U3 slice 2: shared execution budgets and the action-authz matrix (pin #141/#64) #333

Merged
weichen merged 13 commits from feature/collab-storage-u3-budget-authz into main 2026-10-11 08:17:26 +00:00
Owner

Plan U3 remainder (R8/KTD13), continuation of the user-approved transformation.

  • backend PR #141 (pin 05c3447): admission_leases (v21) shared execution ledger with atomic accounting under an advisory lock; runtime.execBudgetGlobal/PerUser/execQueueMax settings (zero = off preserves behavior); conversation turns and both subagent kinds share the pool; parents yield around synchronous children and HITL waits (no deadlock at saturated budgets); queue-full rejects 429 before writing. ProjectAction matrix (read/edit/approve/execute/admin): default-deny, legacy EXT-8 adapter keeps read only, action-aware adapter authoritative + fail-closed.
  • documents PR #64 (pin 5ac58dc): runbook section 9 - budget settings and the KTD13 versioned public-contract compatibility plan.

Evidence (SELF via evidence tool in the task card): make test, make test-backend-pg against isolated real PostgreSQL 18.6 + Redis, make build - all exit 0. CI GATE first run on this PR. With this, U3 is complete per plan section 5.

Task card: .task/feature-collab-storage-u3-budget-authz.md

Plan U3 remainder (R8/KTD13), continuation of the user-approved transformation. - backend PR #141 (pin 05c3447): admission_leases (v21) shared execution ledger with atomic accounting under an advisory lock; runtime.execBudgetGlobal/PerUser/execQueueMax settings (zero = off preserves behavior); conversation turns and both subagent kinds share the pool; parents yield around synchronous children and HITL waits (no deadlock at saturated budgets); queue-full rejects 429 before writing. ProjectAction matrix (read/edit/approve/execute/admin): default-deny, legacy EXT-8 adapter keeps read only, action-aware adapter authoritative + fail-closed. - documents PR #64 (pin 5ac58dc): runbook section 9 - budget settings and the KTD13 versioned public-contract compatibility plan. Evidence (SELF via evidence tool in the task card): make test, make test-backend-pg against isolated real PostgreSQL 18.6 + Redis, make build - all exit 0. CI GATE first run on this PR. With this, U3 is complete per plan section 5. Task card: .task/feature-collab-storage-u3-budget-authz.md
weichen added 5 commits 2026-10-11 05:21:07 +00:00
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-collab-storage-u3-budget-authz.md; R0=90c07a5b4fb75251ea72b492ccb6714e5e699fe5.

Impact: task metadata only; the feature workspace starts at 90c07a5b4f.

Refs: .task/feature-collab-storage-u3-budget-authz.md
Why: the parent must pin the merged component SHAs for the combined build and CI gates.

Evidence: both origin-main merge commits fetched post-merge and checked out.

Impact: gitlink updates only.

Refs: backend PR #141; documents PR #64.
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=bfcdeef9aa335ca605c5794de9fc3889eeb1c2ab.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=bfcdeef9aa335ca605c5794de9fc3889eeb1c2ab; candidate=40567aaa665f00354eb57dd3006f798a16065aeb.

Impact: task metadata only.

Refs: .task/feature-collab-storage-u3-budget-authz.md
Record the U3 slice-2 delivery state and evidence in the task card
ci / test (pull_request) Successful in 2m24s
ci / test-pg (pull_request) Successful in 1m1s
3abfa8a2ba
Why: stage review needs results, stage verdicts and the three evidence segments in the card before the PR.

Evidence: make test / test-backend-pg (real services) / make build all exit 0 via the evidence tool.

Impact: task metadata only.

Refs: backend PR #141; documents PR #64.
weichen added 1 commit 2026-10-11 05:21:15 +00:00
Fill the task record PR link
ci / test (pull_request) Successful in 2m27s
ci / test-pg (pull_request) Successful in 1m9s
de351597ad
Why: card and PR description are one document; record the PR link before merge.

Evidence: Dev PR #333 created via Gitea API.

Impact: task metadata only.

Refs: PR #333.
weichen added 2 commits 2026-10-11 05:38:41 +00:00
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=ec0169cad19c9525ce6ee4d7e26632351a5e5dbc.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
Record the sync checkpoint
ci / test (pull_request) Successful in 2m37s
ci / test-pg (pull_request) Successful in 54s
e65e958f77
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=ec0169cad19c9525ce6ee4d7e26632351a5e5dbc; candidate=7c1eb97384246b30b034f10b3c7cd5965e8c09e2.

Impact: task metadata only.

Refs: .task/feature-collab-storage-u3-budget-authz.md
weichen added 2 commits 2026-10-11 05:48:03 +00:00
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=693f7f0459992c66ae672a966da4fc9fa12c193b.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
Record the sync checkpoint
ci / test-pg (pull_request) Failing after 1m10s
ci / test (pull_request) Successful in 2m26s
8dc93dd95c
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=693f7f0459992c66ae672a966da4fc9fa12c193b; candidate=a266a2f4272a1aebc9f317aba783a5994f60a3e5.

Impact: task metadata only.

Refs: .task/feature-collab-storage-u3-budget-authz.md
weichen added 3 commits 2026-10-11 08:12:49 +00:00
Why: the real-PG CI gate on PR #333 exposed the stack overflow; PR #142 fixes it with a regression test.

Evidence: backend origin-main merge of #142 fetched post-merge and checked out.

Impact: gitlink only.

Refs: backend PR #142; Dev PR #333.
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=95992d751f0a6ea8e345109dbb6b9367d9055e92.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
Record the sync checkpoint
ci / test (pull_request) Successful in 2m18s
ci / test-pg (pull_request) Successful in 54s
f93b2720c3
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=95992d751f0a6ea8e345109dbb6b9367d9055e92; candidate=2d114b47503bbc746417d1b4ae68507298d5bcb0.

Impact: task metadata only.

Refs: .task/feature-collab-storage-u3-budget-authz.md
weichen merged commit 5e9354dd11 into main 2026-10-11 08:17:26 +00:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: weichen/Agent-System-Dev#333