[verified] Define fail-closed worktree creator-role compatibility

2026-10-12 02:10:37 +00:00
parent 2ad836f332
commit aeab04289d
5 changed files with 62 additions and 4 deletions
@@ -41,6 +41,11 @@ create/reuse deltas, metadata causality and failed-receipt preservation are
 fail-closed. The workflow contract and canonical runtime artifact paths are in
 `harness/agents/impl/skills/gitea-issue-rework/references/readback.md`.

+The review native adapter's registered-worktree fixture accepts only exact
+`gitea-impl-agent` or read-only legacy `impl` creator-role literals. It preserves
+`state.json` bytes/mode/mtime/inode and rejects malformed role values without
+relaxing the Issue lease, Git, target, or security guards.
+
 It validates all `test*.py` files recursively under exactly these required
 roles: `common`, `spec`, `impl`, and `review`. `harness/tests`, every role, and
 every nested test package must have an `__init__.py`; every role and every