U3: member removal history and read-only former-member access #646

2026-10-20T05:02:08Z

weichen commented

2026-10-20 05:02:08 +00:00

目标（计划 U3：R4/R5/R8/R12，历史可见边界=A 保守，用户已确认）

RDM（Agent-System-RDM feature/project-access-lifecycle-u3-member-history @ 62c77ec）：成员状态机 active/removed/absent（rdm_members 状态列 + removed_at + 迁移回填）；Remove 保留行不再硬删；re-add 恢复 active 且 removal 痕迹可查；IsMember 只认 active（工作门自动关闭）；被移除成员共享域只读放行（doc.read 前置解耦）；写全拒；隐私负控不退化。
Backend（Agent-System-Backend feature/project-access-lifecycle-u3-backend @ d3380de）：被移除成员本人会话列表/详情/消息只读路径——读决策唯一化（projectRead 经域内唯一资源授权面放行共享域读），全部写仍走 projectWork；无授权器时行为不变。

证据

RDM：全量绿（members/projects/perms + rdmapp 78s 真实全量 + dhffidelity/dhfmatrix）；vet 干净。
Backend：过滤套件 ok（13.9s）、authz ok、vet 干净。
U3b 独立性说明：三个 CLI 候选不可用（cursor 配额、agy 端点 EOF×3、pi 为实现者），Backend 部分由 host 主模型 Review（PASS，依据与临时路由变更随卡）；RDM 部分待独立 Review（随 L1 集成批次执行）。
派发环境摩擦（cursor 配额/TLS、agy 端点 EOF×3、local_config 监管、-modfile 配方、pin 自愈）逐次记录于任务卡收据。

Impact

RDM 代码在 Agent-System-RDM 仓同名分支（随 L1 交付组合）；本 PR 携带任务卡。Backend 组件分支已推送（d3380de），其组合 gitlink 随 L1 集成推进。

Refs

计划 2026-10-19-1440 U3；L1 PR #634。

## 目标（计划 U3：R4/R5/R8/R12，历史可见边界=A 保守，用户已确认） - RDM（Agent-System-RDM feature/project-access-lifecycle-u3-member-history @ 62c77ec）：成员状态机 active/removed/absent（rdm_members 状态列 + removed_at + 迁移回填）；Remove 保留行不再硬删；re-add 恢复 active 且 removal 痕迹可查；IsMember 只认 active（工作门自动关闭）；被移除成员共享域只读放行（doc.read 前置解耦）；写全拒；隐私负控不退化。 - Backend（Agent-System-Backend feature/project-access-lifecycle-u3-backend @ d3380de）：被移除成员本人会话列表/详情/消息只读路径——读决策唯一化（projectRead 经域内唯一资源授权面放行共享域读），全部写仍走 projectWork；无授权器时行为不变。 ## 证据 - RDM：全量绿（members/projects/perms + rdmapp 78s 真实全量 + dhffidelity/dhfmatrix）；vet 干净。 - Backend：过滤套件 ok（13.9s）、authz ok、vet 干净。 - U3b 独立性说明：三个 CLI 候选不可用（cursor 配额、agy 端点 EOF×3、pi 为实现者），Backend 部分由 host 主模型 Review（PASS，依据与临时路由变更随卡）；RDM 部分待独立 Review（随 L1 集成批次执行）。 - 派发环境摩擦（cursor 配额/TLS、agy 端点 EOF×3、local_config 监管、-modfile 配方、pin 自愈）逐次记录于任务卡收据。 ## Impact RDM 代码在 Agent-System-RDM 仓同名分支（随 L1 交付组合）；本 PR 携带任务卡。Backend 组件分支已推送（d3380de），其组合 gitlink 随 L1 集成推进。 ## Refs 计划 2026-10-19-1440 U3；L1 PR #634。

weichen added 3 commits 2026-10-20 05:02:08 +00:00

Record the task card for feature-project-access-lifecycle-u3-member-history c9f5fb2d49

Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-project-access-lifecycle-u3-member-history.md; R0=f07a53d86aa10d35be0d3519fcf3c493b3391fec.

Impact: task metadata only; the feature workspace starts at c9ca59b195.

Refs: .task/feature-project-access-lifecycle-u3-member-history.md

Record U3a RDM delivery progress bd7ae9a892

Why: the member state machine (active/removed with migration backfill),
re-add reactivation, and the removed-member read-only passage through the
shared-domain authz (doc.read prerequisite decoupled) were delivered on the
RDM working branch 62c77ec; the Backend conversation read path (U3b) remains.

Evidence: build + members/projects/perms/rdmapp full suites green under the
-modfile overlay on 62c77ec.

Impact: task card only.

Refs: plan 2026-10-19-1440 U3; PR #634.

Record U3b delivery, host review pass and routing notes

ci / test-pg (pull_request) Skipped

Details

ci / svc-realcombo (pull_request) Skipped

Details

ci / test (pull_request) Successful in 8m13s

Details

688c68bdc1

Why: U3b (removed-member read-only conversation path via the single
resource-authz surface, all writes still gated by projectWork) was
delivered by pi after cursor quota exhaustion and antigravity endpoint
failures forced temporary routing changes, both recorded.

Evidence: /tmp/pal-u3b-verify.json (server/authz tests, vet, clean tree).

Impact: task card only.

Refs: plan 2026-10-19-1440 U3; PR #634.

weichen referenced this issue from a commit

2026-10-20 05:05:17 +00:00

Fold-close the task card before merge

weichen added 2 commits 2026-10-20 05:05:17 +00:00

agent-exec transport c8ce03299ad3ef594a65946765837764/aa57b9d7c4fe 3e94cd2dc8

Fold-close the task card before merge

ci / test-pg (pull_request) Skipped

Details

ci / svc-realcombo (pull_request) Skipped

Details

ci / test (pull_request) Successful in 7m45s

Details

e31cc34e6e

Why: close the task card inside its own PR so landing it needs no post-merge backfill or separate close PR.
Evidence: .task/feature-project-access-lifecycle-u3-member-history.md -> .task/archive/feature-project-access-lifecycle-u3-member-history.md; status 已完成（合入前闭合）; PR #646 https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/646.
Impact: task metadata only; the card is archived within PR #646 and lands with its merge commit.
Refs: task.sh close --self

weichen merged commit bef2510ddc into feature/project-access-lifecycle

2026-10-20 05:14:29 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: weichen/Agent-System-Dev#646