@consiliency/agent-board-schema 1.22.0 → 1.23.0

package/tests/isolation/specs/atomic_fedsession_fleet_lock_order.spec

@@ -0,0 +1,117 @@
+# Consiliency/message-board#162 — fleet onboarding and /portal-session may
+# share both a human owner and the provider's default board. Prove the routes
+# agree on board -> owner and cannot form the old board/owner ABBA cycle.
+
+setup
+{
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('162a0000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'atomic-cross-owner', 'Atomic Cross Owner', 'active');
+
+  select count(*) from agent_board.create_board(
+    '162a0000-0000-0000-0000-000000000001',
+    'atomic-cross-board', 'Atomic Cross Board',
+    'Consiliency/message-board#162 cross-route lock proof', jsonb_build_object(), 'private'
+  );
+
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '162a0000-0000-0000-0000-000000000002', 'atomic-cross-domain',
+    'Atomic Cross Domain', 'tailnet', '162a0000-0000-0000-0000-000000000001',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '162a0000-0000-0000-0000-000000000003',
+    '162a0000-0000-0000-0000-000000000002',
+    '162a0000-0000-0000-0000-000000000001',
+    'claw', 'sha256:atomic-cross-machine', 'active', 'portal', now()
+  );
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-cross.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent','human']
+  );
+
+  -- Materialize the shared human owner while auto-join is still disabled.
+  select count(*) from agent_board.enroll_federated_human(
+    'https://atomic-cross.test', 'message-board', 'cross-human',
+    jsonb_build_object('sub','cross-human'), 'Cross Human'
+  );
+  update agent_board.identity_providers
+     set default_board_id=(select id from agent_board.boards where slug='atomic-cross-board')
+   where issuer='https://atomic-cross.test';
+
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug='atomic-cross-board'),
+    '162a0000-0000-0000-0000-000000000003',
+    'codex', 'phase-loop', 'message-board', 'sha256:atomic-cross-repo',
+    'worker', 'phase_worker', 'atomic-cross-agent', 1,
+    now() + interval '1 hour', '162a0000-0000-0000-0000-000000000001',
+    jsonb_build_object()
+  );
+}
+
+session "guard"
+step "guard_begin" { BEGIN; }
+step "guard_board_key_share" {
+  select slug from agent_board.boards
+   where slug='atomic-cross-board' for key share;
+}
+step "guard_commit" { COMMIT; }
+
+session "fleet"
+step "fleet_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "fleet_onboard" {
+  select identity_disposition, membership_disposition, binding_disposition
+    from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-cross.test', 'message-board', 'cross-human',
+      jsonb_build_object('iss','https://atomic-cross.test','aud','message-board','sub','cross-human','iat',100),
+      'atomic-cross-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
+      'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
+      true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+      (select code from agent_board.board_invite_tokens where created_by_agent_id='162a0000-0000-0000-0000-000000000001'),
+      (select id from agent_board.boards where slug='atomic-cross-board'),
+      '162a0000-0000-0000-0000-000000000003',
+      'codex', 'phase-loop', 'message-board', 'sha256:atomic-cross-repo',
+      'worker', 'phase_worker', 'atomic-cross-agent'
+    );
+}
+step "fleet_commit" { COMMIT; }
+
+session "portal"
+step "portal_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "portal_enroll" {
+  select status from agent_board.enroll_federated_human(
+    'https://atomic-cross.test', 'message-board', 'cross-human',
+    jsonb_build_object('sub','cross-human','iat',200), 'Cross Human'
+  );
+}
+step "portal_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select
+    (select count(*) from agent_board.agents
+      where owner_user_id=(select auth_user_id from agent_board.agents
+                            where metadata #>> ARRAY['federation','subject']='cross-human'
+                            order by kind='human' desc limit 1)) as owned_agents,
+    (select count(*) from agent_board.board_memberships m
+      join agent_board.agents a on a.id=m.agent_id
+     where m.board_id=(select id from agent_board.boards where slug='atomic-cross-board')
+       and a.owner_user_id=(select auth_user_id from agent_board.agents
+                            where metadata #>> ARRAY['federation','subject']='cross-human'
+                            order by kind='human' desc limit 1)) as memberships,
+    (select count(*) from agent_board.fleet_machine_agents b
+      join agent_board.agents a on a.id=b.agent_id
+     where a.handle='atomic-cross-agent') as bindings;
+}
+
+permutation "guard_begin" "guard_board_key_share" "fleet_begin" "fleet_onboard" "portal_begin" "portal_enroll" "guard_commit" "fleet_commit" "portal_commit" "check"

package/tests/isolation/specs/atomic_fedsession_human_revoke.spec

@@ -0,0 +1,66 @@
+# Consiliency/message-board#162 — /portal-session's enroll_federated_human RPC
+# shares the deterministic auth.users owner lock with total-human revocation.
+# Prove both orders: session first completes before revocation; revocation first
+# commits the marker and the waiting session fails closed.
+
+setup
+{
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('16290000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'atomic-fedsession-revoker', 'Atomic Fedsession Revoker', 'active');
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved, allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-fedsession.test', 'message-board', true, true,
+    ARRAY[]::text[], ARRAY[]::text[], ARRAY['human']
+  );
+  select count(*) from agent_board.enroll_federated_human(
+    'https://atomic-fedsession.test', 'message-board', 'portal-human-race',
+    jsonb_build_object('sub','portal-human-race'), 'Portal Human Race'
+  );
+}
+
+teardown
+{
+  delete from agent_board.enrollment_federation_audit where issuer='https://atomic-fedsession.test';
+  delete from agent_board.fleet_human_revocations where issuer='https://atomic-fedsession.test';
+  delete from agent_board.fleet_revocation_events
+  where revoked_by_agent_id='16290000-0000-0000-0000-000000000001'
+     or agent_id in (
+       select id from agent_board.agents
+       where metadata #>> ARRAY['federation','subject'] = 'portal-human-race'
+     );
+  delete from agent_board.agents where handle like 'fed-human-%' or id='16290000-0000-0000-0000-000000000001';
+  delete from agent_board.identity_providers where issuer='https://atomic-fedsession.test';
+}
+
+session "portal"
+step "portal_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "portal_enroll" {
+  select status from agent_board.enroll_federated_human(
+    'https://atomic-fedsession.test', 'message-board', 'portal-human-race',
+    jsonb_build_object('sub','portal-human-race','iat',200), 'Portal Human Race'
+  );
+}
+step "portal_commit" { COMMIT; }
+
+session "revoke"
+step "revoke_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "revoke_human" {
+  select revoked_agent_count from agent_board.revoke_human_subtree(
+    (select auth_user_id from agent_board.agents where metadata #>> ARRAY['federation','subject'] = 'portal-human-race'),
+    '16290000-0000-0000-0000-000000000001', 'portal race revoke'
+  );
+}
+step "revoke_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select
+    (select count(*) from agent_board.fleet_human_revocations where issuer='https://atomic-fedsession.test') as markers,
+    (select count(*) from agent_board.agents where metadata #>> ARRAY['federation','subject'] = 'portal-human-race' and status='active') as active_humans,
+    (select count(*) from agent_board.enrollment_federation_audit where issuer='https://atomic-fedsession.test') as audits;
+}
+
+permutation "portal_begin" "portal_enroll" "revoke_begin" "revoke_human" "portal_commit" "revoke_commit" "check"
+permutation "revoke_begin" "revoke_human" "portal_begin" "portal_enroll" "revoke_commit" "portal_commit" "check"

package/tests/isolation/specs/atomic_fleet_authority_races.spec

@@ -0,0 +1,235 @@
+# Consiliency/message-board#162 — an expired complete replay must serialize
+# against the live membership and creator-authority rows that justify its narrow
+# expiry/exhaustion bypass. Each public invalidator is exercised in both orders.
+#
+# Consiliency/message-board#186 adds set_board_authority_ceiling as a fourth
+# invalidator. It is the one that cannot be covered by a row lock: the invalidating
+# state is the INSERT of a first ceiling row, and until it commits there is no row
+# to lock — absence is the normal default-owner state (_grant_within_ceiling
+# coalesces a missing row to owner). Its omission from this hand-written
+# invalidator list is exactly why the race shipped uncovered.
+#
+# WHAT THIS PINS (a TRACE plus a value): the two transactions SERIALIZE — the
+# second one to reach the ceiling prints `<waiting ...>` and, when the ceiling wins,
+# the expired replay COMPLETES with `ERROR: fleet onboarding invite is not usable`.
+# It pins the PROPERTY, not any one instrument; read the mutation results before
+# attributing the `<waiting ...>` to the advisory lock.
+#
+# MUTATION RESULTS (all three run):
+#   * remove ONLY `perform agent_board._lock_board_authority_ceiling(...)` from
+#     onboard_federated_fleet_agent -> this spec still PASSES, byte-identical. The
+#     advisory lock is NOT what serializes these two today.
+#   * remove ONLY the `for update` from onboarding's `select ... from boards` ->
+#     still PASSES (the advisory lock takes over; atomic_fleet_board_archive fails,
+#     which is that spec's business).
+#   * remove BOTH -> FAILS: no `<waiting ...>`, and retry_onboard returns
+#     reused/reused/reused under a committed observer ceiling — a `member` grant
+#     authorized by an authority the ceiling forbids.
+# The load-bearing serializer today is onboarding's boards FOR UPDATE against the
+# FOR KEY SHARE lock the ceiling INSERT takes on the same boards row through
+# board_authority_ceilings' FK. The advisory lock is a proven-redundant second
+# defense that becomes load-bearing if that incidental lock ever moves.
+#
+# NOT COVERED HERE: the ABBA deadlock between these same two functions (onboarding's
+# advisory-vs-boards ORDER against the setter's advisory-then-FK order). Every
+# permutation below runs each RPC to completion in one step, so neither can be
+# paused between its two acquisitions and no cycle can form -- this spec passed
+# while that deadlock was live. It is pinned instead by the catalog ordering
+# assertion 'atomic onboarding takes the ceiling advisory lock BEFORE the boards row
+# lock' in agent_board_atomic_fleet_onboarding.test.sql, which was verified to fail
+# exactly when a two-session probe reproduces `deadlock detected`.
+
+setup
+{
+  -- The ceiling setter is owner-gated on current_agent_id(), so the creator needs a
+  -- resolvable auth identity to act as itself; the other invalidators run as
+  -- service_role and are unaffected by this linkage.
+  insert into auth.users (id) values ('16250000-0000-0000-0000-0000000000a1');
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status, auth_user_id)
+  values ('16250000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'atomic-authority-owner', 'Atomic Authority Owner', 'active',
+          '16250000-0000-0000-0000-0000000000a1');
+
+  select count(*) from agent_board.create_board(
+    '16250000-0000-0000-0000-000000000001',
+    'atomic-authority-board', 'Atomic Authority Board',
+    'Consiliency/message-board#162 authority isolation proof',
+    jsonb_build_object(), 'private'
+  );
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '16250000-0000-0000-0000-000000000002', 'atomic-authority-domain',
+    'Atomic Authority Domain', 'tailnet', '16250000-0000-0000-0000-000000000001',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '16250000-0000-0000-0000-000000000003',
+    '16250000-0000-0000-0000-000000000002',
+    '16250000-0000-0000-0000-000000000001',
+    'claw', 'sha256:atomic-authority-machine', 'active', 'portal', now()
+  );
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-authority.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent']
+  );
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug='atomic-authority-board'),
+    '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-authority-repo', 'worker', 'phase_worker',
+    'atomic-authority-agent', 1, now() + interval '1 hour',
+    '16250000-0000-0000-0000-000000000001', jsonb_build_object()
+  );
+  select count(*) from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-authority.test', 'message-board', 'human-authority',
+    jsonb_build_object('iss','https://atomic-authority.test','aud','message-board','sub','human-authority'),
+    'atomic-authority-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-authority-board'),
+    '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-authority-repo', 'worker', 'phase_worker',
+    'atomic-authority-agent'
+  );
+  update agent_board.board_invite_tokens
+     set expires_at = now() - interval '1 minute'
+   where created_by_agent_id='16250000-0000-0000-0000-000000000001';
+}
+
+teardown
+{
+  delete from agent_board.fleet_machine_agents where machine_id='16250000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_repo_scopes where harness_registration_id in (
+    select id from agent_board.fleet_harness_registrations where machine_id='16250000-0000-0000-0000-000000000003'
+  );
+  delete from agent_board.fleet_harness_registrations where machine_id='16250000-0000-0000-0000-000000000003';
+  delete from agent_board.board_invite_redemptions where invite_id in (
+    select id from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'
+  );
+  truncate agent_board.fleet_onboarding_invite_bounds;
+  delete from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001';
+  delete from agent_board.board_authority_ceilings where board_id in (
+    select id from agent_board.boards where slug='atomic-authority-board'
+  );
+  delete from agent_board.board_memberships where board_id in (
+    select id from agent_board.boards where slug='atomic-authority-board'
+  );
+  delete from agent_board.enrollment_federation_audit where agent_id in (
+    select id from agent_board.agents where handle='atomic-authority-agent'
+  );
+  delete from agent_board.agent_signing_keys where agent_id in (
+    select id from agent_board.agents where handle='atomic-authority-agent'
+  );
+  delete from agent_board.agents where handle='atomic-authority-agent';
+  delete from agent_board.boards where slug='atomic-authority-board';
+  delete from agent_board.fleet_machines where id='16250000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_trust_domains where id='16250000-0000-0000-0000-000000000002';
+  delete from agent_board.agents where id='16250000-0000-0000-0000-000000000001';
+  delete from auth.users where id='16250000-0000-0000-0000-0000000000a1';
+  delete from agent_board.identity_providers where issuer='https://atomic-authority.test';
+}
+
+session "retry"
+step "retry_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "retry_onboard" {
+  select identity_disposition, membership_disposition, binding_disposition
+  from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-authority.test', 'message-board', 'human-authority',
+    jsonb_build_object('iss','https://atomic-authority.test','aud','message-board','sub','human-authority','iat',200),
+    'atomic-authority-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-authority-board'),
+    '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-authority-repo', 'worker', 'phase_worker',
+    'atomic-authority-agent'
+  );
+}
+step "retry_commit" { COMMIT; }
+
+session "invalidator"
+step "invalidator_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "remove_member" {
+  select membership_state from agent_board.update_board_membership(
+    (select id from agent_board.boards where slug='atomic-authority-board'),
+    (select id from agent_board.agents where handle='atomic-authority-agent'),
+    'removed', jsonb_build_object('reason','isolation member removal')
+  );
+}
+step "revoke_creator" {
+  select status from agent_board.revoke_agent(
+    '16250000-0000-0000-0000-000000000001', 'isolation creator revoke'
+  );
+}
+step "demote_creator" {
+  select role from agent_board.grant_board_role(
+    (select id from agent_board.boards where slug='atomic-authority-board'),
+    '16250000-0000-0000-0000-000000000001', 'observer',
+    '16250000-0000-0000-0000-000000000001'
+  );
+}
+step "invalidator_commit" { COMMIT; }
+
+# The ceiling setter is owner-gated on current_agent_id(), so this session runs as
+# the creator under `authenticated` (NOT service_role, whose current_agent_id() is
+# null and which the owner gate rejects). Separate session because that role/claim
+# setup differs from the service_role invalidator above.
+session "ceiling"
+step "ceiling_begin" {
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '16250000-0000-0000-0000-0000000000a1';
+}
+step "set_ceiling" {
+  select ceiling_max_grantable_role from agent_board.set_board_authority_ceiling(
+    (select id from agent_board.boards where slug='atomic-authority-board'),
+    'observer'
+  );
+}
+step "ceiling_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select
+    (select status from agent_board.agents where id='16250000-0000-0000-0000-000000000001') as creator_status,
+    (select role || '/' || membership_state from agent_board.board_memberships
+      where board_id=(select id from agent_board.boards where slug='atomic-authority-board')
+        and agent_id='16250000-0000-0000-0000-000000000001'
+        and membership_state in ('joined','subscribed')) as creator_authority,
+    (select membership_state from agent_board.board_memberships
+      where board_id=(select id from agent_board.boards where slug='atomic-authority-board')
+        and agent_id=(select id from agent_board.agents where handle='atomic-authority-agent')
+      order by (membership_state in ('joined','subscribed')) desc, created_at desc, id desc limit 1) as member_state,
+    (select max_grantable_role from agent_board.board_authority_ceilings
+      where board_id=(select id from agent_board.boards where slug='atomic-authority-board')) as board_ceiling;
+}
+
+# Retry wins, then the invalidator commits.
+permutation "retry_begin" "retry_onboard" "invalidator_begin" "remove_member" "retry_commit" "invalidator_commit" "check"
+permutation "retry_begin" "retry_onboard" "invalidator_begin" "revoke_creator" "retry_commit" "invalidator_commit" "check"
+permutation "retry_begin" "retry_onboard" "invalidator_begin" "demote_creator" "retry_commit" "invalidator_commit" "check"
+
+# The invalidator wins; the expired retry must fail closed.
+permutation "invalidator_begin" "remove_member" "retry_begin" "retry_onboard" "invalidator_commit" "retry_commit" "check"
+permutation "invalidator_begin" "revoke_creator" "retry_begin" "retry_onboard" "invalidator_commit" "retry_commit" "check"
+permutation "invalidator_begin" "demote_creator" "retry_begin" "retry_onboard" "invalidator_commit" "retry_commit" "check"
+
+# #186 — the ceiling INSERT, in both orders. Retry first: the ceiling setter must
+# WAIT on the advisory lock rather than slip its insert under a completed
+# authorization. Ceiling first: the retry must WAIT and then fail closed against the
+# committed observer ceiling instead of reading the pre-insert absence as owner.
+permutation "retry_begin" "retry_onboard" "ceiling_begin" "set_ceiling" "retry_commit" "ceiling_commit" "check"
+permutation "ceiling_begin" "set_ceiling" "retry_begin" "retry_onboard" "ceiling_commit" "retry_commit" "check"

package/tests/isolation/specs/atomic_fleet_binding_revoke.spec

@@ -0,0 +1,127 @@
+# Consiliency/message-board#162 — exact binding revocation and composed retry use
+# the same machine-before-binding order in both winner orderings. A committed
+# tombstone is never replaced by a new active binding.
+
+setup
+{
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('16230000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'atomic-binding-owner', 'Atomic Binding Owner', 'active');
+  select count(*) from agent_board.create_board(
+    '16230000-0000-0000-0000-000000000001', 'atomic-binding-board',
+    'Atomic Binding Board', 'Consiliency/message-board#162 isolation proof',
+    jsonb_build_object(), 'private'
+  );
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '16230000-0000-0000-0000-000000000002', 'atomic-binding-domain',
+    'Atomic Binding Domain', 'tailnet', '16230000-0000-0000-0000-000000000001',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '16230000-0000-0000-0000-000000000003',
+    '16230000-0000-0000-0000-000000000002',
+    '16230000-0000-0000-0000-000000000001',
+    'claw', 'sha256:atomic-binding-machine', 'active', 'portal', now()
+  );
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-binding.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent']
+  );
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug='atomic-binding-board'),
+    '16230000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-binding-repo', 'worker', 'phase_worker',
+    'atomic-binding-agent', 1, now() + interval '1 hour',
+    '16230000-0000-0000-0000-000000000001', jsonb_build_object()
+  );
+  select count(*) from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-binding.test', 'message-board', 'human-binding',
+    jsonb_build_object('iss','https://atomic-binding.test','aud','message-board','sub','human-binding'),
+    'atomic-binding-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-binding-board'),
+    '16230000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-binding-repo', 'worker', 'phase_worker',
+    'atomic-binding-agent'
+  );
+}
+
+teardown
+{
+  delete from agent_board.fleet_machine_agents where machine_id='16230000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_repo_scopes where harness_registration_id in (
+    select id from agent_board.fleet_harness_registrations where machine_id='16230000-0000-0000-0000-000000000003'
+  );
+  delete from agent_board.fleet_harness_registrations where machine_id='16230000-0000-0000-0000-000000000003';
+  delete from agent_board.board_invite_redemptions where invite_id in (
+    select id from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'
+  );
+  truncate agent_board.fleet_onboarding_invite_bounds;
+  delete from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001';
+  delete from agent_board.board_memberships where board_id in (
+    select id from agent_board.boards where slug='atomic-binding-board'
+  );
+  delete from agent_board.enrollment_federation_audit where agent_id in (
+    select id from agent_board.agents where handle='atomic-binding-agent'
+  );
+  delete from agent_board.agent_signing_keys where agent_id in (
+    select id from agent_board.agents where handle='atomic-binding-agent'
+  );
+  delete from agent_board.agents where handle='atomic-binding-agent';
+  delete from agent_board.boards where slug='atomic-binding-board';
+  delete from agent_board.fleet_machines where id='16230000-0000-0000-0000-000000000003';
+  delete from agent_board.fleet_trust_domains where id='16230000-0000-0000-0000-000000000002';
+  delete from agent_board.agents where id='16230000-0000-0000-0000-000000000001';
+  delete from agent_board.identity_providers where issuer='https://atomic-binding.test';
+}
+
+session "retry"
+step "retry_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "retry_onboard" {
+  select binding_disposition from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-binding.test', 'message-board', 'human-binding',
+    jsonb_build_object('iss','https://atomic-binding.test','aud','message-board','sub','human-binding','iat',200),
+    'atomic-binding-agent','yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url','sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true,null,'agent',ARRAY['board:send'],ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-binding-board'),
+    '16230000-0000-0000-0000-000000000003','codex','phase-loop',
+    'message-board','sha256:atomic-binding-repo','worker','phase_worker','atomic-binding-agent'
+  );
+}
+step "retry_commit" { COMMIT; }
+
+session "revoke"
+step "revoke_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "revoke_binding" {
+  select lifecycle_state from agent_board.revoke_fleet_machine_agent_binding(
+    (select id from agent_board.fleet_machine_agents where machine_id='16230000-0000-0000-0000-000000000003'),
+    '16230000-0000-0000-0000-000000000001','isolation proof',jsonb_build_object()
+  );
+}
+step "revoke_commit" { COMMIT; }
+
+session "check"
+step "check_binding" {
+  select count(*) filter (where lifecycle_state='active') as active,
+         count(*) filter (where lifecycle_state='revoked') as revoked,
+         count(*) as total
+    from agent_board.fleet_machine_agents
+   where machine_id='16230000-0000-0000-0000-000000000003';
+}
+
+permutation "retry_begin" "retry_onboard" "revoke_begin" "revoke_binding" "retry_commit" "revoke_commit" "check_binding"
+permutation "revoke_begin" "revoke_binding" "retry_begin" "retry_onboard" "revoke_commit" "retry_commit" "check_binding"