Why: refine the approved IAM scope into enforceable account, directory and recovery boundaries.
Evidence: SELF document checks and independent document reviews; business tests and CI are NOT_RUN.
Impact: proposed contract and implementation plan only; preserve the approved global plan and all runtime data.
Refs: Dev feature/iam-u3-account-directory-recovery; IAM r1 U3 and IAM-D/IAM-C
Why: prepare the U3 review amendment against the current documentation baseline.
Evidence: origin/main=2d35cd49c203820d24d7c38acead06d37793c1f1.
Impact: integrate upstream documentation without changing the approved U3 r1 text.
Refs: IAM U3 r1
Why: independent review found in-flight write, API-key admission, lock-order, and cross-instance cursor gaps in the U3 candidate.
Evidence: SELF source review of Backend 4053c4d against approved U3 r1; proposal records triggers, scope, and replay plan.
Impact: request stage-four and stage-five re-review before further affected implementation; no production action.
Refs: IAM U3 r1; Dev policy/delivery.md
Why: Delegated RDM renames currently lose the real operator before the Backend project write, leaving an account-disable race in the Backend database.
Evidence: Read-only source review identified both HTTP lifecycle and command rename paths; the proposed contract and validation plan are pending human stage 4-5 review.
Impact: Adds a narrow request-bound projection capability proposal and two-account final transaction plan. No product code, production state, or approval status changes.
Refs: Approved U3 r1 and A1-A4 amendment; Dev feature/iam-u3-account-directory-recovery task card.
Why: track preservation and merge of the approved U3 contract documents.
Evidence: SELF blob identity, diff check and ancestry checks recorded in the card.
Impact: task card only.
Refs: Dev PR #626; Documents c236d30, fb3a821, 5783940
Co-authored-by: Cursor <cursoragent@cursor.com>
Why: the card and PR description are one record.
Evidence: PR #115 created via the Gitea API.
Impact: task card only.
Refs: Documents PR #115
Co-authored-by: Cursor <cursoragent@cursor.com>
weichen
merged commit 933fe263da into main2026-10-19 02:17:29 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
feature/iam-u3-account-contract 任务卡
任务主记录：本文件随 PR 描述维护。
状态：已完成（合入前闭合）；owner：weichen。PR：待创建
基线与授权
feature/iam-u3-account-directory-recovery（Dev PR #626 已合入7716b28）c236d30r1、fb3a821A1–A4 修订、5783940委托投影真实操作者修订）只存在于该 worktree 的子模块元数据中，从未推送，也未进入 Documents main；本任务先把原分支推送到远端保全，再经 PR 合入 main。AGENT-EXECUTION.md，因此从 main 新建分支，由 worker 应用git merge-tree三方合并补丁并解决INDEX.md冲突；随后以merge -s ours并入原分支头3481253（树不变），使已批准 SHA 可从 main 到达。目标与非目标
docs/proposals/，docs/proposals/INDEX.md收录 U3 条目并写明当前事实状态。Agent 实施收据
结果与验证（完成后填写）
merged_at核对）。origin/feature/iam-u3-account-contract逐一相同；git diff --check通过；merge -s ours前后树相同；c236d30、fb3a821、5783940均为分支头祖先；Backendv0.5.0经git ls-remote核对指向2716b9e。