Date: 2026-08-20

Status: In progress; Gates 0–5 complete, Gate 6 application controls locally verified

Status: In progress; Gates 0–5 and 7 complete, Gate 6 application controls locally verified

## Outcome

**Exit criteria:** An owner or repository path can never read or mutate a row

owned by another repository, and PostgreSQL enforces the boundary.

### Gate 7 implementation status

Completed on 2026-08-20:

- Added a canonical repository entity with stable UUID, normalized owner/name,

  visibility, default branch, and active role-bearing memberships. Public

  lookup now excludes private repositories, and writes require owner,

  maintainer, or contributor membership.

- Added repository foreign keys throughout issues, labels, milestones,

  comments, projects, project items, issue-label relationships, and

  issue-assignee relationships. Issue and milestone numbers are unique within

  a repository rather than across the application.

- Scoped route-facing controller and LiveView queries by repository in the same

  database lookup. Cross-repository identifiers now fail closed, and composite

  database constraints enforce the same issue-label, issue-assignee,

  issue-comment, issue-milestone, project-owner, and project-item boundaries.

- Replaced the empty assignee endpoint and arbitrary-login mutation with the

  active repository membership set. Fixed every project action that previously

  ignored the username segment, including create ownership.

- Added a reversible migration that backfills the existing rows into the

  explicit `OpenAgentsInc/openagents.com` repository and preserves legacy

  label, assignee, milestone, comment-author, project-owner, and project-item

  relationships. Rehearsed the migration down/up against a populated

  disposable test database, validated each relationship, then repeated the

  down/up cycle and reset the test database.

- Added multi-repository isolation, private-read, membership, controller,

  project-path, and composite-constraint tests while retaining the established

  Issues and Projects behavior coverage.

- Exact implementation commit

  `8db39fe3fe3ce9a338117c0e96521a00c09b146a` passed the owned baseline without

  retries in 81 seconds: 1,283 default Elixir tests, all 9 distributed tests,

  17 browser tests, 83.44% merged coverage, and the packaged production release

  startup against a disposable PostgreSQL database. See the

  [Gate 7 evidence](evidence/gate-7/8db39fe3fe3ce9a338117c0e96521a00c09b146a/README.md).

Gate 7 is complete. No staging or production environment was changed.

## Gate 8: Harden chat, memory, work, machines, and voice

### Chat and provider lifecycle

# Gate 7 repository-boundary evidence

Date: 2026-08-20

Implementation SHA: `8db39fe3fe3ce9a338117c0e96521a00c09b146a`

Gate 7 passed locally on the exact implementation commit. The evidence set is

content-free and contains no credentials, hostnames, database URLs, private

repository content, or staging data.

## Evidence

- `baseline-receipt.json` is the immutable result copied from the owned

  exact-SHA gate receipt. Precommit, merged coverage, all nine distributed

  tests, browser tests, and the packaged production release startup passed

  without retries.

- `migration-rehearsal.json` records the populated down/up rehearsal and the

  preserved repository relationships. The rehearsal was repeated before the

  disposable test database was reset.

The release startup used an explicitly acknowledged disposable PostgreSQL

database. No staging or production deployment occurred.

{

  "schema": "openagents.baseline-gate.v1",

  "git_sha": "8db39fe3fe3ce9a338117c0e96521a00c09b146a",

  "status": "passed",

  "started_at": "2026-08-20T08:45:01Z",

  "completed_at": "2026-08-20T08:46:22Z",

  "total_duration_seconds": 81,

  "automatic_retries": 0,

  "stages": {

    "precommit": {"status": "passed", "duration_seconds": 23},

    "coverage": {"status": "passed", "duration_seconds": 51},

    "release_smoke": {"status": "passed", "duration_seconds": 7}

  },

  "tests": {

    "javascript": 17,

    "default": 1283,

    "cluster": 9,

    "excluded_from_default": 9

  },

  "coverage_percent": 83.44

}

{

  "schema": "openagents.migration-rehearsal.v1",

  "git_sha": "8db39fe3fe3ce9a338117c0e96521a00c09b146a",

  "migration": "20260820082100_add_repository_tenant_scoping",

  "environment": "disposable_test_database",

  "status": "passed",

  "steps": [

    "rolled the migration down",

    "inserted representative pre-scope user, label, milestone, issue, comment, project, and project-item rows",

    "migrated up",

    "validated the backfilled repository and relationships",

    "rolled down and migrated up a second time",

    "reset the disposable test database"

  ],

  "validation": {

    "repository_id": "00000000-0000-4000-8000-000000000001",

    "issue_label_relationships": 1,

    "issue_assignee_relationships": 1,

    "milestone_link_preserved": true,

    "comment_author_preserved": true,

    "project_owner_preserved": true,

    "project_item_repository_preserved": true

  },

  "staging_changed": false,

  "production_changed": false

}