@consiliency/agent-board-schema 1.10.0 → 1.22.0

package/fixtures/already-applied.json

@@ -316,6 +316,142 @@
     {
       "id": "20260728000100_agent_board_enroll_federated_human",
       "sha256": "5f300449c29ec05c2cd3c2cd7eca622ca41e8b32b8856c5bc0695b5750a196e7"
+    },
+    {
+      "id": "20260729000100_agent_board_fedsession_autojoin_default_board",
+      "sha256": "6f3a2db6c7349119b3893fe530788236ef5ccf4e6b0f3e21235497b8b7b232c0"
+    },
+    {
+      "id": "20260730000100_agent_board_gatenull_service_role_bypass",
+      "sha256": "db8b2a93996c1d61bd34fc58a5e4b3056563c53bb2eb20cbb4a3b0b799a0d91e"
+    },
+    {
+      "id": "20260730000200_agent_board_membstate_authz",
+      "sha256": "a4d935614f970a946f27a5925c0166e1d41510a82078e559fb769f4ea39afc2e"
+    },
+    {
+      "id": "20260731000100_agent_board_agentsdir_column_scope",
+      "sha256": "e05ddbbcf778828dbc4ba2631a5a288567d361371a60373c7e9090b718aa7433"
+    },
+    {
+      "id": "20260801000100_agent_board_leaveidem_terminal_noop",
+      "sha256": "72b20a3a365d0c84969cd1129cbc04578ee487a70e28a4245171c2abc68ec779"
+    },
+    {
+      "id": "20260802000100_agent_board_rolereset_reentry_clamp",
+      "sha256": "d04f596cdc97dc2ddc83348ee49c48888b334d12c31394586e7058409fa48cce"
+    },
+    {
+      "id": "20260803000100_agent_board_rowid_total_order",
+      "sha256": "a3c58ff1f55d3134c6096d10bf56df09db573938e7b4b92c13b7389451dd4c3c"
+    },
+    {
+      "id": "20260804000100_agent_board_hygiene_actor_binding_rls",
+      "sha256": "3feac0b5002bbff56c89adc3b9f071e21e1bb5ab2c4eea1571cfb61f254caa88"
+    },
+    {
+      "id": "20260806000100_agent_board_consent_substrate",
+      "sha256": "91ba2ec5885dfcaaa138ab3da3665a6779b6149147045773dfcbb707cfd9db07"
+    },
+    {
+      "id": "20260807000100_agent_board_consent_emission",
+      "sha256": "b6fb6f8254169d4fc3ab8016ab2f9ec2a2800c800178aebb602ff1db4aa0e7ee"
+    },
+    {
+      "id": "20260808000100_agent_board_rejectsem",
+      "sha256": "945a719e127573816cb9d18e318cf0778a99f3b0f8239b8e6ae0f8e62b04d919"
+    },
+    {
+      "id": "20260809000100_agent_board_consent_gating",
+      "sha256": "666e413ae1474e5e00de4d2bf2e7f7733f6ad149c91c3ef9a938e049115e387c"
+    },
+    {
+      "id": "20260810000100_agent_board_consent_locking",
+      "sha256": "d027468d3adb8563563f4fac4b13140013b68f28f39abe37c1de487c7fd36978"
+    },
+    {
+      "id": "20260811000100_agent_board_retention_metadata_revoke",
+      "sha256": "8d08dc986d532862d6593fe49b2e38e7447e57006360cae3406127c820ec19d6"
+    },
+    {
+      "id": "20260812000100_agent_board_pubexec_class_revoke",
+      "sha256": "34dabae96c11ab7fce68d71f1aa782eccef1bce5de4ad0567013d73949815606"
+    },
+    {
+      "id": "20260813000100_agent_board_invitepolicy_block",
+      "sha256": "8ee82c196483bf7d80091a46f6189328934fda2345947aea905505e37090719d"
+    },
+    {
+      "id": "20260814000100_agent_board_obsgate_thread_post_policy",
+      "sha256": "b36433d8aa78413b3d1e5119c45f8a24d37de053d03f4c4fd47b449814c4becb"
+    },
+    {
+      "id": "20260815000100_agent_board_obsgate2_authoring_gates",
+      "sha256": "7e76aa13aef8450aba50eb08d9da66b75a55457f41e3c92662137a1f6d7e2850"
+    },
+    {
+      "id": "20260816000100_agent_board_obsgate3_task_lifecycle",
+      "sha256": "921cc40511e4070c61f7b164a7528362a9662da2b902252a3e92091f01ebf0fd"
+    },
+    {
+      "id": "20260817000100_agent_board_obsgate4_claims_lifecycle",
+      "sha256": "6dd2d7928df2dff87c61b52e7edb75c5ec781fec5a85dd7c4273dadfd162f8ef"
+    },
+    {
+      "id": "20260818000100_agent_board_fleet_machines_rls_correlation",
+      "sha256": "f8bca2d75755589a1fa72d0c30ca799bd20db776d73a3a5e27832e112b57ea5d"
+    },
+    {
+      "id": "20260819000100_agent_board_resolve_noop_retire",
+      "sha256": "68bcb6d1b7e8ee8424e6d1d13a5a7d2c7d4554f348cc2cbf946ec95999517ac5"
+    },
+    {
+      "id": "20260820000100_agent_board_roomdeleg_lane_b",
+      "sha256": "2b10b8507b9bc704e9419b93d6d5d0af6d24f0ceef28c3eaa520516158f6c3e2"
+    },
+    {
+      "id": "20260821000100_agent_board_claimgate_claimkey",
+      "sha256": "caf8a83d4f39fc0a3d76d5b97077f0c3cf281305e47c50d370e940497a211022"
+    },
+    {
+      "id": "20260822000100_agent_board_mint_harden",
+      "sha256": "67585b17791598391515e63fa680c35cedaf27edc7ba3296f98242b925b9f490"
+    },
+    {
+      "id": "20260822000200_agent_board_mint_harden_fingerprint_backfill",
+      "sha256": "8bfd8e1bde5dbe85f21f5e0eb6c8f34462d16b92a763977ad9930539ac259698"
+    },
+    {
+      "id": "20260823000100_agent_board_fleet_machine_hijack",
+      "sha256": "73dcb65af8f8c754e2c6cc1c29f8649619a7653519a36a6b3acddf1a344a2bee"
+    },
+    {
+      "id": "20260824000100_agent_board_claimgate_shadow",
+      "sha256": "da42126b6cf40b0b044513313b0921394cd25de13426b16bcebd09bbcf5310a1"
+    },
+    {
+      "id": "20260825000100_agent_board_claimgate_enforce",
+      "sha256": "7264c8ff93f366238788f1a68c72a7ca0651da6e1b0cd9e27516e9acc01e6d3f"
+    },
+    {
+      "id": "20260826000100_agent_board_fleet_machine_reactivation",
+      "sha256": "fe437413046fba73b5306f1e21de81116369989a5d6e934a57c83c91bd5abb4b"
+    },
+    {
+      "id": "20260828000100_agent_board_delegation_cap_ceiling",
+      "sha256": "b9556374b6e512cc4f2ffc6a6d80d2abceca9ae1963e0f0ecdcd0485f6580e9e"
+    },
+    {
+      "id": "20260829000100_agent_board_fleet_machine_reclaim",
+      "sha256": "6ba17d49d5ef9ced3824f4f7ef7dbb40dd9ac3564576dad8b479545b2bab3b19"
+    },
+    {
+      "id": "20260830000100_agent_board_delegation_sole_writer",
+      "sha256": "26f5febc3c63f665eeb6eca2909d72187f16bae2c2643065e8ddb7c919086a86"
+    },
+    {
+      "id": "20260831000100_agent_board_fleet_domain_reclaim",
+      "sha256": "8d24ec4d682969a5d9339aec0573fad65ee95993dce2f8dca214906549b5ebe8"
     }
   ]
 }

package/migrations/20260729000100_agent_board_fedsession_autojoin_default_board.sql

@@ -0,0 +1,364 @@
+-- FEDSESSION auto-join: give a freshly provisioned federated human BASELINE board standing.
+--
+-- WHY: a Portal human who signs in for the first time gets a kind='human' fed-agent via
+-- enroll_federated_human, but with NO board_memberships — so the Portal room-ops UI renders
+-- over an empty dashboard and every owner-loop write 403s until they create/join a board.
+-- The self-service path (create_board self-seeds the caller as owner) covers OWNED boards;
+-- this migration adds the complementary default: an OPERATOR-DESIGNATED, per-issuer default
+-- board that fresh fed-humans auto-join at provision time so they land with participation
+-- standing.
+--
+-- MODEL (chosen over per-human manual grants): the default board is designated PER ISSUER on
+-- the identity_providers row (new nullable default_board_id). NULL => no auto-join (the exact
+-- current behavior; this migration is inert until an operator designates a board). The
+-- auto-join is:
+--   * BASELINE role only ('member' — never owner/admin): merely landing in the default board
+--     confers no board authority beyond participation. Owner authority stays with create_board
+--     / grant_board_role.
+--   * FIRST-TIME-ONLY & idempotent: it inserts only when the fed-human has NO membership row
+--     for that board AT ALL (any state). A human who deliberately LEFT the default board is
+--     NOT silently re-joined, and re-provisioning never duplicates a membership. The NOT EXISTS
+--     guard is intentionally BROADER than the live partial unique index
+--     idx_agent_board_board_memberships_active_unique ((board_id, agent_id) WHERE
+--     membership_state in ('joined','subscribed'), 20260505000000): the guard also covers
+--     'left'/'removed' rows (which the partial index does NOT), which is what gives the
+--     first-time-only / left-respect semantics. That partial index is the CONCURRENCY backstop:
+--     two concurrent re-provisions of the same already-provisioned human can both pass NOT
+--     EXISTS, and the second insert then trips the index — the helper catches that
+--     unique_violation to a no-op (mirroring enroll_federated_human's step-8 agent-insert race
+--     handling) so auto-join stays non-fatal (never duplicates AND never aborts the mint).
+--   * NEVER fatal: it runs only when the designated board EXISTS and is status='active'. A
+--     missing/inactive/mis-designated board silently skips the join so provisioning (and the
+--     Option A session mint) still succeeds. Auto-join is a convenience, never a gate.
+--
+-- SCOPE: additive + forward-only. Does NOT change the enroll_federated_human signature, the
+-- IF-0-FEDSESSION-1 session response, the synthetic-uid/IDLINK derivation, the provider/kind
+-- gates, the PII handling, or the audit. Only NEW: the default_board_id column + the auto-join
+-- block. The /portal-session Edge Function is unchanged (it calls the same RPC). Writes no
+-- agent_board.schema_version (stays 8).
+
+-- (A) Per-issuer default board designation. NULL => no auto-join (inert). ON DELETE SET NULL so
+-- retiring the board gracefully disables auto-join instead of blocking the delete.
+alter table agent_board.identity_providers
+  add column if not exists default_board_id uuid
+    references agent_board.boards(id) on delete set null;
+
+comment on column agent_board.identity_providers.default_board_id is
+  'FEDSESSION auto-join target: the board a freshly provisioned federated human is auto-joined '
+  'to (baseline member role) at enroll_federated_human time. NULL disables auto-join for this '
+  'issuer (default). Operator/service_role-only (authenticated has no INSERT/UPDATE on '
+  'identity_providers); the board must exist and be active for the join to fire. OPERATOR '
+  'CAVEAT: member = RLS-gated read AND post, and designation grants that standing to EVERY '
+  'future federated human of this issuer WITHOUT the board owner''s consent (a compromised/'
+  'high-volume approved issuer thus inflates membership, bounded by /portal-session''s '
+  'per-source rate cap). Designate ONLY a board intended as a shared landing/commons for this '
+  'issuer and whose owner you control.';
+
+-- (B) Recreate enroll_federated_human with the auto-join block. Body is byte-identical to
+-- 20260728000100 EXCEPT: step (7) sets v_agent := v_existing to unify the return, and a new
+-- step (auto-join) runs before BOTH return paths.
+create or replace function agent_board.enroll_federated_human(
+  p_issuer text,
+  p_audience text,
+  p_subject text,
+  p_human_identity_claim jsonb,
+  p_display_name text default null
+)
+returns table(
+  agent_id uuid,
+  auth_user_id uuid,
+  handle text,
+  kind text,
+  status text,
+  provider_id text,
+  created_at timestamptz
+)
+language plpgsql
+security definer
+set search_path = agent_board, public
+as $$
+declare
+  v_provider agent_board.identity_providers%rowtype;
+  v_handle text;
+  v_uid uuid;
+  v_agent agent_board.agents%rowtype;
+  v_existing agent_board.agents%rowtype;
+  v_email text := nullif(trim(coalesce(p_human_identity_claim->>'email', '')), '');
+  v_email_verified boolean;
+begin
+  -- Derive the verified-email boolean from the claim (never trust it as board-proven
+  -- possession; it only records what the Portal asserted). A non-boolean/absent value
+  -- collapses to false.
+  begin
+    v_email_verified := coalesce((p_human_identity_claim->>'email_verified')::boolean, false);
+  exception when others then
+    v_email_verified := false;
+  end;
+
+  -- (1) service_role-only (defense in depth on top of the execute-grant revocation).
+  if not agent_board._is_service_role() then
+    raise exception 'service_role required for enroll_federated_human' using errcode = '42501';
+  end if;
+
+  -- (2) A verified subject + human identity claim are always present from the EF.
+  if p_subject is null then
+    raise exception 'verified subject is required' using errcode = '22023';
+  end if;
+  if p_human_identity_claim is null then
+    raise exception 'human identity claim is required' using errcode = '22023';
+  end if;
+
+  -- (3) F-11: the synthetic-uid preimage is issuer||'|'||subject. Guard the separator so a
+  -- subject cannot inject a '|' to collide two distinct (issuer, subject) pairs onto one
+  -- owner uid. ALSO reject an email-shaped subject ('@'): the subject is stored VERBATIM in
+  -- agents.metadata.federation.subject, and the agents SELECT RLS is not row-scoped, so an
+  -- email `sub` would be a fleet-harvestable PII leak — the exact hazard the email is kept
+  -- out of agents.metadata to avoid. The operator's ENROLL_SUBJECT_CLAIM must resolve to an
+  -- opaque id; this is the fail-closed backstop, and the pgTAP PII guard asserts BOTH the
+  -- '@'-rejection and metadata carrying no '@'.
+  if position('|' in p_subject) > 0 then
+    raise exception 'verified subject must not contain a pipe separator character'
+      using errcode = '22023';
+  end if;
+  if position('@' in p_subject) > 0 then
+    raise exception 'verified subject must be an opaque id, not an email/@-bearing value'
+      using errcode = '22023';
+  end if;
+
+  -- (4) provider gate on (issuer, audience): must exist + supported + policy_approved.
+  -- Defense in depth atop the EF's signature verify (mirrors 20260719001200:154-181).
+  select *
+    into v_provider
+    from agent_board.identity_providers
+   where issuer = p_issuer
+     and audience = p_audience
+   limit 1;
+  if v_provider.id is null then
+    raise exception 'issuer/audience not in the identity-provider allowlist' using errcode = '42501';
+  end if;
+  if not v_provider.supported then
+    raise exception 'identity provider is not supported' using errcode = '42501';
+  end if;
+  if not v_provider.policy_approved then
+    raise exception 'identity provider is not policy-approved' using errcode = '42501';
+  end if;
+
+  -- (5) HUMAN-ONLY ceiling. allowed_agent_kinds is permissive on empty/null (the ceiling
+  -- is "unset"); reject ONLY when it is non-empty AND does not include 'human'.
+  if array_length(v_provider.allowed_agent_kinds, 1) is not null
+     and not ('human' = any (v_provider.allowed_agent_kinds)) then
+    raise exception 'provider ceiling does not permit the human kind' using errcode = '42501';
+  end if;
+
+  -- (6) SYNTHETIC uid — byte-identical derivation to enroll_federated_identity:198-199
+  -- (extensions.digest, since the pinned search_path lacks extensions). Idempotent per
+  -- (issuer, sub) so re-provisioning converges to ONE owner auth.users row = the shared
+  -- IDLINK uid. Pass issuer/subject VERBATIM (no trim/normalize) to stay byte-identical.
+  v_handle := 'fed-human-' || substr(
+    encode(extensions.digest(convert_to(p_issuer || '|' || p_subject, 'UTF8'), 'sha256'), 'hex'),
+    1, 32);
+  v_uid := agent_board._ensure_agent_auth_user(v_handle);
+
+  -- (7) Idempotent + no-self-reactivation, keyed on auth_user_id = the synthetic uid (ANY
+  -- status). An ACTIVE row -> return it (idempotent). A NON-active row -> fail closed
+  -- (42501): a suspended/revoked human must NOT re-mint a session (mirrors
+  -- 20260726000100:78-81 and reinforces the F-13 revocation lever). F-5: assert the row is
+  -- human before returning it as a human session (a non-human agent on this owner uid must
+  -- never yield a "human" provision).
+  select *
+    into v_existing
+    from agent_board.agents a
+   where a.auth_user_id = v_uid
+   order by (a.status = 'active') desc, a.created_at asc
+   limit 1;
+  if found then
+    if v_existing.status = 'active' then
+      if v_existing.kind <> 'human' then
+        raise exception 'existing agent on this identity is not human; refusing human session'
+          using errcode = '42501';
+      end if;
+      v_agent := v_existing;
+      -- Refresh the verified-email snapshot on re-provision (MERGE, see step 9).
+      if v_email is not null then
+        update auth.users u
+           set raw_user_meta_data = coalesce(u.raw_user_meta_data, '{}'::jsonb)
+             || jsonb_build_object(
+                  'fedsession_email', v_email,
+                  'fedsession_email_verified', v_email_verified,
+                  'fedsession_email_provenance', 'portal-claim-unverified')
+         where u.id = v_uid;
+      end if;
+      -- (auto-join before the idempotent return — see step 11 for the rationale).
+      perform agent_board._fedsession_autojoin_default_board(v_provider, v_agent.id);
+      insert into agent_board.enrollment_federation_audit(
+        issuer, audience, subject, human_identity_claim, provider_id,
+        agent_id, auth_user_id, requested_scopes, granted_scopes, mode)
+      values (
+        p_issuer, p_audience, p_subject, p_human_identity_claim, v_provider.id,
+        v_agent.id, v_uid, '{}', '{}', 'fedsession');
+      return query
+      select v_agent.id, v_agent.auth_user_id, v_agent.handle,
+             v_agent.kind::text, v_agent.status, v_provider.id, v_agent.created_at;
+      return;
+    else
+      raise exception 'a non-active identity already exists for this human; contact an operator'
+        using errcode = '42501';
+    end if;
+  end if;
+
+  -- (8) Create the kind='human' agent (self-owned: auth_user_id = owner_user_id = uid).
+  -- No agent_signing_keys row (humans hold no key). metadata.federation carries ONLY the
+  -- boolean email_verified — never the address (PII / fleet-readable RLS).
+  begin
+    insert into agent_board.agents(
+      agent_type,
+      kind,
+      handle,
+      display_name,
+      status,
+      auth_user_id,
+      owner_user_id,
+      metadata
+    )
+    values (
+      'human',
+      'human'::agent_board.agent_kind,
+      v_handle,
+      coalesce(nullif(trim(p_display_name), ''), 'Human'),
+      'active',
+      v_uid,
+      v_uid,
+      jsonb_build_object(
+        'federation', jsonb_build_object(
+          'mode', 'fedsession',
+          'issuer', p_issuer,
+          'audience', p_audience,
+          'subject', p_subject,
+          'providerId', v_provider.id,
+          'email_verified', v_email_verified,
+          'enrolledAt', now()
+        )
+      )
+    )
+    returning * into v_agent;
+  exception when unique_violation then
+    -- Concurrent first-provision race on the synthetic uid. F-5: re-select the ACTIVE row
+    -- and ASSERT it is human (fail closed otherwise) — never return a non-human agent as a
+    -- human session.
+    select *
+      into v_existing
+      from agent_board.agents a
+     where a.auth_user_id = v_uid
+       and a.status = 'active'
+       and a.kind = 'human'
+     limit 1;
+    if found then
+      v_agent := v_existing;
+    else
+      raise exception 'could not provision federated human (race or non-human on owner uid), please retry'
+        using errcode = '40001';
+    end if;
+  end;
+
+  -- (9) F-12/F-4: store the verified email ONLY in auth.users.raw_user_meta_data
+  -- (service-role-only), MERGED so _ensure_agent_auth_user's {slug, issuer} is preserved,
+  -- tagged provenance='portal-claim-unverified'. The definer owner (postgres) owns auth.*.
+  if v_email is not null then
+    update auth.users u
+       set raw_user_meta_data = coalesce(u.raw_user_meta_data, '{}'::jsonb)
+         || jsonb_build_object(
+              'fedsession_email', v_email,
+              'fedsession_email_verified', v_email_verified,
+              'fedsession_email_provenance', 'portal-claim-unverified')
+     where u.id = v_uid;
+  end if;
+
+  -- (10) FEDSESSION auto-join (new). Baseline default-board membership for a fresh fed-human.
+  perform agent_board._fedsession_autojoin_default_board(v_provider, v_agent.id);
+
+  -- (11) F-6: append the audit row (mode='fedsession'). No requested/granted scopes on the
+  -- human path (authority is membership/role, not enrollment scopes) -> empty arrays.
+  insert into agent_board.enrollment_federation_audit(
+    issuer, audience, subject, human_identity_claim, provider_id,
+    agent_id, auth_user_id, requested_scopes, granted_scopes, mode)
+  values (
+    p_issuer, p_audience, p_subject, p_human_identity_claim, v_provider.id,
+    v_agent.id, v_uid, '{}', '{}', 'fedsession');
+
+  return query
+  select v_agent.id, v_agent.auth_user_id, v_agent.handle,
+         v_agent.kind::text, v_agent.status, v_provider.id, v_agent.created_at;
+end;
+$$;
+
+-- (C) The auto-join helper. SECURITY DEFINER internal (service_role/postgres only — it is
+-- only ever called from enroll_federated_human, itself service_role-gated). Idempotent,
+-- first-time-only, active-board-only, non-fatal. Kept as a helper so BOTH provision paths
+-- (idempotent re-provision + first insert) share one byte-identical implementation.
+create or replace function agent_board._fedsession_autojoin_default_board(
+  p_provider agent_board.identity_providers,
+  p_agent_id uuid
+)
+returns void
+language plpgsql
+security definer
+set search_path = agent_board, public
+as $$
+begin
+  if p_provider.default_board_id is null then
+    return;
+  end if;
+  -- The NOT EXISTS below is FIRST-TIME-ONLY (any existing membership row, incl. 'left'/
+  -- 'removed', suppresses the auto-join so a human who deliberately left is not re-joined).
+  -- Under concurrency it is NOT sufficient on its own: two concurrent re-provisions of the
+  -- same already-provisioned human can both pass NOT EXISTS, and the second insert then trips
+  -- the partial unique index idx_agent_board_board_memberships_active_unique. Catch that
+  -- unique_violation to a no-op (mirrors enroll_federated_human's step-8 agent-insert race
+  -- handling) so auto-join is NEVER fatal to the session mint and never duplicates.
+  begin
+    insert into agent_board.board_memberships(
+      board_id, agent_id, role, membership_state, created_by_agent_id, metadata)
+    select p_provider.default_board_id, p_agent_id, 'member', 'joined', p_agent_id,
+           jsonb_build_object('source', 'fedsession-autojoin', 'providerId', p_provider.id)
+    where exists (
+        select 1 from agent_board.boards b
+         where b.id = p_provider.default_board_id
+           and b.status = 'active')
+      and not exists (
+        select 1 from agent_board.board_memberships m
+         where m.board_id = p_provider.default_board_id
+           and m.agent_id = p_agent_id);
+  exception when unique_violation then
+    null;  -- concurrent auto-join won the race; its membership stands. Non-fatal.
+  end;
+end;
+$$;
+
+comment on function agent_board._fedsession_autojoin_default_board(agent_board.identity_providers, uuid) is
+  'FEDSESSION internal: idempotently auto-join a freshly provisioned federated human to the '
+  'provider''s designated default_board_id (baseline member role, joined). First-time-only '
+  '(any existing membership row suppresses it, so a human who left is not re-joined), '
+  'active-board-only, non-fatal. service_role/postgres only (called from enroll_federated_human).';
+
+revoke all on function agent_board._fedsession_autojoin_default_board(agent_board.identity_providers, uuid)
+  from public, anon, authenticated;
+grant execute on function agent_board._fedsession_autojoin_default_board(agent_board.identity_providers, uuid)
+  to service_role;
+
+comment on function agent_board.enroll_federated_human(text, text, text, jsonb, text) is
+  'FEDSESSION (Option A): service_role no-PoP federated-HUMAN provisioning. Re-gates the '
+  '(issuer,audience) provider allowlist/policy + the human-only ceiling, establishes a '
+  'kind=human self-owned agent (auth_user_id = owner_user_id = a SYNTHETIC uid derived '
+  'byte-identically to enroll_federated_identity per (issuer,sub) = the IDLINK substrate), '
+  'stores the verified email ONLY in auth.users.raw_user_meta_data (provenance '
+  'portal-claim-unverified) with only the boolean email_verified in agents.metadata, '
+  'auto-joins the provider''s designated default board (baseline member; first-time-only, '
+  'non-fatal), and writes a mode=fedsession audit row. No signing key. Idempotent for an '
+  'active identity; a non-active identity fails closed (42501, no self-reactivation) — the '
+  'F-13 revocation lever (suspend the agent -> current_agent_id null -> RLS denies + re-mint '
+  'blocked). service_role-only; never returns or touches a Portal token.';
+
+revoke all on function agent_board.enroll_federated_human(text, text, text, jsonb, text)
+  from public, anon, authenticated;
+grant execute on function agent_board.enroll_federated_human(text, text, text, jsonb, text)
+  to service_role;