Warn when a seeded model key does not become active #569

Merged
weichen merged 7 commits from fix/model-key-secret-overlay into main 2026-10-15 11:52:25 +00:00
7 Commits
Author SHA1 Message Date
weichenandCursor 34152f740f Record the local suite result
ci / svc-realcombo (pull_request) Successful in 1m49s
ci / test (pull_request) Successful in 5m37s
ci / test-pg (pull_request) Successful in 7m26s
Why: The full local suite exited 2, and the card has to keep that receipt instead of implying a pass.
Evidence: make evidence for make test, exit 2, receipt 11513cd3. The two errors are agent-exec redaction of a 3-digit TOKEN, and CI on fc29206 is the gate.
Impact: Task card only.
Refs: fix/model-key-secret-overlay
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-15 11:29:42 +00:00
weichenandCursor fc2920686a Record the pull requests and review
ci / svc-realcombo (pull_request) Successful in 1m40s
ci / test (pull_request) Successful in 5m30s
ci / test-pg (pull_request) Successful in 8m44s
Why: The card is the main record, and the review has to name the objects it read.
Evidence: Backend PR 205 and Dev PR 569 exist; review 68215ca8 found no blocking defect.
Impact: Task card only.
Refs: fix/model-key-secret-overlay
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-15 11:07:02 +00:00
weichenandCursor e895c4b64a Record the secret-key regression evidence
ci / svc-realcombo (pull_request) Successful in 1m49s
ci / test (pull_request) Successful in 5m35s
ci / test-pg (pull_request) Successful in 7m29s
Why: The sync checkpoint landed after the first local tests, so the card needs a rerun against the merged head.
Evidence: make evidence for the settings/runtime tests and the seed fingerprint tests, both exit 0 (SELF).
Impact: Task card only.
Refs: fix/model-key-secret-overlay
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-15 10:35:14 +00:00
weichen cf8d86c22c Record the sync checkpoint
Why: bind the task validation checkpoint to the integration baseline.

Evidence: SELF recursive component checks; sync_base=dc86a023605d00fccca1b9679b4cdad96373bdee; before_record=6b2173b9dc33fb8ad4fe72bac1838266ef8f8371.

Impact: task metadata only.

Refs: .task/fix-model-key-secret-overlay.md
2026-10-15 10:34:28 +00:00
weichen 6b2173b9dc Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=dc86a023605d00fccca1b9679b4cdad96373bdee.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-15 10:33:58 +00:00
weichenandCursor 265bcdcbba Warn when a seeded model key does not become active
Why: Settings plaintext loses to secret_keys, so replacing the env key did not change the key a conversation actually sent.
Evidence: python3 -m unittest tests.test_svc.SvcDbRecoveryTests.test_seed_replaces_old_system_secret tests.test_svc.SvcDbRecoveryTests.test_seed_warns_when_old_secret_stays_active tests.test_svc.SvcDbRecoveryTests.test_seed_puts_without_credentials_when_auth_off (SELF).
Impact: Embedded databases now compare the active system secret fingerprint after seeding, and the backend gitlink carries the adoption fix.
Refs: fix/model-key-secret-overlay
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-15 10:33:28 +00:00
weichen e5994cd8ae Record the task card for fix-model-key-secret-overlay
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/fix-model-key-secret-overlay.md; R0=919f75cf7b39ca357e212a08a0ba5ba3d9a79b51.

Impact: task metadata only; the feature workspace starts at 919f75cf7b.

Refs: .task/fix-model-key-secret-overlay.md
2026-10-15 08:56:32 +00:00