weichen/Agent-System-Dev
1
0
Fork 0
Code Issues 1 Pull Requests 2 Actions 2 Packages Projects Releases Wiki Activity

Harden svc.sh identity isolation and deploy candidate gate (U1 slice) #474

Merged
weichen merged 8 commits from feature/svc-identity-u1 into main 2026-10-12 13:06:22 +00:00
Conversation 0 Commits 8 Files Changed 5
+584 -12
8 Commits
Author SHA1 Message Date
weichen 1a99be4b32 Fill PR link and outcome sections in the task card
ci / test-pg (pull_request) Successful in 2m16s
Details
ci / test (pull_request) Successful in 3m24s
Details
2026-10-12 13:02:23 +00:00
weichen 1874af880d Re-record governance suite evidence on the synced head
ci / test-pg (pull_request) Successful in 1m29s
Details
ci / test (pull_request) Successful in 3m25s
Details
2026-10-12 13:01:24 +00:00
weichen 96be78c044 Record task-sync evidence and merged main into the slice 2026-10-12 12:59:26 +00:00
weichen 9404eeed71 Record the sync checkpoint 
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=8ebf5021468a1301ccbe2fe0568508e16d8bb708; candidate=c3aaaa2954333e2d3a55c2f950fc5051cca5fe88.

Impact: task metadata only.

Refs: .task/feature-svc-identity-u1.md
 2026-10-12 12:59:16 +00:00
weichen c3aaaa2954 Merge authoritative main into the task branch 
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=8ebf5021468a1301ccbe2fe0568508e16d8bb708.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
 2026-10-12 12:58:50 +00:00
weichen 3ad0da12ce Record governance suite evidence for the identity gate slice 2026-10-12 12:58:43 +00:00
weichen 55ed5899fb Harden svc.sh identity isolation and deploy candidate gate 
Why: batch update leaked AGENT_SYSTEM_INSTANCE_ID/DBREF from one service
to the next, and RDM artifacts without the identity CLI were stopped and
overwritten before their startup identity refusal surfaced, leaving
rdm1/rdmcand in a mixed registration-vs-artifact state (2026-10-12).
Evidence: make test-governance 217 OK; tests.test_svc_identity and
tests.test_svc_precheck green; rows recorded in the task card.
Impact: env_config resets identity env per service; capability probe is
timeout-guarded and rejects serve-shaped output; identity ensure moves
to adoption/init (bare start is verify-only); deploy builds and gates
candidates before stopping the old service (refuses identityless
candidates, completes missing identity rows via the candidate); update
runs svc_manifest_migrate like every other lifecycle entry.
Refs: .task/feature-svc-identity-u1.md; user root-cause report 2026-10-12.
 2026-10-12 12:56:37 +00:00
weichen 05c3d050b4 Record the task card for feature-svc-identity-u1 
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-svc-identity-u1.md; R0=d8a269ab2fd20e4783ba0cde6a4794a702ad7571.

Impact: task metadata only; the feature workspace starts at d8a269ab2f.

Refs: .task/feature-svc-identity-u1.md
 2026-10-12 12:33:28 +00:00