{
  "task_id": "DEV-000151",
  "task_revision": 1,
  "architecture_revision": "ADR-0018",
  "base_repo_revision": "6871e36657a10e8ad7fb1e059efdc2dde394ebbd",
  "risk_tier": "E",
  "intent": "Expose truthful agent-worker executor capability status to the authenticated operations cabinet while preserving recovery-only behavior when no bridge is configured.",
  "requirement_ids": ["WP-301", "WP-804", "INV-TOPO-001"],
  "allowed_change_scope": {"modules": ["work", "interaction", "agent-worker"], "paths": ["cmd/agent-worker/**", "cmd/creator-web/**", "deploy/docker-compose.prod.yml", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000151-agent-worker-status-ui.json"]},
  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", ".gitea/**", "database/**", "contracts/**", "modules/**", "adapters/**"]},
  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 1, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
  "contracts": {"consume": ["creator session", "agent-worker status HTTP response"], "may_change": []},
  "semantic_owner": "work",
  "canonical_state": [],
  "state_transitions": ["executor configured -> execution status; executor absent -> recovery-only status"],
  "side_effects_and_privileges": ["read-only internal status endpoint and authenticated UI proxy"],
  "persistence_and_migrations": [],
  "failure_retry_restart": ["status remains truthful across worker restart; no dispatch claim is introduced"],
  "assumptions": ["agent-worker and creator-web share the production compose network", "AGENT_EXECUTION_BRIDGE_URL remains the only execution activation input"],
  "acceptance_scenarios": ["worker status reports recovery-only when bridge absent", "readyz is non-ready without executor", "unauthenticated public status proxy returns 401", "authenticated cabinet renders degraded capability reason", "compose wiring reaches internal worker status"],
  "required_tests": ["go test ./...", "go vet ./...", "preflight", "check-diff", "git diff --check", "check-architecture", "independent", "docker compose config"],
  "terminal_gap_states": ["BLOCKED_BY_MISSING_CAPABILITY", "BLOCKED_BY_CONFLICT"]
}