phase-0 delivery-backend seam: cancellation-safe and fully evidenced - #1825

Closed

khaliqgant wants to merge 60 commits into

mainfrom

feat/native-delivery-phase-0-seam

Commits on Sep 20, 2026

feat(migrate): Relayflows v2 campaign for the native-delivery migration

Proactive Runtime Bot
and
claude
committed
2065623
fix(migrate): run the native-delivery campaign with a local agent worker

Proactive Runtime Bot
and
claude
committed
a7ab690
fix(migrate): stop gating agent steps on an undiagnosable subprocess_gate

Proactive Runtime Bot
and
claude
committed
20e2886
fix(migrate): gate that the seam is actually wired, not merely compiled

Proactive Runtime Bot
and
claude
committed
a32d5b8
fix(migrate): check artifacts on disk, not through artifact_exists

Proactive Runtime Bot
and
claude
committed
fd7b9be
fix(migrate): targeted-gate judged the selector's mode, not the hazard

Proactive Runtime Bot
and
claude
committed
c8fe339
feat(migrate): support --reuse-from on relaunch

Proactive Runtime Bot
and
claude
committed
d0722bb
fix(migrate): two gates contradicted each other and the agent paid for it

Proactive Runtime Bot
and
claude
committed
e3bd628
fix(migrate): pty_worker.rs belongs in the lane it is being wrapped into

Proactive Runtime Bot
and
claude
committed
475535d
fix(migrate): judge unit tests against a baseline, not against perfection

Proactive Runtime Bot
and
claude
committed
ff136a3
fix(migrate): stamp evidence with the run that produced it

Proactive Runtime Bot
and
claude
committed
3eddbeb
fix(migrate): cap vitest concurrency so the flow stops killing its own daemon

Proactive Runtime Bot
and
claude
committed
a69297e
fix(migrate): retry a red parity suite once before failing the run

Proactive Runtime Bot
and
claude
committed
1e06740
fix(migrate): tell repair-unlaunched to stop when the gate is already green

Proactive Runtime Bot
and
claude
committed
01292d1
fix(migrate): gate the hazard the mutation-proof requirement creates

Proactive Runtime Bot
and
claude
committed
a78a984
fix(migrate): seal the product tree, not just the evidence directory

Proactive Runtime Bot
and
claude
committed
1b899f2
feat(migrate): make the codex CLI swappable, for credential exhaustion

Proactive Runtime Bot
and
claude
committed
b85c9f6
feat(flows): relayflows-agent-cli-v1 adapter for cursor-agent

Proactive Runtime Bot
and
claude
committed
24a0718
feat(migrate): credential-exhaustion lane that preserves reuse

Proactive Runtime Bot
and
claude
committed
fd8436a
fix(migrate): require a failing transcript PER invariant, and surface harness edits

Proactive Runtime Bot
and
claude
committed
f2e71d4
feat(delivery): phase-0 delivery-backend seam — spike, blocked on two HIGH findings

Proactive Runtime Bot
and
claude
committed
e1954da
chore(delivery): wire the unlaunched e2e suite and track trajectories

Proactive Runtime Bot
and
claude
committed
b4d4b75
style: auto-format with Prettier
github-actions[bot]
committed
ce65cef
style: auto-format with Prettier
github-actions[bot]
committed
192ce84
review: fresh read of the unreviewed fixes finds 2 blockers; gates stay green

Proactive Runtime Bot
and
claude
committed
6510a3f
style: auto-format with Prettier
github-actions[bot]
committed
0bc1868

Commits on Sep 21, 2026

fix(delivery): close F1 and F2, the two double-delivery blockers

Proactive Runtime Bot
and
claude
committed
76a1830
fix(delivery): close F4, and make the seam's duplicate guard safe to activate

Proactive Runtime Bot
and
claude
committed
3782218
fix(delivery): hoist the seam to the runtime, closing F6

Proactive Runtime Bot
and
claude
committed
58bf37f
fix(delivery): stop reporting unwritten frames as possible writes (F3)

Proactive Runtime Bot
and
claude
committed
3cae86c
fix(delivery): make the unobserved cursor advance observable (F5)

Proactive Runtime Bot
and
claude
committed
3322fdf
fix(delivery): one observation predicate, one derived timeout (F7, F8)

Proactive Runtime Bot
and
claude
committed
b4127b8
fix(delivery): retain in-doubt deliveries as non-redeliverable dead letters (F9)

Proactive Runtime Bot
and
claude
committed
c96a6fa
test(delivery): guard the timeout-ack invariant where the hazard is (F10)

Proactive Runtime Bot
and
claude
committed
5bbdde2
fix(delivery): guard delivery_verified too, declare delivery_unobserved (F11, F13)

Proactive Runtime Bot
and
claude
committed
818ed66
test(delivery): account for unobserved deliveries instead of assuming an ack (F12)

Proactive Runtime Bot
and
claude
committed
bd6c1b6
test(delivery): hold the seam invariants against the route that ships (F14)

Proactive Runtime Bot
and
claude
committed
7ae0025
style: auto-format with Prettier
github-actions[bot]
committed
a2f2a41
docs(delivery): name the headless route's rule-4 violation at the site (F7)

Proactive Runtime Bot
and
claude
committed
914cd52
test(delivery): walk the retry cap from zero instead of starting at it (F9)

Proactive Runtime Bot
and
claude
committed
9b02d20
fix(migrate): typecheck the unlaunched suite even when it need not run (F17)

Proactive Runtime Bot
and
claude
committed
a2a4f55
fix(delivery): stop answering "never sent" and "route unreachable" alike (F16)

Proactive Runtime Bot
and
claude
committed
0c3d95e
fix(delivery): make an acknowledgement name its observation (F15)

Proactive Runtime Bot
and
claude
committed
765511b
docs(delivery): correct phase 0's effort estimate with what it cost (F-doc)

Proactive Runtime Bot
and
claude
committed
c142997
docs(delivery): correct what phase 0 put behind the seam (F19)

Proactive Runtime Bot
and
claude
committed
c1bf3cc
fix(delivery): make the guards actually guard the hazard they name

Proactive Runtime Bot
and
claude
committed
ead76a1
fix(delivery): a handed-over delivery that exhausts retries is in doubt (BLOCKER)

Proactive Runtime Bot
and
claude
committed
e5b3d8f
fix(delivery): stop the fleet call site from defeating its own guard (BLOCKER)

Proactive Runtime Bot
and
claude
committed
80b886a
feat(flows): add the phase-0 delivery re-review flow

Proactive Runtime Bot
and
claude
committed
13b4988
fix(flows): make the collect step start with an executable

Proactive Runtime Bot
and
claude
committed
aa07152
fix(tests): stop counting an unobserved delivery as a delivered one

Proactive Runtime Bot
and
claude
committed
b42554a
fix(bench): put unobserved deliveries in the denominator they were missing

Proactive Runtime Bot
and
claude
committed
5a9d29d
fix(delivery): close two holes in yesterday's in-doubt fix (F1, F4)

Proactive Runtime Bot
and
claude
committed
748102e
fix(delivery): close cancellation and cursor accounting gaps

Proactive Runtime Bot
and
claude
committed
ffec500
fix(manifest): preserve fail-closed test routing

Proactive Runtime Bot
and
claude
committed
3097eff
fix(tests): make delivery id narrowing explicit

Proactive Runtime Bot
and
claude
committed
5c144ba
fix(security): make delivery seal hashing atomic

Proactive Runtime Bot
and
claude
committed
b2b1664

Commits on Sep 23, 2026

fix(delivery): preserve in-doubt state across restart
kjgbot
committed
350a086
fix(migrate): tighten evidence fixture gates
kjgbot
committed
3b587aa
test(delivery): reuse seam in wait retry coverage
kjgbot
committed
b63e106