aios/docs/autonomous-release/AGENT_DEPLOYMENT_INSTRUCTIONS.md

AIOS Autonomous Release Agent Deployment Instructions

Objective

Deploy only candidate/shadow environments first. Production activation requires a separate owner release approval.

Agent execution order

1. Verify git references:

   • local
   • authoritative bare
   • remote
   • Gitea API

2. Build candidate artifact.

3. Run:

   • unit tests
   • security scans
   • secret scans
   • artifact verification

4. Start candidate workers:

   • OpenClaw native adapter
   • Codex native adapter
   • dedicated writer

5. Execute shadow task:

TaskPlan
 -> Planner
 -> Worker Router
 -> Session lifecycle
 -> Evidence chain
 -> Artifact verification
 -> ReleasePlan

Hard restrictions

Never:

• write main directly
• force push
• rewrite tags
• export secrets
• bypass owner approval
• modify production flags during candidate validation

Production release gate

Require:

owner_approval=true
artifact_verified=true
evidence_closure=true
rollback_ready=true
remote_tag_verified=true
baseline_verified=true
registry_verified=true

Until then keep:

AIOS_GITOPS_WRITES_ENABLED=false
AIOS_TASK_PLANE_EXECUTION_ENABLED=false
AIOS_SILENT_RELEASE_EXECUTION_ENABLED=false