Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-recovery-u1-db-identity.md; R0=b6307db015da4a3718baadb242c52cb66b024f74.
Impact: task metadata only; the feature workspace starts at b6307db015.
Refs: .task/feature-recovery-u1-db-identity.md
Why: task card and PR description share one document; link must be on-card.
Evidence: Gitea API created pull #426 for feature/recovery-u1-db-identity.
Impact: .task/feature-recovery-u1-db-identity.md header only.
Refs: PR #426; Backend #170
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: task-sync hit a submodule conflict; pin must track Backend #170
HEAD after rebase onto main (copyOrder fix).
Evidence: backend 0c79618; origin/main merge completed in worktree.
Impact: modules/backend gitlink; sync with main.
Refs: Backend #170; Dev #426
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: record CI success for review without pushing a new tip that
would retrigger runners (same convention as U1 #415 closeout).
Evidence: Dev #426bad29e0 test+test-pg success; Backend #170
0c79618 vet-and-test success.
Impact: task card only; push deferred until after merge or explicit.
Refs: PR #426; Backend #170
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=b431777c9fa9c74f096d7f14fce40d1beba53fe2.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: Backend #170 rebased; design doc still said v26.
Evidence: local unittest identity+backup OK after task-sync.
Impact: docs/recovery/u1-identity-manifest.md §5.2 version note.
Refs: Backend PR #170; Dev PR #426
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: Backend login_keys gate blocks Key traffic while
must_change_password is set; U7 failed on PUT settings/user 403.
Evidence: go test -c multi-instance compiles; CI test-pg will GATE.
Impact: loginAlice does session password change alicePass0→alicePass.
Refs: Dev PR #426; Backend #170 pin e7b70c2
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=673e687c5c85b9af3ce13ca30845d5e68de5dfa0.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
identity ensure|verify+ serve gate (AGENT_SYSTEM_INSTANCE_ID) — Backend PR Close the context-engineering task card (#170)scripts/svc.shstart/init: file marker verify → DB ensure → DB verify; export identity env to servetests/test_svc_identity.py(I3 SQLite ensure / wrong-id blocks); real PG remains NOT_RUN withoutSVC_TEST_PGdocs/recovery/u1-identity-manifest.mdI3 statusTest plan
python3 -m unittest tests.test_svc_identity tests.test_svc_recover(evidence on task card)make test+make build)Task card
.task/feature-recovery-u1-db-identity.mdRefs: U1 design §5.2; parent #415; Backend #170