@consiliency/agent-board-schema 1.2.0

package/migrations/20260628000000_agent_board_signing_store.sql

@@ -0,0 +1,174 @@
+create table if not exists agent_board.agent_signing_keys (
+  id uuid primary key default gen_random_uuid(),
+  agent_id uuid not null references agent_board.agents(id) on delete cascade,
+  key_id text not null,
+  key_version integer not null check (key_version > 0),
+  algorithm text not null default 'Ed25519' check (algorithm in ('Ed25519')),
+  public_key text not null,
+  public_key_format text not null check (public_key_format in ('raw_ed25519_base64url', 'spki_der_base64url', 'spki_pem')),
+  fingerprint text not null unique check (fingerprint ~ '^sha256:[A-Za-z0-9_-]{43}$'),
+  status text not null default 'pending_proof' check (status in ('pending_proof', 'active', 'revoked', 'expired', 'compromised')),
+  proof_state text not null default 'unproven' check (proof_state in ('unproven', 'challenge_issued', 'proven', 'failed', 'revoked', 'expired')),
+  rotates_signing_key_id uuid references agent_board.agent_signing_keys(id) on delete set null,
+  rotated_by_signing_key_id uuid references agent_board.agent_signing_keys(id) on delete set null,
+  expires_at timestamptz,
+  revoked_at timestamptz,
+  revoked_by_agent_id uuid references agent_board.agents(id) on delete set null,
+  revocation_reason text,
+  metadata jsonb not null default '{}'::jsonb,
+  created_at timestamptz not null default now(),
+  updated_at timestamptz not null default now(),
+  constraint agent_signing_keys_key_id_unique unique (agent_id, key_id),
+  constraint agent_signing_keys_key_version_unique unique (agent_id, key_version),
+  constraint agent_signing_keys_active_requires_proof check (status <> 'active' or proof_state = 'proven'),
+  constraint agent_signing_keys_revoked_shape check (
+    (status in ('revoked', 'compromised') and revoked_at is not null)
+    or (status not in ('revoked', 'compromised') and revoked_at is null)
+  ),
+  constraint agent_signing_keys_not_self_rotates check (rotates_signing_key_id is null or rotates_signing_key_id <> id),
+  constraint agent_signing_keys_not_self_rotated_by check (rotated_by_signing_key_id is null or rotated_by_signing_key_id <> id)
+);
+
+comment on table agent_board.agent_signing_keys is 'Public Ed25519 signing-key registry for Message Board agents; never stores private keys.';
+
+create index if not exists idx_agent_board_agent_signing_keys_agent_status
+  on agent_board.agent_signing_keys(agent_id, status, key_version desc);
+
+create table if not exists agent_board.agent_signing_key_challenges (
+  id uuid primary key default gen_random_uuid(),
+  signing_key_id uuid not null references agent_board.agent_signing_keys(id) on delete cascade,
+  agent_id uuid not null references agent_board.agents(id) on delete cascade,
+  challenge_nonce text not null unique,
+  challenge_bytes text not null,
+  proof_state text not null default 'pending' check (proof_state in ('pending', 'verified', 'failed', 'expired', 'consumed')),
+  failure_class text check (
+    failure_class is null
+    or failure_class in (
+      'unsupported_algorithm',
+      'signature_invalid',
+      'key_revoked',
+      'key_expired',
+      'timestamp_out_of_window',
+      'nonce_replay',
+      'actor_mismatch'
+    )
+  ),
+  expires_at timestamptz not null,
+  consumed_at timestamptz,
+  metadata jsonb not null default '{}'::jsonb,
+  created_at timestamptz not null default now(),
+  updated_at timestamptz not null default now(),
+  constraint agent_signing_key_challenges_consumed_shape check (
+    (proof_state in ('verified', 'failed', 'expired', 'consumed') and consumed_at is not null)
+    or (proof_state = 'pending' and consumed_at is null)
+  )
+);
+
+comment on table agent_board.agent_signing_key_challenges is 'Bounded one-time public-key proof challenges.';
+
+create index if not exists idx_agent_board_agent_signing_key_challenges_key
+  on agent_board.agent_signing_key_challenges(signing_key_id, created_at desc);
+
+create table if not exists agent_board.signature_evidence (
+  id uuid primary key default gen_random_uuid(),
+  agent_id uuid not null references agent_board.agents(id) on delete cascade,
+  signing_key_id uuid references agent_board.agent_signing_keys(id) on delete set null,
+  key_id text,
+  key_version integer check (key_version is null or key_version > 0),
+  algorithm text not null default 'Ed25519' check (algorithm in ('Ed25519')),
+  source_kind text not null check (source_kind in ('message', 'task_event', 'artifact', 'delivery_recipient', 'external')),
+  source_message_id uuid references agent_board.messages(id) on delete cascade,
+  source_task_event_id uuid references agent_board.task_events(id) on delete cascade,
+  source_artifact_id uuid references agent_board.artifacts(id) on delete cascade,
+  source_delivery_recipient_id uuid references agent_board.delivery_recipients(id) on delete cascade,
+  operation text not null,
+  payload_digest text not null,
+  canonicalization_version text not null default 'agent-provenance-jcs.v1',
+  signature_digest text,
+  signature_ref text,
+  verification_status text not null check (verification_status in ('unsigned', 'observed', 'warn', 'verified', 'failed')),
+  failure_class text check (
+    failure_class is null
+    or failure_class in (
+      'unsigned_required',
+      'unsupported_algorithm',
+      'unsupported_canonicalization',
+      'schema_version_mismatch',
+      'actor_mismatch',
+      'payload_digest_mismatch',
+      'signature_invalid',
+      'key_unknown',
+      'key_revoked',
+      'key_expired',
+      'timestamp_out_of_window',
+      'nonce_replay',
+      'idempotency_conflict',
+      'external_evidence_untrusted'
+    )
+  ),
+  signed_at timestamptz,
+  verified_at timestamptz,
+  nonce text,
+  idempotency_key text,
+  external_evidence_ref text,
+  metadata jsonb not null default '{}'::jsonb,
+  created_at timestamptz not null default now(),
+  constraint signature_evidence_source_shape check (
+    (source_kind = 'message' and source_message_id is not null and source_task_event_id is null and source_artifact_id is null and source_delivery_recipient_id is null)
+    or (source_kind = 'task_event' and source_message_id is null and source_task_event_id is not null and source_artifact_id is null and source_delivery_recipient_id is null)
+    or (source_kind = 'artifact' and source_message_id is null and source_task_event_id is null and source_artifact_id is not null and source_delivery_recipient_id is null)
+    or (source_kind = 'delivery_recipient' and source_message_id is null and source_task_event_id is null and source_artifact_id is null and source_delivery_recipient_id is not null)
+    or (source_kind = 'external' and source_message_id is null and source_task_event_id is null and source_artifact_id is null and source_delivery_recipient_id is null and external_evidence_ref is not null)
+  )
+);
+
+comment on table agent_board.signature_evidence is 'Append-only metadata-safe signature evidence linked to canonical source rows.';
+
+create index if not exists idx_agent_board_signature_evidence_message
+  on agent_board.signature_evidence(source_message_id, created_at desc)
+  where source_message_id is not null;
+
+create index if not exists idx_agent_board_signature_evidence_task_event
+  on agent_board.signature_evidence(source_task_event_id, created_at desc)
+  where source_task_event_id is not null;
+
+create index if not exists idx_agent_board_signature_evidence_agent
+  on agent_board.signature_evidence(agent_id, created_at desc);
+
+create table if not exists agent_board.signature_replay_state (
+  id uuid primary key default gen_random_uuid(),
+  agent_id uuid not null references agent_board.agents(id) on delete cascade,
+  signing_key_id uuid references agent_board.agent_signing_keys(id) on delete cascade,
+  operation text not null,
+  payload_digest text not null,
+  nonce text,
+  idempotency_key text,
+  envelope_timestamp timestamptz not null,
+  expires_at timestamptz not null,
+  replay_status text not null default 'consumed' check (replay_status in ('consumed', 'duplicate', 'conflict', 'expired')),
+  signature_evidence_id uuid references agent_board.signature_evidence(id) on delete set null,
+  metadata jsonb not null default '{}'::jsonb,
+  created_at timestamptz not null default now(),
+  constraint signature_replay_state_key_shape check (
+    (nonce is not null and idempotency_key is null)
+    or (nonce is null and idempotency_key is not null)
+  )
+);
+
+create unique index if not exists idx_agent_board_signature_replay_nonce_unique
+  on agent_board.signature_replay_state(agent_id, coalesce(signing_key_id, '00000000-0000-0000-0000-000000000000'::uuid), operation, payload_digest, nonce)
+  where nonce is not null;
+
+create unique index if not exists idx_agent_board_signature_replay_idempotency_unique
+  on agent_board.signature_replay_state(agent_id, operation, idempotency_key)
+  where idempotency_key is not null;
+
+grant select on agent_board.agent_signing_keys,
+  agent_board.agent_signing_key_challenges,
+  agent_board.signature_evidence,
+  agent_board.signature_replay_state
+to service_role;
+
+insert into agent_board.schema_version (version)
+values (5)
+on conflict ((true)) do update set version = excluded.version;

package/migrations/20260628000001_agent_board_signing_proof_rpcs.sql

@@ -0,0 +1,215 @@
+create or replace function agent_board.issue_signing_key_challenge(
+  p_agent_id uuid,
+  p_key_id text,
+  p_expires_in interval default interval '5 minutes'
+)
+returns table (
+  challenge_id uuid,
+  agent_id uuid,
+  key_id text,
+  key_version integer,
+  fingerprint text,
+  challenge text,
+  expires_at timestamptz
+)
+language plpgsql
+security definer
+set search_path = agent_board, public
+as $$
+declare
+  v_actor uuid;
+  v_key agent_board.agent_signing_keys%rowtype;
+  v_challenge_id uuid := gen_random_uuid();
+  v_nonce text := encode(extensions.gen_random_bytes(24), 'base64');
+  v_expires_at timestamptz;
+begin
+  if p_expires_in is null or p_expires_in <= interval '0 seconds' or p_expires_in > interval '15 minutes' then
+    raise exception 'challenge expiry must be between 0 and 15 minutes' using errcode = '22023';
+  end if;
+
+  v_actor := agent_board._resolved_actor_agent_id(p_agent_id, 'p_agent_id');
+
+  select *
+    into v_key
+    from agent_board.agent_signing_keys ask
+   where ask.agent_id = v_actor
+     and ask.key_id = p_key_id
+   for update;
+
+  if not found then
+    raise exception 'signing key not found' using errcode = 'P0002';
+  end if;
+  if v_key.status in ('revoked', 'compromised') then
+    raise exception 'key_revoked: signing key is revoked' using errcode = '22023';
+  end if;
+  if v_key.expires_at is not null and v_key.expires_at <= now() then
+    update agent_board.agent_signing_keys
+       set status = 'expired',
+           proof_state = 'expired',
+           updated_at = now()
+     where id = v_key.id;
+    raise exception 'key_expired: signing key is expired' using errcode = '22023';
+  end if;
+
+  v_expires_at := now() + p_expires_in;
+
+  insert into agent_board.agent_signing_key_challenges(
+    id,
+    signing_key_id,
+    agent_id,
+    challenge_nonce,
+    challenge_bytes,
+    expires_at,
+    metadata
+  )
+  values (
+    v_challenge_id,
+    v_key.id,
+    v_actor,
+    v_nonce,
+    'agent-signing-key-proof.v1:' || v_challenge_id::text || ':' || v_nonce,
+    v_expires_at,
+    jsonb_build_object('keyId', v_key.key_id, 'keyVersion', v_key.key_version)
+  );
+
+  update agent_board.agent_signing_keys
+     set proof_state = 'challenge_issued',
+         updated_at = now()
+   where id = v_key.id
+     and proof_state <> 'proven';
+
+  return query
+  select
+    v_challenge_id,
+    v_actor,
+    v_key.key_id,
+    v_key.key_version,
+    v_key.fingerprint,
+    'agent-signing-key-proof.v1:' || v_challenge_id::text || ':' || v_nonce,
+    v_expires_at;
+end;
+$$;
+
+create or replace function agent_board.record_signing_key_proof_result(
+  p_challenge_id uuid,
+  p_agent_id uuid,
+  p_key_id text,
+  p_verified boolean,
+  p_failure_class text default null,
+  p_metadata jsonb default '{}'::jsonb
+)
+returns table (
+  challenge_id uuid,
+  agent_id uuid,
+  key_id text,
+  key_version integer,
+  fingerprint text,
+  proof_state text,
+  failure_class text,
+  verified_at timestamptz
+)
+language plpgsql
+security definer
+set search_path = agent_board, public
+as $$
+declare
+  v_actor uuid;
+  v_challenge agent_board.agent_signing_key_challenges%rowtype;
+  v_key agent_board.agent_signing_keys%rowtype;
+  v_failure text;
+  v_verified_at timestamptz := now();
+begin
+  v_actor := agent_board._resolved_actor_agent_id(p_agent_id, 'p_agent_id');
+
+  select *
+    into v_challenge
+    from agent_board.agent_signing_key_challenges c
+   where c.id = p_challenge_id
+   for update;
+
+  if not found then
+    raise exception 'signing key challenge not found' using errcode = 'P0002';
+  end if;
+  if v_challenge.agent_id <> v_actor then
+    raise exception 'challenge agent must match current_agent_id()' using errcode = '42501';
+  end if;
+  if v_challenge.proof_state <> 'pending' or v_challenge.consumed_at is not null then
+    raise exception 'nonce_replay: signing key challenge already consumed' using errcode = '23505';
+  end if;
+
+  select *
+    into v_key
+    from agent_board.agent_signing_keys ask
+   where ask.id = v_challenge.signing_key_id
+     and ask.agent_id = v_actor
+     and ask.key_id = p_key_id
+   for update;
+
+  if not found then
+    raise exception 'signing key not found for challenge' using errcode = 'P0002';
+  end if;
+
+  if v_challenge.expires_at <= now() then
+    update agent_board.agent_signing_key_challenges
+       set proof_state = 'expired',
+           failure_class = 'timestamp_out_of_window',
+           consumed_at = now(),
+           updated_at = now()
+     where id = p_challenge_id;
+    raise exception 'timestamp_out_of_window: signing key challenge expired' using errcode = '22023';
+  end if;
+
+  if v_key.status in ('revoked', 'compromised') then
+    v_failure := 'key_revoked';
+  elsif v_key.expires_at is not null and v_key.expires_at <= now() then
+    v_failure := 'key_expired';
+  elsif p_verified then
+    v_failure := null;
+  else
+    v_failure := coalesce(p_failure_class, 'signature_invalid');
+  end if;
+
+  if v_failure is not null and v_failure not in (
+    'unsupported_algorithm',
+    'signature_invalid',
+    'key_revoked',
+    'key_expired',
+    'timestamp_out_of_window',
+    'nonce_replay',
+    'actor_mismatch'
+  ) then
+    raise exception 'unsupported proof failure class' using errcode = '22023';
+  end if;
+
+  update agent_board.agent_signing_key_challenges
+     set proof_state = case when v_failure is null then 'verified' else 'failed' end,
+         failure_class = v_failure,
+         consumed_at = v_verified_at,
+         metadata = coalesce(metadata, '{}'::jsonb) || coalesce(p_metadata, '{}'::jsonb),
+         updated_at = v_verified_at
+   where id = p_challenge_id;
+
+  update agent_board.agent_signing_keys
+     set status = case when v_failure is null then 'active' when v_failure = 'key_expired' then 'expired' else status end,
+         proof_state = case when v_failure is null then 'proven' when v_failure = 'key_expired' then 'expired' else 'failed' end,
+         updated_at = v_verified_at
+   where id = v_key.id;
+
+  return query
+  select
+    p_challenge_id,
+    v_actor,
+    v_key.key_id,
+    v_key.key_version,
+    v_key.fingerprint,
+    case when v_failure is null then 'proven' else 'failed' end,
+    v_failure,
+    case when v_failure is null then v_verified_at else null end;
+end;
+$$;
+
+revoke all on function agent_board.issue_signing_key_challenge(uuid, text, interval) from public, anon;
+revoke all on function agent_board.record_signing_key_proof_result(uuid, uuid, text, boolean, text, jsonb) from public, anon;
+
+grant execute on function agent_board.issue_signing_key_challenge(uuid, text, interval) to authenticated, service_role;
+grant execute on function agent_board.record_signing_key_proof_result(uuid, uuid, text, boolean, text, jsonb) to authenticated, service_role;

package/migrations/20260628000002_agent_board_signature_rls_reads.sql

@@ -0,0 +1,300 @@
+alter table agent_board.agent_signing_keys enable row level security;
+alter table agent_board.agent_signing_key_challenges enable row level security;
+alter table agent_board.signature_evidence enable row level security;
+alter table agent_board.signature_replay_state enable row level security;
+
+do $$
+declare
+  v_table text;
+begin
+  foreach v_table in array array[
+    'agent_signing_keys',
+    'agent_signing_key_challenges',
+    'signature_evidence',
+    'signature_replay_state'
+  ]
+  loop
+    execute format('drop policy if exists %I on agent_board.%I', 'agent_board_service_all_' || v_table, v_table);
+    execute format('create policy %I on agent_board.%I as permissive for all to service_role using (true) with check (true)', 'agent_board_service_all_' || v_table, v_table);
+  end loop;
+end;
+$$;
+
+grant select on agent_board.agent_signing_keys,
+  agent_board.agent_signing_key_challenges,
+  agent_board.signature_evidence,
+  agent_board.signature_replay_state
+to authenticated;
+
+drop policy if exists agent_board_authenticated_select_agent_signing_keys on agent_board.agent_signing_keys;
+create policy agent_board_authenticated_select_agent_signing_keys
+on agent_board.agent_signing_keys
+as permissive
+for select
+to authenticated
+using (agent_id = agent_board.current_agent_id());
+
+drop policy if exists agent_board_authenticated_select_agent_signing_key_challenges on agent_board.agent_signing_key_challenges;
+create policy agent_board_authenticated_select_agent_signing_key_challenges
+on agent_board.agent_signing_key_challenges
+as permissive
+for select
+to authenticated
+using (agent_id = agent_board.current_agent_id());
+
+drop policy if exists agent_board_authenticated_select_signature_replay_state on agent_board.signature_replay_state;
+create policy agent_board_authenticated_select_signature_replay_state
+on agent_board.signature_replay_state
+as permissive
+for select
+to authenticated
+using (agent_id = agent_board.current_agent_id());
+
+drop policy if exists agent_board_authenticated_select_signature_evidence on agent_board.signature_evidence;
+create policy agent_board_authenticated_select_signature_evidence
+on agent_board.signature_evidence
+as permissive
+for select
+to authenticated
+using (
+  agent_id = agent_board.current_agent_id()
+  or exists (
+    select 1
+      from agent_board.messages m
+     where m.id = source_message_id
+       and (
+         m.author_agent_id = agent_board.current_agent_id()
+         or exists (
+           select 1
+             from agent_board.delivery_recipients dr
+            where dr.source_message_id = m.id
+              and dr.recipient_agent_id = agent_board.current_agent_id()
+         )
+       )
+  )
+  or exists (
+    select 1
+      from agent_board.task_events te
+      join agent_board.tasks t on t.id = te.task_id
+     where te.id = source_task_event_id
+       and (
+         te.actor_agent_id = agent_board.current_agent_id()
+         or t.created_by_agent_id = agent_board.current_agent_id()
+         or t.assigned_agent_id = agent_board.current_agent_id()
+       )
+  )
+  or exists (
+    select 1
+      from agent_board.artifacts ar
+     where ar.id = source_artifact_id
+       and ar.created_by_agent_id = agent_board.current_agent_id()
+  )
+  or exists (
+    select 1
+      from agent_board.delivery_recipients dr
+     where dr.id = source_delivery_recipient_id
+       and dr.recipient_agent_id = agent_board.current_agent_id()
+  )
+);
+
+create or replace view agent_board.v_signature_evidence_status
+with (security_invoker = true)
+as
+select
+  se.id as signature_evidence_id,
+  se.source_kind,
+  se.source_message_id,
+  se.source_task_event_id,
+  se.source_artifact_id,
+  se.source_delivery_recipient_id,
+  se.agent_id,
+  se.key_id,
+  se.key_version,
+  se.algorithm,
+  ask.fingerprint as key_fingerprint,
+  se.operation,
+  se.verification_status,
+  se.failure_class,
+  se.verified_at,
+  se.created_at
+from agent_board.signature_evidence se
+left join agent_board.agent_signing_keys ask on ask.id = se.signing_key_id;
+
+create or replace view agent_board.v_thread_feed
+with (security_invoker = true)
+as
+select
+  m.thread_id,
+  m.id as message_id,
+  m.message_sequence,
+  m.created_at as message_created_at,
+  m.author_agent_id,
+  a.handle as author_handle,
+  a.display_name as author_display_name,
+  m.message_type,
+  m.body,
+  m.task_id,
+  sig.verification_status,
+  sig.key_fingerprint,
+  sig.key_version,
+  sig.algorithm,
+  sig.verified_at,
+  sig.failure_class
+from agent_board.messages m
+join agent_board.agents a on a.id = m.author_agent_id
+left join lateral (
+  select
+    se.verification_status,
+    ask.fingerprint as key_fingerprint,
+    se.key_version,
+    se.algorithm,
+    se.verified_at,
+    se.failure_class
+  from agent_board.signature_evidence se
+  left join agent_board.agent_signing_keys ask on ask.id = se.signing_key_id
+  where se.source_kind = 'message'
+    and se.source_message_id = m.id
+  order by se.created_at desc
+  limit 1
+) sig on true;
+
+create or replace view agent_board.v_task_tree
+with (security_invoker = true)
+as
+select
+  coalesce(t.root_task_id, t.id) as root_task_id,
+  t.id as task_id,
+  t.parent_task_id,
+  t.thread_id,
+  t.created_by_agent_id,
+  t.assigned_agent_id,
+  assigned.handle as assigned_agent_handle,
+  t.status,
+  t.priority,
+  t.orchestration_mode,
+  t.title,
+  t.details,
+  t.created_at,
+  t.updated_at,
+  t.completed_at,
+  latest.event_sequence as latest_event_sequence,
+  latest.event_type as latest_event_type,
+  latest.payload->>'kind' as latest_event_kind,
+  sig.verification_status,
+  sig.key_fingerprint,
+  sig.key_version,
+  sig.algorithm,
+  sig.verified_at,
+  sig.failure_class
+from agent_board.tasks t
+left join agent_board.agents assigned on assigned.id = t.assigned_agent_id
+left join lateral (
+  select te.id, te.event_sequence, te.event_type, te.payload
+    from agent_board.task_events te
+   where te.task_id = t.id
+   order by te.event_sequence desc
+   limit 1
+) latest on true
+left join lateral (
+  select
+    se.verification_status,
+    ask.fingerprint as key_fingerprint,
+    se.key_version,
+    se.algorithm,
+    se.verified_at,
+    se.failure_class
+  from agent_board.signature_evidence se
+  left join agent_board.agent_signing_keys ask on ask.id = se.signing_key_id
+  where se.source_kind = 'task_event'
+    and se.source_task_event_id = latest.id
+  order by se.created_at desc
+  limit 1
+) sig on true;
+
+create or replace view agent_board.v_agent_dashboard
+with (security_invoker = true)
+as
+select
+  a.id as agent_id,
+  a.handle,
+  a.display_name,
+  a.status as participant_status,
+  p.availability,
+  p.thread_id as presence_thread_id,
+  p.last_heartbeat_at,
+  p.expires_at as presence_expires_at,
+  coalesce(open_tasks.open_task_count, 0)::bigint as open_task_count,
+  coalesce(active_claims.active_claim_count, 0)::bigint as active_claim_count,
+  coalesce(open_escalations.assigned_open_escalation_count, 0)::bigint as assigned_open_escalation_count,
+  latest.task_id as latest_task_id,
+  latest.event_sequence as latest_task_event_sequence,
+  latest.event_type as latest_task_event_type,
+  latest.payload->>'kind' as latest_task_event_kind,
+  latest.updated_at as latest_task_updated_at,
+  coalesce(inbox_counts.inbox_unread_count, 0)::bigint as inbox_unread_count,
+  coalesce(inbox_counts.inbox_pending_action_count, 0)::bigint as inbox_pending_action_count,
+  latest_sig.verification_status as latest_signature_verification_status,
+  latest_sig.key_fingerprint as latest_signature_key_fingerprint,
+  latest_sig.key_version as latest_signature_key_version,
+  latest_sig.algorithm as latest_signature_algorithm,
+  latest_sig.verified_at as latest_signature_verified_at,
+  latest_sig.failure_class as latest_signature_failure_class
+from agent_board.agents a
+left join agent_board.presence p on p.agent_id = a.id
+left join lateral (
+  select count(*) as open_task_count
+    from agent_board.tasks t
+   where t.assigned_agent_id = a.id
+     and t.status in ('pending', 'in_progress', 'blocked')
+) open_tasks on true
+left join lateral (
+  select count(*) as active_claim_count
+    from agent_board.claims c
+   where c.agent_id = a.id
+     and c.status = 'active'
+     and c.released_at is null
+     and c.lease_expires_at > now()
+) active_claims on true
+left join lateral (
+  select count(*) as assigned_open_escalation_count
+    from agent_board.escalations e
+   where e.assigned_agent_id = a.id
+     and e.status in ('open', 'acknowledged')
+) open_escalations on true
+left join lateral (
+  select
+    count(*) filter (where ii.action_state in ('new', 'restored')) as inbox_unread_count,
+    count(*) filter (where ii.action_state in ('new', 'restored', 'deferred')) as inbox_pending_action_count
+    from agent_board.inbox_items ii
+   where ii.recipient_agent_id = a.id
+     and ii.visible_in_inbox = true
+) inbox_counts on true
+left join lateral (
+  select t.id as task_id, te.id as task_event_id, te.event_sequence, te.event_type, te.payload, t.updated_at
+    from agent_board.tasks t
+    left join agent_board.task_events te on te.task_id = t.id
+   where t.assigned_agent_id = a.id or t.created_by_agent_id = a.id
+   order by t.updated_at desc, te.event_sequence desc nulls last
+   limit 1
+) latest on true
+left join lateral (
+  select
+    se.verification_status,
+    ask.fingerprint as key_fingerprint,
+    se.key_version,
+    se.algorithm,
+    se.verified_at,
+    se.failure_class
+  from agent_board.signature_evidence se
+  left join agent_board.agent_signing_keys ask on ask.id = se.signing_key_id
+  where se.source_kind = 'task_event'
+    and se.source_task_event_id = latest.task_event_id
+  order by se.created_at desc
+  limit 1
+) latest_sig on true;
+
+grant select on agent_board.v_signature_evidence_status,
+  agent_board.v_thread_feed,
+  agent_board.v_task_tree,
+  agent_board.v_agent_dashboard
+to authenticated, service_role;