Why: U7 account creation, password changes, recovery keys, and sessions needed atomic state and audit records. The older Dev pin preceded main authentication-version changes and schema migrations 28–30.
Result: Pin the reviewed Backend #185 merge 8e80e2618eb7471dd12d5f172ff3cd23622b7d2f, including additive migration 31, owner-serialized credential/session admission, read-only maintenance opens, and exclusive private credential output files. Clarify the U7 identity/schema and test contracts. Current Core, Documents, Frontend, UI, and other component pins are preserved.
Evidence: Fixed Dev head d805cc1697ae7f49d371a56a6a55191f00897b8c includes current main d852c159b6b3387a2f418a42ab6d3696ac873d01. SELF make test passed (340 governance cases, 263 Frontend and 162 UI tests plus Go components); isolated PostgreSQL/Redis make test-backend-pg and make build passed. Full raw receipts are in .task/feature-u7-account-tx-audit.md; a transient nested Git lock blocked one no-op sync and resolved without deletion, then the same-base check passed with changed=0. Independent REPLAY /root/merge_queue_review passed this exact candidate (/tmp/mq-trial486-parent-final-independent-review-20261014.json). Backend GATE run 3062 passed; Dev exact-head CI is pending and required before merge.
Impact: No live service, shared database, or branch-protection change. The final Dev PR must pass all three current-head CI jobs before agent merge; task closure and worktree cleanup follow the actual merge.
Refs: Backend #185; Dev merge queue #518; docs/svc-deploy/u7-account-tx-audit.md.
Final admission for fixed head d805cc1697ae7f49d371a56a6a55191f00897b8c / base d852c159b6b3387a2f418a42ab6d3696ac873d01: independent /root/merge_queue_review REPLAY PASS (/tmp/mq-trial486-parent-final-independent-review-20261014.json). GATE run 3067 actor weichen, home-runner/id3, all exact-head jobs and steps completed/success: svc-realcombo, test, test-pg. Root will merge with fixed head_commit_id and force_merge=false; actual result will be recorded after verification.
实际交付：Root经PR合入 05b997b84db26c517604c48d12676f0eb2b86e18，完整树及组件核验匹配固定候选；GATE run3067 actor weichen/home-runner id3，三项必需作业及步骤全部成功。源码外原始收据和独立报告保留，任务卡归档/回收另行完成，状态见Issue518。
Why: U7 account creation, password changes, recovery keys, and sessions needed atomic state and audit records. The older Dev pin preceded main authentication-version changes and schema migrations 28–30.
Result: Pin the reviewed Backend #185 merge `8e80e2618eb7471dd12d5f172ff3cd23622b7d2f`, including additive migration 31, owner-serialized credential/session admission, read-only maintenance opens, and exclusive private credential output files. Clarify the U7 identity/schema and test contracts. Current Core, Documents, Frontend, UI, and other component pins are preserved.
Evidence: Fixed Dev head `d805cc1697ae7f49d371a56a6a55191f00897b8c` includes current main `d852c159b6b3387a2f418a42ab6d3696ac873d01`. SELF `make test` passed (340 governance cases, 263 Frontend and 162 UI tests plus Go components); isolated PostgreSQL/Redis `make test-backend-pg` and `make build` passed. Full raw receipts are in `.task/feature-u7-account-tx-audit.md`; a transient nested Git lock blocked one no-op sync and resolved without deletion, then the same-base check passed with `changed=0`. Independent REPLAY `/root/merge_queue_review` passed this exact candidate (`/tmp/mq-trial486-parent-final-independent-review-20261014.json`). Backend GATE [run 3062](https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Backend/actions/runs/3062) passed; Dev exact-head CI is pending and required before merge.
Impact: No live service, shared database, or branch-protection change. The final Dev PR must pass all three current-head CI jobs before agent merge; task closure and worktree cleanup follow the actual merge.
Refs: Backend #185; Dev merge queue #518; `docs/svc-deploy/u7-account-tx-audit.md`.
<!-- mq-trial486-admission -->
Final admission for fixed head `d805cc1697ae7f49d371a56a6a55191f00897b8c` / base `d852c159b6b3387a2f418a42ab6d3696ac873d01`: independent `/root/merge_queue_review` REPLAY PASS (`/tmp/mq-trial486-parent-final-independent-review-20261014.json`). GATE [run 3067](https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/actions/runs/3067) actor weichen, home-runner/id3, all exact-head jobs and steps completed/success: [svc-realcombo](https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/actions/runs/3067/jobs/4646), [test](https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/actions/runs/3067/jobs/4644), [test-pg](https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/actions/runs/3067/jobs/4645). Root will merge with fixed `head_commit_id` and `force_merge=false`; actual result will be recorded after verification.
实际交付：Root经PR合入 `05b997b84db26c517604c48d12676f0eb2b86e18`，完整树及组件核验匹配固定候选；GATE [run3067](https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/actions/runs/3067) actor weichen/home-runner id3，三项必需作业及步骤全部成功。源码外原始收据和独立报告保留，任务卡归档/回收另行完成，状态见Issue518。
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-u7-account-tx-audit.md; R0=4d362537d0e8755a03b1757b5bad92779a064b33.
Impact: task metadata only; the feature workspace starts at 4d362537d0.
Refs: .task/feature-u7-account-tx-audit.md
Why: account creation, password changes, and bootstrap currently commit in separate steps and do not write an audit row. The spec fixes the transaction, audit, and open-existing boundaries before code changes.
Evidence: SELF precheck receipt already imported at task-start. No runtime test in this commit.
Impact: task card and spec only. Backend behavior is unchanged.
Refs: docs/svc-deploy/u7-account-tx-audit.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: the integration tree has to carry the single-transaction account changes, and operators need to see that --dsn and --password still work while warning.
Evidence: Backend 545a75b. SELF store tests named in that branch. PostgreSQL, cross-process, and SIGKILL password checks are NOT_RUN locally.
Impact: Dev gitlink moves to 545a75b. scripts/svc.sh is unchanged and can keep passing --dsn and --password.
Refs: docs/svc-deploy/u7-account-tx-audit.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: the card is the delivery record and needs the Backend and Dev pull request URLs.
Evidence: PR creation returned Backend #185 and Dev #486. CI GATE is not green yet.
Impact: task metadata only.
Refs: .task/feature-u7-account-tx-audit.md
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: identity open landed on backend main and the account commands have to keep the no-migrate opener beside it.
Evidence: backend 9754531 is the merge, and the local package tests passed before that commit.
Impact: the Dev pin moves to 9754531. The migration stays at v28 until the instance-guard branch is on main.
Refs: modules/backend
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=cd61bbb112eea6a210a64e84f2cef00b0d64bfc1.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: The Dev U7 task must consume the actual reviewed Backend merge and record the current agent-only delivery authorization.
Evidence: Backend #185 merged as 8e80e261 after independent REPLAY and exact-head GATE run 3062; task card preserves the original SELF resume receipt.
Impact: Advance the Backend gitlink to the merged component; parent combination and CI remain pending final synchronization.
Refs: Dev #486; Backend #185; Dev queue #518
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=d852c159b6b3387a2f418a42ab6d3696ac873d01.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: The account task needs the actual synchronized combination and raw local checks before freezing its final Dev candidate; two spec lines overstated identity and test behavior.
Evidence: SELF make test, isolated PostgreSQL and Redis backend tests, make build, and task-sync receipts are imported; Backend #185 has independent REPLAY and exact-head GATE.
Impact: Keep current component pins, clarify read-only identity verification and test coverage, and prepare the Dev PR for final exact-head admission.
Refs: Dev #486; Backend #185; merge queue #518
weichen
changed title from Pin account transactions and note deprecated credential flags to Deliver U7 account transactions on the current combination2026-10-14 04:27:56 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Why: U7 account creation, password changes, recovery keys, and sessions needed atomic state and audit records. The older Dev pin preceded main authentication-version changes and schema migrations 28–30.
Result: Pin the reviewed Backend #185 merge
8e80e2618eb7471dd12d5f172ff3cd23622b7d2f, including additive migration 31, owner-serialized credential/session admission, read-only maintenance opens, and exclusive private credential output files. Clarify the U7 identity/schema and test contracts. Current Core, Documents, Frontend, UI, and other component pins are preserved.Evidence: Fixed Dev head
d805cc1697ae7f49d371a56a6a55191f00897b8cincludes current maind852c159b6b3387a2f418a42ab6d3696ac873d01. SELFmake testpassed (340 governance cases, 263 Frontend and 162 UI tests plus Go components); isolated PostgreSQL/Redismake test-backend-pgandmake buildpassed. Full raw receipts are in.task/feature-u7-account-tx-audit.md; a transient nested Git lock blocked one no-op sync and resolved without deletion, then the same-base check passed withchanged=0. Independent REPLAY/root/merge_queue_reviewpassed this exact candidate (/tmp/mq-trial486-parent-final-independent-review-20261014.json). Backend GATE run 3062 passed; Dev exact-head CI is pending and required before merge.Impact: No live service, shared database, or branch-protection change. The final Dev PR must pass all three current-head CI jobs before agent merge; task closure and worktree cleanup follow the actual merge.
Refs: Backend #185; Dev merge queue #518;
docs/svc-deploy/u7-account-tx-audit.md.Final admission for fixed head
d805cc1697ae7f49d371a56a6a55191f00897b8c/ based852c159b6b3387a2f418a42ab6d3696ac873d01: independent/root/merge_queue_reviewREPLAY PASS (/tmp/mq-trial486-parent-final-independent-review-20261014.json). GATE run 3067 actor weichen, home-runner/id3, all exact-head jobs and steps completed/success: svc-realcombo, test, test-pg. Root will merge with fixedhead_commit_idandforce_merge=false; actual result will be recorded after verification.实际交付：Root经PR合入
05b997b84db26c517604c48d12676f0eb2b86e18，完整树及组件核验匹配固定候选；GATE run3067 actor weichen/home-runner id3，三项必需作业及步骤全部成功。源码外原始收据和独立报告保留，任务卡归档/回收另行完成，状态见Issue518。Pin account transactions and note deprecated credential flagsto Deliver U7 account transactions on the current combination