[adrianwebb]

Outcome

Verify the first installed native Cordis composition from exact public owner archives and the merged CLI. The durable host worker owns bounded activation and safe journal read-back; the real Identity/Admin/API/HTTPS browser scene proves readiness.

Work authority

• Work item / Issue: feat: prepare Task 3B installed composition and durable host root #713
• Proposal / decision: Approved Cordis composition/provider architecture and Task 3B implementation plan.
• Assignment / checkpoint: Maintainer requested restoration per API Record SDK EF deadline failure and canonical-work repair frontier #620, review/fixes of all nine Task 3B PRs, cordis integration and task-branch cleanup in this chat.
• Actor: Codex for @adrianwebb
• Human authority: @adrianwebb; preserve repository boundaries and keep every issue including fix: align inherited skills with Cordis workflow #678 open.
• Agent / capacity provider: Codex / OpenAI
• Exact base ref: cordis 4c239f3
• Exact head ref: feature/713-task3b-installed-composition 620dccb

Contributor mode:

• Agent-authored under human authority

Plan

Review setup/design #717 → exact owner implementations and their checks → genuine installed acceptance → addressed review → cordis integration. Task 3C/3D and production cutover remain separately gated.

Changes and commits

• Public archive/source/SHA-256/lock custody and separate verified owner squash-merge/tree identities. The CLI checkout/CI pin now selects merged source 89fb78b6fd362a8de9dec9d238a310f65545175b.
• Strict TypeScript class acceptance uses real PostgreSQL, Keycloak, API, Caddy and Firefox with fixture-private CA trust. It verifies native contexts, real sign-in, scope denial, durable worker survival, lost reply, API restart/session persistence and exact browser assets.
• Review reproduced authenticated missing-application HTTP 503 before API Record runner test-first repair acceptance frontier #619's typed safe 404 fix. The final scene also exercises built CLI/worker rejection of changed daemon identity, stale generation and writer exclusion before activation or credential creation.
• README links survive deleted task branches; completion records now match verified Task 3B delivery. Setup docs: specify Task 3B setup and installed composition (#713) #717 is integrated. The ten-file integration core plus two existing plan completion records total twelve files; the added records are documentation-only.
• Canonical owner implementations remain in their six repositories. No owner runtime or cross-checkout source imports enter Platform.

Verification

• Fresh six owner strict checks/builds and 78 owner tests/program checks passed; all owner PR CI/admission passed and their reviewed trees were integrated.
• Final merged-CLI installed scene passed: 311 assertions, zero failures (polling affects the count). Actual HTTPS browser/OIDC/database/services, default worker/API construction and scoped teardown ran.
• Fifteen historical assembled/skill checks passed with the exact historical CLI; 24 changed Markdown local references resolve.
• Final exact-head Platform PR CI green: both historical runner jobs and the mandatory Ubuntu 26.04 installed-composition job.
  Earlier reviewed integration CI passed all three jobs. Final exact-head CI passed all three jobs; the installed job passed 326 assertions with the additional host-authority regressions.
  Exact artifact/integration record.

Risk and rollback

Qualified activating acceptance fixture: Ubuntu 26.04 x64/local Unix Docker only. Accepted differs from ready; full crash recovery and generalized hot replacement remain deferred. Teardown checks fixture installation/project labels before removing its containers/networks/volumes and private installation; prepared image/cache bytes may remain shared. No global trust/DNS/daemon or original service changes. Revert through a new reviewed issue-linked cordis PR if needed.

Completion summary

All eight preceding Task 3B PRs are merged and their task branches removed. API #621 restored exact pre-existing approved policy bytes; both API runtime PRs passed normal base-owned authorization. Final exact-head Platform CI passed all three jobs; the installed job passed 326 assertions. Review and all integration gates are satisfied. Concurrent legacy API and ignored SDK dependency changes were observed and preserved; no original checkout was reset. Agent/UI remain uninitialized. All issues, including #678 and API #620, remain open; #620's separate initializer-preflight proposal is still unchecked.

Submission checklist

• The change is bounded to the stated work item and target repository.
• Exact base and head refs are recorded and the branch is ready for review.
• Verification and compatibility evidence are recorded above.
• No plaintext secrets, credentials, machine state, or unrelated residue are included.
• Plan, status, commits, and completion summary form a complete durable record.
• Rollback or recovery steps are documented and executable.

Part of #713

Owner PRs: SDK #459, Deployment #909, CLI #316, Identity #45, Admin #136, API #618, API #619. Setup documentation: #717.

[adrianwebb]

Final review complete at 620dccb. All owner checks/builds/program suites (78 tests), 15 historical assembled/skill tests, 24 local Markdown references and the merged-CLI installed scene (311 local assertions) pass. Final PR CI https://github.com/treeseed-ai/platform/actions/runs/40146863691 passed both historical jobs and the genuine Ubuntu installed scene (326 assertions). Polling changes total assertion counts. API 404, engine/stale/writer exclusion, exact owner archive/merged-tree custody, scoped resource cleanup and current completion records are covered. All eight preceding Task 3B PRs and exact API policy restoration are integrated. Merging this final integration into cordis and deleting only its verified task branch. Every issue remains open; Task 3C/3D and production cutover stay unstarted.