From 875286b9fcad36d2e0fd47a6dd4a15ad7b224bd1 Mon Sep 17 00:00:00 2001 From: Mikhail Date: Sat, 22 Aug 2026 12:34:18 +0300 Subject: [PATCH] chore(governance): authorize work migration canary --- dev/ACTIVE_TASK.json | 4 ++-- ...00127-apply-agent-execution-migration.json | 23 +++++++++++++++++++ 2 files changed, 25 insertions(+), 2 deletions(-) create mode 100644 dev/tasks/DEV-000127-apply-agent-execution-migration.json diff --git a/dev/ACTIVE_TASK.json b/dev/ACTIVE_TASK.json index 8884878..0a3b8a3 100644 --- a/dev/ACTIVE_TASK.json +++ b/dev/ACTIVE_TASK.json @@ -1,5 +1,5 @@ { - "task_file": "dev/tasks/DEV-000126-agent-canary-repository.json", - "task_id": "DEV-000126", + "task_file": "dev/tasks/DEV-000127-apply-agent-execution-migration.json", + "task_id": "DEV-000127", "task_revision": 1 } diff --git a/dev/tasks/DEV-000127-apply-agent-execution-migration.json b/dev/tasks/DEV-000127-apply-agent-execution-migration.json new file mode 100644 index 0000000..77f46f4 --- /dev/null +++ b/dev/tasks/DEV-000127-apply-agent-execution-migration.json @@ -0,0 +1,23 @@ +{ + "task_id": "DEV-000127", + "task_revision": 1, + "architecture_revision": "ADR-0018", + "base_repo_revision": "8e26826", + "risk_tier": "E", + "intent": "Apply the already reviewed additive Work migration 029 on the canonical docker-prod PostgreSQL instance for controlled canary preparation.", + "requirement_ids": ["WP-301", "Migration canary", "Durable execution readiness"], + "allowed_change_scope": {"modules": ["work-storage"], "paths": ["dev/ACTIVE_TASK.json", "dev/tasks/DEV-000127-apply-agent-execution-migration.json"]}, + "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "deploy/**", "cmd/**", "runtime/**", "adapters/**", ".gitea/**"]}, + "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0}, + "contracts": {"consume": ["DEV-000121 migration 029", "DEV-000126 repository wiring"], "may_change": ["Canonical production Work schema state"]}, + "semantic_owner": "work-agent-execution", + "canonical_state": ["docker-prod assistant PostgreSQL work schema"], + "state_transitions": ["tables absent -> tables present and verified"], + "side_effects_and_privileges": ["One additive transactional migration through existing bootstrap/superuser path; no secrets printed"], + "persistence_and_migrations": ["Apply database/migrations/029_work_agent_execution_persistence.sql exactly once"], + "failure_retry_restart": ["ON CONFLICT-safe DDL; ON_ERROR_STOP; verify before any retry"], + "assumptions": ["docker-prod is the canonical target", "migration file is already committed and reviewed", "runtime remains disabled until a later canary"], + "acceptance_scenarios": ["All three Work tables exist after apply", "No non-Work schema changes", "Existing production containers remain running"], + "required_tests": ["pre-apply table absence evidence", "migration apply exit 0", "post-apply table existence verification", "docker-prod container health read-only check", "git diff --check"], + "terminal_gap_states": ["BLOCKED_BY_MIGRATION_DECISION", "BLOCKED_BY_CONFLICT"] +}