{
  "task_id": "DEV-000127",
  "task_revision": 1,
  "architecture_revision": "ADR-0018",
  "base_repo_revision": "8e26826",
  "risk_tier": "E",
  "intent": "Apply the already reviewed additive Work migration 029 on the canonical docker-prod PostgreSQL instance for controlled canary preparation.",
  "requirement_ids": ["WP-301", "Migration canary", "Durable execution readiness"],
  "allowed_change_scope": {"modules": ["work-storage"], "paths": ["dev/ACTIVE_TASK.json", "dev/tasks/DEV-000127-apply-agent-execution-migration.json"]},
  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "deploy/**", "cmd/**", "runtime/**", "adapters/**", ".gitea/**"]},
  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
  "contracts": {"consume": ["DEV-000121 migration 029", "DEV-000126 repository wiring"], "may_change": ["Canonical production Work schema state"]},
  "semantic_owner": "work-agent-execution",
  "canonical_state": ["docker-prod assistant PostgreSQL work schema"],
  "state_transitions": ["tables absent -> tables present and verified"],
  "side_effects_and_privileges": ["One additive transactional migration through existing bootstrap/superuser path; no secrets printed"],
  "persistence_and_migrations": ["Apply database/migrations/029_work_agent_execution_persistence.sql exactly once"],
  "failure_retry_restart": ["ON CONFLICT-safe DDL; ON_ERROR_STOP; verify before any retry"],
  "assumptions": ["docker-prod is the canonical target", "migration file is already committed and reviewed", "runtime remains disabled until a later canary"],
  "acceptance_scenarios": ["All three Work tables exist after apply", "No non-Work schema changes", "Existing production containers remain running"],
  "required_tests": ["go test ./...", "go vet ./...", "preflight", "check-diff", "check-architecture", "independent", "pre-apply table absence evidence", "migration apply exit 0", "post-apply table existence verification", "docker-prod container health read-only check", "git diff --check"],
  "terminal_gap_states": ["BLOCKED_BY_MIGRATION_DECISION", "BLOCKED_BY_CONFLICT"]
}