weichen/Agent-System-Dev
1
0
Fork 0
Code Issues 1 Pull Requests 6 Actions 2 Packages Projects Releases Wiki Activity

Add the RDM domain-admin ledger recovery tooling and honest roles-panel rejected state #498

Merged
weichen merged 9 commits from feature/rdm-admin-lockout-recovery into main 2026-10-13 01:56:29 +00:00
Conversation 0 Commits 9 Files Changed 4
+629 -6
9 Commits
Author SHA1 Message Date
weichen 6dd50df74e Fill the stage review table under the continuous authorization
ci / svc-realcombo (pull_request) Successful in 1m48s
Details
ci / test-pg (pull_request) Successful in 2m51s
Details
ci / test (pull_request) Successful in 4m52s
Details
2026-10-13 01:49:58 +00:00
weichen a297b17b1f Record the post-sync combined test evidence row 2026-10-13 01:48:23 +00:00
weichen 71e9505713 Record the task-sync evidence row 2026-10-13 01:43:06 +00:00
weichen f22f9949d1 Record the sync checkpoint 
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=5aebedebeb963b5c01f39fd9122ec60dbe6d34d3; candidate=d1a7de09dd53c27144fe5697206481fe59822aae.

Impact: task metadata only.

Refs: .task/feature-rdm-admin-lockout-recovery.md
 2026-10-13 01:42:56 +00:00
weichen d1a7de09dd Merge authoritative main into the task branch 
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=5aebedebeb963b5c01f39fd9122ec60dbe6d34d3.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
 2026-10-13 01:42:28 +00:00
weichen f1b75908c7 Record the combined make test evidence row 2026-10-13 01:42:19 +00:00
weichen 1f1b2e12e6 Pin frontend to the honest roles-panel rejected state 
Why: pick up Agent-System-Frontend dcd2699 (PR #75) so the Dev combined
CI validates the RDM roles panel rejected-state fix together with the
svc.sh rdm-admin recovery tooling in this task.
Evidence: gitlink 43d1933 -> dcd2699; merge-base --is-ancestor of the
reviewed head 0159f00 into frontend main OK (SELF).
Impact: gitlink bump only; combination validated by make test in this
worktree before PR.
Refs: task card feature-rdm-admin-lockout-recovery (R3/I2)
 2026-10-13 01:35:58 +00:00
weichen 7719e807b8 Add svc.sh rdm-admin ledger inspection and trusted transfer 
Why: U7 acceptance bootstrapped u7-admin into the shared dev runtime's
singleton rdm_admins ledger, locking the operator out of RDM admin pages
(rdm.role.list 400); recovery required forensics. KTD4 keeps base isAdmin
to audit-view only, so an operator-side trusted channel is needed.
Evidence: python3 -m unittest tests.test_svc_rdm_admin -v (25 OK, SELF);
live smoke on runtime/dev: show/status/typo-guard outputs verified.
Impact: new svc.sh <env> rdm-admin [show|transfer --to x] command, help
topic, status ledger line with stale-owner warning; no behavior change
for existing commands.
Refs: task card .task/feature-rdm-admin-lockout-recovery.md R1/R2
 2026-10-13 01:27:26 +00:00
weichen 41535a6350 Record the task card for feature-rdm-admin-lockout-recovery 
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-rdm-admin-lockout-recovery.md; R0=5212fef01e59b7f9e12fa7fc42cd987c6792a786.

Impact: task metadata only; the feature workspace starts at 5212fef01e.

Refs: .task/feature-rdm-admin-lockout-recovery.md
 2026-10-13 01:21:40 +00:00