You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Provider and backend work must not indefinitely prevent the runtime from accepting authorized supervisory operations.
Acceptance criteria
Implement the accepted execution architecture and public operation protocol. Separate bounded state admission/commit from external work while preserving scoped ownership and atomic outcomes.
Fence stale or duplicate completions; apply the accepted deadline, cancellation, refusal, crash-recovery, and reconciliation semantics. Never repeat an uncertain effect solely because execution resumed.
Keep stop and other authorized supervisory operations responsive when a provider or backend stalls. Report backend interruption limits and indeterminate effects truthfully.
Exercise blocked calls, late completion, concurrent control, crash around dispatch/commit, and store reopening. Verify that recovered state cannot authorize stale work or invent successful cancellation.
gc workflow phase recorded: preflight (issue #1362). Posted by the MCP server to enforce ordering between workflow steps (issue #794 MVP-2). Do not edit or delete — used by downstream tools to gate phase prerequisites.
gc workflow phase recorded: preflight (issue #1362). Posted by the MCP server to enforce ordering between workflow steps (issue #794 MVP-2). Do not edit or delete — used by downstream tools to gate phase prerequisites.
Execution obligation EXECUTION-COMPOSITION-SCOPE — Opened
Category: workflow Observed state: ADR-113 accepts local P0/P1/P2 execution and a separate Temporal/PostgreSQL composition. Issue 1362 asks for the accepted architecture without an explicit rollout boundary; API-404-C4 still excludes P3. Impact: Local-only supervision is a partial delivery of the selected architecture; the Temporal/PostgreSQL composition adds engine, ledger, worker authorization, dependency and CI integration work. Current obligation: Resolve the rollout boundary before posting the implementation plan and starting source changes. Preserve the accepted supervision, ownership and recovery semantics for the selected delivery.
Evidence
docs/decisions/adrs/adr-113-reusable-execution-machinery.md sections 1, 3 and 9
Operators can stop new admission and request cancellation or reconciliation while backend calls are blocked. Uncertain effects retain exclusion, and optional self-hosted distributed delivery cannot replay a consumed grant.
Supervised native and optional distributed execution with one-use authority, independent controls, retained effect exclusion and verified absence recovery.
In-scope requirements
Proposed state in this PR — authoritative only after merge.
API-404 (Secure, Durable, And Idempotent Control-Plane Semantics) — ACTIVE (proposed) — Profile clauses and P3 exclusion remain unchanged; implementation and test traceability updated.
Codex: Three pre-push cycles; all 12 known findings fixed and verified. User accepted the cap after cycle 3.
Traceability reconciliation
Proposed in this PR — verified against the merged tree in Phase E.
IMPLEMENTS / TESTS / DOCUMENTS added: 1
Links updated: 1
Stale links removed: 0
Status
CI: ✅ green
SonarCloud: ✅ passed
PR ready for user review and merge. Phase E validates the merged requirement state, posts the final report, and closes the issue automatically once this PR merges.
Operators can stop new admission and request cancellation or reconciliation while backend calls are blocked. Uncertain effects retain exclusion, and optional self-hosted distributed delivery cannot replay a consumed grant.
Supervised native and optional distributed execution with one-use authority, independent controls, retained effect exclusion and verified absence recovery.
In-scope requirements
Verified at merge revision ec1cdce92396.
API-404 (Secure, Durable, And Idempotent Control-Plane Semantics) — ACTIVE — Profile clauses and P3 exclusion remain unchanged; implementation and test traceability updated.
Codex: Three pre-push cycles; all 12 known findings fixed and verified. User accepted the cap after cycle 3.
Traceability reconciliation
IMPLEMENTS / TESTS / DOCUMENTS added: 1
Links updated: 1
Stale links removed: 0
Current head 923186c passed all 33 hosted checks, including four full-test shards, CPython 3.11–3.14, bootstrap, proof, fuzzing, real Temporal/PostgreSQL delivery and crash cases, canonical and Docker integration, policy, documentation and verify. Sonar quality gate is OK with 84.6% new-code coverage, zero open issues and zero open hotspots. Targeted runtime, SDK converter and workflow checks passed locally; full and service suites ran in CI. Fresh source-bound specification/formal captures passed selected offline replays; immutable historical model artifacts remain exact and current-source correspondence remains unestablished. API-404 remains ACTIVE; P0/P1/P2 scope and the P3 exclusion remain unchanged.
Activity
Brad-Edwards commentedon Oct 12, 2026
🛠️ Picked up by /implement - driver codex, branch
1362-supervised-runtime-execution, 2026-10-12T19:29:40.694Z.Brad-Edwards commentedon Oct 12, 2026
gc workflow phase recorded:
preflight(issue #1362). Posted by the MCP server to enforce ordering between workflow steps (issue #794 MVP-2). Do not edit or delete — used by downstream tools to gate phase prerequisites.Brad-Edwards commentedon Oct 12, 2026
gc workflow phase recorded:
preflight(issue #1362). Posted by the MCP server to enforce ordering between workflow steps (issue #794 MVP-2). Do not edit or delete — used by downstream tools to gate phase prerequisites.Brad-Edwards commentedon Oct 12, 2026
Execution obligation EXECUTION-COMPOSITION-SCOPE — Opened
Category: workflow
Observed state: ADR-113 accepts local P0/P1/P2 execution and a separate Temporal/PostgreSQL composition. Issue 1362 asks for the accepted architecture without an explicit rollout boundary; API-404-C4 still excludes P3.
Impact: Local-only supervision is a partial delivery of the selected architecture; the Temporal/PostgreSQL composition adds engine, ledger, worker authorization, dependency and CI integration work.
Current obligation: Resolve the rollout boundary before posting the implementation plan and starting source changes. Preserve the accepted supervision, ownership and recovery semantics for the selected delivery.
Evidence
13 remaining items
Brad-Edwards commentedon Oct 14, 2026
Pre-PR base synchronization
refs/remotes/origin/devat348c4903322da1d4dbe0d65cb2e687cfad172290already_current2e35db5472a139020ed198909a2e6b3eb52850fd4e14f56152d278814241804a33a307caaf815f45Brad-Edwards commentedon Oct 14, 2026
Pre-PR base synchronization
refs/remotes/origin/devat348c4903322da1d4dbe0d65cb2e687cfad172290already_current172eb5001d7474494c98f6714f7fb1b542ef9928da1c484a2f6bcfb9b23ce4898eafc5cdf1488041Brad-Edwards commentedon Oct 14, 2026
Pre-PR base synchronization
refs/remotes/origin/devat348c4903322da1d4dbe0d65cb2e687cfad172290already_currentcf64bbd4b4e328fac2d2c6c4aad088ace675903ed2d206ce7f4b81f335229d5c3fc75a15b0361313Brad-Edwards commentedon Oct 14, 2026
Pre-PR base synchronization
refs/remotes/origin/devat348c4903322da1d4dbe0d65cb2e687cfad172290already_currentb84740589e74dd04d399d6c76b219f411e1f5175382bb7bcdcca8bf3c7571c21902477f06a2b88a2Brad-Edwards commentedon Oct 14, 2026
Pre-PR base synchronization
refs/remotes/origin/devat348c4903322da1d4dbe0d65cb2e687cfad172290already_currentd81c329189be4838b9e03e48f487754dbb2dff2a05ef539a992604ddfb2afc0700155e14f67f6ddfBrad-Edwards commentedon Oct 14, 2026
Pre-PR base synchronization
refs/remotes/origin/devat273ad049433185b4cdd70280396a68ca2eaf6b1amerged_cleanb8262b6120233a0c5465ded8b19e8f45c59c4efa59a91483b972fabdb1a00b72ecacb0fce2205548Brad-Edwards commentedon Oct 14, 2026
Pre-PR base synchronization
refs/remotes/origin/devat273ad049433185b4cdd70280396a68ca2eaf6b1aalready_currentfe4b6572489f5892f0160859379901cd335cbc81cebc476dbe84adbd48acda031316218f1b5d62bcBrad-Edwards commentedon Oct 14, 2026
Pre-PR base synchronization
refs/remotes/origin/devat273ad049433185b4cdd70280396a68ca2eaf6b1aalready_current923186ce257bec30af2299eeed982c9b562138f2ab552fd29725aa0303e35e7f6b35de7c2e9a02a2Brad-Edwards commentedon Oct 14, 2026
Ready for review — issue #1362
PR: #1601
Plan: #1362 (comment)
Outcome
Operators can stop new admission and request cancellation or reconciliation while backend calls are blocked. Uncertain effects retain exclusion, and optional self-hosted distributed delivery cannot replay a consumed grant.
Supervised native and optional distributed execution with one-use authority, independent controls, retained effect exclusion and verified absence recovery.
In-scope requirements
Proposed state in this PR — authoritative only after merge.
API-404(Secure, Durable, And Idempotent Control-Plane Semantics) — ACTIVE (proposed) — Profile clauses and P3 exclusion remain unchanged; implementation and test traceability updated.Files changed
Added:
docs/decisions/issue-1362-supervised-execution-preflight.mddocs/public/guides/supervised-execution.mddocs/research/formal-semantic-validation/capture-records/capture-8e85d3e6836ebc1157584b5fba6e67340ea5f3cb62443f3e63b6d39b55e4571d.jsondocs/research/formal-semantic-validation/capture-records/capture-91f0706003a8097741b92b978ff6539f1ab2a197dfb4f5e32597c81fe5852702.jsondocs/research/formal-semantic-validation/capture-records/capture-d2744ee8244d5e3ac074cead71a0be90e158651b63d8193c50ff7f383baf3dd2.jsondocs/research/formal-semantic-validation/capture-records/capture-f093effb94ee12eb7c81e51e10243873b51e058b86f7e56e9f519dc08e69abb1.jsondocs/research/formal-semantic-validation/capture-records/capture-f0e09c7ba4819c986a4781a5a25e40cb2faa360edef1de0847e462f668172515.jsondocs/research/formal-semantic-validation/captures/capture-8e85d3e6836ebc1157584b5fba6e67340ea5f3cb62443f3e63b6d39b55e4571d/analysis.jsondocs/research/formal-semantic-validation/captures/capture-8e85d3e6836ebc1157584b5fba6e67340ea5f3cb62443f3e63b6d39b55e4571d/manifest.jsondocs/research/formal-semantic-validation/captures/capture-8e85d3e6836ebc1157584b5fba6e67340ea5f3cb62443f3e63b6d39b55e4571d/snapshot.jsondocs/research/formal-semantic-validation/captures/capture-91f0706003a8097741b92b978ff6539f1ab2a197dfb4f5e32597c81fe5852702/analysis.jsondocs/research/formal-semantic-validation/captures/capture-91f0706003a8097741b92b978ff6539f1ab2a197dfb4f5e32597c81fe5852702/manifest.jsondocs/research/formal-semantic-validation/captures/capture-91f0706003a8097741b92b978ff6539f1ab2a197dfb4f5e32597c81fe5852702/snapshot.jsondocs/research/formal-semantic-validation/captures/capture-d2744ee8244d5e3ac074cead71a0be90e158651b63d8193c50ff7f383baf3dd2/analysis.jsondocs/research/formal-semantic-validation/captures/capture-d2744ee8244d5e3ac074cead71a0be90e158651b63d8193c50ff7f383baf3dd2/manifest.jsondocs/research/formal-semantic-validation/captures/capture-d2744ee8244d5e3ac074cead71a0be90e158651b63d8193c50ff7f383baf3dd2/snapshot.jsondocs/research/formal-semantic-validation/captures/capture-f093effb94ee12eb7c81e51e10243873b51e058b86f7e56e9f519dc08e69abb1/analysis.jsondocs/research/formal-semantic-validation/captures/capture-f093effb94ee12eb7c81e51e10243873b51e058b86f7e56e9f519dc08e69abb1/manifest.jsondocs/research/formal-semantic-validation/captures/capture-f093effb94ee12eb7c81e51e10243873b51e058b86f7e56e9f519dc08e69abb1/snapshot.jsondocs/research/formal-semantic-validation/captures/capture-f0e09c7ba4819c986a4781a5a25e40cb2faa360edef1de0847e462f668172515/analysis.jsondocs/research/formal-semantic-validation/captures/capture-f0e09c7ba4819c986a4781a5a25e40cb2faa360edef1de0847e462f668172515/manifest.jsondocs/research/formal-semantic-validation/captures/capture-f0e09c7ba4819c986a4781a5a25e40cb2faa360edef1de0847e462f668172515/snapshot.jsondocs/research/specification-coverage/capture-records/capture-0b657b62f6dadc73b2a1686e6f6923ccc522a0167f58c36faf395e0c0881599b.jsondocs/research/specification-coverage/capture-records/capture-184e9d5caf64e868778ce313cc65d8e2c5d58dd55f882685afb95e4117d603ec.jsondocs/research/specification-coverage/capture-records/capture-96ad6bd24c27f1938164885f6c983e81904c66488c9bf29a4d742a88bfcf9bac.jsondocs/research/specification-coverage/capture-records/capture-e690ba6fa95c069634c311f22bfebd99b8841bf58a9015c8b063678ac838ab65.jsondocs/research/specification-coverage/capture-records/capture-ea34bb9cc3049b48cec75f38d18ebab63235b78b197da9e6414e4dfa49edab18.jsondocs/research/specification-coverage/captures/capture-0b657b62f6dadc73b2a1686e6f6923ccc522a0167f58c36faf395e0c0881599b/analysis.jsondocs/research/specification-coverage/captures/capture-0b657b62f6dadc73b2a1686e6f6923ccc522a0167f58c36faf395e0c0881599b/manifest.jsondocs/research/specification-coverage/captures/capture-0b657b62f6dadc73b2a1686e6f6923ccc522a0167f58c36faf395e0c0881599b/snapshot.jsondocs/research/specification-coverage/captures/capture-184e9d5caf64e868778ce313cc65d8e2c5d58dd55f882685afb95e4117d603ec/analysis.jsondocs/research/specification-coverage/captures/capture-184e9d5caf64e868778ce313cc65d8e2c5d58dd55f882685afb95e4117d603ec/manifest.jsondocs/research/specification-coverage/captures/capture-184e9d5caf64e868778ce313cc65d8e2c5d58dd55f882685afb95e4117d603ec/snapshot.jsondocs/research/specification-coverage/captures/capture-96ad6bd24c27f1938164885f6c983e81904c66488c9bf29a4d742a88bfcf9bac/analysis.jsondocs/research/specification-coverage/captures/capture-96ad6bd24c27f1938164885f6c983e81904c66488c9bf29a4d742a88bfcf9bac/manifest.jsondocs/research/specification-coverage/captures/capture-96ad6bd24c27f1938164885f6c983e81904c66488c9bf29a4d742a88bfcf9bac/snapshot.jsondocs/research/specification-coverage/captures/capture-e690ba6fa95c069634c311f22bfebd99b8841bf58a9015c8b063678ac838ab65/analysis.jsondocs/research/specification-coverage/captures/capture-e690ba6fa95c069634c311f22bfebd99b8841bf58a9015c8b063678ac838ab65/manifest.jsondocs/research/specification-coverage/captures/capture-e690ba6fa95c069634c311f22bfebd99b8841bf58a9015c8b063678ac838ab65/snapshot.jsondocs/research/specification-coverage/captures/capture-ea34bb9cc3049b48cec75f38d18ebab63235b78b197da9e6414e4dfa49edab18/analysis.jsondocs/research/specification-coverage/captures/capture-ea34bb9cc3049b48cec75f38d18ebab63235b78b197da9e6414e4dfa49edab18/manifest.jsondocs/research/specification-coverage/captures/capture-ea34bb9cc3049b48cec75f38d18ebab63235b78b197da9e6414e4dfa49edab18/snapshot.jsonimplementations/python/packages/raes_runtime/control_plane_api/_supervision_routes.pyimplementations/python/packages/raes_runtime/control_plane_participant_apply.pyimplementations/python/packages/raes_runtime/control_plane_store_bounded.pyimplementations/python/packages/raes_runtime/control_plane_store_local_invocations.pyimplementations/python/packages/raes_runtime/control_plane_store_postgresql.pyimplementations/python/packages/raes_runtime/control_plane_store_postgresql_mutations.pyimplementations/python/packages/raes_runtime/control_plane_store_postgresql_schema.pyimplementations/python/packages/raes_runtime/control_plane_supervised_execution.pyimplementations/python/packages/raes_runtime/control_plane_supervision.pyimplementations/python/packages/raes_runtime/manager_lifecycle.pyimplementations/python/packages/raes_runtime/operation_command_commitment.pyimplementations/python/packages/raes_runtime/operation_control_budget.pyimplementations/python/packages/raes_runtime/operation_execution_adapter.pyimplementations/python/packages/raes_runtime/operation_invocation_ledger.pyimplementations/python/packages/raes_runtime/operation_ledger_transactions.pyimplementations/python/packages/raes_runtime/operation_policy_admission.pyimplementations/python/packages/raes_runtime/operation_provider_control.pyimplementations/python/packages/raes_runtime/operation_provider_execution.pyimplementations/python/packages/raes_runtime/operation_reconciliation.pyimplementations/python/packages/raes_runtime/operation_reconciliation_ledger.pyimplementations/python/packages/raes_runtime/operation_remote_authority.pyimplementations/python/packages/raes_runtime/operation_result_finalization.pyimplementations/python/packages/raes_runtime/operation_supervision_configuration.pyimplementations/python/packages/raes_runtime/operation_temporal.pyimplementations/python/packages/raes_runtime/operation_temporal_worker.pyimplementations/python/packages/raes_runtime/operation_temporal_workflow.pyimplementations/python/packages/raes_runtime/operation_transcript_policy.pyimplementations/python/packages/raes_runtime/operation_worker_authority.pyimplementations/python/packages/raes_runtime/runtime_resource_ownership.pyimplementations/python/tests/control_plane_supervision_crash_fixture.pyimplementations/python/tests/runtime_plan_fixtures.pyimplementations/python/tests/test_issue_1362_bounded_execution.pyimplementations/python/tests/test_issue_1362_command_privacy.pyimplementations/python/tests/test_issue_1362_commit_authority.pyimplementations/python/tests/test_issue_1362_control_budget.pyimplementations/python/tests/test_issue_1362_dependency_admission.pyimplementations/python/tests/test_issue_1362_distributed_authority.pyimplementations/python/tests/test_issue_1362_distributed_integration.pyimplementations/python/tests/test_issue_1362_http_capacity.pyimplementations/python/tests/test_issue_1362_invocation_ledger.pyimplementations/python/tests/test_issue_1362_lost_ack.pyimplementations/python/tests/test_issue_1362_observation_retention.pyimplementations/python/tests/test_issue_1362_policy_bounds.pyimplementations/python/tests/test_issue_1362_postgresql_store.pyimplementations/python/tests/test_issue_1362_provider_execution.pyimplementations/python/tests/test_issue_1362_reconciliation.pyimplementations/python/tests/test_issue_1362_resource_ownership.pyimplementations/python/tests/test_issue_1362_review_regressions.pyimplementations/python/tests/test_issue_1362_review_round_two.pyimplementations/python/tests/test_issue_1362_runtime_imports.pyimplementations/python/tests/test_issue_1362_runtime_supervision.pyimplementations/python/tests/test_issue_1362_state_authority.pyimplementations/python/tests/test_issue_1362_supervision_http.pyimplementations/python/tests/test_issue_1362_temporal_adapter.pyimplementations/python/tests/test_issue_1362_temporal_input.pyimplementations/python/tests/test_issue_1362_temporal_worker.pyimplementations/tooling/runtime_execution_ci.pyModified:
.github/workflows/canonical-verification.yml.github/workflows/ci.ymldocs/explain/reference/backend-operation-supervision.mddocs/public/guides/control-plane.mddocs/public/index.mddocs/requirements/API-404/requirement.mddocs/research/participant-bisimulation/multi-operation-construction.mdimplementations/python/packages/raes_conformance/conformance/participant_execution_probes.pyimplementations/python/packages/raes_conformance/conformance/participant_policy_execution.pyimplementations/python/packages/raes_conformance/conformance/target_probes.pyimplementations/python/packages/raes_contracts/contracts/backend_operation_validation.pyimplementations/python/packages/raes_runtime/__init__.pyimplementations/python/packages/raes_runtime/control_plane.pyimplementations/python/packages/raes_runtime/control_plane_admission.pyimplementations/python/packages/raes_runtime/control_plane_api/__init__.pyimplementations/python/packages/raes_runtime/control_plane_api/_auth.pyimplementations/python/packages/raes_runtime/control_plane_api/_health_routes.pyimplementations/python/packages/raes_runtime/control_plane_api/_offload.pyimplementations/python/packages/raes_runtime/control_plane_api/_operation_routes.pyimplementations/python/packages/raes_runtime/control_plane_composition.pyimplementations/python/packages/raes_runtime/control_plane_configuration.pyimplementations/python/packages/raes_runtime/control_plane_durability.pyimplementations/python/packages/raes_runtime/control_plane_execution.pyimplementations/python/packages/raes_runtime/control_plane_health.pyimplementations/python/packages/raes_runtime/control_plane_lifecycle.pyimplementations/python/packages/raes_runtime/control_plane_mutation.pyimplementations/python/packages/raes_runtime/control_plane_recovery.pyimplementations/python/packages/raes_runtime/control_plane_resolution_records.pyimplementations/python/packages/raes_runtime/control_plane_store.pyimplementations/python/packages/raes_runtime/control_plane_store_local.pyimplementations/python/packages/raes_runtime/control_plane_store_local_records.pyimplementations/python/packages/raes_runtime/control_plane_store_maintenance.pyimplementations/python/packages/raes_runtime/control_plane_store_memory.pyimplementations/python/packages/raes_runtime/control_plane_store_record_migration.pyimplementations/python/packages/raes_runtime/control_plane_store_records.pyimplementations/python/packages/raes_runtime/control_plane_submission.pyimplementations/python/packages/raes_runtime/manager.pyimplementations/python/packages/raes_runtime/registry.pyimplementations/python/packages/raes_runtime/registry_target_validation.pyimplementations/python/pyproject.tomlimplementations/python/tests/control_plane_crash_fixtures.pyimplementations/python/tests/test_act_614_temporal_admission.pyimplementations/python/tests/test_act_614_temporal_durability.pyimplementations/python/tests/test_initial_service_state.pyimplementations/python/tests/test_issue_1069_participant_control_durability.pyimplementations/python/tests/test_issue_1076_compute_realization.pyimplementations/python/tests/test_issue_1092_control_plane_crash_consistency.pyimplementations/python/tests/test_issue_1180_snapshot_revision_cas.pyimplementations/python/tests/test_issue_1181_unified_control_plane_mutations.pyimplementations/python/tests/test_issue_1186_control_plane_recovery_operations.pyimplementations/python/tests/test_issue_1187_control_plane_process_loss.pyimplementations/python/tests/test_issue_1187_control_plane_security_conformance.pyimplementations/python/tests/test_issue_1204_collection_lifecycle.pyimplementations/python/tests/test_issue_1204_preparation_os.pyimplementations/python/tests/test_issue_1204_reference_profiles.pyimplementations/python/tests/test_issue_1204_result_durability.pyimplementations/python/tests/test_issue_1204_substrate_handoff.pyimplementations/python/tests/test_issue_1209_description_lifecycle.pyimplementations/python/tests/test_issue_1211_progressive_conformance.pyimplementations/python/tests/test_issue_1212_native_failure.pyimplementations/python/tests/test_issue_1212_observation_demand.pyimplementations/python/tests/test_issue_1212_runtime_boundaries.pyimplementations/python/tests/test_issue_1241_materialization_durability.pyimplementations/python/tests/test_issue_1242_scope_durability.pyimplementations/python/tests/test_issue_1359_runtime_api_trust_boundary.pyimplementations/python/tests/test_issue_1395_crossing_export.pyimplementations/python/tests/test_issue_1425_relay_plan_parity.pyimplementations/python/tests/test_libvirt_backend_techvault_honesty.pyimplementations/python/tests/test_libvirt_backend_techvault_integration.pyimplementations/python/tests/test_libvirt_backend_techvault_native.pyimplementations/python/tests/test_libvirt_conformance.pyimplementations/python/tests/test_reference_backend_components.pyimplementations/python/tests/test_reference_backend_docker_integration.pyimplementations/python/tests/test_reference_backend_provisioner.pyimplementations/python/tests/test_release_workflows.pyimplementations/python/tests/test_runtime_conformance.pyimplementations/python/tests/test_runtime_control_plane_api.pyimplementations/python/tests/test_runtime_manager.pyimplementations/python/tests/test_tooling_artifact_policy.pyimplementations/python/uv.lockimplementations/tooling/artifacts.lock.jsonimplementations/tooling/profiles/development-profiles.jsonimplementations/tooling/python/smoke/linux-arm64-cp314.txtimplementations/tooling/python/smoke/linux-arm64-cp314.wheelhouse-manifest.jsonimplementations/tooling/python/smoke/linux-x86_64-cp311.txtimplementations/tooling/python/smoke/linux-x86_64-cp311.wheelhouse-manifest.jsonimplementations/tooling/python/smoke/linux-x86_64-cp312.txtimplementations/tooling/python/smoke/linux-x86_64-cp312.wheelhouse-manifest.jsonimplementations/tooling/python/smoke/linux-x86_64-cp313.txtimplementations/tooling/python/smoke/linux-x86_64-cp313.wheelhouse-manifest.jsonimplementations/tooling/python/smoke/linux-x86_64-cp314.txtimplementations/tooling/python/smoke/linux-x86_64-cp314.wheelhouse-manifest.jsonimplementations/tooling/python/smoke/macos-arm64-cp314.txtimplementations/tooling/python/smoke/macos-arm64-cp314.wheelhouse-manifest.jsonimplementations/tooling/schemas/profiles.schema.jsonimplementations/tooling/selector-bindings.jsontools/tooling_artifact_policy_python_profiles.pyReviews
Traceability reconciliation
Proposed in this PR — verified against the merged tree in Phase E.
Status
Brad-Edwards commentedon Oct 14, 2026
Delivery readiness recorded — Phase E finalizes issue #1362 automatically when PR #1601 merges.
github-actions commentedon Oct 14, 2026
Final report — issue #1362 complete
PR: #1601
Plan: #1362 (comment)
Outcome
Operators can stop new admission and request cancellation or reconciliation while backend calls are blocked. Uncertain effects retain exclusion, and optional self-hosted distributed delivery cannot replay a consumed grant.
Supervised native and optional distributed execution with one-use authority, independent controls, retained effect exclusion and verified absence recovery.
In-scope requirements
Verified at merge revision
ec1cdce92396.API-404(Secure, Durable, And Idempotent Control-Plane Semantics) — ACTIVE — Profile clauses and P3 exclusion remain unchanged; implementation and test traceability updated.Files changed
Added:
docs/decisions/issue-1362-supervised-execution-preflight.mddocs/public/guides/supervised-execution.mddocs/research/formal-semantic-validation/capture-records/capture-8e85d3e6836ebc1157584b5fba6e67340ea5f3cb62443f3e63b6d39b55e4571d.jsondocs/research/formal-semantic-validation/capture-records/capture-91f0706003a8097741b92b978ff6539f1ab2a197dfb4f5e32597c81fe5852702.jsondocs/research/formal-semantic-validation/capture-records/capture-d2744ee8244d5e3ac074cead71a0be90e158651b63d8193c50ff7f383baf3dd2.jsondocs/research/formal-semantic-validation/capture-records/capture-f093effb94ee12eb7c81e51e10243873b51e058b86f7e56e9f519dc08e69abb1.jsondocs/research/formal-semantic-validation/capture-records/capture-f0e09c7ba4819c986a4781a5a25e40cb2faa360edef1de0847e462f668172515.jsondocs/research/formal-semantic-validation/captures/capture-8e85d3e6836ebc1157584b5fba6e67340ea5f3cb62443f3e63b6d39b55e4571d/analysis.jsondocs/research/formal-semantic-validation/captures/capture-8e85d3e6836ebc1157584b5fba6e67340ea5f3cb62443f3e63b6d39b55e4571d/manifest.jsondocs/research/formal-semantic-validation/captures/capture-8e85d3e6836ebc1157584b5fba6e67340ea5f3cb62443f3e63b6d39b55e4571d/snapshot.jsondocs/research/formal-semantic-validation/captures/capture-91f0706003a8097741b92b978ff6539f1ab2a197dfb4f5e32597c81fe5852702/analysis.jsondocs/research/formal-semantic-validation/captures/capture-91f0706003a8097741b92b978ff6539f1ab2a197dfb4f5e32597c81fe5852702/manifest.jsondocs/research/formal-semantic-validation/captures/capture-91f0706003a8097741b92b978ff6539f1ab2a197dfb4f5e32597c81fe5852702/snapshot.jsondocs/research/formal-semantic-validation/captures/capture-d2744ee8244d5e3ac074cead71a0be90e158651b63d8193c50ff7f383baf3dd2/analysis.jsondocs/research/formal-semantic-validation/captures/capture-d2744ee8244d5e3ac074cead71a0be90e158651b63d8193c50ff7f383baf3dd2/manifest.jsondocs/research/formal-semantic-validation/captures/capture-d2744ee8244d5e3ac074cead71a0be90e158651b63d8193c50ff7f383baf3dd2/snapshot.jsondocs/research/formal-semantic-validation/captures/capture-f093effb94ee12eb7c81e51e10243873b51e058b86f7e56e9f519dc08e69abb1/analysis.jsondocs/research/formal-semantic-validation/captures/capture-f093effb94ee12eb7c81e51e10243873b51e058b86f7e56e9f519dc08e69abb1/manifest.jsondocs/research/formal-semantic-validation/captures/capture-f093effb94ee12eb7c81e51e10243873b51e058b86f7e56e9f519dc08e69abb1/snapshot.jsondocs/research/formal-semantic-validation/captures/capture-f0e09c7ba4819c986a4781a5a25e40cb2faa360edef1de0847e462f668172515/analysis.jsondocs/research/formal-semantic-validation/captures/capture-f0e09c7ba4819c986a4781a5a25e40cb2faa360edef1de0847e462f668172515/manifest.jsondocs/research/formal-semantic-validation/captures/capture-f0e09c7ba4819c986a4781a5a25e40cb2faa360edef1de0847e462f668172515/snapshot.jsondocs/research/specification-coverage/capture-records/capture-0b657b62f6dadc73b2a1686e6f6923ccc522a0167f58c36faf395e0c0881599b.jsondocs/research/specification-coverage/capture-records/capture-184e9d5caf64e868778ce313cc65d8e2c5d58dd55f882685afb95e4117d603ec.jsondocs/research/specification-coverage/capture-records/capture-96ad6bd24c27f1938164885f6c983e81904c66488c9bf29a4d742a88bfcf9bac.jsondocs/research/specification-coverage/capture-records/capture-e690ba6fa95c069634c311f22bfebd99b8841bf58a9015c8b063678ac838ab65.jsondocs/research/specification-coverage/capture-records/capture-ea34bb9cc3049b48cec75f38d18ebab63235b78b197da9e6414e4dfa49edab18.jsondocs/research/specification-coverage/captures/capture-0b657b62f6dadc73b2a1686e6f6923ccc522a0167f58c36faf395e0c0881599b/analysis.jsondocs/research/specification-coverage/captures/capture-0b657b62f6dadc73b2a1686e6f6923ccc522a0167f58c36faf395e0c0881599b/manifest.jsondocs/research/specification-coverage/captures/capture-0b657b62f6dadc73b2a1686e6f6923ccc522a0167f58c36faf395e0c0881599b/snapshot.jsondocs/research/specification-coverage/captures/capture-184e9d5caf64e868778ce313cc65d8e2c5d58dd55f882685afb95e4117d603ec/analysis.jsondocs/research/specification-coverage/captures/capture-184e9d5caf64e868778ce313cc65d8e2c5d58dd55f882685afb95e4117d603ec/manifest.jsondocs/research/specification-coverage/captures/capture-184e9d5caf64e868778ce313cc65d8e2c5d58dd55f882685afb95e4117d603ec/snapshot.jsondocs/research/specification-coverage/captures/capture-96ad6bd24c27f1938164885f6c983e81904c66488c9bf29a4d742a88bfcf9bac/analysis.jsondocs/research/specification-coverage/captures/capture-96ad6bd24c27f1938164885f6c983e81904c66488c9bf29a4d742a88bfcf9bac/manifest.jsondocs/research/specification-coverage/captures/capture-96ad6bd24c27f1938164885f6c983e81904c66488c9bf29a4d742a88bfcf9bac/snapshot.jsondocs/research/specification-coverage/captures/capture-e690ba6fa95c069634c311f22bfebd99b8841bf58a9015c8b063678ac838ab65/analysis.jsondocs/research/specification-coverage/captures/capture-e690ba6fa95c069634c311f22bfebd99b8841bf58a9015c8b063678ac838ab65/manifest.jsondocs/research/specification-coverage/captures/capture-e690ba6fa95c069634c311f22bfebd99b8841bf58a9015c8b063678ac838ab65/snapshot.jsondocs/research/specification-coverage/captures/capture-ea34bb9cc3049b48cec75f38d18ebab63235b78b197da9e6414e4dfa49edab18/analysis.jsondocs/research/specification-coverage/captures/capture-ea34bb9cc3049b48cec75f38d18ebab63235b78b197da9e6414e4dfa49edab18/manifest.jsondocs/research/specification-coverage/captures/capture-ea34bb9cc3049b48cec75f38d18ebab63235b78b197da9e6414e4dfa49edab18/snapshot.jsonimplementations/python/packages/raes_runtime/control_plane_api/_supervision_routes.pyimplementations/python/packages/raes_runtime/control_plane_participant_apply.pyimplementations/python/packages/raes_runtime/control_plane_store_bounded.pyimplementations/python/packages/raes_runtime/control_plane_store_local_invocations.pyimplementations/python/packages/raes_runtime/control_plane_store_postgresql.pyimplementations/python/packages/raes_runtime/control_plane_store_postgresql_mutations.pyimplementations/python/packages/raes_runtime/control_plane_store_postgresql_schema.pyimplementations/python/packages/raes_runtime/control_plane_supervised_execution.pyimplementations/python/packages/raes_runtime/control_plane_supervision.pyimplementations/python/packages/raes_runtime/manager_lifecycle.pyimplementations/python/packages/raes_runtime/operation_command_commitment.pyimplementations/python/packages/raes_runtime/operation_control_budget.pyimplementations/python/packages/raes_runtime/operation_execution_adapter.pyimplementations/python/packages/raes_runtime/operation_invocation_ledger.pyimplementations/python/packages/raes_runtime/operation_ledger_transactions.pyimplementations/python/packages/raes_runtime/operation_policy_admission.pyimplementations/python/packages/raes_runtime/operation_provider_control.pyimplementations/python/packages/raes_runtime/operation_provider_execution.pyimplementations/python/packages/raes_runtime/operation_reconciliation.pyimplementations/python/packages/raes_runtime/operation_reconciliation_ledger.pyimplementations/python/packages/raes_runtime/operation_remote_authority.pyimplementations/python/packages/raes_runtime/operation_result_finalization.pyimplementations/python/packages/raes_runtime/operation_supervision_configuration.pyimplementations/python/packages/raes_runtime/operation_temporal.pyimplementations/python/packages/raes_runtime/operation_temporal_worker.pyimplementations/python/packages/raes_runtime/operation_temporal_workflow.pyimplementations/python/packages/raes_runtime/operation_transcript_policy.pyimplementations/python/packages/raes_runtime/operation_worker_authority.pyimplementations/python/packages/raes_runtime/runtime_resource_ownership.pyimplementations/python/tests/control_plane_supervision_crash_fixture.pyimplementations/python/tests/runtime_plan_fixtures.pyimplementations/python/tests/test_issue_1362_bounded_execution.pyimplementations/python/tests/test_issue_1362_command_privacy.pyimplementations/python/tests/test_issue_1362_commit_authority.pyimplementations/python/tests/test_issue_1362_control_budget.pyimplementations/python/tests/test_issue_1362_dependency_admission.pyimplementations/python/tests/test_issue_1362_distributed_authority.pyimplementations/python/tests/test_issue_1362_distributed_integration.pyimplementations/python/tests/test_issue_1362_http_capacity.pyimplementations/python/tests/test_issue_1362_invocation_ledger.pyimplementations/python/tests/test_issue_1362_lost_ack.pyimplementations/python/tests/test_issue_1362_observation_retention.pyimplementations/python/tests/test_issue_1362_policy_bounds.pyimplementations/python/tests/test_issue_1362_postgresql_store.pyimplementations/python/tests/test_issue_1362_provider_execution.pyimplementations/python/tests/test_issue_1362_reconciliation.pyimplementations/python/tests/test_issue_1362_resource_ownership.pyimplementations/python/tests/test_issue_1362_review_regressions.pyimplementations/python/tests/test_issue_1362_review_round_two.pyimplementations/python/tests/test_issue_1362_runtime_imports.pyimplementations/python/tests/test_issue_1362_runtime_supervision.pyimplementations/python/tests/test_issue_1362_state_authority.pyimplementations/python/tests/test_issue_1362_supervision_http.pyimplementations/python/tests/test_issue_1362_temporal_adapter.pyimplementations/python/tests/test_issue_1362_temporal_input.pyimplementations/python/tests/test_issue_1362_temporal_worker.pyimplementations/tooling/runtime_execution_ci.pyModified:
.github/workflows/canonical-verification.yml.github/workflows/ci.ymldocs/explain/reference/backend-operation-supervision.mddocs/public/guides/control-plane.mddocs/public/index.mddocs/requirements/API-404/requirement.mddocs/research/participant-bisimulation/multi-operation-construction.mdimplementations/python/packages/raes_conformance/conformance/participant_execution_probes.pyimplementations/python/packages/raes_conformance/conformance/participant_policy_execution.pyimplementations/python/packages/raes_conformance/conformance/target_probes.pyimplementations/python/packages/raes_contracts/contracts/backend_operation_validation.pyimplementations/python/packages/raes_runtime/__init__.pyimplementations/python/packages/raes_runtime/control_plane.pyimplementations/python/packages/raes_runtime/control_plane_admission.pyimplementations/python/packages/raes_runtime/control_plane_api/__init__.pyimplementations/python/packages/raes_runtime/control_plane_api/_auth.pyimplementations/python/packages/raes_runtime/control_plane_api/_health_routes.pyimplementations/python/packages/raes_runtime/control_plane_api/_offload.pyimplementations/python/packages/raes_runtime/control_plane_api/_operation_routes.pyimplementations/python/packages/raes_runtime/control_plane_composition.pyimplementations/python/packages/raes_runtime/control_plane_configuration.pyimplementations/python/packages/raes_runtime/control_plane_durability.pyimplementations/python/packages/raes_runtime/control_plane_execution.pyimplementations/python/packages/raes_runtime/control_plane_health.pyimplementations/python/packages/raes_runtime/control_plane_lifecycle.pyimplementations/python/packages/raes_runtime/control_plane_mutation.pyimplementations/python/packages/raes_runtime/control_plane_recovery.pyimplementations/python/packages/raes_runtime/control_plane_resolution_records.pyimplementations/python/packages/raes_runtime/control_plane_store.pyimplementations/python/packages/raes_runtime/control_plane_store_local.pyimplementations/python/packages/raes_runtime/control_plane_store_local_records.pyimplementations/python/packages/raes_runtime/control_plane_store_maintenance.pyimplementations/python/packages/raes_runtime/control_plane_store_memory.pyimplementations/python/packages/raes_runtime/control_plane_store_record_migration.pyimplementations/python/packages/raes_runtime/control_plane_store_records.pyimplementations/python/packages/raes_runtime/control_plane_submission.pyimplementations/python/packages/raes_runtime/manager.pyimplementations/python/packages/raes_runtime/registry.pyimplementations/python/packages/raes_runtime/registry_target_validation.pyimplementations/python/pyproject.tomlimplementations/python/tests/control_plane_crash_fixtures.pyimplementations/python/tests/test_act_614_temporal_admission.pyimplementations/python/tests/test_act_614_temporal_durability.pyimplementations/python/tests/test_initial_service_state.pyimplementations/python/tests/test_issue_1069_participant_control_durability.pyimplementations/python/tests/test_issue_1076_compute_realization.pyimplementations/python/tests/test_issue_1092_control_plane_crash_consistency.pyimplementations/python/tests/test_issue_1180_snapshot_revision_cas.pyimplementations/python/tests/test_issue_1181_unified_control_plane_mutations.pyimplementations/python/tests/test_issue_1186_control_plane_recovery_operations.pyimplementations/python/tests/test_issue_1187_control_plane_process_loss.pyimplementations/python/tests/test_issue_1187_control_plane_security_conformance.pyimplementations/python/tests/test_issue_1204_collection_lifecycle.pyimplementations/python/tests/test_issue_1204_preparation_os.pyimplementations/python/tests/test_issue_1204_reference_profiles.pyimplementations/python/tests/test_issue_1204_result_durability.pyimplementations/python/tests/test_issue_1204_substrate_handoff.pyimplementations/python/tests/test_issue_1209_description_lifecycle.pyimplementations/python/tests/test_issue_1211_progressive_conformance.pyimplementations/python/tests/test_issue_1212_native_failure.pyimplementations/python/tests/test_issue_1212_observation_demand.pyimplementations/python/tests/test_issue_1212_runtime_boundaries.pyimplementations/python/tests/test_issue_1241_materialization_durability.pyimplementations/python/tests/test_issue_1242_scope_durability.pyimplementations/python/tests/test_issue_1359_runtime_api_trust_boundary.pyimplementations/python/tests/test_issue_1395_crossing_export.pyimplementations/python/tests/test_issue_1425_relay_plan_parity.pyimplementations/python/tests/test_libvirt_backend_techvault_honesty.pyimplementations/python/tests/test_libvirt_backend_techvault_integration.pyimplementations/python/tests/test_libvirt_backend_techvault_native.pyimplementations/python/tests/test_libvirt_conformance.pyimplementations/python/tests/test_reference_backend_components.pyimplementations/python/tests/test_reference_backend_docker_integration.pyimplementations/python/tests/test_reference_backend_provisioner.pyimplementations/python/tests/test_release_workflows.pyimplementations/python/tests/test_runtime_conformance.pyimplementations/python/tests/test_runtime_control_plane_api.pyimplementations/python/tests/test_runtime_manager.pyimplementations/python/tests/test_tooling_artifact_policy.pyimplementations/python/uv.lockimplementations/tooling/artifacts.lock.jsonimplementations/tooling/profiles/development-profiles.jsonimplementations/tooling/python/smoke/linux-arm64-cp314.txtimplementations/tooling/python/smoke/linux-arm64-cp314.wheelhouse-manifest.jsonimplementations/tooling/python/smoke/linux-x86_64-cp311.txtimplementations/tooling/python/smoke/linux-x86_64-cp311.wheelhouse-manifest.jsonimplementations/tooling/python/smoke/linux-x86_64-cp312.txtimplementations/tooling/python/smoke/linux-x86_64-cp312.wheelhouse-manifest.jsonimplementations/tooling/python/smoke/linux-x86_64-cp313.txtimplementations/tooling/python/smoke/linux-x86_64-cp313.wheelhouse-manifest.jsonimplementations/tooling/python/smoke/linux-x86_64-cp314.txtimplementations/tooling/python/smoke/linux-x86_64-cp314.wheelhouse-manifest.jsonimplementations/tooling/python/smoke/macos-arm64-cp314.txtimplementations/tooling/python/smoke/macos-arm64-cp314.wheelhouse-manifest.jsonimplementations/tooling/schemas/profiles.schema.jsonimplementations/tooling/selector-bindings.jsontools/tooling_artifact_policy_python_profiles.pyReviews
Traceability reconciliation
Current head 923186c passed all 33 hosted checks, including four full-test shards, CPython 3.11–3.14, bootstrap, proof, fuzzing, real Temporal/PostgreSQL delivery and crash cases, canonical and Docker integration, policy, documentation and verify. Sonar quality gate is OK with 84.6% new-code coverage, zero open issues and zero open hotspots. Targeted runtime, SDK converter and workflow checks passed locally; full and service suites ran in CI. Fresh source-bound specification/formal captures passed selected offline replays; immutable historical model artifacts remain exact and current-source correspondence remains unestablished. API-404 remains ACTIVE; P0/P1/P2 scope and the P3 exclusion remain unchanged.
Status
test(runtime): map the PostgreSQL ledger and supervised execution to …
test(runtime): map API-404 clauses to each control-plane profile's ev…