Consolidate final V2R2C5 capabilities and preserve C6 mainline #89

2026-10-01T23:13:08+08:00

2026-10-01 23:13:08 +08:00

Selective governed integration of the six final C5 capability groups. Production runtime, tag, artifact, registry and baseline are unchanged. Exact tree passed Linux regression: 2698 tests and 157 subtests; 5 documented opt-in/platform skips. Eight required checks passed. Secret scan retained 10 raw findings, independently adjudicated by exact public-source hashes; no unreviewed or actual secret finding. Source Task SUCCEEDED with result/control verification. Historical branch audits retained.

aios-autonomy-agent added 65 commits 2026-10-01 23:13:08 +08:00

v2r2c4 S1 successor: land autonomous resume controller/adapter/integration + tests + hardened protocol e5f8209f57

fix(task-plane): fail closed on unverified evidence and actions 9e7024ba63

fix(task-plane): require verifiers for evidence proofs 440f1aedc9

test(task-plane): inject authenticated evidence fixtures 58987681fe

Restore formal AgentTask capability contract 30f501c77e

Enforce formal AgentTask capability contract 7cc1730025

test(task-plane): prove unverifiable completion is atomic 536a2af0f0

feat(task-admission): consume owner epoch v2 dbefdcda07

Add governed unattended release runner ab149d0a57

Validate durable release candidate readback e43209ebdd

fix(task-admission): align epoch v2 producer enums b5c27fec1d

Add governed source publication policy lifecycle d2ad00139d

Fail closed on unattended authority boundaries fb8a0f3e47

Tighten source publication admission bindings 6c1dcb829a

feat(c6): add governed automation and verifiable component contracts cd0a90bc37

docs(c6): record integration validation and remaining release gates 64eed3b119

Integrate governed unattended release with isolated signed admission proof 4a5e3cbfec

feat(c5): bind source policy to epoch provenance 7837f67119

Add governed publication transport adapter 5d0f9970f6

Add registered Owner signer adapter 4c17ce3c98

Harden registered Owner signer boundary 41df96a46a

build(c5): generate hash-bound live epoch overlay 3609f45d69

Bind exact C5 source admission to live verified runtime overlays 7a64e326c2

Prepare exact C5 authority and preserve governed publication evidence 8f3bd0d11f

Add independently verified bounded C5 staging installation db18ca306d

feat(c5): add governed principal scope enrollment overlay c24ed5ee8e

Bind principal activation and preserve raw publication receipts f9253dd28b

build(c5): add deterministic staging artifact packager 7022801a2d

fix(c5): make overlay verification portable 3bd736db7f

Add C5 principal issuer installation target 7e0acaae4c

Require issuer loaded-module readiness proof e55392184d

fix(c5): align issuer source health fields 3b1c3a1b60

Compose exact live C5 governed publication controller eff070bc37

Bind C5 principal config to admission store 757de6b8ed

Align C5 principal paths with live admission state 1227714ce3

fix(c5): canonicalize enrollment job identity a887646377

Normalize authoritative publication job identity 4e66d483e4

fix(c5): package effective issuer entrypoint 8fd457f8f5

Bind staging artifacts to exact dual-target installer contracts 6582e8a5e1

fix(c5): preserve effective principal lineage 7ffe99a0b5

Keep installer replay state beneath root-owned boundary 581e2d3c0c

fix(c5): preserve issuer helper ABI 084fbc9930

Reconcile unknown C5 staging installations a96901ce52

Add typed rollback for applied C5 staging installs 83c41c8f2e

Require governed write readiness in C5 staging artifact b707f8a05f

fix(c5): preserve legacy storage activation scope 7dbe51de39

Submit governed source publication task result 3e432fe42c

Fix governed writer preflight binding contract 3b36619487

Keep redaction fixture while passing governed content scan 2af1dfbc40

V2R2C5 governed source publication b915386ccb

merge(c6): incorporate reviewed C5 automation baseline 2af1dfb d54f832668

feat(c6): integrate standing release authority and resumable task projections faf6eb2289

feat(release): derive renewable execution credentials from standing authorization 7b0d387221

fix(release): reject concurrent reentry of live capability claims a6851c0a7e

feat(governed): add production.* capability family to canonical contract (C5 v17) 396ea98111

Add production.plan.apply/promote/rollback to _EXACT_LIFECYCLE_CAPABILITIES so
the canonical fail-closed contract self-maps them into _TASK_ALIASES and
_WORKER_ALIASES, recognizing the C5 production promotion capability family.

This closes CONTRACT_GAP_IN_ACTIVE_TASK_API_V16 at the canonical single source
(deployed-v16-overlay vs authoritative-repo-canonical convergence). No wildcard,
no implicit privilege, no change to fail-closed/unknown semantics, no change to
has_capabilities subset logic.

Tests: extend tests/test_v2r2c5_capability_contract.py with C5 production.* cases
(required/worker normalization recognized, full-17 has_capabilities==True,
unknown fail-closed, wildcard rejected, missing production denied).

Canonical contract SHA256: 67d8a3a296110e20a4ea59863cd7982b6bdada71abd457c0f7cec480b06d278a

merge(c6): integrate original candidate on provisional C5 capability v17 e87c70778a

First parent: provisional C5 396ea98111 (not production accepted). Second parent: immutable original C6 a6851c0a7e.

Preserve C5 production.plan.apply, production.promote and production.rollback in the formal capability vocabulary and full17 fail-closed tests. Preserve C6 vocabulary digest negotiation, evidence verifier configuration and identity-aware recovery tests. No production publication or authorization is implied.

feat(c6): bind host authority and exact durable patch execution 5d821096ce

test(c6): await real HTTP readiness before authorization assertion d841948c21

Publish exact C5 issuer V3 bootstrap source 5f65e45895

merge(c6): apply autonomy patch on accepted V2R2C5 034a07a05e

test(c6): pin inherited C5 fixture file modes 765f337b82

fix(c6): enforce exclusive credential expiry and verify release gaps 30fff31145

merge(c6): land accepted-C5 autonomy and authorization patch 83b77a53d2

docs(c6): record main publication and Linux authorization acceptance e33664f033

Publish exact C5 issuer V3 bootstrap source

autonomy-smoke-tests Exact governed tree; evidence 7dbba7ff168e72af

autonomy-unit-tests Exact governed tree; evidence 7dbba7ff168e72af

campaign-approval-gate Exact governed tree; evidence 7dbba7ff168e72af