[schickling-assistant]

Change

Existing-socket subscription, pure command grant policy, canonical signed results and shared golden vectors.

Head: bc2e3076a4b972b64a19b2ec1ee57588dc8b604c; diffstat 7 files +287/-0.

Depends on #6270 (test-client flag) and #6274 (codegen).

Stack

#6287 → #6311 → #6312 → #6324, all draft. Canonical base: 972b65b (source 5613f10). #6270 is NOT merged: absent Expo extra testClientMode means normal/inert; only === true enables commands. #6274 remains the trunk dependency, not an owned stack member; no push or PR mutation to it.

Generated contract and shipped paths

Models.generated.ts:1318–1328 defines ClientControlGrantLifecycle; :3419 includes it in Resource. ClientControl.generated.ts:42–52 exports ClientControlSha256/defaultWebCryptoSha256 and injectable digest/canonicalization helpers. Existing session-scoped commands socket carries both generated rows; no handwritten wire arm or second socket.

Only own-device/session started lifecycle authority admits matching per-command control_grant. Sequences are positive safe integers; stale/incremental duplicates are ignored and terminal grants cannot reopen. End/revoke, including claim/run ending while idle, clears authority/indicator and in-flight results. Local revoke immediately clears authority and invokes generated clientTestRevoke. Inspect/navigate never invoke answer/close/read APIs.

Signing uses Expo Crypto.digest(SHA256) through generated canonicalization, without crypto.subtle/polyfill/dependency. The cast-free ArrayBuffer-backed view remains necessary because ClientControlSha256 still accepts broad Uint8Array and Expo requires BufferSource; ordinary ArrayBuffer inputs use a zero-copy view, shared buffers use an owned copy. Generated invalid-unicode errors refuse before signing/posting.

Reconnect reconciliation choice

suspend clears current authority but preserves lifecycle sequence history and terminal tombstones. Fresh snapshot reconciliation is explicitly distinct from incremental duplicate suppression: an unchanged current started lifecycle restores authority/indicator; lower sequences and terminal states remain refused. Lifecycle rows are reconciled before command rows. Tests cover unchanged-start reconnect with navigation/results, revoked reconnect, lower-sequence snapshots, foreign device/session snapshots and replacement snapshots without lifecycle. The last two requested follow-ups fit in seven added lines.

Verification: CI=1 nice -n 10, apps/ios

• Clean base 972b65b: pnpm test exit0; 317 total / 313 passed / 0 failed / 4 skipped / 0 TODO. pnpm typecheck exit0.
• Exact complete stack head 946c82a: pnpm test exit0; 379 total / 375 passed / 0 failed / 4 skipped / 0 TODO. pnpm typecheck exit0.
• Failing-test sets: base = {}; head = {}. Typecheck failure sets: base = {}; head = {}. Four skips are inherited unchanged. All new tests pass; no TODO remains.
• Shared golden coverage includes canonical bytes/digests, P-256 signatures/domain separation, sequence-zero refusal through Feed→controller and injected hashing without WebCrypto.

Pending-on-codegen

None. Both prior upstream typecheck failures are fixed by this canonical base; lifecycle/hash-callback/invalid-Unicode bindings are integrated.

NOT RUN

Intermediate layers separately; native compile/install/device/XCUITest accessibility observation; enrollment; live daemon/socket smoke; signing/provisioning; fixture-owner mutation checks. JSX tests prove source-level host trees, not native accessibility receipts.

All authored/restacked commits are signed (G); four branches pushed with ST_SKIP_EVIDENCE=1 through gh stack. Release-note statuses use none/changed/unknown.

Posted on behalf of @schickling

field	value
agent_identity	agent/compoundingtech/st-ios
session	01a12d5f
agent_persona	generalist
agent_supervisor	unavailable
agent_tool	OMP
agent_tool_version	18.12.5
agent_runtime	OMP 18.12.5
agent_model	anthropic/claude-opus-5-5
worktree	fractal/2026-11-10-ios-client-control-lifecycle

[schickling-assistant]

Independent review (reviewer agent ClientControlStackReview, read-only), relayed by st-ios: PASS at head 0048455e33d96adb5e4dcdbe6e310483d5a5f88a, no findings (confidence 0.86). Stack: #6287 → #6311 → #6312 on #6274 generated head 36592f7. Checked: NowRoot/Attention-only routing and refusals, generated per-command grant admission, generated canonical signing against golden vectors, fail-closed Hermes SHA-256 and lifecycle (indicator hidden), test-mode gating, shipped-renderer seed tests. NOT RUN by the reviewer: pnpm test/typecheck (mbp2025 stand-down), builds, simulator/device, native accessibility. Worker-reported at the stack top: pnpm test 354 pass / 0 fail / 1 TODO, typecheck exit 0; at base 36592f7: 313 pass / 0 fail. Pending: lifecycle resource and injectable sha256 from the next regeneration.

Posted on behalf of @schickling

field	value
agent_identity	agent/compoundingtech/st-ios
session	01a1069f
agent_persona	generalist
agent_supervisor	unavailable
agent_tool	OMP
agent_tool_version	18.12.5
agent_runtime	OMP 18.12.5
agent_model	anthropic/claude-opus-5-5
worktree	unknown

[schickling-assistant]

Independent review (reviewer agent LifecycleReview), relayed by st-ios: restack onto 6fb398c PASS at 6b6744874cf2a1d4e59cc2a06c68f50eed6c96cd: the app and release-note trees match the earlier PASS head at each boundary, and the patches are unchanged apart from the rebase. NOT RUN by the reviewer: tests, builds.

Posted on behalf of @schickling

field	value
agent_identity	agent/compoundingtech/st-ios
session	01a1069f
agent_persona	generalist
agent_supervisor	unavailable
agent_tool	OMP
agent_tool_version	18.12.5
agent_runtime	OMP 18.12.5
agent_model	anthropic/claude-opus-5-5
worktree	unknown

[schickling-assistant]

Independent delta review (reviewer agent LifecycleReview, read-only), relayed by st-ios: PASS at bc2e3076a4b972b64a19b2ec1ee57588dc8b604c after the restack onto #6274 corrected head 972b65b. Patches are unchanged apart from the corrected base files; #6324 adds only the 7-line follow-up tests (foreign device, foreign session and absent-lifecycle snapshots refuse authority); the Expo hash adapter is unchanged and correct (zero-copy view keeps byteOffset/byteLength; shared buffers get an owned copy). No findings. NOT RUN by the reviewer: tests, typecheck, builds, device. Worker-reported: base 313 pass/0 fail, typecheck exit 0; stack top 375 pass/0 fail/0 TODO, typecheck exit 0.

Posted on behalf of @schickling

field	value
agent_identity	agent/compoundingtech/st-ios
session	01a1069f
agent_persona	generalist
agent_supervisor	unavailable
agent_tool	OMP
agent_tool_version	18.12.5
agent_runtime	OMP 18.12.5
agent_model	anthropic/claude-opus-5-5
worktree	unknown