Why: include the current integration baseline before verification.
Evidence: fetched origin/main=37a8791cb9f736a7f58e87a88389a55095f06e0d.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: the duties draft must stay within the frontend unused-export baseline before combination tests.
Evidence: SELF knip 43 <= 43 on the frontend commit.
Impact: Dev follows the duties page without new unused exports.
Refs: modules/frontend
Why: the duties browser scenarios changed after the first frontend pin.
Evidence: SELF playwright 3 passed; frontend commit follows 1b7ba77.
Impact: Dev follows the frontend duties page that records preview before batch save.
Refs: modules/frontend
Why: the task card, proposal index, and frontend gitlink need to name the document-duty rework instead of the superseded duties tab.
Evidence: SELF commits 034faa4 in documents and 1b7ba77 in frontend. RDM f16287f is a sibling repository, not a Dev gitlink.
Impact: the duties settings entry now comes from the three-view frontend. Deployment and live-account acceptance remain unauthorized.
Refs: modules/documents/docs/proposals/2026-10-15-rdm-duty-matrix-rework.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: Archive the merged four-model vision task card onto main.
Evidence: CI run 3307 attempt 2 jobs 5093, 5094, and 5095 succeeded on 5726fb6.
Impact: Task card moves to .task/archive; product tree is unchanged.
Refs: #564
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-rdm-duty-matrix.md; R0=4ba5c40a609dc07deb34d05761b00c29b44f2355.
Impact: task metadata only; the feature workspace starts at 4ba5c40a60.
Refs: .task/feature-rdm-duty-matrix.md
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-four-model-vision.md(PR#563) — merges verified via git log --merges plus Gitea API squash lookup against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: land four-model routing and current-turn image delivery.
Evidence: test, test-pg, and svc-realcombo success on f938b3ca97, run 3303.
Impact: main serves images on capable models; 8788 is not restarted.
Refs: #563
Why: the merge candidate needs a reviewer, base, and head before it can be pushed for CI.
Evidence: independent read-only review of 58e4e14 found no correctness or security issues; b79b4d9 has no non-card diff; task-sync changed=0 against ff3a562, receipt ae2c8f553111ec58179197b85971f25073a98bb948437c9a1ff96ea41adebfea.
Impact: task metadata only.
Refs: .task/feature-four-model-vision.md
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=ff3a562e50375ed592126c36ed2c76327517688a.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: the merge onto current main changed the candidate, so the earlier local test no longer covers this head.
Evidence: SELF make test exit 0; receipt 8225fe2d744ba24554bd9af6d6faf08585e34f89beeb6a6decd97190339a410e; before=58e4e1498bbace37e4937a874430e342e6ff7d27.
Impact: task metadata only.
Refs: .task/feature-four-model-vision.md
Why: the plugin compose task card stayed open after its feature merged.
Evidence: Actions run 3300 jobs 5075 test, 5076 test-pg, 5077 svc-realcombo success on 4542cd7d37.
Impact: archive the card as completed. No product code change.
Refs: #562#558
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-svc-plugin-compose.md(PR#558) — merges verified via git log --merges plus Gitea API squash lookup against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=692735e91d6a9ab07ddd3686feb60a56b270728a.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: The dev service is an rdm build, so startup skipped model seeding and kept the old MiniMax chat model. Later starts need the saved env file applied even without an admin key command.
Evidence: seed and rdm launcher tests passed. The live dev database now uses the four-model chat route and keeps the original MiniMax endpoint as reserve.
Impact: Restart of a service with envfile set rewrites system model settings. HTTP seeding is unchanged for builds that can mint an admin key. MiniMax is stored separately because fallbacks cannot switch gateways.
Refs: .task/feature-four-model-vision.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: deploy can compile selected plugins into one service binary.
Evidence: Actions run 3288 jobs 5053 test, 5054 test-pg, and 5055 svc-realcombo success on 77f7975cac. Head contains origin/main 63e70d8.
Impact: default remains no plugins; --with selects the catalog. Lifecycle suite stays NOT_RUN.
Refs: #558
Why: branches merged into main had left their task cards open; backfill status and archive to prevent bookkeeping debt.
Evidence: feature-pptx-gate-reference-integrity.md(PR#559) feature-workbench-visual-redesign.md(PR#556) — merges verified via git log --merges plus Gitea API squash lookup against origin/main.
Impact: .task/*.md moved to .task/archive/ with status backfilled; no code or submodule change.
Refs: task.sh close (card-autoclose-r1)
Why: include the current integration baseline before verification.
Evidence: fetched origin/main. The multi-instance account bootstrap conflict keeps main's identity ensure and activation flow.
Impact: integrate upstream changes without rewriting task history. Backend gitlink stays 80bb123.
Refs: task-sync
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: Dev CI must build the backend head that contains current main and the child-event assertion fix.
Evidence: Agent-System-Backend feature/svc-plugin-host-options is 80bb123.
Impact: modules/backend gitlink only.
Refs: Agent-System-Backend 80bb123c874cd9eb0e25f12ccd41e888f727a7e1
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=59cbf1109634b66c88f5b1702f330cd738aa75ef.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: The multi-instance acceptance test still created alice with a literal
password; backend U3 replaced local password-bearing creation with trusted
pending-account activation, so the first pin bump past U3 failed test-pg
with RECOVERY_CONTRACT_REPLACED. The seam was left pending by the U3 task
and this PR is the first to cross it.
Evidence: Full TestTwoInstancesOverSharedPG passes against a disposable
PostgreSQL 16 container (identity ensure -> bootstrap-admin -> pending
create with activation key -> key redemption -> grant-setup password ->
api key -> all cross-instance scenarios, 15s).
Impact: Test-only bootstrap rewrite (deployment-level identity ensured once
per pair, admin bootstrapped first, alice activated through the key
redemption and grant-setup password flow); no product code changes.
Refs: Dev task feature/pptx-gate-reference-integrity; backend U3 #198
Why: the current heads are not green, so the merge chain stops before any repository is merged.
Evidence: SELF query of the open pull requests and their current-head Actions runs.
Impact: task card only. This commit stays local so the open Dev pull request head does not move.
Refs: Agent-System-Dev pulls/558
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: the backend branch moved forward to include the OOXML gate fix, and this checkout should name that commit.
Evidence: Agent-System-Backend feature/svc-plugin-host-options is bffd37c.
Impact: modules/backend gitlink only.
Refs: Agent-System-Backend bffd37c42f809332499d3227ba1377c8d40c9459
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: The review candidate needs reproducible evidence bound to the exact Dev and Frontend commits.
Evidence: SELF receipts record 272 unit tests, the production build, and 16 browser scenarios on Dev 49ef24b.
Impact: Updates only the task record; product behavior is unchanged.
Refs: feature/workbench-visual-redesign
Why: bootstrap-admin now refuses a database that has no agent_system_identity row, and serve does not insert one.
Evidence: Dev CI run 3266 job 5008 failed with system identity missing on 7eef723.
Impact: test setup only.
Refs: Agent-System-Dev pulls/558
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: the synced backend rejects password-bearing user create, so the shared-PG acceptance could not open its first account.
Evidence: Backend CI run 3261 succeeded on 8c60ed0; Dev test-pg run 3263 failed in TestTwoInstancesOverSharedPG before this change.
Impact: test setup only. Alice remains a non-admin account and still receives an API key after setting a password.
Refs: Agent-System-Dev pulls/558
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: The review candidate needs reproducible evidence bound to the exact Dev and Frontend commits.
Evidence: SELF receipts record 272 unit tests, the production build, and 16 browser scenarios on Dev 49ef24b.
Impact: Updates only the task record; product behavior is unchanged.
Refs: feature/workbench-visual-redesign
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=cc40e10f3b4b6e41cb3a7aa0826e08dd3b8b7270.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: The review candidate needs reproducible evidence bound to the exact Dev and Frontend commits.
Evidence: SELF receipts record 272 unit tests, the production build, and 16 browser scenarios on Dev 49ef24b.
Impact: Updates only the task record; product behavior is unchanged.
Refs: feature/workbench-visual-redesign
Why: Long-history task tests could finish while Git background maintenance still rewrote a disposable clone, racing TemporaryDirectory cleanup and failing CI with a non-empty .git directory.
Evidence: The failing test passes 25/25 and all 344 governance tests pass locally.
Impact: Test fixture only; product, governance commands, and runtime behavior are unchanged.
Refs: Dev run 3237 jobs 4951 and 4965
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=cc40e10f3b4b6e41cb3a7aa0826e08dd3b8b7270.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: Backend and Documents were rebased onto their current main, so the Dev links must name those commits before this branch syncs.
Evidence: backend 8c60ed0 includes the host-option hooks and origin/main; documents 2a8deac keeps the proposal pending review.
Impact: gitlinks only. The proposal stays pending review.
Refs: Agent-System-Backend 8c60ed092bd12ce3f20da0d09d39a67abce47041; Agent-System-Documents 2a8deac89d2d03e75b717203665021fb6724f7a2
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-pptx-gate-reference-integrity.md; R0=cc40e10f3b4b6e41cb3a7aa0826e08dd3b8b7270.
Impact: task metadata only; the feature workspace starts at cc40e10f3b.
Refs: .task/feature-pptx-gate-reference-integrity.md
Why: the --with path had only stub tests, so the closeout needs a SELF record of a real combined binary.
Evidence: bash /tmp/svc-compose-real.sh via make evidence, exit 0, before=516b35cd57848a68ce0614d64936861374023a50. make test-lifecycle stays NOT_RUN because AGENT_PG_TEST_DSN and SVC_RDM_SRC_DIR are unset.
Impact: task card only. Temporary service cmpchk was removed.
Refs: .task/feature-svc-plugin-compose.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: The passing make test receipt and the four-profile image check need to stay on the task card.
Evidence: make test exit 0, SELF receipt 9519445485c2b5883acb1cd0a8e27c62c1d0e6a40a4d5e2686d6f8cf9733415d, tested head f48f344.
Impact: Task metadata only. Review and merge remain unauthorized.
Refs: .task/feature-four-model-vision.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: Context assembly, ingest and runtime now depend on the vision package, and the dependency ratchet rejects edges that are not recorded.
Evidence: scripts/lint-boundaries.sh reports architecture ok with 88 edges.
Impact: The three new edges are the allowed image path. No other package gains a dependency.
Refs: .task/feature-four-model-vision.md
Co-authored-by: Cursor <cursoragent@cursor.com>
weichen
