Agent-System-Dev

Files

T

weichen c170939bb7 Implement the U1 identity manifest layer with startup verification and tests

Why: approved design (2026-10-12) - persistent manifest becomes the startup authority, closing the param-rebuild drift, non-atomic per-key writes, and missing-config-creates-empty-system recovery gaps (plan r2 U1 / KTD1-KTD2).

Evidence: SELF - python3 tests/test_svc_identity.py 21 tests OK (1 skip = real-PG identity NOT_RUN by design); make test-governance 169 OK incl. existing svc db-binding and autorecover suites; receipts appended via make evidence.

Impact: scripts/svc.sh gains manifest-aware set/del/record_state/autostart plus lock-held migrate, pre-launch identity verify and an init action; new scripts/svc_manifest.py (atomic temp-fsync-rename, identity anchors, derived svc.env); unmigrated instances keep the exact legacy path (regressions green).

Refs: docs/recovery/u1-identity-manifest.md; plan r2 section 7 U1

2026-10-12 02:50:32 +00:00

test_ci_credentials.py

Lock CI checkout credential scope to the injected server and allowlist

2026-10-05 13:45:58 +00:00

test_evidence.py

Close review gaps in cleanup and evidence handling

2026-10-05 13:07:10 +00:00

test_svc_identity.py

Implement the U1 identity manifest layer with startup verification and tests

2026-10-12 02:50:32 +00:00

test_svc_precheck.py

Merge origin/main: supersede the PR #317 minimal fix with the unified resolver