aios/capability-evidence/C4_SOURCE_PROVENANCE.md

C4 capability contract provenance

The C4 checkout has no aios_capability_contract.py, although active-runtime/app/aios_agent_task_protocol.py imports it at module scope. The read-only QA capture used for the missing source closure is:

• source: C:\\Users\\ImRuY\\.codex-restored\\work\\v2r2c5-release-20260926\\qa\\capability-contract.txt
• SHA256: c97c9f8a3cf199a9c0348da1212aa26d161aad8ddaed84db534e46f490f2422f
• 140 lines

The contract preserves separate task and worker alias maps, maps unknown task names to exact:<token>, ignores unknown worker names, and returns false for unknown or mismatched eligibility. It is used by formal AgentTask poll and claim paths only. Generic task_plane matching remains outside this lane.

The authoritative runtime overlay is captured separately by QA:

• base SHA256: 953de1d491b4f1bc47c71f502027fd488e6c48ecc49da8a91dc9d8754c320d17
• overlay SHA256: 7555aa067fc01c6a25276a834dda4924b404f3b0c529ed3f99e9f1d83d18798e

The consolidated module preserves the base mappings and adds only the seven explicit lifecycle labels: agent-task:control, governed.task.create, governed.write.files, task.principal.issue, testing, verification, and writer.lease. It does not depend on an absolute deployed path.

Validation logs:

• PYTHONPATH=active-runtime/app python -m pytest -q tests/test_v2r2c5_capability_contract.py -> 6 passed.
• PYTHONPATH=active-runtime/app;active-runtime python -m pytest -q tests/test_task_admission_bootstrap.py tests/test_task_admission_bootstrap_chain_contract.py -> 45 passed.
• tests/test_task_admission_bootstrap_http.py could not collect on Windows because the existing gitea_tag_publication.py imports unavailable fcntl; no capability assertion ran in that file.