feat(agent-fleet): add crash-safe Bridge account cutover

[ruby-dlee]

Intent

Deliver a production-ready Bridge cutover in the ruby-dlee FirstMate fork that eliminates provider-session mapping failures and account ejection risk. Preserve the exact topology of six isolated routed workers: claude-1, claude-2, and codex-1 through codex-4; keep claude-3 and codex-5 disabled, desktop_shared, manual-only, unprovisioned, unprobed, unrouted, and excluded from capacity, with no claude-captain or Desktop-login dependency. Keep the adapter as sole Herdr lifecycle owner with verified detached startup, fail-closed managed-session mapping, exact-account passwd-derived Quota attribution, transactional credential recovery, rollback, and crash-safe sealed runtime build/adoption. Pin immutable Quota AXI 0.1.7 and Agent Fleet 0.2.0 provenance, reject mutable or legacy production inputs, preserve existing 45-minute CI behavior coverage, and keep the live checkout, Desktop apps, provider auth, routing, and canaries untouched until this PR is merged, merged-code labs pass, and the Captain explicitly declares a quiet point. Ship through a PR with CI green; the Captain has authorized unattended no-mistakes fixes and merge after validation.

What Changed

• Import Agent Fleet 0.2.0 and integrate profile-aware routing, leasing, exact provider-session recovery, identity isolation, quota selection, and transactional credential maintenance into Firstmate dispatch.
• Harden managed Herdr launches with adapter-owned detached lifecycle handling, sanitized worker shells, process-bound configuration certificates, and fail-closed restart recovery.
• Add sealed Agent Fleet and Quota AXI build, adoption, rollback, and cutover tooling for the six-worker Bridge topology, including pinned release provenance, reserve-account exclusions, documentation, and regression coverage.

Risk Assessment

🚨 High: Captain, the branch still violates immutable Quota provenance and reserve-isolation requirements, while two recovery races can make sealed publication destructive or non-idempotent after a crash.

Testing

The successful full baseline was supplemented by focused bootstrap, routing, Herdr lifecycle, session-mapping, exact-account Quota, reserve-isolation, and recovery tests plus a fresh end-to-end prepare/validate/rehearse run. All passed; evidence shows 52 adoption and 126 each forward/rollback crash boundaries, unchanged live fixture state, and cleaned rehearsal state. This is a CLI/control-plane change, so reviewer evidence is supplied as a transcript and generated JSON/TOML artifacts rather than screenshots.

Evidence: End-to-end CLI transcript

$ python3.11 /Users/dongkeun/.no-mistakes/worktrees/e7bc38af46e8/01KXVCKENS4XWPQEPXS1HC5YWX/tools/bridge-cutover/prepare_bridge_cutover.py --driver /Users/dongkeun/.no-mistakes/worktrees/e7bc38af46e8/01KXVCKENS4XWPQEPXS1HC5YWX/tools/bridge-cutover/bridge_cutover_transaction.py prepare /private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/prepare.json
{
  "adoption_manifest_fingerprint": "71258ae72aba32624b2e261fc7f0c0733acc4a6aafd7720b88189459a70741a7",
  "agent_fleet_contract_version": 2,
  "agent_fleet_version": "0.2.0",
  "bundle": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/output/bundle/bundle.json",
  "cutover_phase": "sealed-adoption-pending",
  "cutover_ready": false,
  "enabled": 0,
  "external_reserves": 2,
  "fleet_managed_workers": 6,
  "initial_registry_sha256": "12e9ccd9e365de674882c11bee69ba89d6aefb291ed043012f3af1bca8f48068",
  "manifest_fingerprint": "b9ecb860b429437ba6c7011c719806c88d91cc6b03b84e1c1556eea1ddbf6c09",
  "new_registry_sha256": "665fb7207f5e14c97559f22a9e970387b13271372b08f61a9accb4223b4abf29",
  "old_registry_sha256": "e9f6e80b7e3c5870356fc6f357cbf261480e71d5a97b066057c96762269f8bd4",
  "profiles": 8,
  "projects_per_provider": 1,
  "quota_binary": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/bin/quota-axi",
  "quota_node_binary": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/runtime/node",
  "rollback_contract_version": 1,
  "rollback_version": "0.1.5",
  "runtime_switch_ready": false,
  "transaction_id": "bridge-cutover-fixture",
  "valid": true,
  "worker_state_phase": "not-started",
  "worker_state_ready": false
}

[exit 0]

$ python3.11 /Users/dongkeun/.no-mistakes/worktrees/e7bc38af46e8/01KXVCKENS4XWPQEPXS1HC5YWX/tools/bridge-cutover/prepare_bridge_cutover.py --driver /Users/dongkeun/.no-mistakes/worktrees/e7bc38af46e8/01KXVCKENS4XWPQEPXS1HC5YWX/tools/bridge-cutover/bridge_cutover_transaction.py validate /private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/output/bundle/bundle.json
{
  "adoption_manifest_fingerprint": "71258ae72aba32624b2e261fc7f0c0733acc4a6aafd7720b88189459a70741a7",
  "agent_fleet_contract_version": 2,
  "agent_fleet_version": "0.2.0",
  "bundle": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/output/bundle/bundle.json",
  "cutover_phase": "sealed-adoption-pending",
  "cutover_ready": false,
  "enabled": 0,
  "external_reserves": 2,
  "fleet_managed_workers": 6,
  "initial_registry_sha256": "12e9ccd9e365de674882c11bee69ba89d6aefb291ed043012f3af1bca8f48068",
  "manifest_fingerprint": "b9ecb860b429437ba6c7011c719806c88d91cc6b03b84e1c1556eea1ddbf6c09",
  "new_registry_sha256": "665fb7207f5e14c97559f22a9e970387b13271372b08f61a9accb4223b4abf29",
  "old_registry_sha256": "e9f6e80b7e3c5870356fc6f357cbf261480e71d5a97b066057c96762269f8bd4",
  "profiles": 8,
  "projects_per_provider": 1,
  "quota_binary": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/bin/quota-axi",
  "quota_node_binary": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/runtime/node",
  "rollback_contract_version": 1,
  "rollback_version": "0.1.5",
  "runtime_switch_ready": false,
  "transaction_id": "bridge-cutover-fixture",
  "valid": true,
  "worker_state_phase": "not-started",
  "worker_state_ready": false
}

[exit 0]

$ python3.11 /Users/dongkeun/.no-mistakes/worktrees/e7bc38af46e8/01KXVCKENS4XWPQEPXS1HC5YWX/tools/bridge-cutover/prepare_bridge_cutover.py --driver /Users/dongkeun/.no-mistakes/worktrees/e7bc38af46e8/01KXVCKENS4XWPQEPXS1HC5YWX/tools/bridge-cutover/bridge_cutover_transaction.py rehearse /private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/output/bundle/bundle.json --scratch-root /private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/scratch
{
  "adoption_forward_boundaries": 52,
  "adoption_manifest_fingerprint": "71258ae72aba32624b2e261fc7f0c0733acc4a6aafd7720b88189459a70741a7",
  "adoption_recovery_refused_after_seal": true,
  "agent_fleet_contract_version": 2,
  "agent_fleet_version": "0.2.0",
  "bundle": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/output/bundle/bundle.json",
  "cutover_phase": "sealed-adoption-pending",
  "cutover_ready": false,
  "enabled": 0,
  "external_reserves": 2,
  "fixture_removed_on_return": true,
  "fleet_managed_workers": 6,
  "forward_boundaries": 126,
  "initial_registry_sha256": "12e9ccd9e365de674882c11bee69ba89d6aefb291ed043012f3af1bca8f48068",
  "manifest_fingerprint": "b9ecb860b429437ba6c7011c719806c88d91cc6b03b84e1c1556eea1ddbf6c09",
  "new_registry_sha256": "665fb7207f5e14c97559f22a9e970387b13271372b08f61a9accb4223b4abf29",
  "old_registry_sha256": "e9f6e80b7e3c5870356fc6f357cbf261480e71d5a97b066057c96762269f8bd4",
  "operations": 4,
  "profiles": 8,
  "projects_per_provider": 1,
  "quota_binary": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/bin/quota-axi",
  "quota_node_binary": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/runtime/node",
  "rehearsed": true,
  "rollback_boundaries": 126,
  "rollback_contract_version": 1,
  "rollback_refused_after_irreversible_boundary": true,
  "rollback_version": "0.1.5",
  "runtime_switch_ready": false,
  "transaction_id": "bridge-cutover-fixture",
  "valid": true,
  "worker_state_phase": "not-started",
  "worker_state_ready": false
}

[exit 0]

Evidence: Cutover acceptance summary

Agent Fleet 0.2.0 and Quota AXI 0.1.7; six routed workers; two untouched desktop_shared reserves; 52 adoption, 126 forward, and 126 rollback boundaries.

{
  "acceptance": {
    "candidate_registry_all_disabled": true,
    "candidate_versions": {
      "agent_fleet": "releases/0.2.0-new",
      "quota_axi": "releases/0.1.7-new"
    },
    "exact_routed_workers": [
      "claude-1",
      "claude-2",
      "codex-1",
      "codex-2",
      "codex-3",
      "codex-4"
    ],
    "generated_activation_commands": [],
    "live_fixture_unchanged": {
      "equal": true,
      "links_after": {
        "agent_fleet_current": "releases/0.1.5-unsealed",
        "operator_front_door": "../agent-fleet/current/bin/agent-fleet",
        "quota_axi_current": "releases/0.1.5-unsealed"
      },
      "links_before": {
        "agent_fleet_current": "releases/0.1.5-unsealed",
        "operator_front_door": "../agent-fleet/current/bin/agent-fleet",
        "quota_axi_current": "releases/0.1.5-unsealed"
      },
      "registry_bytes_equal": true
    },
    "provision_profiles": [
      "claude-1",
      "claude-2",
      "codex-1",
      "codex-2",
      "codex-3",
      "codex-4"
    ],
    "rehearsal_scratch_cleaned": true,
    "reserve_homes_untouched": {
      "after_exists": {
        "claude-3": false,
        "codex-5": false
      },
      "before_exists": {
        "claude-3": false,
        "codex-5": false
      },
      "untouched": true
    },
    "reserve_profiles": {
      "claude-3": {
        "enabled": false,
        "fleet_managed": false,
        "never_enroll": true,
        "pools": [
          "claude-manual"
        ],
        "provider": "claude",
        "safety_policy": "desktop_shared"
      },
      "codex-5": {
        "enabled": false,
        "fleet_managed": false,
        "never_enroll": true,
        "pools": [
          "codex-manual"
        ],
        "provider": "codex",
        "safety_policy": "desktop_shared"
      }
    }
  },
  "cli_results": {
    "prepare": {
      "adoption_manifest_fingerprint": "71258ae72aba32624b2e261fc7f0c0733acc4a6aafd7720b88189459a70741a7",
      "agent_fleet_contract_version": 2,
      "agent_fleet_version": "0.2.0",
      "bundle": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/output/bundle/bundle.json",
      "cutover_phase": "sealed-adoption-pending",
      "cutover_ready": false,
      "enabled": 0,
      "external_reserves": 2,
      "fleet_managed_workers": 6,
      "initial_registry_sha256": "12e9ccd9e365de674882c11bee69ba89d6aefb291ed043012f3af1bca8f48068",
      "manifest_fingerprint": "b9ecb860b429437ba6c7011c719806c88d91cc6b03b84e1c1556eea1ddbf6c09",
      "new_registry_sha256": "665fb7207f5e14c97559f22a9e970387b13271372b08f61a9accb4223b4abf29",
      "old_registry_sha256": "e9f6e80b7e3c5870356fc6f357cbf261480e71d5a97b066057c96762269f8bd4",
      "profiles": 8,
      "projects_per_provider": 1,
      "quota_binary": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/bin/quota-axi",
      "quota_node_binary": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/runtime/node",
      "rollback_contract_version": 1,
      "rollback_version": "0.1.5",
      "runtime_switch_ready": false,
      "transaction_id": "bridge-cutover-fixture",
      "valid": true,
      "worker_state_phase": "not-started",
      "worker_state_ready": false
    },
    "rehearse": {
      "adoption_forward_boundaries": 52,
      "adoption_manifest_fingerprint": "71258ae72aba32624b2e261fc7f0c0733acc4a6aafd7720b88189459a70741a7",
      "adoption_recovery_refused_after_seal": true,
      "agent_fleet_contract_version": 2,
      "agent_fleet_version": "0.2.0",
      "bundle": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/output/bundle/bundle.json",
      "cutover_phase": "sealed-adoption-pending",
      "cutover_ready": false,
      "enabled": 0,
      "external_reserves": 2,
      "fixture_removed_on_return": true,
      "fleet_managed_workers": 6,
      "forward_boundaries": 126,
      "initial_registry_sha256": "12e9ccd9e365de674882c11bee69ba89d6aefb291ed043012f3af1bca8f48068",
      "manifest_fingerprint": "b9ecb860b429437ba6c7011c719806c88d91cc6b03b84e1c1556eea1ddbf6c09",
      "new_registry_sha256": "665fb7207f5e14c97559f22a9e970387b13271372b08f61a9accb4223b4abf29",
      "old_registry_sha256": "e9f6e80b7e3c5870356fc6f357cbf261480e71d5a97b066057c96762269f8bd4",
      "operations": 4,
      "profiles": 8,
      "projects_per_provider": 1,
      "quota_binary": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/bin/quota-axi",
      "quota_node_binary": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/runtime/node",
      "rehearsed": true,
      "rollback_boundaries": 126,
      "rollback_contract_version": 1,
      "rollback_refused_after_irreversible_boundary": true,
      "rollback_version": "0.1.5",
      "runtime_switch_ready": false,
      "transaction_id": "bridge-cutover-fixture",
      "valid": true,
      "worker_state_phase": "not-started",
      "worker_state_ready": false
    },
    "validate": {
      "adoption_manifest_fingerprint": "71258ae72aba32624b2e261fc7f0c0733acc4a6aafd7720b88189459a70741a7",
      "agent_fleet_contract_version": 2,
      "agent_fleet_version": "0.2.0",
      "bundle": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/output/bundle/bundle.json",
      "cutover_phase": "sealed-adoption-pending",
      "cutover_ready": false,
      "enabled": 0,
      "external_reserves": 2,
      "fleet_managed_workers": 6,
      "initial_registry_sha256": "12e9ccd9e365de674882c11bee69ba89d6aefb291ed043012f3af1bca8f48068",
      "manifest_fingerprint": "b9ecb860b429437ba6c7011c719806c88d91cc6b03b84e1c1556eea1ddbf6c09",
      "new_registry_sha256": "665fb7207f5e14c97559f22a9e970387b13271372b08f61a9accb4223b4abf29",
      "old_registry_sha256": "e9f6e80b7e3c5870356fc6f357cbf261480e71d5a97b066057c96762269f8bd4",
      "profiles": 8,
      "projects_per_provider": 1,
      "quota_binary": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/bin/quota-axi",
      "quota_node_binary": "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/runtime/node",
      "rollback_contract_version": 1,
      "rollback_version": "0.1.5",
      "runtime_switch_ready": false,
      "transaction_id": "bridge-cutover-fixture",
      "valid": true,
      "worker_state_phase": "not-started",
      "worker_state_ready": false
    }
  },
  "evidence_schema": 1,
  "tested_commit": "680394944a7a992435fa306e0a817fe7eb696888",
  "workflow": "prepare -> validate -> exhaustive disposable rehearse"
}

Evidence: Generated disabled candidate registry

version = 1

[settings]
state_dir = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/fleet-state"
share_dir = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/fleet-share"
quota_binary = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/bin/quota-axi"
quota_binary_sha256 = "92e4ebe84ea3ee29e7dd60380e30f296b4416b2d3b95c3ae6db56caab6766b17"
quota_node_binary = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/quota-axi/releases/0.1.7-new/runtime/node"
quota_node_sha256 = "1be19ec61d73fa4f9b79da5272d88ab2c94763a6b5af5e80ff90df161e80d5cb"
quota_release_tree_sha256 = "2f45de35d4da4609e2a1eb059fd1299f96834acb762dcfbb163cacff5e1e9f4d"
quota_stale_seconds = 300
quota_verification_grace_seconds = 86400
lease_grace_seconds = 30
active_lease_penalty = 8
lock_stale_seconds = 30

[providers.claude]
binary = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/provider-bin/claude"
base_home = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/desktop-home/claude"
desktop_identity_file = false
shared_entries = ["CLAUDE.md"]
trusted_projects = ["/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/relvino"]

[providers.codex]
binary = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/provider-bin/codex"
base_home = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/desktop-home/codex"
shared_entries = []
trusted_projects = ["/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/relvino"]

[profiles."claude-1"]
provider = "claude"
home = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/fleet-share/accounts/claude/claude-1"
pools = ["claude-crew", "claude-manual"]
enabled = false
weight = 1
max_concurrent = 2
reserve_percent = 1
safety_policy = "worker"

[profiles."claude-2"]
provider = "claude"
home = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/fleet-share/accounts/claude/claude-2"
pools = ["claude-crew", "claude-manual"]
enabled = false
weight = 2
max_concurrent = 3
reserve_percent = 2
safety_policy = "worker"

[profiles."claude-3"]
provider = "claude"
home = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/fleet-share/accounts/claude/claude-3"
pools = ["claude-manual"]
enabled = false
weight = 3
max_concurrent = 4
reserve_percent = 3
safety_policy = "desktop_shared"

[profiles."codex-1"]
provider = "codex"
home = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/fleet-share/accounts/codex/codex-1"
pools = ["codex-crew", "codex-manual"]
enabled = false
weight = 4
max_concurrent = 5
reserve_percent = 4
safety_policy = "worker"

[profiles."codex-2"]
provider = "codex"
home = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/fleet-share/accounts/codex/codex-2"
pools = ["codex-crew", "codex-manual"]
enabled = false
weight = 5
max_concurrent = 6
reserve_percent = 5
safety_policy = "worker"

[profiles."codex-3"]
provider = "codex"
home = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/fleet-share/accounts/codex/codex-3"
pools = ["codex-crew", "codex-manual"]
enabled = false
weight = 6
max_concurrent = 7
reserve_percent = 6
safety_policy = "worker"

[profiles."codex-4"]
provider = "codex"
home = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/fleet-share/accounts/codex/codex-4"
pools = ["codex-crew", "codex-manual"]
enabled = false
weight = 7
max_concurrent = 8
reserve_percent = 7
safety_policy = "worker"

[profiles."codex-5"]
provider = "codex"
home = "/private/var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/bridge-cutover-prep-test-krx5sjxu/fixture/fleet-share/accounts/codex/codex-5"
pools = ["codex-manual"]
enabled = false
weight = 8
max_concurrent = 9
reserve_percent = 8
safety_policy = "desktop_shared"

- Evidence: Generated cutover bundle (local file: /var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/no-mistakes-evidence/01KXVCKENS4XWPQEPXS1HC5YWX/bridge-cutover-generated-bundle.json) - Outcome: 🔧 1 issue found → auto-fixed ✅ across 2 runs (1h55m21s)

Pipeline

Updates from git push no-mistakes

✅ **intent** - passed

✅ No issues found.

✅ **Rebase** - passed

✅ No issues found.

⚠️ **Review** - 5 issues (4 errors, 1 warning)

• 🚨 bin/backends/herdr.sh:538 - Production can enable all FM_TEST_HERDR_* hooks by setting only FM_BACKEND_HERDR_TEST_HOOKS, including replacing the managed shell source and process probe. Require the exact Herdr test-lab opt-in in this predicate as well.
• 🚨 bin/fm-account-routing-lib.sh:593 - FM_TEST_ACCOUNT_PS_BIN is accepted without FM_ACCOUNT_ROUTING_TEST_LAB, allowing ambient state to forge lock-owner liveness and trigger reclamation of live locks. Require both exact test-hook and test-lab opt-ins.
• 🚨 bin/fm-account-routing-lib.sh:610 - The process probes here and at line 644 invoke ps outside fm_account_system_exec. Loader injection can forge a start-token mismatch that lines 650–653 treat as proven PID reuse. Run both probes through the scrubbed execution helper.
• 🚨 tests/fm-secondmate-liveness.test.sh:604 - This changed session-status fixture omits session_event_seq, while fm-account-session-sync.sh now requires it and validates its schema relationship. The always-run recovery-sweep test cannot reach its assertions; emit valid schema-2 sequence transitions.
• 🚨 bin/fm-spawn.sh:1169 - The required topology says reserves must remain “manual-only ... unrouted” with no Desktop-login dependency, but this bypass uses the provider default identity and bootstrap invokes it automatically for dead unmanaged secondmates. Confirm whether this automated legacy recovery exception is intentional; otherwise fail closed instead of using an unverified default/Desktop identity.
• 🚨 tools/agent-fleet/src/agent_fleet/config.py:402 - The requirement says to “Pin immutable Quota AXI 0.1.7 ... provenance [and] reject mutable or legacy production inputs,” but this path explicitly accepts missing provenance, labels it legacy, and derives pins from whatever executable currently occupies the path. Require complete immutable provenance in production rather than blessing legacy inputs.
• 🚨 tools/agent-fleet/src/agent_fleet/config.py:336 - The requirement says claude-3 and codex-5 must remain “unprobed,” but every explicit profile home—including desktop-shared reserves—is passed through Path.resolve(), and validation resolves it again. Parse and compare reserve homes lexically without filesystem access.
• 🚨 tools/bridge-cutover/build_sealed_bridge_runtimes.py:3852 - The required crash-safe sealed-runtime adoption is not satisfied: completed-publication recovery returns without removing the build journal, contrary to the documented stale-journal cleanup contract. The journal remains destructive recovery authority over established releases.
• 🚨 tools/bridge-cutover/build_sealed_bridge_runtimes.py:3894 - Interrupted-publication recovery recursively deletes journaled releases without first proving that no live current or front-door reference targets them. With the retained journal, later proof loss can delete an adopted runtime, contradicting required crash-safe adoption.
• 🚨 tools/bridge-cutover/prepare_bridge_cutover.py:1499 - The required reserve profiles must remain unprovisioned and unprobed, but baseline validation does not lexically isolate reserve homes from worker homes, identity state, or the snapshot parent. An aliased or nested reserve can therefore be touched by the worker transaction despite exclusion from its manifest.
• 🚨 tools/bridge-cutover/build_sealed_bridge_runtimes.py:3499 - Required crash-safe cleanup is not met because failure cleanup authenticates a published release only by its root device/inode. If post-publication verification detects drift or foreign content appears under the same root inode, cleanup recursively deletes it instead of preserving and refusing the tree. Bind cleanup to the journaled tree digest.

🔧 Fix: Captain: Harden bridge cutover recovery and provenance
5 issues (4 errors, 1 warning) still open:

• 🚨 tools/agent-fleet/src/agent_fleet/config.py:405 - The fix now rejects missing hashes, but it still accepts any caller-supplied Quota paths with self-consistent hashes; initial_registry also still blesses arbitrary environment-provided trees, including the retained 0.1.6-test fixture. This contradicts “Pin immutable Quota AXI 0.1.7 ... [and] reject mutable or legacy production inputs”; validate the required version and known provenance, not only digest syntax.
• 🚨 tools/bridge-cutover/build_sealed_bridge_runtimes.py:3953 - The new live-reference check occurs only once before cleanup. Builder and adoption use different locks, so a current link or front door can switch to a journaled release after this check and line 3987 will still delete that now-live release. This contradicts required crash-safe adoption; serialize cleanup with adoption or revalidate under equivalent shared authority at deletion.
• 🚨 tools/bridge-cutover/prepare_bridge_cutover.py:1531 - Reserve isolation remains incomplete: this protected set omits output_dir, both product current links, the operator front door, live_registry, and routing/quiet-state paths. A reserve home can contain or alias one of those paths and consequently be inspected or mutated, contradicting the requirement that claude-3 and codex-5 remain “unprovisioned, unprobed” and untouched.
• 🚨 tools/bridge-cutover/build_sealed_bridge_runtimes.py:4707 - Successful publication deletes its only ownership journal here. A crash immediately after the unlink—or an ordinary completed-build retry—leaves the proof and four releases without a journal, which line 4422 rejects as unattributed instead of recognizing as complete. This contradicts “crash-safe sealed runtime build/adoption”; retain a non-destructive proof-only completed-state recovery path or durable terminal marker.
• ⚠️ tools/bridge-cutover/build_sealed_bridge_runtimes.py:3843 - Recovery now requires every release path to have the shape <family>/releases/<release>, but manifest loading still accepts any safe distinct relative path whose parent exists. A schema-valid build can therefore publish successfully and then become unrecoverable after interruption. Enforce this layout during manifest loading or represent current-link paths explicitly.

🔧 **Test** - 1 issue found → auto-fixed ✅

• 🚨 tests failed with exit code 1
• command -v tmux >/dev/null || { echo "tmux is required for e2e tests" >&2; exit 1; }; tmux -V; rc=0; for t in tests/*.test.sh; do echo "== $t =="; bash "$t" || rc=1; done; exit "$rc"

🔧 Fix: Fix routing and Herdr test fixtures
✅ Re-checked - no issues remain.

• command -v tmux >/dev/null || { echo "tmux is required for e2e tests" >&2; exit 1; }; tmux -V; rc=0; for t in tests/*.test.sh; do echo "== $t =="; bash "$t" || rc=1; done; exit "$rc"
• Baseline: command -v tmux >/dev/null || { echo "tmux is required for e2e tests" >&2; exit 1; }; tmux -V; rc=0; for t in tests/*.test.sh; do echo "== $t =="; bash "$t" || rc=1; done; exit "$rc"
• Operator evidence: python3.11 tools/bridge-cutover/prepare_bridge_cutover.py --driver tools/bridge-cutover/bridge_cutover_transaction.py prepare <isolated-fixture-spec>
• Operator evidence: python3.11 tools/bridge-cutover/prepare_bridge_cutover.py --driver tools/bridge-cutover/bridge_cutover_transaction.py validate <generated-bundle>
• Operator evidence: python3.11 tools/bridge-cutover/prepare_bridge_cutover.py --driver tools/bridge-cutover/bridge_cutover_transaction.py rehearse <generated-bundle> --scratch-root <private-fixture-root>
• bash tests/fm-bootstrap.test.sh
• FM_TEST_FOCUSED=gate-e-workspace bash tests/fm-account-routing.test.sh
• FM_TEST_FOCUSED=server-startup bash tests/fm-backend-herdr.test.sh
• FM_TEST_FOCUSED=managed-shell-hardening bash tests/fm-backend-herdr.test.sh
• PYTHONDONTWRITEBYTECODE=1 uv run --offline --locked pytest -q with 16 exact session-mapping, reserve-isolation, credential-recovery, detached-login, and passwd-derived Keychain attribution selectors
• Validated both JSON evidence files with python3.11 -m json.tool; confirmed a clean worktree and removed test caches and the temporary virtual environment.

⚠️ **Document** - 1 warning

• ⚠️ tools/agent-fleet/src/agent_fleet/cli.py:700 - Captain, the absent-credentials error still says “future transactional maintenance tooling,” although initialize-login and recover-login now exist. This user-facing string is executable code and could not be changed under the documentation-only constraint.

🔧 Fix: Refresh Bridge liveness documentation
1 warning still open:

• ⚠️ tools/agent-fleet/src/agent_fleet/cli.py:700 - Captain, CLI enrollment errors at lines 700 and 757 still direct users to “future transactional maintenance tooling” although initialize-login and recover-login now exist. Fixing them requires changing executable output and its test, which the documentation-only constraint forbids.

🔧 **Lint** - 1 issue found → auto-fixed ✅

• ⚠️ linter found issues (exit code 1)

🔧 Fix: Document intentional deferred shell expansions for ShellCheck
✅ Re-checked - no issues remain.

✅ **Push** - passed

✅ No issues found.

[ruby-dlee]

Post-merge verification complete at ac74baa: exact PR-head and squash-merge trees match; merge-SHA CI run 29670873885 is fully green; isolated Agent Fleet 442/442, Bridge control-plane 205/205, and retained real-input 2/2 gates passed; repeat Agent Fleet wheel/sdist builds were byte-identical. Non-blocking follow-up: Behavior is stable but still 29m51s against the new 45-minute bound, so optimize or split the suite before it consumes that margin. GitHub Issues are disabled on this fork, so this merged-PR comment is the durable remote follow-up. Live adoption/routing remains on hold pending the Captain quiet point and exact-merge isolated Herdr survival lab.