The rdm-audit entry was an unconditional builtin, so on a plain base (no rdm.inspect.* commands) the workspace opened straight into a rejected receipt (400). 2026-10-12 diagnostic, increment 2; user authorized the 2+3-first scope.
What
Bump modules/frontend pin to the gating head (frontend PR #65): entry gated by rdmAuditReady over GET /api/commands (all seven rdm.inspect.* present and enabled), errors classified with the raw receipt collapsible.
scripts/e2e.sh phase 4: after the RDM-combo run, re-serve the same $DATA with the plain base CLI and run the new plain-base spec (E2E_PLAIN_BASE=1).
Evidence (SELF receipts in the task card; CI is the authoritative gate)
make test PASS on the synced HEAD (frontend 112 + knip, ui 108 + knip, backend/core/libs/governance/boundaries/pins).
任务卡（主记录，证据与阶段表在其中）：`.task/feature-rdm-audit-capability-gate.md`
### Why
The rdm-audit entry was an unconditional builtin, so on a plain base (no rdm.inspect.* commands) the workspace opened straight into a rejected receipt (400). 2026-10-12 diagnostic, increment 2; user authorized the 2+3-first scope.
### What
- Bump `modules/frontend` pin to the gating head (frontend PR #65): entry gated by `rdmAuditReady` over `GET /api/commands` (all seven rdm.inspect.* present and enabled), errors classified with the raw receipt collapsible.
- `scripts/e2e.sh` phase 4: after the RDM-combo run, re-serve the same `$DATA` with the plain base CLI and run the new plain-base spec (`E2E_PLAIN_BASE=1`).
### Evidence (SELF receipts in the task card; CI is the authoritative gate)
- `make test` PASS on the synced HEAD (frontend 112 + knip, ui 108 + knip, backend/core/libs/governance/boundaries/pins).
- `bash scripts/e2e.sh` PASS: RDM combo 4/4 + plain-base 1/1.
### Refs
2026-10-12 diagnostic report increment 2; frontend PR #65 (Agent-System-Frontend).
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-rdm-audit-capability-gate.md; R0=475654363de3ec72df68d246ffab8217b1cfeab6.
Impact: task metadata only; the feature workspace starts at 475654363d.
Refs: .task/feature-rdm-audit-capability-gate.md
Why: the rdm-audit entry must hide on plain bases lacking rdm.inspect.*
commands (2026-10-12 diagnostic, increment 2), and the dev-repo e2e driver
needs a plain-base phase to prove it end to end.
Evidence: frontend e058adc carries the gating (vitest 23 files / 112 tests
incl. new contract matrix; tsc -b && vite build pass); full e2e rerun
follows this commit (RDM combo + plain base phases).
Impact: modules/frontend pin 360d640 -> e058adc; scripts/e2e.sh gains
phase 4 (same $DATA served by the base CLI, plain-base.playwright.ts);
task card records scope, authorization chain and stage table.
Refs: 2026-10-12 diagnostic report, increment 2.
Why: keep the dev-repo pin in lockstep with the spec fix.
Evidence: frontend commit follows; full e2e rerun recorded in the task card.
Impact: modules/frontend pin 986ebdb -> spec-fix head.
Refs: 2026-10-12 diagnostic report, increment 2.
Why: keep the dev-repo pin in lockstep with the unexport fix so make test
passes on the task HEAD.
Evidence: frontend vitest + knip pass; full make test evidence row follows.
Impact: modules/frontend pin follows the unexport head.
Refs: 2026-10-12 diagnostic report, increment 2.
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=37e3229538d64867a6a074020a072da925244fcc.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: task-sync ahead of review; main advanced via #414/#415 (admin-zone
hosting, U1 instance identity).
Evidence: frontend merge verified (vitest/knip/build); dev-level make test
and e2e rerun on this head follow as evidence receipts.
Impact: resolves the modules/frontend gitlink to the component merge head.
Refs: parent evidence in this task card.
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=9a9665b458916179df6d94066dfb9aa657a13d60.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=b6307db015da4a3718baadb242c52cb66b024f74.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
任务卡（主记录，证据与阶段表在其中）：
.task/feature-rdm-audit-capability-gate.mdWhy
The rdm-audit entry was an unconditional builtin, so on a plain base (no rdm.inspect.* commands) the workspace opened straight into a rejected receipt (400). 2026-10-12 diagnostic, increment 2; user authorized the 2+3-first scope.
What
modules/frontendpin to the gating head (frontend PR #65): entry gated byrdmAuditReadyoverGET /api/commands(all seven rdm.inspect.* present and enabled), errors classified with the raw receipt collapsible.scripts/e2e.shphase 4: after the RDM-combo run, re-serve the same$DATAwith the plain base CLI and run the new plain-base spec (E2E_PLAIN_BASE=1).Evidence (SELF receipts in the task card; CI is the authoritative gate)
make testPASS on the synced HEAD (frontend 112 + knip, ui 108 + knip, backend/core/libs/governance/boundaries/pins).bash scripts/e2e.shPASS: RDM combo 4/4 + plain-base 1/1.Refs
2026-10-12 diagnostic report increment 2; frontend PR #65 (Agent-System-Frontend).