107 lines
4.8 KiB
JSON
107 lines
4.8 KiB
JSON
{
|
|
"task_id": "GEN2-021",
|
|
"task_revision": 1,
|
|
"architecture_revision": "ARCH-GEN2-000",
|
|
"base_repo_revision": "gen2-integration",
|
|
"risk_tier": "E",
|
|
"intent": "Самоизменение Домового не должно уметь уничтожить единственный механизм собственного отката.",
|
|
"requirement_ids": [
|
|
"REQ-GEN2-021-GOAL",
|
|
"REQ-GEN2-021-BOUNDARY",
|
|
"REQ-GEN2-021-GATE"
|
|
],
|
|
"allowed_change_scope": {
|
|
"modules": [],
|
|
"paths": [
|
|
"runtime/supervisor/**",
|
|
"cmd/supervisor/**",
|
|
"deploy/**",
|
|
"runtime/health/**",
|
|
"scripts/**",
|
|
"tests/**",
|
|
"dev/ACTIVE_TASK.json",
|
|
"dev/tasks/GEN2-021-add-independent-supervisor-lifeboat-for-release-health-and-rollback.json"
|
|
]
|
|
},
|
|
"forbidden_change_scope": {
|
|
"paths": [
|
|
"security/**",
|
|
"go.mod",
|
|
"go.sum",
|
|
"architecture/**",
|
|
".gitea/workflows/**",
|
|
"database/**",
|
|
"adapters/models/**"
|
|
]
|
|
},
|
|
"allowed_architecture_delta": {
|
|
"new_cross_module_dependencies": 0,
|
|
"new_canonical_owners": 0,
|
|
"new_privileges": 1,
|
|
"new_third_party_dependencies": 0,
|
|
"new_database_owner_roles": 0
|
|
},
|
|
"contracts": {
|
|
"consume": [
|
|
"contracts.commit@v1",
|
|
"contracts.configuration@gen2"
|
|
],
|
|
"may_change": []
|
|
},
|
|
"semantic_owner": "Runtime only. Follow GEN2 target architecture: owner boundaries are authoritative; Memory remains a read/retrieval fabric, World is not truth owner, SELF is not a God orchestrator.",
|
|
"canonical_state": [
|
|
"Supervisor writes runtime release state only",
|
|
"No task may create a second canonical owner for an already-owned mutable semantic concept."
|
|
],
|
|
"state_transitions": [
|
|
"task input -> bounded Gen2 change -> FAST verification -> merge to gen2-integration; canonical writer rule: Supervisor writes runtime release state only"
|
|
],
|
|
"side_effects_and_privileges": [
|
|
"No external mutation may bypass existing Authority -> Commit -> Executor boundaries.",
|
|
"Do not weaken architecture/security/test guardrails to make the task pass.",
|
|
"Deploy/release surface changes are allowed only for the bounded purpose of this packet; production promotion requires the packet's stated evidence and rollback path.",
|
|
"Supervisor/Lifeboat must remain operationally independent from the candidate runtime it watches."
|
|
],
|
|
"persistence_and_migrations": [
|
|
"No database schema change is authorized by this packet unless a revised task explicitly grants database/migration scope."
|
|
],
|
|
"failure_retry_restart": [
|
|
"Rollback rule: Supervisor itself versioned conservatively; previous release remains bootable",
|
|
"Retries/restarts must not create duplicate external side effects or a second canonical writer.",
|
|
"Durable state required by this task must survive process restart; process-local memory is never the only source of truth."
|
|
],
|
|
"assumptions": [
|
|
"Program milestone: M4; test profile: FAST.",
|
|
"Task branch starts from local gen2-integration; base_repo_revision=gen2-integration must resolve to the untouched integration base while the task branch is active.",
|
|
"Codex reads DOMOVOY_CONSTITUTION.md, GEN2_TARGET_ARCHITECTURE.md, GEN2_CANONICAL_DATA_MODEL.md, GEN2_MIGRATION_MAP.md, GEN2_MASTER_PLAN.md and GEN2_EXECUTION_CONTRACT.md before non-trivial edits.",
|
|
"Do not expand scope silently. If a required change falls outside allowed paths or changes ownership, return a typed gap and request a task revision.",
|
|
"Depends on: GEN2-020."
|
|
],
|
|
"acceptance_scenarios": [
|
|
"GEN2-021-SCN-01: candidate release start",
|
|
"GEN2-021-SCN-02: health/readiness contract",
|
|
"GEN2-021-SCN-03: controlled traffic/switch",
|
|
"GEN2-021-SCN-04: watchdog observation",
|
|
"GEN2-021-SCN-05: automatic rollback to last known good",
|
|
"GEN2-021-SCN-06: persist release/switch evidence outside candidate process dependency",
|
|
"GEN2-021-SCN-07: emergency manual control path",
|
|
"GEN2-021-SCN-08: не давать Supervisor доступ к semantic decisions пользователя",
|
|
"GEN2-021-EXIT: сломанный candidate Assistant не блокирует восстановление последней рабочей версии."
|
|
],
|
|
"required_tests": [
|
|
"FAST: go test ./runtime/supervisor/... ./runtime/health/... ./cmd/supervisor/...",
|
|
"FAST: go vet ./runtime/supervisor/... ./runtime/health/... ./cmd/supervisor/...",
|
|
"FAST governance: go run ./cmd/devctl preflight -active dev/ACTIVE_TASK.json",
|
|
"FAST scope: go run ./cmd/devctl check-diff -active dev/ACTIVE_TASK.json",
|
|
"FAST independent: go run ./cmd/devctl/independent",
|
|
"FAST whitespace: git diff --check gen2-integration --"
|
|
],
|
|
"terminal_gap_states": [
|
|
"BLOCKED_BY_SPEC_GAP",
|
|
"BLOCKED_BY_ARCHITECTURE_GAP",
|
|
"BLOCKED_BY_MISSING_CAPABILITY",
|
|
"BLOCKED_BY_CONFLICT",
|
|
"REQUIRES_MIGRATION_DECISION"
|
|
]
|
|
}
|