aios/aios

Files

T

openclaw 8410cd895e reconcile: merge V1R4C6 release candidate into main

V1R4C6 merge candidate (squashed).
Contains 10 files, ~1440 lines added across:
- docs/releases/ (6 files: checklist, evidence, blocker, resume, merge-matrix, gate-status)
- ops/openclaw/ (2 files: integrate-deploy-verify, run-to-owner-gate-wechat)
- patches/ (1 file: branch patch)
- versions/ (1 file: V1R4C6.json)

Task: admin workbench, SR-03 Search Gateway, Agent Platform Integration
Baseline: V1R4C5
V1R4C5 tag semantics:
- tag refs/tags/V1R4C5 target d457ac3: immutable release snapshot
- baseline git a32c76a: runtime baseline promotion commit
No tag creation, baseline promotion, or memory search activation in this merge.

2026-07-11 16:34:03 +08:00

3.5 KiB

Raw Blame History

V1R4C6 Acceptance Checklist

Date: 2026-07-11

Base baseline: V1R4C5

Promotion blocked until every mandatory gate is green.

Global Preflight

getRuntimeStatus.status == active
getBaseline.current_baseline == V1R4C5
getBaseline.git == a32c76a3c1baa49562e53fb8adce10a5ed0e6704
AIOS_GITOPS_BARE_REPO points to /data/aios-gitops/runtime/gitea-bin/data/repositories/aios/aios.git
Gitea consistency sentinel reports healthy
AIOS_MEMORY_ENABLED=false
no force-push used

Gate A — Admin Workbench / Portal AIOS

Route/API

/portal/me/aios/manifest returns authenticated module manifest
/portal/me/aios/dashboard returns admin-authorized dashboard data
/portal/me/aios/health returns system health data
failed/empty backend data produces explicit empty/error state

UI

admin sees task progress
admin sees process/flow diagram entry
admin sees system health
admin sees authorized agent observability
user does not see admin-only modules
admin does not see owner-only modules without owner role

Isolation

no cross-user data
no cross-project data
no cross-session data
no cross-tenant/group data

Gate A result: PASS / FAIL / DEFER

Gate B — SR-03 Search Gateway

Provider Binding

real provider configured and reachable
provider errors return safe non-memory fallback
timeout/retry/circuit-breaker behavior verified

Scope and Provenance

scope filter occurs before ranking
provenance returned for accepted results
denied/out-of-scope content never reaches ranking or summary
global memory/vector index disabled
memory search remains disabled

Audit

search request scope is logged without leaking content
provider/fallback decision is auditable
denied scope mismatch is auditable

Gate B result: PASS / FAIL / DEFER

Gate C — Agent Platform

Event Bus

event envelope includes tenant/group, user, project, session and agent scope
cross-scope subscribers cannot receive events
failed delivery is observable and retry-bounded

GPT Message Plane

message envelope includes scope and provenance
messages cannot cross user/project/session boundaries
denied messages do not forward content

Controller Dispatch

dispatch stops when autonomous safe mode is active
consequential actions require owner gate
duplicate dispatch is idempotent or rejected
stuck state cleanup remains green

Observability

admin can see platform status without unrestricted content access
failures and queue state are visible

Gate C result: PASS / FAIL / DEFER

Combined Runtime Acceptance

Run after integration and deployment:

getRuntimeStatus
getBaseline
createBranch
createPatch

Expected before promotion:

runtime = active
baseline = V1R4C5
write branch = committed + synced
write patch = committed + synced

Rollback Validation

Group A can disable workbench routes/menu entries
Group B can disable provider binding and use safe non-memory fallback
Group C can disable expanded dispatch
all rollback modes preserve AIOS_MEMORY_ENABLED=false

Release Decision

V1R4C6 is tag-ready only when:

Global preflight PASS
AND Gate A PASS
AND Gate B PASS
AND Gate C PASS
AND combined runtime acceptance PASS

Any failed mandatory gate blocks tag, deployment promotion, and baseline promotion.

3.5 KiB Raw Blame History