Date: 2026-08-20

Status: In progress; Gates 0–5 and 7 complete, Gate 6 application controls locally verified

Status: In progress; Gates 0–5 and 7–8 complete, Gate 6 application controls locally verified

## Outcome

**Exit criteria:** Every asynchronous subsystem has tested interruption,

recovery, idempotency, ownership, and bounded-failure behavior.

### Gate 8 implementation status

Completed on 2026-08-20:

- Added the asynchronous recovery contract before the new recovery tests. The

  contract defines durable authority, generation fencing, permitted resume

  behavior, honest terminal failure, idempotency, and resource bounds for text,

  voice, work, and semantic derivatives.

- Added direct supervised-process tests for `TurnRecovery`, `VoiceRecovery`,

  `WorkRecovery`, and `SemanticWorker`. The tests cover a killed streaming turn,

  an admitted voice generation, live and orphaned work singletons, provider and

  drain failure, worker death, expired-lease reclamation, and stale-result

  fencing without fixed sleeps as the correctness mechanism.

- Made provider mutation retries operation-specific. OpenAI response creation

  and Realtime call creation now send one `POST` attempt, with direct adapter

  tests that fail if the request repeats.

- Added an accumulated assistant-message limit and a database hard ceiling for

  every message. Recovery now records the bounded `runtime_restarted` error

  code across the complete text-turn evidence chain.

- Added bounded semantic-provider execution, reclaimable leases, attempt

  fencing, and worker-level exception containment. Added composite database

  constraints that prevent semantic jobs or embeddings from crossing their

  source conversation.

- Bound every machine delegation to its account-owned machine, immutable

  admission-time authority, immutable execution request, and bounded budget.

  Only the generation-fenced ACP session checkpoint may change after

  admission. The worker reads machine, agent, working directory, and wall-clock

  authority from those fields.

- Rehearsed the Gate 8 migration forward, backward, and forward again on a

  populated disposable database. The rehearsal preserved the legacy job,

  rebuilt its machine, authority, and budget binding, admitted the session

  checkpoint, and refused an execution-identity rewrite.

- Exact implementation commit

  `6a812a22e9942f88b2593dc0d7b18fba13cabc53` passed the owned baseline without

  retries in 80 seconds: 1,295 default Elixir tests, all 9 distributed tests, 17

  browser tests, 83.59% merged coverage, and the packaged production release

  startup against a disposable PostgreSQL database. See the

  [Gate 8 evidence](evidence/gate-8/6a812a22e9942f88b2593dc0d7b18fba13cabc53/README.md).

Gate 8 is complete. Run only harmless delegated jobs against disposable

repositories and machines when Gates 14 and 15 execute this coverage in

staging. No staging or production environment was changed.

## Gate 9: Harden the forge build lane

Do not enable staging hot loading while the current v0 build and load protocol

# Gate 8 asynchronous-runtime evidence

Date: 2026-08-20

Implementation SHA: `6a812a22e9942f88b2593dc0d7b18fba13cabc53`

Gate 8 passed locally on the exact implementation commit. The evidence set is

content-free and contains no credentials, hostnames, database URLs, private

repository content, conversation content, or staging data.

## Evidence

- `baseline-receipt.json` is the immutable result copied from the owned

  exact-SHA gate receipt. Precommit, merged coverage, all nine distributed

  tests, browser tests, and the packaged production release startup passed

  without retries.

- `migration-rehearsal.json` records a populated forward, reverse, and second

  forward migration rehearsal. It verifies the legacy delegation backfill,

  immutable execution identity, the permitted fenced session checkpoint, and

  data preservation across rollback.

- The direct recovery tests kill or interrupt the real text-turn, semantic, and

  delegated-work processes. They start the recovery workers under supervision

  and assert the durable terminal or reclaimed state. The voice test starts the

  real startup recovery worker over an admitted generation.

The release startup and migration rehearsal used disposable PostgreSQL

databases. The migration-rehearsal database was dropped after verification. No

staging or production deployment occurred.

{

  "schema": "openagents.baseline-gate.v1",

  "git_sha": "6a812a22e9942f88b2593dc0d7b18fba13cabc53",

  "status": "passed",

  "started_at": "2026-08-20T09:09:19Z",

  "completed_at": "2026-08-20T09:10:39Z",

  "total_duration_seconds": 80,

  "automatic_retries": 0,

  "stages": {

    "precommit": {"status": "passed", "duration_seconds": 21},

    "coverage": {"status": "passed", "duration_seconds": 50},

    "release_smoke": {"status": "passed", "duration_seconds": 9}

  },

  "tests": {

    "javascript": 17,

    "default": 1295,

    "cluster": 9,

    "excluded_from_default": 9

  },

  "coverage_percent": 83.59

}

{

  "schema": "openagents.migration-rehearsal.v1",

  "git_sha": "6a812a22e9942f88b2593dc0d7b18fba13cabc53",

  "status": "passed",

  "migration": "20260820085203_harden_async_runtime_boundaries",

  "starting_version": 20260820082100,

  "fixture_counts": {

    "users": 1,

    "visitors": 1,

    "conversations": 1,

    "machines": 1,

    "legacy_delegation_jobs": 1

  },

  "checks": {

    "forward_backfill": "passed",

    "machine_authority_and_budget_binding": "passed",

    "fenced_session_checkpoint_update": "passed",

    "execution_identity_rewrite_refusal": "passed",

    "reverse_data_preservation": "passed",

    "second_forward_backfill": "passed"

  },

  "automatic_retries_in_successful_run": 0,

  "database_class": "disposable",

  "database_removed_after_run": true

}

    assert view |> element("#chat_message") |> render() =~

             ~r/<textarea[^>]*id="chat_message"[^>]*>\s*<\/textarea>/

    assert eventually(fn ->

             html = render(view)

             html =~ "You said: The draft must not remain after send." and

               not (html =~ ~s(id="cancel-turn"))

           end)

  end

  test "the sidebar leads with Computers immediately above Memory", %{conn: conn} do

    |> form("#message-form", chat: %{message: "Toolbar please."})

    |> render_submit()

    assert eventually(fn -> render(view) =~ "Toolbar please." end)

    assert eventually(fn ->

             html = render(view)

             html =~ "You said: Toolbar please." and not (html =~ ~s(id="cancel-turn"))

           end)

    # Copy actions are icon-only, so the accessible name lives on the control.

    assert has_element?(