{
  "task_id": "DEV-000159",
  "task_revision": 1,
  "architecture_revision": "ADR-0018",
  "base_repo_revision": "e1186757bfcf9a349ce0ced603f4a4ebdad636fe",
  "risk_tier": "E",
  "intent": "Expose the already-supported optional Agent Execution bridge URL to the production agent-worker without enabling it when unset.",
  "requirement_ids": ["WP-301", "Agent Execution runtime and recovery"],
  "allowed_change_scope": {"modules": ["deployment", "work-agent-execution"], "paths": ["deploy/docker-compose.prod.yml", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000159-agent-bridge-config-wiring.json"]},
  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "contracts/**", "cmd/**", "modules/**", "adapters/**", ".gitea/**"]},
  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 1, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
  "contracts": {"consume": ["AGENT_EXECUTION_BRIDGE_URL deployment variable", "agent-worker optional bridge behavior"], "may_change": []},
  "semantic_owner": "deployment projection; work-agent-execution remains owner",
  "canonical_state": ["none"],
  "state_transitions": ["unset URL -> recovery-only; configured URL -> existing typed HTTP executor path"],
  "side_effects_and_privileges": ["deployment privileged-surface review is declared; no effective new privilege; no credential forwarding; no outbound call when variable is empty"],
  "persistence_and_migrations": ["none"],
  "failure_retry_restart": ["existing worker fail-closed and stale recovery behavior remains unchanged"],
  "assumptions": ["an independently operated bridge is still required before enabling the variable in production", "empty default preserves current recovery-only behavior"],
  "acceptance_scenarios": ["production compose renders with empty bridge URL", "agent-worker remains recovery-only when unset", "configured URL is available to the process without source secret", "no bridge runtime is fabricated"],
  "required_tests": ["JSON validation", "docker compose config", "go test", "go vet", "preflight", "check-diff", "check-architecture", "independent", "git diff --check", "CI"],
  "terminal_gap_states": ["BLOCKED_BY_MISSING_CAPABILITY", "BLOCKED_BY_CONFLICT"]
}