3 Commits

Include renames

Author	SHA1	Message	Date
host	fa4588a119	CI: guard coordinator pushback test flips on parent still running (run #20 flake: post-commit flip re-failed requeued child on slow runner; test-only, no production change)	2026-11-05 02:54:22 +08:00
host	a7f77c8a98	fix: audit batch 2 visibility (I-1 shadow dropped rows, I-2 partial policy failure, I-5 failure policy table) ... - I-1: evaluate_shadow counts dropped rows by cause (unparseable / unknown_tier / explicit / duplicate) with the identity audit_rows_total == routed_task_n + dropped_total; the shadow endpoint passes created_at/id through and reports audit totals next to sample counts. - I-2 (option b): parse logs a warning naming each tier dropped for an invalid mode/requires; load attaches partial_failures to the policy; the worker records a task-level worker_routing_policy_load_failed audit for partial failures (same action as full failure, detail says failure=partial); the shadow report carries the policy fingerprint, dropped tiers and partial failures (no task context on that path, so no task-level audit there). - I-5: coordinator gate audit lookup failure now raises _CoordGateLookupFailed and the merge converts it to escalate (no requeue, no round consumed); persisted-model lookup failure and required-tools check failure each write a named audit row before falling through to dispatch/allow; audit-loop evaluate failure stays escalate (regression test). - Test fixtures: coordinator suites build audit_log via AuthStore as production's first real audit does, since their stubbed _audit never creates the table.	2026-11-04 18:02:22 +00:00
host	017f76010f	feat: coordinator audit-loop wiring at merge point ... Parent audit loop sits after all children are aggregated and before the parent final state; the single-task _audit_loop_wire is never applied to parents or children. Parent gates are per-child gates child:<name> (completed only); execution failures map to one deterministic finding per child; subjective findings are split off before evaluate and only audited as needs_review. Gate-rejected children (capability/tool/approval audit rows, or distinctive error markers) bypass evaluate and escalate directly without consuming a round; tolerated, paused and quota-missing parts are excluded, never findings. Rounds are counted only in the parent task_audit_loop_state; on pushback the packet is stored on the parent and split per failed child into that child's audit_loop_packet column, consumed once by the existing packet-injection path at next claim; pass and escalate clear parent and child packets. POST /tasks now allows audit_loop on coordinator parents (the old 400 rationale is gone); children still take no external switch.	2026-11-04 18:02:22 +00:00