ace-assign 0.63.1 → 0.64.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7d743c208ce34b070929c7c5cc2acdd200289e7a82e3e2acd62129ec1d22daa5
-  data.tar.gz: 3b4e13b527152e703f7a489f0c7b123b0676c682f6eccb3bd6f30680cf96ace2
+  metadata.gz: f8f85e3c4fd7760b26493ade861cb5a7b1fda59227909762005d75ee2dc14db1
+  data.tar.gz: 3a491eefefece8e3e7995f68e4fd84536a3e55e436c503119555ea55a17da464
 SHA512:
-  metadata.gz: eeba37f93e80112453a79322c0496b6dc5753f5da072556575836a142827c2a3724848978eec0025598babbe1077def70f77fee49df79dd5ae6f54ea668fdd2d
-  data.tar.gz: f78cf53f13cbb76fb67d7a72756189063fa39d0dddb8eb3b55c28e7acd16377e0fc0a486b126fafe926791905871610800f719d166a55a1e2e65431fe62a3724
+  metadata.gz: 0a47581f03920859a3712c10026b0bd034127dfd640c33d64636d88543108ebc2815b475414eccef721ac5d68db1a625a2538c8ffcc381c02cf851041206bb1e
+  data.tar.gz: 1bf276d020c5ff7c2740d9d9a3ccaf9837af09197156ded76af8f7d6ca27cb99bf4b24cfb7f1176b3134cc9ecf732822302a3ddd987355e6ff0dbecfd9ada77c

data/.ace-defaults/assign/catalog/steps/create-pr.step.yml

@@ -1,3 +1,3 @@
 name: create-pr
-skill: as-github-pr-create
-instructions: "Create the pull request with --draft before PR review begins."
+skill: as-git-pr-create
+instructions: "Use ace-assign delivery --assignment ID --attempt ATTEMPT --operation create --title TITLE --body-file DESCRIPTION. The canonical workflow creates or reconciles a draft by default before independent review."

data/.ace-defaults/assign/catalog/steps/mark-pr-ready.step.yml

@@ -1,6 +1,6 @@
 name: mark-pr-ready
 description: Mark a reviewed draft pull request ready after the review completion rule
-instructions: "After the review completion rule is met and appropriate tests have passed, run gh pr ready on the draft PR."
+instructions: "After the review completion rule is met and appropriate tests have passed, run ace-assign delivery --assignment ID --attempt ATTEMPT --operation ready --tests TEST-REF --review REVIEW-REF with accepted exact-head evidence."
 prerequisites:
   - name: review-pr
     strength: required

data/.ace-defaults/assign/catalog/steps/release-minor.step.yml

@@ -1,5 +1,5 @@
 name: release-minor
-description: Release modified packages and update CHANGELOGs following semver
+description: Prepare modified package versions and CHANGELOGs; publication is separate
 
 prerequisites:
   - name: verify-test
@@ -17,7 +17,9 @@ when_to_skip:
   - "No version-worthy changes since last release"
   - "Release is handled externally"
 
-workflow: wfi://release/publish
+workflow: wfi://release/bump-version
 
 effort: light
 tags: [git, versioning, release]
+
+instructions: "Prepare version/changelog changes only. Do not publish gems, deploy, or create a release merely because delivery completes."

data/.ace-defaults/assign/catalog/steps/release.step.yml

@@ -1,5 +1,5 @@
 name: release
-description: Release modified packages and update CHANGELOGs following semver
+description: Prepare modified package versions and CHANGELOGs; publication is separate
 
 prerequisites:
   - name: work-on-task
@@ -17,7 +17,9 @@ when_to_skip:
   - "No version-worthy changes since last release"
   - "Release is handled externally"
 
-workflow: wfi://release/publish
+workflow: wfi://release/bump-version
 
 effort: light
 tags: [git, versioning, release]
+
+instructions: "Prepare version/changelog changes only. Do not publish gems, deploy, or create a release merely because delivery completes."

data/.ace-defaults/assign/catalog/steps/update-pr-desc.step.yml

@@ -1,5 +1,5 @@
 name: update-pr-desc
-skill: as-github-pr-update
+skill: as-git-pr-update
 description: Update PR description with implementation summary and final state
 intent:
   phrases:

data/.ace-defaults/assign/presets/fix-bug.yml

@@ -5,6 +5,18 @@ name: fix-bug
 description: Fix an issue, verify tests, and create a reviewed PR
 
 parameters:
+  forge_server:
+    required: false
+    type: string
+    description: Named configured forge; mutually exclusive with forge_default
+  forge_default:
+    required: false
+    type: boolean
+    description: Explicitly select the configured default forge
+  pr_provenance:
+    required: false
+    type: object
+    description: Explicit mode, head_repository_url, head_ref, base_repository_url and base_ref; required before remote delivery
   taskref:
     required: true
     description: Task reference for the bug fix (e.g., 123 or 256.01)
@@ -37,7 +49,7 @@ steps:
       - Ensure all required checks pass before continuing.
 
   - name: create-pr
-    skill: as-github-pr-create
+    skill: as-git-pr-create
     instructions:
       - Create a pull request for the bug fix.
       - Create it as a draft with --draft; mark it ready only after the review completion rule is met.
@@ -50,13 +62,13 @@ steps:
       - "Verify findings, fix concrete defects, and run appropriate tests. Record rounds and dispositions; commits do not reset counters."
 
   - name: update-pr-desc
-    workflow: wfi://github/pr/update
+    workflow: wfi://git/pr/update
     instructions:
       - "Record the review rounds, actual reviewers, findings and tests in the PR description before marking it ready."
 
   - name: mark-pr-ready
     instructions:
-      - "After review completes and appropriate tests pass, run `gh pr ready` on the draft PR."
+      - "After review completes and appropriate tests pass, run `ace-assign delivery --assignment ID --attempt ATTEMPT --operation ready --tests TEST-REF --review REVIEW-REF` with accepted exact-head test and independent review references."
 
 customization_hints:
   - "Add fix-tests after verify-test-suite if failures found"

data/.ace-defaults/assign/presets/work-on-task-ace-development.yml

@@ -5,6 +5,18 @@ name: work-on-task-ace-development
 description: Full ACE development pipeline with batching, releases, demo recording, and retrospectives
 
 parameters:
+  forge_server:
+    required: false
+    type: string
+    description: Named configured forge; mutually exclusive with forge_default
+  forge_default:
+    required: false
+    type: boolean
+    description: Explicitly select the configured default forge
+  pr_provenance:
+    required: false
+    type: object
+    description: Explicit mode, head_repository_url, head_ref, base_repository_url and base_ref; required before remote delivery
   taskrefs:
     required: true
     type: array
@@ -26,11 +38,11 @@ steps:
   - name: release-minor
     number: "020"
     instructions:
-      - Release all modified packages touched by this batch.
+      - Prepare version and changelog changes for modified packages only; publishing is a separate authorized operation.
 
   - name: create-pr
     number: "030"
-    workflow: wfi://github/pr/create
+    workflow: wfi://git/pr/create
     instructions:
       - "Create a pull request summarizing batch tasks: {{taskrefs}}."
       - "Create it as a draft with --draft; mark it ready only after the review completion rule is met."
@@ -61,11 +73,11 @@ steps:
 
   - name: update-pr-desc
     number: "149"
-    workflow: wfi://github/pr/update
+    workflow: wfi://git/pr/update
     instructions:
       - "Record the review rounds, actual reviewers, findings and tests in the PR description before marking it ready."
 
   - name: mark-pr-ready
     number: "150"
     instructions:
-      - "After review completes and appropriate tests pass, run `gh pr ready` on the draft PR."
+      - "After review completes and appropriate tests pass, run `ace-assign delivery --assignment ID --attempt ATTEMPT --operation ready --tests TEST-REF --review REVIEW-REF` with accepted exact-head test and independent review references."

data/.ace-defaults/assign/presets/work-on-task-auto-merge.yml

@@ -5,6 +5,18 @@ name: work-on-task-auto-merge
 description: Work on a task with PR, converging review rounds, and advance authorization for guarded auto-merge
 
 parameters:
+  forge_server:
+    required: false
+    type: string
+    description: Named configured forge; mutually exclusive with forge_default
+  forge_default:
+    required: false
+    type: boolean
+    description: Explicitly select the configured default forge
+  pr_provenance:
+    required: false
+    type: object
+    description: Explicit mode, head_repository_url, head_ref, base_repository_url and base_ref; required before remote delivery
   taskrefs:
     required: true
     type: array
@@ -19,7 +31,7 @@ steps:
 
   - name: create-pr
     number: "030"
-    workflow: wfi://github/pr/create
+    workflow: wfi://git/pr/create
     instructions:
       - "Create a pull request summarizing task: {{taskrefs}}."
       - "Create it as a draft with --draft; mark it ready only after the review completion rule is met."
@@ -44,14 +56,14 @@ steps:
 
   - name: update-pr-desc
     number: "147"
-    workflow: wfi://github/pr/update
+    workflow: wfi://git/pr/update
     instructions:
       - "Record the review rounds, actual reviewers, findings and tests in the PR description before marking it ready."
 
   - name: mark-pr-ready
     number: "148"
     instructions:
-      - "After review completes and appropriate tests pass, run `gh pr ready` on the draft PR."
+      - "After review completes and appropriate tests pass, run `ace-assign delivery --assignment ID --attempt ATTEMPT --operation ready --tests TEST-REF --review REVIEW-REF` with accepted exact-head test and independent review references."
 
   - name: auto-merge
     number: "150"

data/.ace-defaults/assign/presets/work-on-task.yml

@@ -8,6 +8,18 @@ name: work-on-task
 description: Work on one or more tasks with PR, iterative review, release, and clean history
 
 parameters:
+  forge_server:
+    required: false
+    type: string
+    description: Named configured forge; mutually exclusive with forge_default
+  forge_default:
+    required: false
+    type: boolean
+    description: Explicitly select the configured default forge
+  pr_provenance:
+    required: false
+    type: object
+    description: Explicit mode, head_repository_url, head_ref, base_repository_url and base_ref; required before remote delivery
   taskrefs:
     required: true
     type: array
@@ -32,7 +44,7 @@ steps:
   - name: release-minor
     number: "020"
     instructions:
-      - Release all modified packages touched by this batch.
+      - Prepare version and changelog changes for modified packages only; publishing is a separate authorized operation.
       - Auto-detect modified packages from the current diff, bump version (minor or patch, usually minor), and update both package and root CHANGELOGs.
       - This is the initial release for new functionality.
       - Follow semantic versioning conventions.
@@ -48,7 +60,7 @@ steps:
 
   - name: create-pr
     number: "030"
-    workflow: wfi://github/pr/create
+    workflow: wfi://git/pr/create
     instructions:
       - "Create a pull request summarizing batch tasks: {{taskrefs}}."
       - "Create it as a draft with --draft; mark it ready only after the review completion rule is met."
@@ -127,7 +139,7 @@ steps:
   - name: update-pr-desc
     number: "180"
     context: fork
-    workflow: wfi://github/pr/update
+    workflow: wfi://git/pr/update
     instructions:
       - "Update the PR description with the final batch summary for: {{taskrefs}}."
       - "CRITICAL: The File Changes section must contain the complete, untruncated grouped-stats output from `ace-git diff`. Paste it verbatim — never summarize or abbreviate."
@@ -137,7 +149,7 @@ steps:
   - name: mark-pr-ready
     number: "190"
     instructions:
-      - "After review completes and appropriate tests pass, run `gh pr ready` on the draft PR."
+      - "After review completes and appropriate tests pass, run `ace-assign delivery --assignment ID --attempt ATTEMPT --operation ready --tests TEST-REF --review REVIEW-REF` with accepted exact-head test and independent review references."
 
 expansion:
   batch-parent:

data/CHANGELOG.md

@@ -7,6 +7,49 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.64.0] - 2026-10-05
+
+### Added
+
+- Connect fixed execution-slot parent activation to canonical sealing, exact never-native-admitted closure, guarded abort, durable reservation release and restart-safe reuse. Native service admission refuses unavailable readiness evidence; admitted and post-native positive closure and complete installer maintenance remain unfinished.
+
+- Register canonical execution-scope binding, seal and empty-observation events with an immutable exact-lineage reader. Missing, changed or corrupt generation/proof identities refuse; live scope verification and terminal handlers remain separate owners.
+
+- Submit immutable private canonical worker results and fetch one purpose-authorized artifact through the existing authority Client, with retained services status discovery and exact download descriptor validation. Full-service startup remains guarded.
+
+- Validate fixed service receiver principals and private placement before authority startup, refusing ambiguous roles, overlapping ownership and inaccessible endpoints.
+
+- Add the public protected assignment authority and gated launch driver with canonical reservation, exact binding, one durable release, replay refusal and conservative crash recovery.
+
+- Resolve immutable second-commander proposals through confirmed-delivery sixteen-hour policy and canonical Assign authorization.
+- Atomic execution-ref mutation/import primitives with exact reply replay and canonical artifact binding/provenance verification. Intent-only attempts remain reserved until a real process-start fact.
+- Resume from accepted attempt history without relaunch/replay; consume signed inbox observations in the existing journal and preserve unknown owner/effect state.
+
+- Attempt-bound, provider-neutral delivery records draft creation, update and readiness in the existing evidence journal; lost responses reconcile exact remote identity without repeating writes. Readiness consumes accepted current test and independent review evidence, and merge consumes the existing authorized service receipt.
+- Explicit forge selection and canonical/fork provenance for remote assignment creation; local assignments reject unused delivery inputs.
+
+### Changed
+
+- Declare the required direct dependencies and minimum producer versions for this coordinated release: `ace-git ~> 0.29`, `ace-herdr ~> 0.4`, `ace-llm-providers-cli ~> 0.36.1`, `ace-review ~> 0.59`, `ace-runtime ~> 0.2`, `ace-support-fs ~> 0.3`.
+
+- Align prepare/drive discovery and draft creation instructions with the canonical neutral PR skills and attempt-bound delivery command.
+
+- Expose read-only runtime_binding for an active accepted attempt using the existing native/process authority, refusing missing, dead, changed or unrelated owner evidence.
+
+### Fixed
+
+- Reject duplicate keys and comments in guarded scope-abort evidence using the required strict JSON parser, and preserve canonical slot ownership after child-only failure until whole-scope cleanup is proven.
+
+- Attribute local attempts to the kernel process account instead of terminal login/environment; refuse unresolved accounts, privilege transitions and changing credentials.
+- Commit proposal supersession and the new revision atomically with canonical operation replay and unresolved-effect claim exclusion.
+
+- Enforce global proposal identity ownership and immutable prepared lifecycle projection in the sole canonical proposal journal.
+- Refuse finish receipts for unbound reservations before terminal acceptance, and preserve exact canonical import bytes across Git filters and CRLF conversion.
+
+- Clean failed evidence transactions at every shared journal writer boundary; preserve unbound launch reservations and report explicit recovery evidence requirements.
+
+- Retain delivery context across scoped attempts and distinguish a recovered prior effect from a new request with different content or evidence before reporting completion.
+
 ## [0.63.1] - 2026-10-04
 
 ### Changed

data/docs/demo/canonical-skill-source.tape.yml

@@ -19,7 +19,7 @@ scenes:
   commands:
   - type: sed -n '20,33p' $PROJECT_ROOT_PATH/ace-task/handbook/skills/as-task-plan/SKILL.md
     sleep: 3s
-  - type: sed -n '27,50p' $PROJECT_ROOT_PATH/ace-git/handbook/skills/as-github-pr-create/SKILL.md
+  - type: sed -n '1,23p' $PROJECT_ROOT_PATH/ace-git/handbook/skills/as-git-pr-create/SKILL.md
     sleep: 3s
 - name: Assignment steps keep the canonical source contract
   commands:
@@ -33,15 +33,15 @@ scenes:
   commands:
   - type: clear
     sleep: 1s
-  - type: sed -n '13,36p' $PROJECT_ROOT_PATH/.codex/skills/as-task-plan/SKILL.md
+  - type: sed -n '13,36p' $PROJECT_ROOT_PATH/.agents/skills/as-task-plan/SKILL.md
     sleep: 3s
-  - type: sed -n '13,49p' $PROJECT_ROOT_PATH/.claude/skills/as-github-pr-create/SKILL.md
+  - type: sed -n '1,26p' $PROJECT_ROOT_PATH/.agents/skills/as-git-pr-create/SKILL.md
     sleep: 3s
 - name: Lint accepts the canonical skill contract
   commands:
   - type: clear
     sleep: 1s
-  - type: ace-lint $PROJECT_ROOT_PATH/ace-lint/handbook/skills/as-lint-run/SKILL.md $PROJECT_ROOT_PATH/ace-task/handbook/skills/as-task-plan/SKILL.md $PROJECT_ROOT_PATH/ace-git/handbook/skills/as-github-pr-create/SKILL.md
+  - type: ace-lint $PROJECT_ROOT_PATH/ace-lint/handbook/skills/as-lint-run/SKILL.md $PROJECT_ROOT_PATH/ace-task/handbook/skills/as-task-plan/SKILL.md $PROJECT_ROOT_PATH/ace-git/handbook/skills/as-git-pr-create/SKILL.md
     sleep: 4s
 verify:
   forbid_output:

data/docs/protected-authority.md

@@ -0,0 +1,266 @@
+---
+doc-type: user
+purpose: Fixed protected authority deployment and canonical launch lifecycle
+ace-docs:
+  last-updated: 2026-10-05
+  last-checked: 2026-10-05
+  subject:
+    - code:
+        diff:
+          paths:
+            - ace-assign/lib/ace/assign/authority/**/*.rb
+            - ace-assign/lib/ace/assign/molecules/execution_scope_lineage.rb
+            - ace-runtime/lib/ace/runtime/molecules/systemd_scope_manager.rb
+---
+
+# Protected native launch
+
+`ace-assign authority serve --authority AUTHORITY` runs the standalone launch
+composition. Lab owns the services composition using the same Assign server,
+router, lifecycle, journal and endpoint. Its full-service startup guard remains
+closed while required finish, recovery, inbox and no-effect handlers are incomplete.
+The installed `composition` must match the entrypoint. A project has exactly one
+configured authority owner; duplicate project owners or endpoints fail before
+listener creation.
+
+An administrator provisions `/etc/ace/assignment-authorities.json`. There is no
+caller-selected configuration path or local fallback. The outer object contains
+`schema: "ace.assign.authorities/v2"`, `authorities`, `projects`, and
+`launch_mappings`; unknown fields are refused. The fixed schema is implemented
+by `Ace::Assign::Authority::Deployment`:
+
+| Installed object | Required fields |
+| --- | --- |
+| `authorities.ID` | `uid`, `gid`, sorted unique `groups`, `socket_path`, `state_root`, `composition` (`launch` or `services`) |
+| `projects.ID` | `journal_repository`, `evidence_git_ref` (`refs/ace/execution`), `evidence_checkout_root`, `assignment_root`, `candidate_root`, `launcher_uids`, `reviewer_uids`, `worker_uids`, `service_executor_uids`, `supervisor_uids`, `peer_credentials`, optional `service_receivers` |
+| `projects.ID.peer_credentials.UID` | `gid`, sorted unique `groups`, `scratch_root`; every configured role UID has one fixed entry |
+| `launch_mappings.ID` | `project_id`, `authority_id`, `launcher_uid`, `launcher_gid`, `launcher_groups`, `worker_uid`, `worker_gid`, `worker_groups`, `worker_actor`, `worker_cwd`, `worker_argv`, `worker_env`, `bootstrap`, `bootstrap_sha256`, `native`, `execution_scope` |
+| `launch_mappings.ID.native` | `socket_path`, `executable`, `executable_sha256`, `version` (`0.9.3`), `protocol` (`22`), canonical `workspace_id` (`wN`) |
+| `launch_mappings.ID.execution_scope` | `backend` (`linux_systemd_cgroup_v2`), `slot_id`, `slice_unit`, `service_unit`, `unit_manifest_sha256`, `boundary_manifest_sha256`, `root_directory`, `runtime_directory`, `network_namespace_path` |
+
+A services composition requires a nonempty installed `service_receivers` map; launch composition may omit it. Each fixed service ID maps to exactly `{executor_uid, socket_path, staging_root}`. The positive nonroot executor UID belongs to the project's executor allowlist and cannot also be any configured authority, launcher, reviewer, worker or supervisor. This keeps kernel role selection unambiguous and private authority journals inaccessible to executors.
+
+Receiver socket and staging paths are canonical absolute paths with root-or-executor owned, nonwritable ancestry. Staging is executor-owned mode0700 and disjoint from other receiver staging and authority state roots. The endpoint resides outside private staging, where the actual authority can traverse its ancestry and inspect it. A pre-existing endpoint must be an executor-owned socket with its installed GID and no permissions for others. Duplicate receiver/authority endpoints, substituted paths and unreadable placement refuse before the authority opens its listener or creates journal state. These mappings select identity and placement; operation argv and grants remain the existing Lab ServicePolicy.
+
+All paths are canonical and absolute. The native socket identity is the observed
+`[device, inode, worker_uid]`. The server identity is the exact observed object
+`{pid, uid, gid, groups, parent_pid, started_at, host}`, where `started_at` is
+`linux:BOOT_ID:START_TICKS`. These observations must be made after the root-owned
+native service starts; they cannot be invented, copied from a previous boot, or
+supplied by a worker. The immutable per-attempt native stage owns these facts;
+the deployment record contains no persisted live server/socket tuple. A replacement
+cannot be repinned into the original generation.
+The root-installed native service, its executable, environment and configuration
+are trusted. Merely running arbitrary worker-supplied server code under the worker
+account does not meet this deployment contract.
+
+The authority, launcher and worker are distinct non-root accounts. Authority
+journal/cache/import/candidate/assignment/state roots are authority-owned 0700
+with protected ancestry. Peer scratch roots are private to their mapped account.
+The authority socket's directory prevents worker/launcher replacement; its group
+and narrow installer ACL must permit the configured peers to connect. Native
+socket ACL permits the trusted launcher to use the pinned Herdr API. The
+bootstrap, payload executable, native executable, mapping and their ancestors are
+root-owned and non-writable by the worker. Payload argv/cwd/environment are fixed
+installed data; loader and interpreter injection environment fields are refused.
+
+Linux Yama `ptrace_scope=2`, empty Inh/Prm/Eff/Bnd/Amb capabilities,
+`NoNewPrivs=1`, fixed real/effective/saved/filesystem UID/GID and supplementary
+groups are mandatory for every participant, including the pinned native server.
+The shipped [native build/install instructions](../../ace-runtime/native/README.md)
+describe architecture, distro dependencies, immutable artifact digest and service
+unit requirements. ACE verifies and refuses missing policy; it does not modify
+sysctls, create accounts, change another user's Herdr, or install service policy.
+
+After installation, the trusted launcher preflights without any mutation or
+native creation:
+
+```sh
+ace-assign authority launch --mapping MAPPING --dry-run
+```
+
+Launch one managed definition using a stable invocation ID:
+
+```sh
+ace-assign authority launch --mapping MAPPING --assignment ASSIGNMENT \
+  --definition /absolute/managed-definition.json --step 010 \
+  --base-head EXACT_40_CHARACTER_COMMIT --mutation INVOCATION_ID
+```
+
+The definition is a normal managed assignment JSON document (maximum 32 KiB),
+with matching `session_id`, `task_id` and installed `project_id`. The authority
+stores its exact immutable bytes in the canonical journal and materializes the
+owner-private assignment cache from that accepted blob. An active attempt blocks
+changed definitions. A fresh reservation creates canonical intent/provisioning,
+then the owner activates and binds its independent parent under the slot exclusion.
+It pins existing resource objects, the authority mount namespace and the installed
+nsfs network namespace. Parent binding selects protected network evidence references
+without asserting policy readiness or requiring an available report.
+
+Native service admission is a separate private canonical CAS after all required
+readiness evidence succeeds. Only its fresh winner may start the fixed service;
+replay and lost replies never permit another start. Native and original-child
+bindings remain separate immutable stages before payload release.
+
+The original authenticated native layout response fixes workspace/tab/pane and
+exact child lineage. Record captures that original child; bind creates the running
+attempt without payload permission. The immutable native bootstrap connects once,
+sets non-dumpable before admission, and waits for the separate release. Release
+commits issuance before one framed permission. Replay returns canonical issuance
+without sending another frame. Reply loss after issuance is potentially executed.
+A worker-controlled native input/close path can deny or interrupt launch, but cannot
+replace the authenticated origin or forge authority release.
+
+Inspect or request exact native termination through the same installed mapping.
+Once the original launcher process has exited, run these commands as a mapped
+recovery supervisor with the installed native close ACL; a new process under the
+launcher UID does not inherit the original launcher incarnation:
+
+```sh
+ace-assign authority status --mapping MAPPING --assignment ASSIGNMENT --attempt ATTEMPT
+ace-assign authority terminate --mapping MAPPING --assignment ASSIGNMENT --attempt ATTEMPT
+```
+
+A child pidfd proving exit cannot release the whole parent reservation. The
+connected never-native-admitted path seals the original parent before fixed service
+stop, records fresh exact recursive-empty/no-pending/resource closure, selects that
+canonical proof in the guarded pre-release abort, then privately commits reservation
+release after service/inbox settlement at the same immutable journal commit. A lost
+reply keeps the original accepted response. Restart can resume a missing private
+release without issuing native or payload permission. A new reservation first retires
+its exactly released predecessor through the same owner and slot exclusion.
+
+`observe_execution_scope` is read-only. `close_execution_scope` is an ordinary
+canonical mutation: the first fresh call seals, a later fresh call records closure
+when verifiable. A fresh sealed close can resume a lost fixed service stop; replay
+performs no manager I/O. The private `scope_service_admission` and
+`scope_reservation_release` operations are absent from the public allowlist.
+Reserve/close RPCs have a fixed 90-second ceiling for bounded manager waits;
+other control calls retain their existing ceiling.
+
+This source checkpoint proves the connected never-native-admitted failure/recovery
+path with controlled native-owner observations and real canonical journals. Full
+native hook/readiness and post-native writer observation, admitted-but-unbound
+cleanup, non-abort terminal release, and complete original/candidate installation
+maintenance remain separate required implementation work. The current maintenance
+helpers do not yet implement the accepted candidate-deployment union contract.
+No source fixture establishes installed namespace, network policy or containment
+acceptance; every installed SC remains open.
+
+Control replies are at most 16 KiB. Source-selected service transfer operations use
+a 16 KiB authenticated header followed by bounded raw bytes, a shared 30-second
+deadline, exact hashes, upload write-EOF and at most two active transfers. Exact
+origin/role admission happens before private spool allocation and is revalidated
+before canonical mutation. The standalone launch composition exposes no transfer
+operations.
+
+Source tests and Linux primitive fixtures are separate from installed deployment
+acceptance. A Docker kernel with Yama=0 is expected to refuse the product gate;
+it does not establish the required positive protected launch proof.
+
+Protected launch uses only `layout.apply` in the installed workspace. `workspace.get` checks that exact workspace ID before creation; its reply must echo the ID even when another workspace is active. Missing or replaced containers refuse without fallback. Container contents supply no worker evidence. The original fresh layout reply remains the source of the new tab/pane identity.
+
+Receiver admission reads Linux `system.posix_acl_access` on every directory from
+the endpoint parent and private staging root to `/`, and evaluates search access
+for the installed executor UID, primary GID and supplemental groups. Named user
+entries override group/other entries; the ACL mask constrains named user and
+group entries. Absence of an access ACL uses ordinary mode permissions;
+unsupported, unreadable or malformed ACL data refuses startup. The authority
+must also actually traverse the endpoint and staging parents. This inspection
+does not claim an executor readiness handshake or bypass additional LSM policy;
+the installed receiver still performs its own bind and private staging checks.
+
+## Canonical result Client API
+
+The source-owned services handlers accept a live mapped worker's bounded result
+without terminalizing the attempt or releasing scope. The public seam is
+`Ace::Assign::Authority::Client`; no result CLI is introduced. Launch-only
+`attempt_status` retains its existing schema without a result selector. These
+source handlers and their deterministic tests do not establish installed
+full-service deployment acceptance.
+
+From an admitted services attempt, discover its current candidate and authority
+generation, then upload receipt JSON bytes followed by its declared artifact
+bytes in order:
+
+```ruby
+require "ace/assign"
+require "json"
+require "digest"
+
+client = Ace::Assign::Authority::Client.new(mapping_id: mapping_id)
+binding = {"assignment_id" => assignment_id, "attempt_id" => attempt_id}
+status = client.call("attempt_status", binding.merge(
+  "result_candidate_generation" => nil
+)).data
+receipt_bytes = File.binread(local_receipt_path)
+receipt = JSON.parse(receipt_bytes)
+artifacts = receipt.fetch("artifacts").map { |ref| File.binread(ref.fetch("path")) }
+params = binding.merge(
+  "expected_generation" => status.fetch("authority_generation"),
+  "candidate_generation" => status.fetch("result_candidate_generation"),
+  "head" => receipt.fetch("head"),
+  "receipt_sha256" => Digest::SHA256.hexdigest(receipt_bytes)
+)
+reply = client.call("submit_result", params, mutation_id: persisted_mutation_id,
+  upload_parts: [receipt_bytes, *artifacts], purpose: :receipt_artifacts, timeout: 30)
+result = reply.data
+```
+
+Only local byte strings cross the boundary; receipt paths are declarations, not
+authority filesystem access. The authority checks exact canonical worker
+attribution, original receipt digest and SHA256, candidate, native lineage and
+current visibility. It normalizes artifact references and writes private
+`result_submitted` metadata, imported blobs and a sanitized mutation reply in one
+Git CAS. Failed results may have `artifacts: []`; no synthetic artifact is added.
+Campaign receipts refuse until the trusted campaign owner is integrated.
+
+Persist the exact params, mutation ID and ordered byte strings before submission.
+An exact retry while the worker remains live and the attempt active returns the
+same result without another import. A changed input or fresh mutation ID for the
+same candidate conflicts. Correcting a result requires a new candidate generation
+even at unchanged HEAD; both records remain immutable. Submission creates no
+`receipt_accepted` event or terminal transition.
+
+The reply contains result ID, head, candidate generation, verdict, ordered
+canonical `{path, sha256}` references, generation and journal commit. Its
+`uploaded_receipt_sha256`, `original_receipt_digest` and normalized
+`receipt_digest` are distinct values. Private receipt, producer and process
+binding are excluded from fresh and replay result replies.
+
+After reply loss or worker exit, the exact owning launcher or mapped supervisor
+can discover the retained result and fetch one referenced artifact:
+
+```ruby
+status = client.call("attempt_status", binding.merge(
+  "result_candidate_generation" => retained_generation # nil selects latest
+)).data
+result = status.fetch("submitted_result")
+if result && (reference = result.fetch("artifacts").first)
+  fetched = client.call("evidence_fetch", binding.merge(
+    "kind" => "result", "purpose_id" => result.fetch("result_id"),
+    "artifact_id" => reference.fetch("path").delete_prefix("evidence/imports/")
+  ), download: true, purpose: :artifacts, timeout: 30)
+  artifact_bytes = fetched.parts.fetch(0)
+end
+```
+
+Client closes its request write side for services status and evidence fetch;
+Server refuses extra body bytes before exposing either read projection. Status
+reads launch and result projections from one immutable canonical commit.
+`authority_generation` is the current CAS generation; a known candidate without
+a result has `submitted_result: null`. Unknown selected generation is `missing`;
+corrupt or missing referenced provenance is `evidence_unavailable`. Disposable
+caches and requester files never supply evidence.
+
+Fetch returns exactly `descriptor`, `generation`, `journal_commit` and the
+Server-generated `transfer` descriptor, with one binary part. Client validates
+the closed canonical descriptor, exact selected purpose, one-part framing,
+aggregate length and SHA256 before exposing bytes. Owning workers read only
+their own results; assigned reviewers read their exact retained review and
+same-candidate result under their live process binding; recorded executors read
+only their own service evidence. Exact owning launchers and mapped supervisors
+read permitted attempt evidence, including retained terminal history. Current
+visibility and peer authorization apply to every read. Reassignment revokes the
+old reviewer purpose. Inbox and observation evidence refuse until their existing
+signer and observer owners provide complete canonical provenance.