact: task metadata only; user browser acceptance and task cleanup remain pending.
Refs: .task/fix-8788-message-permission.md
Why: Keep branches developing independently and serialize only final sync, validation, and agent merge without expanding into audits or new platform mechanisms.
Evidence: scope and link checks, git diff --check, and recursive worktree verification passed as SELF evidence in the task card.
Impact: Documentation only; existing task-sync, CI, branch protection, and agent merge behavior remain unchanged.
Refs: Agent-System-Dev #518
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=33261925a10c4eee40d1b6175b3895e78a47ef02.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: preserve the authorized runtime role repair and its exact local evidence.
Evidence: recorded the pre-fix 404, role commands, completed test run, privacy check, backup, and revoked temporary credentials.
Impact: task metadata only; the live 8788 role configuration is documented without source changes.
Refs: .task/fix-8788-message-permission.md
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-merge-queue-simple-policy.md; R0=33261925a10c4eee40d1b6175b3895e78a47ef02.
Impact: task metadata only; the feature workspace starts at 33261925a1.
Refs: .task/feature-merge-queue-simple-policy.md
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/fix-8788-message-permission.md; R0=99119a733830bc120cd6747b8b61736ea6da6078.
Impact: task metadata only; the feature workspace starts at 99119a7338.
Refs: .task/fix-8788-message-permission.md
Why: the close commit still said the live 8788 check had not run, which contradicts the user acceptance already recorded in the same card.
Evidence: user confirmation on 2026-10-15 of conversation order, pane deduplication, and folded process review; cutover notes already in the card. Local checks stay SELF.
Impact: task-card text only. No code, schema, or runtime change.
Refs: Dev PR #550, close PR #552
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-work-companion-visibility.md(PR#550) — merges verified via git log --merges plus Gitea API squash lookup against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: the deploy change needs a tool-written SELF record of the tests that actually ran against this HEAD.
Evidence: make evidence of the svc unittest command, exit 0, before=1cf2f533f756464f8d4eb4a648f26069913c2a62.
Impact: task card only. Real compose deployment and make test-lifecycle stay NOT_RUN.
Refs: .task/feature-svc-plugin-compose.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: deploy needs to choose registered plugins and ship them inside one agent-system, then refuse the release when they are not active.
Evidence: python3 -m unittest tests.test_svc_plugins tests.test_svc_user_help tests.test_svc tests.test_svc_u2 (SELF, 63 passed, 1 skipped). Real compose build and make test-lifecycle are NOT_RUN.
Impact: --with is mutually exclusive with --from rdm and --from release. Existing non-interactive deploys stay without plugins unless plugins= is already recorded. Changing the plugin id set on a live service requires --allow-source-switch.
Refs: .task/feature-svc-plugin-compose.md modules/documents/docs/proposals/2026-10-14-svc-plugin-compose-deploy.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=bc76b68cd075379122430acb24fa080b0a38ff5e.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-svc-plugin-compose.md; R0=a9fa63f657e0dad1033576fd6783f63ccfabcc4e.
Impact: task metadata only; the feature workspace starts at a9fa63f657.
Refs: .task/feature-svc-plugin-compose.md
Why: Main advanced during UI delivery and task metadata must identify the new combined candidate.
Evidence: task-sync source-out receipt 6122ca6; Backend ead5ade includes both reviewed run history and concurrent vendor skills.
Impact: Fill the task PR link and mark the new Backend combination and final checks pending.
Refs: Agent-System-Dev #550; Agent-System-Backend #199 and #200
Why: Dev main advanced with a vendor skills task while this UI combination was being verified.
Evidence: Backend main ead5ade contains both Backend #199 and #200; the component merge affects recipes, not run-history handlers.
Impact: Preserve the new main task card and pin the Backend merge containing both changes; combination checks follow on this head.
Refs: Agent-System-Dev #550; Agent-System-Backend #199 and #200
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-vendor-popular-skills.md(PR#549) — merges verified via git log --merges plus Gitea API squash lookup against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: The fast and slow channel UI duplicated work cards and hid intermediate output after the final reply.
Evidence: SELF isolated-network make test and make build; 15 browser scenarios; independent component review; component PRs #55, #199, #85.
Impact: Pin merged Backend, Frontend and UI revisions and update DESIGN.md for one detail location and durable folded history.
Refs: .task/feature-work-companion-visibility.md; Agent-System-UI #55; Agent-System-Backend #199; Agent-System-Frontend #85