Skip to content

Expose durable handoff contracts and separate private consultations - #2210

Merged
zy95-12 merged 17 commits into
delivery/ai-centric-development-servicefrom
feat/2175-collaboration-contracts
Nov 3, 2026
Merged

zy95-12 merged 17 commits into
delivery/ai-centric-development-servicefrom
feat/2175-collaboration-contracts

Conversation

@zy95-12

@zy95-12 zy95-12 commented Nov 2, 2026 •

Copy link
Copy Markdown
Collaborator

Written-by: Codex

Latest composition at 36210b9: Merged current #2184 execution/governance into the original branch. Current composition: 123 targeted tests + core lint passed; current full verify NOT rerun. Added red/green regression for role retirement during source-exit inspection, revalidating the committed target before claiming. Original consultation/handoff semantics, pinned role context and shared exit proof are preserved. Prior full-check counts below belong to their explicitly named older heads, not this updated tip. Still Draft; composed Task/state/API acceptance remains in progress. No deployment, merge or independent Review.

Expose scoped handoff get/list views over the original Task collaboration history, with acceptance receipts, source/target context references, actual worker binding, initiative fences and predecessor/successor links. Trusted offer/accept ports reuse existing pools; replay cannot reactivate completed execution. A Chief reroute cannot bypass an earlier writer whose exit remains unknown.

Ordinary consultation is a separate private protocol with native/v1 ask/get/list/reply APIs. Keep legacy conversation-handoff records and Chief-question alias readable. Chief first contacts the initiating user's active personal agent; safe answers remain private until user publication, while watch replies use current original delegation and Task inbox/Effects. Notifications run after commit, cancel ended questions and defer busy native watches. External agents have isolated mailboxes without a native personal Bot or invented provider transport.

Refs #2175; stacked on #2208. Architecture/subsystem docs, long-term project memory, changelog and canonical source mirrors included. This Draft keeps native Task-role restoration and real long-task/provider acceptance on #2184/#2177; transactional storage #2182, public events/provenance #2185 and role governance #2171 remain integration dependencies. Do not close these issues from the scoped foundation.

Validation at439a41c0ede34f4be08b96bac0500c7c71d6d298:

  • Full TZ=UTC npm run verify passed4,537 tests, zero failures/skips, including four actual DSH runtime checks with deterministic inference. Test child drops DAC override/read-search capabilities for existing root permission assertions.
    -168 selected tests passed under coverage. Includes actual channel HTTP safe/watch/private-scope checks, lost accept-response replay, source-exit fence, legacy queries, no Task creation for ordinary questions, postcommit notification and busy/cancel cases. Initial pool/consultation tests failed on missing APIs at the parent.
  • New consultation module100% lines/functions,91.22% branches. Existing pool module91.01% lines,84.63% branches,93% functions in measured suites; some old Effects rollback/result-error/recovery paths are outside this selected measurement. No100% branch claim.
  • Multi-pass pairing self-review cleared for this diff; independent Reviewer verdict not run.

Not run: new real Codex/Claude task, official grok/dots provider integration, browser/deployment or frontend changes. Safe/external mailboxes require their clients; send/dispatch is not a read/handling receipt. Generic public input provenance is completed with #2185. README/API rewrite remains last in #2189.

Keep Chief proposals separate from Maintainer and Owner approval. Preserve retired role context and room history without reassigning existing Tasks or inferring worker exit.
Keep exact latest Task-role native bindings and context parts, refuse unknown exit and missing handles, and use committed role catalogs when pinning execution rights. Preserve original Workflow lifecycle and legacy DAG workspace behavior.
Keep logical identity separate from artifact responsibility and SDK read-only policy. Preserve retired active claims while blocking new work until Chief selects an active target.
Preserve structured handoff identity through native delivery and restore archived context only after committed activation. Guard the actual DSH single-resource return path and keep historical implementation evidence outside the bounded active policy.

zy95-12 commented Nov 3, 2026

Copy link
Copy Markdown
Collaborator Author

Written-by: Codex

Merged current #2184 execution/governance into the original branch. Current composition: 123 targeted tests + core lint passed; current full verify NOT rerun. Added red/green regression for role retirement during source-exit inspection, revalidating the committed target before claiming. Original consultation/handoff semantics, pinned role context and shared exit proof are preserved.

Current head: 36210b9. Remaining composed-stack validation stays tracked under the original issue/PR. No main merge/deployment/control-plane/frontend changes.

Base automatically changed from feat/2184-execution-lifecycle to delivery/ai-centric-development-service November 3, 2026 09:11
Based on 36210b9; delivery equals preceding integrated tree. Historical checkpoint archive backported where needed; policy cap and all rules retained. Stage-only integration authorized by Owner. Residual scope: #2292.

zy95-12 commented Nov 3, 2026

Copy link
Copy Markdown
Collaborator Author

阶段集成时确认原 SHA 36210b9 的 CI 并非全绿:规则文档组装超出 384000 字节预算。现将最终版本中已有的历史 checkpoint 原文归档提前带入,完整保留六段历史内容与全部当前规则,不提高容量上限、不删测试、不截断上下文。当前 d9318bf 同步 delivery 祖先并带此文档修复,重新验证规则预算。Owner 授权此次仅阶段合入 delivery,正式签名 Reviewer 门禁留待正式合入;不伪造 PASS、不声称 enqueue-guard 通过。#2175 阶段归档,实际功能缺口与真实运行验收转 #2292。不发布、不部署。

@zy95-12
zy95-12 marked this pull request as ready for review November 3, 2026 09:13
Based on 36210b9; delivery equals preceding integrated tree. Historical checkpoint archive backported where needed; policy cap and all rules retained. Stage-only integration authorized by Owner. Residual scope: #2292.

zy95-12 commented Nov 3, 2026

Copy link
Copy Markdown
Collaborator Author

修复验证更新:仅归档 M7 checkpoint 后预算仍超限,因此也提前带入 #2225 中已有的 S1–S6 历史原文归档。当前 SHA 3014b90c04f2cb090fb0090ef266e4e00d1dece7 的 TZ=UTC node --test core/test/project-role-policy.test.js 已 6/6 通过,包括此前 CI 失败的完整规则预算测试。384000 上限、规则来源集合和测试断言均未变。新 SHA CI 由 GitHub 独立运行;本次阶段集成依据已通过的本地相关测试及已验证最终组合版本。历史失败保留,不声称原 SHA CI 通过。

@zy95-12
zy95-12 merged commit 5b63d50 into delivery/ai-centric-development-service Nov 3, 2026
3 of 5 checks passed
@zy95-12
zy95-12 deleted the feat/2175-collaboration-contracts branch November 3, 2026 09:14
zy95-12 added a commit that referenced this pull request Nov 3, 2026
…mmaries (#2225)

Written-by: Codex

Latest composition at c16a25e: Merged current #2175/#2184 into the
original branch. Current composition: 130 initial targeted tests; after
integration fixes,33 policy-budget/harness checks, core lint and actual
DSH native return probe pass. Current full verify NOT rerun. Actual
runtime reproduced logical Bot vs physical worker conflation in input
budget fencing; regression/fix retained. Complete mandatory rules remain
under the unchanged384k cap after completed service narratives are
archived verbatim behind active memory links. No instruction source
removal or silent truncation. Prior full-check counts below belong to
their explicitly named older heads, not this updated tip. Still Draft;
composed Task/state/API acceptance remains in progress. No deployment,
merge or independent Review.

Refs #2177; stacked on #2210. Current head:
4101275.

Bound Project/Chief/Task-role context through model/Harness budgets,
full-input checks and scoped source pages with hashes/cursors. Reuse
existing memory, archives, participation and Task-role Session records
for relevant retrieval, versioned working summaries, bounded history
views and unverified execution experience. Failed consolidation
preserves the last valid summary; model experience cannot overwrite
human-controlled facts or role policy. Structured native handoff input
is JSON and passes current claim/resource/input-authority checks. Codex
has a host-selected tool history output cap while SDK compaction
defaults remain runtime-managed.

Sequential native Chief intake testing in dependent #2179 exposed a real
stale-context problem: changing Bot system-prompt metadata did not
guarantee an already resident Session received current job facts. This
PR now delivers the current protocol and scoped facts in the actual turn
input, checks its complete budget, revalidates actor/delegation before
dispatch, and restores only its own prompt metadata. The same resident
Session remains in use. A baseline-red/two-job regression protects this
behavior; no fresh Session hides the failure.

Validation at current head: full `TZ=UTC npm run verify` passed **4560
tests, 0 failures, 0 skips**, including four actual DSH runtime checks
with deterministic inference. Agent suite43/43. Before the native
follow-up, selected context/delivery/pool/Harness suites176/176 and the
four unchanged context modules measured100% line coverage,
branch73.47–91.54%; not complete branch coverage. Updated
architecture/subsystem docs, PROJECT/ROADMAP/LESSONS, changelog and
generated patches.

Separately, actual Codex gpt-6.1-sol validation used the existing
operator profile and runtime source
a9ff63b: two fresh workers fixed
fixture code, passed independent host tests, resumed the identical
backend Session after a changed caller prompt, read their own work
summary and recovered a conversation-only marker absent from repository
files. Both confirmed stop/exit before release;9 checks passed. That
proof names its source revision; it is not a new current-head full
Chief/pool workflow, observed SDK compaction event, actual
provider-window measurement or native Task-role physical restoration.

Remaining acceptance: native physical restoration #2184, storage
normalization #2182, public protocol integration #2185 and full
task-flow acceptance in #2179. Unknown capacity remains explicit. No
production deploy/restart, control-plane/UI edits or frontend task
interruption. Draft; author self-review is not an independent Reviewer
PASS. README rewrite remains last in #2189.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

risk:T3 Risk tier T3 (needs a human approval), set by the controller from the diff

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant