ouroboros/supervisor
Ouroboros 81786a147c fix: review-output custody, swarm visibility, advisory revival, project entry point
Four reviewed fixes rooted in one incident (task f0a6fb64c92d491f):

1. Review custody: delete the profile-continuity transcript blanking in
   review_execution (the _transcript alias field is removed structurally);
   an unpinned slot records matched/no_expectation_recorded, a typed engine
   rotation on an unpinned slot is typed_rotation, and a genuine pin mismatch
   stays pure telemetry - the receipt is disclosed on the actor row while
   findings parse and count fully (owner decision: reviewer verdicts are
   never destroyed to express route distrust). Continuation thread-memory
   misses (roster change, missing thread/receipt, invalid transcript)
   degrade to a fresh dispatch of the self-contained packet with a
   capability_delta disclosure; exact-wave custody refusals stay
   fail-closed; the sticky profile repin is removed. The DEGRADED progress
   line now reports "N/M parseable reviewers; counts are untrusted".
   PLAN_REVIEW_SESSION_OUTPUT_SCHEMA optional fields admit null.
   DEVELOPMENT gains the control-plane-distrust-is-metadata invariant and
   CHECKLISTS item 28 forbids discarding, blanking, or relabeling artifact
   bodies or their original cause.

2. Swarm visibility: SWARM_INITIATIVE requires the plan to name its
   execution shape; delegate_start emits swarm_fanout telemetry when the
   host-attested force_plan_source=="swarm" metadata is present and custody
   is durable; a Swarm-intent task that fanned out nothing finalizes with a
   typed zero-fanout block (planned: null, observed_started: 0,
   no_fanout_observed) instead of silence.

3. Advisory lane revival: the api route gates the assembled prompt against
   the real reviewer window (reviewer_window SSOT; the 1.6M constant is an
   emergency ceiling only); the agent_session route receives resolvable
   governance pointers instead of ~830KB of inlined documents (plan-review
   agent_session delivery precedent); provider context-overflow failures are
   classified through the context_budget SSOT into typed
   ADVISORY_SKIPPED: context_window_exceeded instead of "harness crashed";
   every skip path stamps typed meta so the skill surface reports skipped
   rather than completed.

4. Project entry point: an agent-created project announces one durable
   project_started system row in Main at creation (agent-initiated seams
   only, including source-bearing promotes via the created-fact and
   _source_created continuation; owner-initiated creation stays silent),
   admitted by history beside project_completion_summary and excluded from
   the project thread. Both lifecycle buttons render through the new shared
   design-system action (createSystemMessageAction in ui_helpers.js); the
   page-local pill CSS and <br> spacing are removed and chat.js shrinks
   under its byte pin. Stale ARCHITECTURE mirror claims rewritten.

Review evidence: per-phase adversarial reviews (4 phases + synthesis, all
converged), 16/16 phase triad+scope agentic review slots SAFE TO COMMIT,
synthesis triad 3x SAFE and scope SAFE after one doc-sync fix, full two-pass
pytest green with an isolated data root, size_ratchet lane green, node web
suite green, and a live Playwright click-through of the new action button.

Co-authored-by: Ouroboros <311266734+ouroboros-agent@users.noreply.github.com>
2026-08-24 20:37:54 +03:00
..
__init__.py Initial commit from app bundle 2026-04-22 01:04:48 +03:00
active_activity.py Add server-authoritative in-flight indicator for direct and ephemeral chat turns 2026-08-16 05:59:51 +03:00
cancel_publication.py fix: harden delegated nanny recovery and custody 2026-08-20 02:44:17 +03:00
events.py fix: review-output custody, swarm visibility, advisory revival, project entry point 2026-08-24 20:37:54 +03:00
evolution_lifecycle.py Merge branch 'ouroboros' into fix/autoupdate-gate-hardening 2026-08-04 16:28:30 +03:00
git_ops.py hardening: bounded git plumbing, transactional evidence write, marker concurrency, subject memoization 2026-08-21 04:46:26 +00:00
message_bus.py fix: review-output custody, swarm visibility, advisory revival, project entry point 2026-08-24 20:37:54 +03:00
owner_stop.py Review-fix batch (Sol delta review on 50e824fe..d18d7ebf): owner-stop deadline honesty 2026-08-15 19:19:57 +03:00
queue.py feat: add secret-safe skill publishing 2026-08-21 03:46:17 +03:00
queue_transitions.py release 6.98.0: cancellation carries one truth — durable intent, single settle owner, guaranteed delivery (sprint phase A) 2026-08-12 11:25:16 +03:00
schedule_time.py Review round 3: honest replay reminder, one-shot exactly-once vs re-enable, once-only pruning 2026-08-18 04:58:21 +03:00
state.py fix: preserve unknown terminal cost 2026-08-21 23:54:36 +03:00
steering.py fix: deliver steering attachment reports to panel chat 2026-08-22 03:23:24 +03:00
task_admission.py fix: make managed task routing admission durable 2026-07-31 17:25:20 +03:00
task_lifecycle.py Add S3 cancel-finalization and owner hurry control 2026-08-15 10:22:11 +03:00
task_reaper.py fix: preserve steering and attachment authority across retries 2026-08-21 15:29:33 +03:00
terminal_delivery.py merge: integrate current ouroboros into continuity authority 2026-08-21 15:48:46 +03:00
update_candidate.py hardening: bounded git plumbing, transactional evidence write, marker concurrency, subject memoization 2026-08-21 04:46:26 +00:00
update_merge.py fix: boot-resume re-enqueues the assisted resolver under a fresh task id 2026-08-21 04:46:26 +00:00
update_merge_policy.py update flow: contract-first core redesign (stash-first, pinned M0, single test run, deterministic recovery) 2026-08-21 04:46:05 +00:00
update_recovery.py Merge branch 'ouroboros' into fix/autoupdate-gate-hardening 2026-08-04 16:28:30 +03:00
update_source.py fix(git_ops): make rescue timeouts tree-safe 2026-08-14 02:24:42 +00:00
workers.py fix: review-output custody, swarm visibility, advisory revival, project entry point 2026-08-24 20:37:54 +03:00