@consiliency/agent-board-schema 1.12.0 → 1.23.0

package/tests/isolation/specs/atomic_fleet_identity_disposition.spec

@@ -0,0 +1,118 @@
+# Consiliency/message-board#162 — a fleet enrollment that waits behind a
+# concurrent legacy enrollment for the same fingerprint must report the identity
+# as reused. The outer composed RPC takes the fingerprint lock before classifying.
+
+setup
+{
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('16260000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'atomic-disposition-owner', 'Atomic Disposition Owner', 'active');
+  select count(*) from agent_board.create_board(
+    '16260000-0000-0000-0000-000000000001',
+    'atomic-disposition-board', 'Atomic Disposition Board',
+    'Consiliency/message-board#162 disposition isolation proof',
+    jsonb_build_object(), 'private'
+  );
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '16260000-0000-0000-0000-000000000002', 'atomic-disposition-domain',
+    'Atomic Disposition Domain', 'tailnet', '16260000-0000-0000-0000-000000000001',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '16260000-0000-0000-0000-000000000003',
+    '16260000-0000-0000-0000-000000000002',
+    '16260000-0000-0000-0000-000000000001',
+    'claw', 'sha256:atomic-disposition-machine', 'active', 'portal', now()
+  );
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-disposition.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent']
+  );
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug='atomic-disposition-board'),
+    '16260000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-disposition-repo', 'worker', 'phase_worker',
+    'atomic-disposition-agent', 1, now() + interval '1 hour',
+    '16260000-0000-0000-0000-000000000001', jsonb_build_object()
+  );
+}
+
+teardown
+{
+  delete from agent_board.fleet_machine_agents where machine_id='16260000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_repo_scopes where harness_registration_id in (
+    select id from agent_board.fleet_harness_registrations where machine_id='16260000-0000-0000-0000-000000000003'
+  );
+  delete from agent_board.fleet_harness_registrations where machine_id='16260000-0000-0000-0000-000000000003';
+  delete from agent_board.board_invite_redemptions where invite_id in (
+    select id from agent_board.board_invite_tokens where created_by_agent_id='16260000-0000-0000-0000-000000000001'
+  );
+  truncate agent_board.fleet_onboarding_invite_bounds;
+  delete from agent_board.board_invite_tokens where created_by_agent_id='16260000-0000-0000-0000-000000000001';
+  delete from agent_board.board_memberships where board_id in (
+    select id from agent_board.boards where slug='atomic-disposition-board'
+  );
+  delete from agent_board.enrollment_federation_audit where issuer='https://atomic-disposition.test';
+  delete from agent_board.agent_signing_keys where agent_id in (
+    select id from agent_board.agents where handle='atomic-disposition-agent'
+  );
+  delete from agent_board.agents where handle='atomic-disposition-agent';
+  delete from agent_board.boards where slug='atomic-disposition-board';
+  delete from agent_board.fleet_machines where id='16260000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_trust_domains where id='16260000-0000-0000-0000-000000000002';
+  delete from agent_board.agents where id='16260000-0000-0000-0000-000000000001';
+  delete from agent_board.identity_providers where issuer='https://atomic-disposition.test';
+}
+
+session "legacy"
+step "legacy_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "legacy_enroll" {
+  select agent_handle
+  from agent_board.enroll_federated_identity(
+    'https://atomic-disposition.test', 'message-board', 'human-disposition',
+    jsonb_build_object('iss','https://atomic-disposition.test','aud','message-board','sub','human-disposition','iat',100),
+    'atomic-disposition-agent',
+    '5TG73fnNhqeYkoSvPf9QwmWkvKWe0yA7B8YinAWQ8m4', 'raw_ed25519_base64url',
+    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, null, 'agent',
+    ARRAY['board:send'], ARRAY[]::text[], null
+  );
+}
+step "legacy_commit" { COMMIT; }
+
+session "fleet"
+step "fleet_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "fleet_onboard" {
+  select identity_disposition, membership_disposition, binding_disposition
+  from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-disposition.test', 'message-board', 'human-disposition',
+    jsonb_build_object('iss','https://atomic-disposition.test','aud','message-board','sub','human-disposition','iat',101),
+    'atomic-disposition-agent',
+    '5TG73fnNhqeYkoSvPf9QwmWkvKWe0yA7B8YinAWQ8m4', 'raw_ed25519_base64url',
+    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, null, 'agent',
+    ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16260000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-disposition-board'),
+    '16260000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-disposition-repo', 'worker', 'phase_worker',
+    'atomic-disposition-agent'
+  );
+}
+step "fleet_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select
+    (select count(*) from agent_board.agents where handle='atomic-disposition-agent') as agents,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint='sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8') as keys,
+    (select count(*) from agent_board.fleet_machine_agents where machine_id='16260000-0000-0000-0000-000000000003') as bindings;
+}
+
+permutation "legacy_begin" "legacy_enroll" "fleet_begin" "fleet_onboard" "legacy_commit" "fleet_commit" "check"

package/tests/isolation/specs/atomic_fleet_lifecycle_races.spec

@@ -0,0 +1,244 @@
+# Consiliency/message-board#162 — composed retry races every public lifecycle
+# writer that can invalidate a completed fleet authority chain. Each writer is
+# exercised in both winner orderings against the real onboarding RPC.
+
+setup
+{
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values
+    ('16240000-0000-0000-0000-000000000001', 'agent', 'agent',
+     'atomic-lifecycle-owner', 'Atomic Lifecycle Owner', 'active'),
+    ('16240000-0000-0000-0000-000000000004', 'agent', 'agent',
+     'atomic-lifecycle-new-owner', 'Atomic Lifecycle New Owner', 'active');
+
+  select count(*) from agent_board.create_board(
+    '16240000-0000-0000-0000-000000000001', 'atomic-lifecycle-board',
+    'Atomic Lifecycle Board', 'Consiliency/message-board#162 isolation proof',
+    jsonb_build_object(), 'private'
+  );
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '16240000-0000-0000-0000-000000000002', 'atomic-lifecycle-domain',
+    'Atomic Lifecycle Domain', 'tailnet', '16240000-0000-0000-0000-000000000001',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '16240000-0000-0000-0000-000000000003',
+    '16240000-0000-0000-0000-000000000002',
+    '16240000-0000-0000-0000-000000000001',
+    'claw', 'sha256:atomic-lifecycle-machine', 'active', 'portal', now()
+  );
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-lifecycle.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent']
+  );
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug='atomic-lifecycle-board'),
+    '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-lifecycle-repo', 'worker', 'phase_worker',
+    'atomic-lifecycle-agent', 1, now() + interval '1 hour',
+    '16240000-0000-0000-0000-000000000001', jsonb_build_object()
+  );
+  select count(*) from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-lifecycle.test', 'message-board', 'human-lifecycle',
+    jsonb_build_object('iss','https://atomic-lifecycle.test','aud','message-board','sub','human-lifecycle'),
+    'atomic-lifecycle-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-lifecycle-board'),
+    '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-lifecycle-repo', 'worker', 'phase_worker',
+    'atomic-lifecycle-agent'
+  );
+}
+
+teardown
+{
+  delete from agent_board.fleet_human_revocations;
+  delete from agent_board.fleet_revocation_events where subject_id in (
+    '16240000-0000-0000-0000-000000000002',
+    '16240000-0000-0000-0000-000000000003',
+    (select id from agent_board.agents where handle='atomic-lifecycle-agent'),
+    (select k.id from agent_board.agent_signing_keys k join agent_board.agents a on a.id=k.agent_id where a.handle='atomic-lifecycle-agent'),
+    (select id from agent_board.fleet_harness_registrations where machine_id='16240000-0000-0000-0000-000000000003'),
+    (select frs.id from agent_board.fleet_repo_scopes frs join agent_board.fleet_harness_registrations fhr on fhr.id=frs.harness_registration_id where fhr.machine_id='16240000-0000-0000-0000-000000000003')
+  );
+  delete from agent_board.fleet_machine_agents where machine_id='16240000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_repo_scopes where harness_registration_id in (
+    select id from agent_board.fleet_harness_registrations where machine_id='16240000-0000-0000-0000-000000000003'
+  );
+  delete from agent_board.fleet_harness_registrations where machine_id='16240000-0000-0000-0000-000000000003';
+  delete from agent_board.board_invite_redemptions where invite_id in (
+    select id from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'
+  );
+  truncate agent_board.fleet_onboarding_invite_bounds;
+  delete from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001';
+  delete from agent_board.board_memberships where board_id in (
+    select id from agent_board.boards where slug='atomic-lifecycle-board'
+  );
+  delete from agent_board.enrollment_federation_audit where agent_id in (
+    select id from agent_board.agents where handle='atomic-lifecycle-agent'
+  );
+  delete from agent_board.agent_signing_keys where agent_id in (
+    select id from agent_board.agents where handle='atomic-lifecycle-agent'
+  );
+  delete from agent_board.agents where handle='atomic-lifecycle-agent';
+  delete from agent_board.boards where slug='atomic-lifecycle-board';
+  delete from agent_board.fleet_machines where id='16240000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_trust_domains where id='16240000-0000-0000-0000-000000000002';
+  delete from agent_board.agents where id in (
+    '16240000-0000-0000-0000-000000000001',
+    '16240000-0000-0000-0000-000000000004'
+  );
+  delete from agent_board.identity_providers where issuer='https://atomic-lifecycle.test';
+}
+
+session "retry"
+step "retry_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "retry_onboard" {
+  select identity_disposition, membership_disposition, binding_disposition
+  from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-lifecycle.test', 'message-board', 'human-lifecycle',
+    jsonb_build_object('iss','https://atomic-lifecycle.test','aud','message-board','sub','human-lifecycle','iat',200),
+    'atomic-lifecycle-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-lifecycle-board'),
+    '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-lifecycle-repo', 'worker', 'phase_worker',
+    'atomic-lifecycle-agent'
+  );
+}
+step "retry_commit" { COMMIT; }
+
+session "lifecycle"
+step "lifecycle_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "revoke_fleet_agent" {
+  select subject_kind from agent_board.revoke_fleet_subject(
+    'agent', (select id from agent_board.agents where handle='atomic-lifecycle-agent'),
+    '16240000-0000-0000-0000-000000000001', 'isolation agent revoke', jsonb_build_object()
+  );
+}
+step "revoke_fleet_key" {
+  select subject_kind from agent_board.revoke_fleet_subject(
+    'signing_key', (select k.id from agent_board.agent_signing_keys k join agent_board.agents a on a.id=k.agent_id where a.handle='atomic-lifecycle-agent'),
+    '16240000-0000-0000-0000-000000000001', 'isolation key revoke', jsonb_build_object()
+  );
+}
+step "revoke_agent" {
+  select status from agent_board.revoke_agent(
+    (select id from agent_board.agents where handle='atomic-lifecycle-agent'),
+    'isolation legacy agent revoke'
+  );
+}
+step "revoke_agent_subtree" {
+  select revoked_agent_count from agent_board.revoke_agent_subtree(
+    (select id from agent_board.agents where handle='atomic-lifecycle-agent'),
+    '16240000-0000-0000-0000-000000000001', 'isolation agent subtree revoke'
+  );
+}
+step "revoke_human_subtree" {
+  select revoked_agent_count from agent_board.revoke_human_subtree(
+    (select owner_user_id from agent_board.agents where handle='atomic-lifecycle-agent'),
+    '16240000-0000-0000-0000-000000000001', 'isolation human subtree revoke'
+  );
+}
+step "revoke_harness" {
+  select subject_kind from agent_board.revoke_fleet_subject(
+    'harness', (select id from agent_board.fleet_harness_registrations where machine_id='16240000-0000-0000-0000-000000000003'),
+    '16240000-0000-0000-0000-000000000001', 'isolation harness revoke', jsonb_build_object()
+  );
+}
+step "revoke_repo" {
+  select subject_kind from agent_board.revoke_fleet_subject(
+    'repo_scope', (select frs.id from agent_board.fleet_repo_scopes frs join agent_board.fleet_harness_registrations fhr on fhr.id=frs.harness_registration_id where fhr.machine_id='16240000-0000-0000-0000-000000000003'),
+    '16240000-0000-0000-0000-000000000001', 'isolation repo revoke', jsonb_build_object()
+  );
+}
+step "revoke_machine" {
+  select subject_kind from agent_board.revoke_fleet_subject(
+    'machine', '16240000-0000-0000-0000-000000000003',
+    '16240000-0000-0000-0000-000000000001', 'isolation machine revoke', jsonb_build_object()
+  );
+}
+step "reclaim_machine" {
+  select owner_agent_id from agent_board.reclaim_fleet_machine(
+    '16240000-0000-0000-0000-000000000003',
+    '16240000-0000-0000-0000-000000000004',
+    '16240000-0000-0000-0000-000000000001', 'isolation machine reclaim'
+  );
+}
+step "revoke_domain" {
+  select subject_kind from agent_board.revoke_fleet_subject(
+    'trust_domain', '16240000-0000-0000-0000-000000000002',
+    '16240000-0000-0000-0000-000000000001', 'isolation domain revoke', jsonb_build_object()
+  );
+}
+step "reclaim_domain" {
+  select owner_agent_id from agent_board.reclaim_fleet_trust_domain(
+    '16240000-0000-0000-0000-000000000002',
+    '16240000-0000-0000-0000-000000000004',
+    '16240000-0000-0000-0000-000000000001', 'isolation domain reclaim'
+  );
+}
+step "lifecycle_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select a.status as agent_status,
+         k.status as key_status,
+         b.lifecycle_state as binding_state,
+         h.lifecycle_state as harness_state,
+         r.lifecycle_state as repo_state,
+         m.lifecycle_state as machine_state,
+         d.lifecycle_state as domain_state,
+         (select count(*) from agent_board.agents aa where aa.handle='atomic-lifecycle-agent') as agents,
+         (select count(*) from agent_board.fleet_machine_agents bb join agent_board.agents aa on aa.id=bb.agent_id where aa.handle='atomic-lifecycle-agent') as bindings
+    from agent_board.agents a
+    join agent_board.agent_signing_keys k on k.agent_id=a.id
+    join agent_board.fleet_machine_agents b on b.agent_id=a.id
+    join agent_board.fleet_machines m on m.id=b.machine_id
+    join agent_board.fleet_trust_domains d on d.id=m.trust_domain_id
+    join agent_board.fleet_harness_registrations h on h.machine_id=m.id
+    join agent_board.fleet_repo_scopes r on r.harness_registration_id=h.id
+   where a.handle='atomic-lifecycle-agent';
+}
+
+# Retry wins, then the real lifecycle writer commits.
+permutation "retry_begin" "retry_onboard" "lifecycle_begin" "revoke_fleet_agent" "retry_commit" "lifecycle_commit" "check"
+permutation "retry_begin" "retry_onboard" "lifecycle_begin" "revoke_fleet_key" "retry_commit" "lifecycle_commit" "check"
+permutation "retry_begin" "retry_onboard" "lifecycle_begin" "revoke_agent" "retry_commit" "lifecycle_commit" "check"
+permutation "retry_begin" "retry_onboard" "lifecycle_begin" "revoke_agent_subtree" "retry_commit" "lifecycle_commit" "check"
+permutation "retry_begin" "retry_onboard" "lifecycle_begin" "revoke_human_subtree" "retry_commit" "lifecycle_commit" "check"
+permutation "retry_begin" "retry_onboard" "lifecycle_begin" "revoke_harness" "retry_commit" "lifecycle_commit" "check"
+permutation "retry_begin" "retry_onboard" "lifecycle_begin" "revoke_repo" "retry_commit" "lifecycle_commit" "check"
+permutation "retry_begin" "retry_onboard" "lifecycle_begin" "revoke_machine" "retry_commit" "lifecycle_commit" "check"
+permutation "retry_begin" "retry_onboard" "lifecycle_begin" "reclaim_machine" "retry_commit" "lifecycle_commit" "check"
+permutation "retry_begin" "retry_onboard" "lifecycle_begin" "revoke_domain" "retry_commit" "lifecycle_commit" "check"
+permutation "retry_begin" "retry_onboard" "lifecycle_begin" "reclaim_domain" "retry_commit" "lifecycle_commit" "check"
+
+# The lifecycle writer wins; retry must roll back without replacement authority.
+permutation "lifecycle_begin" "revoke_fleet_agent" "retry_begin" "retry_onboard" "lifecycle_commit" "retry_commit" "check"
+permutation "lifecycle_begin" "revoke_fleet_key" "retry_begin" "retry_onboard" "lifecycle_commit" "retry_commit" "check"
+permutation "lifecycle_begin" "revoke_agent" "retry_begin" "retry_onboard" "lifecycle_commit" "retry_commit" "check"
+permutation "lifecycle_begin" "revoke_agent_subtree" "retry_begin" "retry_onboard" "lifecycle_commit" "retry_commit" "check"
+permutation "lifecycle_begin" "revoke_human_subtree" "retry_begin" "retry_onboard" "lifecycle_commit" "retry_commit" "check"
+permutation "lifecycle_begin" "revoke_harness" "retry_begin" "retry_onboard" "lifecycle_commit" "retry_commit" "check"
+permutation "lifecycle_begin" "revoke_repo" "retry_begin" "retry_onboard" "lifecycle_commit" "retry_commit" "check"
+permutation "lifecycle_begin" "revoke_machine" "retry_begin" "retry_onboard" "lifecycle_commit" "retry_commit" "check"
+permutation "lifecycle_begin" "reclaim_machine" "retry_begin" "retry_onboard" "lifecycle_commit" "retry_commit" "check"
+permutation "lifecycle_begin" "revoke_domain" "retry_begin" "retry_onboard" "lifecycle_commit" "retry_commit" "check"
+permutation "lifecycle_begin" "reclaim_domain" "retry_begin" "retry_onboard" "lifecycle_commit" "retry_commit" "check"

package/tests/isolation/specs/atomic_fleet_onboarding.spec

@@ -0,0 +1,106 @@
+# Consiliency/message-board#162 — two first composed fleet onboardings for one
+# bounded invite serialize and converge on the same complete authority chain.
+
+setup
+{
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('16220000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'atomic-race-owner', 'Atomic Race Owner', 'active');
+
+  select count(*) from agent_board.create_board(
+    '16220000-0000-0000-0000-000000000001',
+    'atomic-race-board', 'Atomic Race Board',
+    'Consiliency/message-board#162 isolation proof', jsonb_build_object(), 'private'
+  );
+
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '16220000-0000-0000-0000-000000000002', 'atomic-race-domain',
+    'Atomic Race Domain', 'tailnet', '16220000-0000-0000-0000-000000000001',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '16220000-0000-0000-0000-000000000003',
+    '16220000-0000-0000-0000-000000000002',
+    '16220000-0000-0000-0000-000000000001',
+    'claw', 'sha256:atomic-race-machine', 'active', 'portal', now()
+  );
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-race.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent']
+  );
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug = 'atomic-race-board'),
+    '16220000-0000-0000-0000-000000000003',
+    'codex', 'phase-loop', 'message-board', 'sha256:atomic-race-repo',
+    'worker', 'phase_worker', 'atomic-race-agent', 1,
+    now() + interval '1 hour', '16220000-0000-0000-0000-000000000001',
+    jsonb_build_object()
+  );
+}
+
+session "first"
+step "first_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "first_onboard" {
+  select identity_disposition, membership_disposition, binding_disposition
+    from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-race.test', 'message-board', 'human-race',
+      jsonb_build_object('iss','https://atomic-race.test','aud','message-board','sub','human-race','iat',100),
+      'atomic-race-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
+      'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
+      true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+      (select code from agent_board.board_invite_tokens where created_by_agent_id = '16220000-0000-0000-0000-000000000001'),
+      (select id from agent_board.boards where slug = 'atomic-race-board'),
+      '16220000-0000-0000-0000-000000000003',
+      'codex', 'phase-loop', 'message-board', 'sha256:atomic-race-repo',
+      'worker', 'phase_worker', 'atomic-race-agent'
+    );
+}
+step "first_commit" { COMMIT; }
+
+session "second"
+step "second_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "second_onboard" {
+  select identity_disposition, membership_disposition, binding_disposition
+    from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-race.test', 'message-board', 'human-race',
+      jsonb_build_object('iss','https://atomic-race.test','aud','message-board','sub','human-race','iat',200,'jti','rotated'),
+      'atomic-race-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
+      'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
+      true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+      (select code from agent_board.board_invite_tokens where created_by_agent_id = '16220000-0000-0000-0000-000000000001'),
+      (select id from agent_board.boards where slug = 'atomic-race-board'),
+      '16220000-0000-0000-0000-000000000003',
+      'codex', 'phase-loop', 'message-board', 'sha256:atomic-race-repo',
+      'worker', 'phase_worker', 'atomic-race-agent'
+    );
+}
+step "second_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select count(*) as agents,
+         (select count(*) from agent_board.agent_signing_keys k
+           join agent_board.agents a on a.id=k.agent_id
+          where a.handle='atomic-race-agent') as keys,
+         (select count(*) from agent_board.board_invite_redemptions r
+           join agent_board.board_invite_tokens i on i.id=r.invite_id
+          where i.created_by_agent_id='16220000-0000-0000-0000-000000000001') as redemptions,
+         (select count(*) from agent_board.fleet_machine_agents b
+           join agent_board.agents a on a.id=b.agent_id
+          where a.handle='atomic-race-agent') as bindings
+    from agent_board.agents where handle='atomic-race-agent';
+}
+
+permutation "first_begin" "first_onboard" "second_begin" "second_onboard" "first_commit" "second_commit" "check"

package/tests/isolation/specs/atomic_fleet_subtree_lock_order.spec

@@ -0,0 +1,147 @@
+# Consiliency/message-board#162 — a complete fleet retry and human-subtree
+# revocation can touch both the invite creator and enrolled agent. Hold the
+# fingerprint lock to pause onboarding before its principal locks, then prove
+# the subtree's enrolled-agent-before-creator UUID order cannot deadlock it.
+
+setup
+{
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('ffffffff-ffff-ffff-ffff-ffffffffff01', 'agent', 'agent',
+          'atomic-subtree-owner', 'Atomic Subtree Owner', 'active');
+  select count(*) from agent_board.create_board(
+    'ffffffff-ffff-ffff-ffff-ffffffffff01',
+    'atomic-subtree-board', 'Atomic Subtree Board',
+    'Consiliency/message-board#162 subtree lock-order proof',
+    jsonb_build_object(), 'private'
+  );
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '16270000-0000-0000-0000-000000000002', 'atomic-subtree-domain',
+    'Atomic Subtree Domain', 'tailnet', 'ffffffff-ffff-ffff-ffff-ffffffffff01',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '16270000-0000-0000-0000-000000000003',
+    '16270000-0000-0000-0000-000000000002',
+    'ffffffff-ffff-ffff-ffff-ffffffffff01',
+    'claw', 'sha256:atomic-subtree-machine', 'active', 'portal', now()
+  );
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-subtree.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent']
+  );
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug='atomic-subtree-board'),
+    '16270000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-subtree-repo', 'worker', 'phase_worker',
+    'atomic-subtree-agent', 1, now() + interval '1 hour',
+    'ffffffff-ffff-ffff-ffff-ffffffffff01', jsonb_build_object()
+  );
+  select count(*) from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-subtree.test', 'message-board', 'human-subtree',
+    jsonb_build_object('iss','https://atomic-subtree.test','aud','message-board','sub','human-subtree'),
+    'atomic-subtree-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='ffffffff-ffff-ffff-ffff-ffffffffff01'),
+    (select id from agent_board.boards where slug='atomic-subtree-board'),
+    '16270000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-subtree-repo', 'worker', 'phase_worker',
+    'atomic-subtree-agent'
+  );
+  update agent_board.agents
+     set owner_user_id = (
+       select owner_user_id from agent_board.agents where handle='atomic-subtree-agent'
+     )
+   where id='ffffffff-ffff-ffff-ffff-ffffffffff01';
+}
+
+teardown
+{
+  delete from agent_board.fleet_human_revocations;
+  delete from agent_board.fleet_revocation_events where agent_id in (
+    select id from agent_board.agents where handle in ('atomic-subtree-owner','atomic-subtree-agent')
+  );
+  delete from agent_board.fleet_machine_agents where machine_id='16270000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_repo_scopes where harness_registration_id in (
+    select id from agent_board.fleet_harness_registrations where machine_id='16270000-0000-0000-0000-000000000003'
+  );
+  delete from agent_board.fleet_harness_registrations where machine_id='16270000-0000-0000-0000-000000000003';
+  delete from agent_board.board_invite_redemptions where invite_id in (
+    select id from agent_board.board_invite_tokens where created_by_agent_id='ffffffff-ffff-ffff-ffff-ffffffffff01'
+  );
+  truncate agent_board.fleet_onboarding_invite_bounds;
+  delete from agent_board.board_invite_tokens where created_by_agent_id='ffffffff-ffff-ffff-ffff-ffffffffff01';
+  delete from agent_board.board_memberships where board_id in (
+    select id from agent_board.boards where slug='atomic-subtree-board'
+  );
+  delete from agent_board.enrollment_federation_audit where issuer='https://atomic-subtree.test';
+  delete from agent_board.agent_signing_keys where agent_id in (
+    select id from agent_board.agents where handle='atomic-subtree-agent'
+  );
+  delete from agent_board.agents where handle='atomic-subtree-agent';
+  delete from agent_board.boards where slug='atomic-subtree-board';
+  delete from agent_board.fleet_machines where id='16270000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_trust_domains where id='16270000-0000-0000-0000-000000000002';
+  delete from agent_board.agents where id='ffffffff-ffff-ffff-ffff-ffffffffff01';
+  delete from agent_board.identity_providers where issuer='https://atomic-subtree.test';
+}
+
+session "blocker"
+step "blocker_begin" { BEGIN; }
+step "blocker_lock" {
+  select pg_advisory_xact_lock(hashtextextended('sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA', 0));
+}
+step "blocker_commit" { COMMIT; }
+
+session "retry"
+step "retry_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "retry_onboard" {
+  select identity_disposition, binding_disposition
+  from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-subtree.test', 'message-board', 'human-subtree',
+    jsonb_build_object('iss','https://atomic-subtree.test','aud','message-board','sub','human-subtree','iat',200),
+    'atomic-subtree-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='ffffffff-ffff-ffff-ffff-ffffffffff01'),
+    (select id from agent_board.boards where slug='atomic-subtree-board'),
+    '16270000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-subtree-repo', 'worker', 'phase_worker',
+    'atomic-subtree-agent'
+  );
+}
+step "retry_commit" { COMMIT; }
+
+session "subtree"
+step "subtree_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "revoke_human_subtree" {
+  select revoked_agent_count
+  from agent_board.revoke_human_subtree(
+    (select owner_user_id from agent_board.agents where handle='atomic-subtree-agent'),
+    'ffffffff-ffff-ffff-ffff-ffffffffff01', 'isolation subtree revoke'
+  );
+}
+step "subtree_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select
+    (select status from agent_board.agents where id='ffffffff-ffff-ffff-ffff-ffffffffff01') as creator_status,
+    (select status from agent_board.agents where handle='atomic-subtree-agent') as enrolled_status,
+    (select status from agent_board.agent_signing_keys where fingerprint='sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA') as key_status,
+    (select count(*) from agent_board.fleet_machine_agents where machine_id='16270000-0000-0000-0000-000000000003') as bindings;
+}
+
+permutation "blocker_begin" "blocker_lock" "retry_begin" "retry_onboard" "subtree_begin" "revoke_human_subtree" "blocker_commit" "subtree_commit" "retry_commit" "check"