{
  "task_id": "DEV-000069",
  "task_revision": 1,
  "architecture_revision": "ADR-0017",
  "base_repo_revision": "d870e1361d6dcef3866d7339495d83b9756949c4",
  "risk_tier": "E",
  "intent": "Introduce a provider-neutral external intelligent agent delegation foundation and the first Codex bridge implementation for software-engineering work without making Codex a canonical subsystem.",
  "requirement_ids": [
    "ADR-0017",
    "ADR-0012",
    "ADR-0013",
    "ADR-0016",
    "INV-OWN-001",
    "INV-EPI-001",
    "INV-TOPO-001",
    "General external agent representation",
    "Durable delegation and resumable runs",
    "Codex bridge as first AGENT implementation",
    "Execution-window continuation",
    "Delegation experience evidence"
  ],
  "allowed_change_scope": {
    "modules": [
      "work",
      "capability",
      "continuity",
      "epistemics",
      "interaction",
      "situation",
      "artifact"
    ],
    "paths": [
      "contracts/work/**",
      "contracts/capability/**",
      "contracts/artifact/**",
      "contracts/epistemics/**",
      "contracts/continuity/**",
      "contracts/interaction/**",
      "modules/work/**",
      "modules/capability/**",
      "modules/epistemics/**",
      "modules/continuity/**",
      "adapters/postgres/**",
      "cmd/core-runtime/**",
      "cmd/creator-web/**",
      "cmd/continuity-runtime/**",
      "database/migrations/**",
      "deploy/docker-compose.dev.yml",
      "deploy/docker-compose.prod.yml",
      "deploy/windows/**",
      "tests/**",
      "docs/PROJECT_STATUS.md",
      "architecture/adrs/ADR-0017-general-agent-delegation-codex-bridge.md",
      "dev/ACTIVE_TASK.json",
      "dev/tasks/DEV-000069-general-agent-delegation-codex-bridge.json"
    ]
  },
  "forbidden_change_scope": {
    "paths": [
      "architecture/ARCHITECTURE_CONSTITUTION.md",
      "architecture/architecture-registry.yaml",
      "architecture/architecture-registry.json",
      "modules/authority/**",
      "modules/commit/**",
      "cmd/commit-runtime/**",
      "security/**",
      "ci/**",
      ".gitea/**"
    ]
  },
  "allowed_architecture_delta": {
    "new_cross_module_dependencies": 0,
    "new_canonical_owners": 0,
    "new_privileges": 0,
    "new_third_party_dependencies": 0,
    "new_provider_adapters": 0,
    "new_runtime_secret_file_for_existing_owner": "only if an already-approved bridge/runtime prerequisite requires a least-privilege credential"
  },
  "contracts": {
    "consume": [
      "Interaction HumanUtterance / OriginalHumanIntent",
      "Situation focus and project resolution",
      "Work Goal / PlanCandidate / CapabilityRequirement / DelegationCandidate",
      "Capability CapabilityImplementation / CapabilityResolution / CapabilityUsageObservation",
      "Continuity Attention / HumanResponse",
      "Epistemics ExperienceRecord / ReflectionCandidate",
      "Artifact metadata refs"
    ],
    "may_change": [
      "contracts/work@v1",
      "contracts/capability@v1",
      "contracts/artifact@v1",
      "contracts/epistemics@v1"
    ]
  },
  "semantic_owner": "work",
  "canonical_state": [
    "CapabilityImplementation(kind=AGENT)",
    "Delegation",
    "AgentRun",
    "AgentCheckpoint",
    "AgentResult"
  ],
  "state_transitions": [
    "OriginalHumanIntent -> optional Goal/Plan -> CapabilityRequirement -> real Delegation",
    "Delegation -> AgentRun STARTED -> RUNNING/WAITING/CHECKPOINTED/EXECUTION_WINDOW_EXHAUSTED/BLOCKED/FAILED/COMPLETED/CANCELLED",
    "execution window exhaustion -> durable checkpoint -> resumed run on same higher-level Delegation",
    "human-dependent blocker -> AttentionItem -> natural HumanResponse -> continue delegation/work",
    "agent result evidence -> verification -> Work completion decision -> ExperienceRecord"
  ],
  "side_effects_and_privileges": [
    "No new canonical owner and no Codex-specific canonical subsystem",
    "No direct external mutation outside existing Authority/Commit boundaries",
    "Agent-specific instruction is derived adapter context, not canonical human intent",
    "Codex bridge may use only the least-privilege runtime/credential path required for bounded repository work",
    "Docker-test remains prohibited"
  ],
  "persistence_and_migrations": [
    "owner-local Work and Capability schema extensions only",
    "no cross-owner FK",
    "no cross-owner SQL join dependency",
    "result evidence stored by typed refs/metadata rather than payload duplication where possible"
  ],
  "failure_retry_restart": [
    "execution-window exhaustion is resumable and not automatic work failure",
    "technical agent failure is distinct from human-dependent blocker",
    "agent self-report is insufficient for Work completion without verification evidence",
    "Codex unavailable must create capability unavailability/gap rather than startup failure"
  ],
  "assumptions": [
    "DEV-000068 production foundation is active",
    "CapabilityImplementation(kind=AGENT) is sufficient for a general agent descriptor V1",
    "Work is the minimal correct owner for durable delegation lifecycle",
    "Continuity attention/human-response foundations from DEV-000066 can be reused for delegation waiting/blockers"
  ],
  "acceptance_scenarios": [
    "software-engineering requirement resolves through executor-neutral capability resolution",
    "Codex is represented as an implementation, not canonical capability identity",
    "delegation run checkpoints and resumes after execution-window exhaustion",
    "human-dependent blocker surfaces through Attention while technical failure does not masquerade as human blocker",
    "agent-specific execution instruction is derived from canonical context and OriginalHumanIntent remains unchanged",
    "safe real self-development scenario creates delegation, run, checkpoint/result evidence and ExperienceRecord",
    "LLM-free system starts when Codex bridge is unavailable"
  ],
  "required_tests": [
    "go test ./...",
    "go vet ./...",
    "go run ./cmd/devctl preflight -active dev/ACTIVE_TASK.json",
    "go run ./cmd/devctl check-architecture",
    "go run ./cmd/devctl check-diff -active dev/ACTIVE_TASK.json",
    "tests/cognitive_advisory/cognitive_worker_env_policy_test.ps1",
    "tests/owner_acl/verify.ps1 -DockerContext docker-prod -PostgresContainer assistant-postgres-1",
    "delegation/resume/attention/provider-neutral contract tests",
    "production health",
    "safe live Codex delegation acceptance"
  ],
  "terminal_gap_states": [
    "BLOCKED_BY_ARCHITECTURE_GAP",
    "BLOCKED_BY_SPEC_GAP",
    "BLOCKED_BY_MISSING_CAPABILITY",
    "BLOCKED_BY_CONFLICT"
  ]
}