@consiliency/agent-board-schema 1.12.0 → 1.23.0

package/tests/isolation/specs/atomic_fleet_authority_races.spec

@@ -0,0 +1,235 @@
+# Consiliency/message-board#162 — an expired complete replay must serialize
+# against the live membership and creator-authority rows that justify its narrow
+# expiry/exhaustion bypass. Each public invalidator is exercised in both orders.
+#
+# Consiliency/message-board#186 adds set_board_authority_ceiling as a fourth
+# invalidator. It is the one that cannot be covered by a row lock: the invalidating
+# state is the INSERT of a first ceiling row, and until it commits there is no row
+# to lock — absence is the normal default-owner state (_grant_within_ceiling
+# coalesces a missing row to owner). Its omission from this hand-written
+# invalidator list is exactly why the race shipped uncovered.
+#
+# WHAT THIS PINS (a TRACE plus a value): the two transactions SERIALIZE — the
+# second one to reach the ceiling prints `<waiting ...>` and, when the ceiling wins,
+# the expired replay COMPLETES with `ERROR: fleet onboarding invite is not usable`.
+# It pins the PROPERTY, not any one instrument; read the mutation results before
+# attributing the `<waiting ...>` to the advisory lock.
+#
+# MUTATION RESULTS (all three run):
+#   * remove ONLY `perform agent_board._lock_board_authority_ceiling(...)` from
+#     onboard_federated_fleet_agent -> this spec still PASSES, byte-identical. The
+#     advisory lock is NOT what serializes these two today.
+#   * remove ONLY the `for update` from onboarding's `select ... from boards` ->
+#     still PASSES (the advisory lock takes over; atomic_fleet_board_archive fails,
+#     which is that spec's business).
+#   * remove BOTH -> FAILS: no `<waiting ...>`, and retry_onboard returns
+#     reused/reused/reused under a committed observer ceiling — a `member` grant
+#     authorized by an authority the ceiling forbids.
+# The load-bearing serializer today is onboarding's boards FOR UPDATE against the
+# FOR KEY SHARE lock the ceiling INSERT takes on the same boards row through
+# board_authority_ceilings' FK. The advisory lock is a proven-redundant second
+# defense that becomes load-bearing if that incidental lock ever moves.
+#
+# NOT COVERED HERE: the ABBA deadlock between these same two functions (onboarding's
+# advisory-vs-boards ORDER against the setter's advisory-then-FK order). Every
+# permutation below runs each RPC to completion in one step, so neither can be
+# paused between its two acquisitions and no cycle can form -- this spec passed
+# while that deadlock was live. It is pinned instead by the catalog ordering
+# assertion 'atomic onboarding takes the ceiling advisory lock BEFORE the boards row
+# lock' in agent_board_atomic_fleet_onboarding.test.sql, which was verified to fail
+# exactly when a two-session probe reproduces `deadlock detected`.
+
+setup
+{
+  -- The ceiling setter is owner-gated on current_agent_id(), so the creator needs a
+  -- resolvable auth identity to act as itself; the other invalidators run as
+  -- service_role and are unaffected by this linkage.
+  insert into auth.users (id) values ('16250000-0000-0000-0000-0000000000a1');
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status, auth_user_id)
+  values ('16250000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'atomic-authority-owner', 'Atomic Authority Owner', 'active',
+          '16250000-0000-0000-0000-0000000000a1');
+
+  select count(*) from agent_board.create_board(
+    '16250000-0000-0000-0000-000000000001',
+    'atomic-authority-board', 'Atomic Authority Board',
+    'Consiliency/message-board#162 authority isolation proof',
+    jsonb_build_object(), 'private'
+  );
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '16250000-0000-0000-0000-000000000002', 'atomic-authority-domain',
+    'Atomic Authority Domain', 'tailnet', '16250000-0000-0000-0000-000000000001',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '16250000-0000-0000-0000-000000000003',
+    '16250000-0000-0000-0000-000000000002',
+    '16250000-0000-0000-0000-000000000001',
+    'claw', 'sha256:atomic-authority-machine', 'active', 'portal', now()
+  );
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-authority.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent']
+  );
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug='atomic-authority-board'),
+    '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-authority-repo', 'worker', 'phase_worker',
+    'atomic-authority-agent', 1, now() + interval '1 hour',
+    '16250000-0000-0000-0000-000000000001', jsonb_build_object()
+  );
+  select count(*) from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-authority.test', 'message-board', 'human-authority',
+    jsonb_build_object('iss','https://atomic-authority.test','aud','message-board','sub','human-authority'),
+    'atomic-authority-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-authority-board'),
+    '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-authority-repo', 'worker', 'phase_worker',
+    'atomic-authority-agent'
+  );
+  update agent_board.board_invite_tokens
+     set expires_at = now() - interval '1 minute'
+   where created_by_agent_id='16250000-0000-0000-0000-000000000001';
+}
+
+teardown
+{
+  delete from agent_board.fleet_machine_agents where machine_id='16250000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_repo_scopes where harness_registration_id in (
+    select id from agent_board.fleet_harness_registrations where machine_id='16250000-0000-0000-0000-000000000003'
+  );
+  delete from agent_board.fleet_harness_registrations where machine_id='16250000-0000-0000-0000-000000000003';
+  delete from agent_board.board_invite_redemptions where invite_id in (
+    select id from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'
+  );
+  truncate agent_board.fleet_onboarding_invite_bounds;
+  delete from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001';
+  delete from agent_board.board_authority_ceilings where board_id in (
+    select id from agent_board.boards where slug='atomic-authority-board'
+  );
+  delete from agent_board.board_memberships where board_id in (
+    select id from agent_board.boards where slug='atomic-authority-board'
+  );
+  delete from agent_board.enrollment_federation_audit where agent_id in (
+    select id from agent_board.agents where handle='atomic-authority-agent'
+  );
+  delete from agent_board.agent_signing_keys where agent_id in (
+    select id from agent_board.agents where handle='atomic-authority-agent'
+  );
+  delete from agent_board.agents where handle='atomic-authority-agent';
+  delete from agent_board.boards where slug='atomic-authority-board';
+  delete from agent_board.fleet_machines where id='16250000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_trust_domains where id='16250000-0000-0000-0000-000000000002';
+  delete from agent_board.agents where id='16250000-0000-0000-0000-000000000001';
+  delete from auth.users where id='16250000-0000-0000-0000-0000000000a1';
+  delete from agent_board.identity_providers where issuer='https://atomic-authority.test';
+}
+
+session "retry"
+step "retry_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "retry_onboard" {
+  select identity_disposition, membership_disposition, binding_disposition
+  from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-authority.test', 'message-board', 'human-authority',
+    jsonb_build_object('iss','https://atomic-authority.test','aud','message-board','sub','human-authority','iat',200),
+    'atomic-authority-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-authority-board'),
+    '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-authority-repo', 'worker', 'phase_worker',
+    'atomic-authority-agent'
+  );
+}
+step "retry_commit" { COMMIT; }
+
+session "invalidator"
+step "invalidator_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "remove_member" {
+  select membership_state from agent_board.update_board_membership(
+    (select id from agent_board.boards where slug='atomic-authority-board'),
+    (select id from agent_board.agents where handle='atomic-authority-agent'),
+    'removed', jsonb_build_object('reason','isolation member removal')
+  );
+}
+step "revoke_creator" {
+  select status from agent_board.revoke_agent(
+    '16250000-0000-0000-0000-000000000001', 'isolation creator revoke'
+  );
+}
+step "demote_creator" {
+  select role from agent_board.grant_board_role(
+    (select id from agent_board.boards where slug='atomic-authority-board'),
+    '16250000-0000-0000-0000-000000000001', 'observer',
+    '16250000-0000-0000-0000-000000000001'
+  );
+}
+step "invalidator_commit" { COMMIT; }
+
+# The ceiling setter is owner-gated on current_agent_id(), so this session runs as
+# the creator under `authenticated` (NOT service_role, whose current_agent_id() is
+# null and which the owner gate rejects). Separate session because that role/claim
+# setup differs from the service_role invalidator above.
+session "ceiling"
+step "ceiling_begin" {
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '16250000-0000-0000-0000-0000000000a1';
+}
+step "set_ceiling" {
+  select ceiling_max_grantable_role from agent_board.set_board_authority_ceiling(
+    (select id from agent_board.boards where slug='atomic-authority-board'),
+    'observer'
+  );
+}
+step "ceiling_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select
+    (select status from agent_board.agents where id='16250000-0000-0000-0000-000000000001') as creator_status,
+    (select role || '/' || membership_state from agent_board.board_memberships
+      where board_id=(select id from agent_board.boards where slug='atomic-authority-board')
+        and agent_id='16250000-0000-0000-0000-000000000001'
+        and membership_state in ('joined','subscribed')) as creator_authority,
+    (select membership_state from agent_board.board_memberships
+      where board_id=(select id from agent_board.boards where slug='atomic-authority-board')
+        and agent_id=(select id from agent_board.agents where handle='atomic-authority-agent')
+      order by (membership_state in ('joined','subscribed')) desc, created_at desc, id desc limit 1) as member_state,
+    (select max_grantable_role from agent_board.board_authority_ceilings
+      where board_id=(select id from agent_board.boards where slug='atomic-authority-board')) as board_ceiling;
+}
+
+# Retry wins, then the invalidator commits.
+permutation "retry_begin" "retry_onboard" "invalidator_begin" "remove_member" "retry_commit" "invalidator_commit" "check"
+permutation "retry_begin" "retry_onboard" "invalidator_begin" "revoke_creator" "retry_commit" "invalidator_commit" "check"
+permutation "retry_begin" "retry_onboard" "invalidator_begin" "demote_creator" "retry_commit" "invalidator_commit" "check"
+
+# The invalidator wins; the expired retry must fail closed.
+permutation "invalidator_begin" "remove_member" "retry_begin" "retry_onboard" "invalidator_commit" "retry_commit" "check"
+permutation "invalidator_begin" "revoke_creator" "retry_begin" "retry_onboard" "invalidator_commit" "retry_commit" "check"
+permutation "invalidator_begin" "demote_creator" "retry_begin" "retry_onboard" "invalidator_commit" "retry_commit" "check"
+
+# #186 — the ceiling INSERT, in both orders. Retry first: the ceiling setter must
+# WAIT on the advisory lock rather than slip its insert under a completed
+# authorization. Ceiling first: the retry must WAIT and then fail closed against the
+# committed observer ceiling instead of reading the pre-insert absence as owner.
+permutation "retry_begin" "retry_onboard" "ceiling_begin" "set_ceiling" "retry_commit" "ceiling_commit" "check"
+permutation "ceiling_begin" "set_ceiling" "retry_begin" "retry_onboard" "ceiling_commit" "retry_commit" "check"

package/tests/isolation/specs/atomic_fleet_binding_revoke.spec

@@ -0,0 +1,127 @@
+# Consiliency/message-board#162 — exact binding revocation and composed retry use
+# the same machine-before-binding order in both winner orderings. A committed
+# tombstone is never replaced by a new active binding.
+
+setup
+{
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('16230000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'atomic-binding-owner', 'Atomic Binding Owner', 'active');
+  select count(*) from agent_board.create_board(
+    '16230000-0000-0000-0000-000000000001', 'atomic-binding-board',
+    'Atomic Binding Board', 'Consiliency/message-board#162 isolation proof',
+    jsonb_build_object(), 'private'
+  );
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '16230000-0000-0000-0000-000000000002', 'atomic-binding-domain',
+    'Atomic Binding Domain', 'tailnet', '16230000-0000-0000-0000-000000000001',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '16230000-0000-0000-0000-000000000003',
+    '16230000-0000-0000-0000-000000000002',
+    '16230000-0000-0000-0000-000000000001',
+    'claw', 'sha256:atomic-binding-machine', 'active', 'portal', now()
+  );
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-binding.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent']
+  );
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug='atomic-binding-board'),
+    '16230000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-binding-repo', 'worker', 'phase_worker',
+    'atomic-binding-agent', 1, now() + interval '1 hour',
+    '16230000-0000-0000-0000-000000000001', jsonb_build_object()
+  );
+  select count(*) from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-binding.test', 'message-board', 'human-binding',
+    jsonb_build_object('iss','https://atomic-binding.test','aud','message-board','sub','human-binding'),
+    'atomic-binding-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-binding-board'),
+    '16230000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-binding-repo', 'worker', 'phase_worker',
+    'atomic-binding-agent'
+  );
+}
+
+teardown
+{
+  delete from agent_board.fleet_machine_agents where machine_id='16230000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_repo_scopes where harness_registration_id in (
+    select id from agent_board.fleet_harness_registrations where machine_id='16230000-0000-0000-0000-000000000003'
+  );
+  delete from agent_board.fleet_harness_registrations where machine_id='16230000-0000-0000-0000-000000000003';
+  delete from agent_board.board_invite_redemptions where invite_id in (
+    select id from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'
+  );
+  truncate agent_board.fleet_onboarding_invite_bounds;
+  delete from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001';
+  delete from agent_board.board_memberships where board_id in (
+    select id from agent_board.boards where slug='atomic-binding-board'
+  );
+  delete from agent_board.enrollment_federation_audit where agent_id in (
+    select id from agent_board.agents where handle='atomic-binding-agent'
+  );
+  delete from agent_board.agent_signing_keys where agent_id in (
+    select id from agent_board.agents where handle='atomic-binding-agent'
+  );
+  delete from agent_board.agents where handle='atomic-binding-agent';
+  delete from agent_board.boards where slug='atomic-binding-board';
+  delete from agent_board.fleet_machines where id='16230000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_trust_domains where id='16230000-0000-0000-0000-000000000002';
+  delete from agent_board.agents where id='16230000-0000-0000-0000-000000000001';
+  delete from agent_board.identity_providers where issuer='https://atomic-binding.test';
+}
+
+session "retry"
+step "retry_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "retry_onboard" {
+  select binding_disposition from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-binding.test', 'message-board', 'human-binding',
+    jsonb_build_object('iss','https://atomic-binding.test','aud','message-board','sub','human-binding','iat',200),
+    'atomic-binding-agent','yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url','sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true,null,'agent',ARRAY['board:send'],ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-binding-board'),
+    '16230000-0000-0000-0000-000000000003','codex','phase-loop',
+    'message-board','sha256:atomic-binding-repo','worker','phase_worker','atomic-binding-agent'
+  );
+}
+step "retry_commit" { COMMIT; }
+
+session "revoke"
+step "revoke_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "revoke_binding" {
+  select lifecycle_state from agent_board.revoke_fleet_machine_agent_binding(
+    (select id from agent_board.fleet_machine_agents where machine_id='16230000-0000-0000-0000-000000000003'),
+    '16230000-0000-0000-0000-000000000001','isolation proof',jsonb_build_object()
+  );
+}
+step "revoke_commit" { COMMIT; }
+
+session "check"
+step "check_binding" {
+  select count(*) filter (where lifecycle_state='active') as active,
+         count(*) filter (where lifecycle_state='revoked') as revoked,
+         count(*) as total
+    from agent_board.fleet_machine_agents
+   where machine_id='16230000-0000-0000-0000-000000000003';
+}
+
+permutation "retry_begin" "retry_onboard" "revoke_begin" "revoke_binding" "retry_commit" "revoke_commit" "check_binding"
+permutation "revoke_begin" "revoke_binding" "retry_begin" "retry_onboard" "revoke_commit" "retry_commit" "check_binding"

package/tests/isolation/specs/atomic_fleet_board_archive.spec

@@ -0,0 +1,134 @@
+# Consiliency/message-board#162 — board archival and composed fleet onboarding
+# share the board row lock. Prove archive-first rejects and onboarding-first
+# commits before archival without consuming another invite use.
+
+setup
+{
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('16290000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'atomic-archive-owner', 'Atomic Archive Owner', 'active');
+  select count(*) from agent_board.create_board(
+    '16290000-0000-0000-0000-000000000001',
+    'atomic-archive-board', 'Atomic Archive Board',
+    'Consiliency/message-board#162 archive race', jsonb_build_object(), 'private'
+  );
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '16290000-0000-0000-0000-000000000002', 'atomic-archive-domain',
+    'Atomic Archive Domain', 'tailnet', '16290000-0000-0000-0000-000000000001',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '16290000-0000-0000-0000-000000000003',
+    '16290000-0000-0000-0000-000000000002',
+    '16290000-0000-0000-0000-000000000001',
+    'claw', 'sha256:atomic-archive-machine', 'active', 'portal', now()
+  );
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-archive.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent']
+  );
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug='atomic-archive-board'),
+    '16290000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-archive-repo', 'worker', 'phase_worker',
+    'atomic-archive-agent', 1, now() + interval '1 hour',
+    '16290000-0000-0000-0000-000000000001', jsonb_build_object()
+  );
+  select count(*) from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-archive.test', 'message-board', 'human-archive',
+    jsonb_build_object('iss','https://atomic-archive.test','aud','message-board','sub','human-archive'),
+    'atomic-archive-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-archive-board'),
+    '16290000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-archive-repo', 'worker', 'phase_worker',
+    'atomic-archive-agent'
+  );
+}
+
+teardown
+{
+  delete from agent_board.fleet_machine_agents where machine_id='16290000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_repo_scopes where harness_registration_id in (
+    select id from agent_board.fleet_harness_registrations where machine_id='16290000-0000-0000-0000-000000000003'
+  );
+  delete from agent_board.fleet_harness_registrations where machine_id='16290000-0000-0000-0000-000000000003';
+  delete from agent_board.board_invite_redemptions where invite_id in (
+    select id from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001'
+  );
+  truncate agent_board.fleet_onboarding_invite_bounds;
+  delete from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001';
+  delete from agent_board.board_memberships where board_id in (
+    select id from agent_board.boards where slug='atomic-archive-board'
+  );
+  delete from agent_board.enrollment_federation_audit where issuer='https://atomic-archive.test';
+  delete from agent_board.agent_signing_keys where agent_id in (
+    select id from agent_board.agents where handle='atomic-archive-agent'
+  );
+  delete from agent_board.agents where handle='atomic-archive-agent';
+  delete from agent_board.boards where slug='atomic-archive-board';
+  delete from agent_board.fleet_machines where id='16290000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_trust_domains where id='16290000-0000-0000-0000-000000000002';
+  delete from agent_board.agents where id='16290000-0000-0000-0000-000000000001';
+  delete from agent_board.identity_providers where issuer='https://atomic-archive.test';
+}
+
+session "blocker"
+step "blocker_begin" { BEGIN; }
+step "block_machine" {
+  select id from agent_board.fleet_machines
+   where id='16290000-0000-0000-0000-000000000003' for update;
+}
+step "blocker_commit" { COMMIT; }
+
+session "archive"
+step "archive_begin" { BEGIN; }
+step "archive_board" {
+  update agent_board.boards set status='archived'
+   where slug='atomic-archive-board' returning status;
+}
+step "archive_commit" { COMMIT; }
+
+session "retry"
+step "retry_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "retry_onboard" {
+  select identity_disposition, binding_disposition
+  from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-archive.test', 'message-board', 'human-archive',
+    jsonb_build_object('iss','https://atomic-archive.test','aud','message-board','sub','human-archive','iat',200),
+    'atomic-archive-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-archive-board'),
+    '16290000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-archive-repo', 'worker', 'phase_worker',
+    'atomic-archive-agent'
+  );
+}
+step "retry_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select
+    (select status from agent_board.boards where slug='atomic-archive-board') as board_status,
+    (select uses_count from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001') as uses_count,
+    (select count(*) from agent_board.fleet_machine_agents where machine_id='16290000-0000-0000-0000-000000000003') as bindings;
+}
+
+permutation "archive_begin" "archive_board" "retry_begin" "retry_onboard" "archive_commit" "retry_commit" "check"
+permutation "blocker_begin" "block_machine" "retry_begin" "retry_onboard" "archive_begin" "archive_board" "blocker_commit" "retry_commit" "archive_commit" "check"

package/tests/isolation/specs/atomic_fleet_human_fresh_revoke.spec

@@ -0,0 +1,142 @@
+# Consiliency/message-board#162 — a total human revocation and a fresh-key
+# onboarding share the durable human-owner lock. Prove both orders: onboarding
+# first is included in the subtree, while revocation first durably blocks it.
+
+setup
+{
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('16280000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'atomic-human-owner', 'Atomic Human Owner', 'active');
+  select count(*) from agent_board.create_board(
+    '16280000-0000-0000-0000-000000000001',
+    'atomic-human-board', 'Atomic Human Board',
+    'Consiliency/message-board#162 fresh human race', jsonb_build_object(), 'private'
+  );
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '16280000-0000-0000-0000-000000000002', 'atomic-human-domain',
+    'Atomic Human Domain', 'tailnet', '16280000-0000-0000-0000-000000000001',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '16280000-0000-0000-0000-000000000003',
+    '16280000-0000-0000-0000-000000000002',
+    '16280000-0000-0000-0000-000000000001',
+    'claw', 'sha256:atomic-human-machine', 'active', 'portal', now()
+  );
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-human.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent']
+  );
+  select count(*) from agent_board.enroll_federated_identity(
+    'https://atomic-human.test', 'message-board', 'human-fresh-race',
+    jsonb_build_object('iss','https://atomic-human.test','aud','message-board','sub','human-fresh-race'),
+    'atomic-human-existing',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[], null
+  );
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug='atomic-human-board'),
+    '16280000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-human-repo', 'worker', 'phase_worker',
+    'atomic-human-fresh', 1, now() + interval '1 hour',
+    '16280000-0000-0000-0000-000000000001', jsonb_build_object()
+  );
+}
+
+teardown
+{
+  delete from agent_board.fleet_revocation_events where agent_id in (
+    select id from agent_board.agents where handle in ('atomic-human-existing','atomic-human-fresh')
+  );
+  delete from agent_board.fleet_machine_agents where machine_id='16280000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_repo_scopes where harness_registration_id in (
+    select id from agent_board.fleet_harness_registrations where machine_id='16280000-0000-0000-0000-000000000003'
+  );
+  delete from agent_board.fleet_harness_registrations where machine_id='16280000-0000-0000-0000-000000000003';
+  delete from agent_board.board_invite_redemptions where invite_id in (
+    select id from agent_board.board_invite_tokens where created_by_agent_id='16280000-0000-0000-0000-000000000001'
+  );
+  truncate agent_board.fleet_onboarding_invite_bounds;
+  delete from agent_board.board_invite_tokens where created_by_agent_id='16280000-0000-0000-0000-000000000001';
+  delete from agent_board.board_memberships where board_id in (
+    select id from agent_board.boards where slug='atomic-human-board'
+  );
+  delete from agent_board.enrollment_federation_audit where issuer='https://atomic-human.test';
+  delete from agent_board.agent_signing_keys where agent_id in (
+    select id from agent_board.agents where handle in ('atomic-human-existing','atomic-human-fresh')
+  );
+  delete from agent_board.fleet_human_revocations where owner_user_id in (
+    select owner_user_id from agent_board.agents where handle in ('atomic-human-existing','atomic-human-fresh')
+  );
+  delete from agent_board.agents where handle in ('atomic-human-existing','atomic-human-fresh');
+  delete from agent_board.boards where slug='atomic-human-board';
+  delete from agent_board.fleet_machines where id='16280000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_trust_domains where id='16280000-0000-0000-0000-000000000002';
+  delete from agent_board.agents where id='16280000-0000-0000-0000-000000000001';
+  delete from agent_board.identity_providers where issuer='https://atomic-human.test';
+}
+
+session "blocker"
+step "blocker_begin" { BEGIN; }
+step "block_creator" {
+  select id from agent_board.agents
+   where id='16280000-0000-0000-0000-000000000001' for update;
+}
+step "block_existing" {
+  select handle from agent_board.agents where handle='atomic-human-existing' for update;
+}
+step "blocker_commit" { COMMIT; }
+
+session "onboard"
+step "onboard_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "onboard_fresh" {
+  select identity_disposition, binding_disposition
+  from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-human.test', 'message-board', 'human-fresh-race',
+    jsonb_build_object('iss','https://atomic-human.test','aud','message-board','sub','human-fresh-race','iat',200),
+    'atomic-human-fresh',
+    'TDyof3w0SMg4SDYuj-qenolHC_n05cZbrLSckKVGtMo',
+    'raw_ed25519_base64url',
+    'sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16280000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-human-board'),
+    '16280000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-human-repo', 'worker', 'phase_worker',
+    'atomic-human-fresh'
+  );
+}
+step "onboard_commit" { COMMIT; }
+
+session "revoke"
+step "revoke_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "revoke_human" {
+  select revoked_agent_count
+  from agent_board.revoke_human_subtree(
+    (select owner_user_id from agent_board.agents where handle='atomic-human-existing'),
+    '16280000-0000-0000-0000-000000000001', 'fresh race revoke'
+  );
+}
+step "revoke_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select
+    (select count(*) from agent_board.fleet_human_revocations) as human_revocations,
+    (select count(*) from agent_board.agents where handle='atomic-human-fresh') as fresh_agents,
+    (select coalesce(max(status),'absent') from agent_board.agents where handle='atomic-human-fresh') as fresh_status,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint='sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M') as fresh_keys;
+}
+
+permutation "blocker_begin" "block_creator" "onboard_begin" "onboard_fresh" "revoke_begin" "revoke_human" "blocker_commit" "onboard_commit" "revoke_commit" "check"
+permutation "blocker_begin" "block_existing" "revoke_begin" "revoke_human" "onboard_begin" "onboard_fresh" "blocker_commit" "revoke_commit" "onboard_commit" "check"