@consiliency/agent-board-schema 1.22.0 → 1.23.0

package/tests/agent_board_atomic_fleet_onboarding_runtime.test.sql

@@ -0,0 +1,1250 @@
+create extension if not exists pgtap with schema extensions;
+set search_path = extensions, public, agent_board;
+
+begin;
+select plan(103);
+
+create temp table _atomic_cfg(
+  owner_id uuid,
+  board_id uuid,
+  machine_id uuid,
+  invite_id uuid,
+  invite_code text
+) on commit drop;
+
+create temp table _atomic_result(
+  attempt text,
+  agent_id uuid,
+  signing_key_id uuid,
+  board_id uuid,
+  harness_registration_id uuid,
+  repo_scope_id uuid,
+  fleet_machine_agent_id uuid,
+  binding_signing_key_id uuid,
+  identity_disposition text,
+  membership_disposition text,
+  harness_disposition text,
+  repo_scope_disposition text,
+  binding_disposition text
+) on commit drop;
+
+create temp table _recovery_cfg(
+  legacy_agent_id uuid,
+  legacy_signing_key_id uuid,
+  invite_id uuid,
+  invite_code text
+) on commit drop;
+
+create temp table _recovery_result(
+  agent_id uuid,
+  signing_key_id uuid,
+  identity_disposition text,
+  membership_disposition text,
+  harness_disposition text,
+  repo_scope_disposition text,
+  binding_disposition text
+) on commit drop;
+
+create temp table _collision_cfg(invite_id uuid, invite_code text) on commit drop;
+create temp table _human_revocation_cfg(owner_user_id uuid) on commit drop;
+
+do $$
+declare
+  v_owner uuid := '16210000-0000-0000-0000-000000000001';
+  v_board uuid;
+  v_domain uuid;
+  v_machine uuid;
+  v_invite uuid;
+  v_code text;
+begin
+  insert into agent_board.agents(id, agent_type, handle, display_name, status)
+  values (v_owner, 'agent', 'atomic-runtime-owner', 'Atomic Runtime Owner', 'active');
+
+  select board_id
+    into v_board
+    from agent_board.create_board(
+      v_owner, 'atomic-runtime-board', 'Atomic Runtime Board',
+      'Consiliency/message-board#162 runtime proof', '{}'::jsonb, 'private'
+    );
+
+  insert into agent_board.fleet_trust_domains(
+    slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    'atomic-runtime-domain', 'Atomic Runtime Domain', 'tailnet', v_owner, 'active', now()
+  ) returning id into v_domain;
+
+  insert into agent_board.fleet_machines(
+    trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    v_domain, v_owner, 'claw', 'sha256:atomic-runtime-machine',
+    'active', 'portal', now()
+  ) returning id into v_machine;
+
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-runtime.test', 'message-board', true, true,
+    '{board:send}', '{}', '{agent}'
+  );
+
+  select invite_id, code
+    into v_invite, v_code
+    from agent_board.create_fleet_onboarding_invite(
+      v_board, v_machine, 'codex', 'phase-loop', 'message-board',
+      'sha256:atomic-runtime-repo', 'worker', 'phase_worker',
+      'atomic-runtime-agent', 1, now() + interval '1 hour', v_owner, '{}'::jsonb
+    );
+
+  insert into _atomic_cfg values (v_owner, v_board, v_machine, v_invite, v_code);
+
+  insert into _atomic_result
+  select 'first', r.agent_id, r.signing_key_id, r.board_id,
+         r.harness_registration_id, r.repo_scope_id, r.fleet_machine_agent_id,
+         r.binding_signing_key_id,
+         r.identity_disposition, r.membership_disposition,
+         r.harness_disposition, r.repo_scope_disposition, r.binding_disposition
+    from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":100}'::jsonb,
+      'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
+      'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
+      true, null, 'agent', '{board:send}', '{}', v_code, v_board, v_machine,
+      'codex', 'phase-loop', 'message-board', 'sha256:atomic-runtime-repo',
+      'worker', 'phase_worker', 'atomic-runtime-agent'
+    ) r;
+
+  insert into _atomic_result
+  select 'replay', r.agent_id, r.signing_key_id, r.board_id,
+         r.harness_registration_id, r.repo_scope_id, r.fleet_machine_agent_id,
+         r.binding_signing_key_id,
+         r.identity_disposition, r.membership_disposition,
+         r.harness_disposition, r.repo_scope_disposition, r.binding_disposition
+    from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":200,"jti":"rotated"}'::jsonb,
+      'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
+      'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
+      true, null, 'agent', '{board:send}', '{}', v_code, v_board, v_machine,
+      'codex', 'phase-loop', 'message-board', 'sha256:atomic-runtime-repo',
+      'worker', 'phase_worker', 'atomic-runtime-agent'
+    ) r;
+end
+$$;
+
+select is((select count(*)::int from _atomic_result where attempt='first'), 1,
+  'first atomic onboarding returns one complete receipt');
+select is((select count(*)::int from _atomic_result where attempt='replay'), 1,
+  'exact replay returns one complete receipt');
+select is((select agent_id from _atomic_result where attempt='replay'),
+          (select agent_id from _atomic_result where attempt='first'),
+  'exact replay returns the same agent');
+select is((select signing_key_id from _atomic_result where attempt='replay'),
+          (select signing_key_id from _atomic_result where attempt='first'),
+  'exact replay returns the same proven key');
+select is((select fleet_machine_agent_id from _atomic_result where attempt='replay'),
+          (select fleet_machine_agent_id from _atomic_result where attempt='first'),
+  'exact replay returns the same fleet binding');
+select is((select identity_disposition from _atomic_result where attempt='first'), 'created',
+  'first identity disposition is created');
+select is((select identity_disposition from _atomic_result where attempt='replay'), 'reused',
+  'replay identity disposition is reused');
+select is((select uses_count from agent_board.board_invite_tokens
+            where id=(select invite_id from _atomic_cfg)), 1,
+  'exact replay consumes no second invite use');
+select is((select count(*)::int from agent_board.board_invite_redemptions
+            where invite_id=(select invite_id from _atomic_cfg)), 1,
+  'exact replay keeps one redemption ledger row');
+select is((select count(*)::int from agent_board.agents where handle='atomic-runtime-agent'), 1,
+  'atomic onboarding creates exactly one agent');
+select is((select count(*)::int from agent_board.agent_signing_keys
+            where id=(select signing_key_id from _atomic_result where attempt='first')), 1,
+  'atomic onboarding creates exactly one proven key');
+select is((select role || '/' || membership_state from agent_board.board_memberships
+            where board_id=(select board_id from _atomic_cfg)
+              and agent_id=(select agent_id from _atomic_result where attempt='first')),
+          'member/joined',
+  'atomic onboarding creates the bounded member membership');
+select is((select count(*)::int from agent_board.fleet_harness_registrations
+            where id=(select harness_registration_id from _atomic_result where attempt='first')), 1,
+  'atomic onboarding creates one harness registration');
+select is((select count(*)::int from agent_board.fleet_repo_scopes
+            where id=(select repo_scope_id from _atomic_result where attempt='first')), 1,
+  'atomic onboarding creates one repo scope');
+select is((select fma.signing_key_id from agent_board.fleet_machine_agents fma
+            where fma.id=(select fleet_machine_agent_id from _atomic_result where attempt='first')),
+          (select signing_key_id from _atomic_result where attempt='first'),
+  'fleet binding pins the exact proven signing key');
+select is((select binding_signing_key_id from _atomic_result where attempt='first'),
+          (select signing_key_id from _atomic_result where attempt='first'),
+  'receipt independently returns the signing key pinned by the fleet binding');
+
+create function pg_temp._atomic_history_attempt(p_iat integer)
+returns text
+language plpgsql
+as $$
+begin
+  perform * from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-runtime.test', 'message-board', 'human-runtime',
+    jsonb_build_object('iss','https://atomic-runtime.test','aud','message-board','sub','human-runtime','iat',p_iat),
+    'atomic-runtime-agent',
+    'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+    'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+    '{board:send}', '{}', (select invite_code from _atomic_cfg),
+    (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+    'codex', 'phase-loop', 'message-board', 'sha256:atomic-runtime-repo',
+    'worker', 'phase_worker', 'atomic-runtime-agent'
+  );
+  return 'lived';
+exception when others then
+  return sqlstate;
+end
+$$;
+
+insert into agent_board.fleet_harness_registrations(
+  id, machine_id, harness_kind, harness_label, lifecycle_state, revoked_at
+) values (
+  'ffffffff-ffff-ffff-ffff-fffffffffff1', (select machine_id from _atomic_cfg),
+  'codex', 'phase-loop', 'revoked', now()
+);
+select is(pg_temp._atomic_history_attempt(210), '42501',
+  'a later-sorting revoked harness tombstone blocks active-row replay');
+delete from agent_board.fleet_harness_registrations where id='ffffffff-ffff-ffff-ffff-fffffffffff1';
+insert into agent_board.fleet_harness_registrations(
+  id, machine_id, harness_kind, harness_label, lifecycle_state, revoked_at
+) values (
+  '00000000-0000-0000-0000-000000000001', (select machine_id from _atomic_cfg),
+  'codex', 'phase-loop', 'revoked', now()
+);
+select is(pg_temp._atomic_history_attempt(211), '42501',
+  'an earlier-sorting revoked harness tombstone blocks active-row replay');
+delete from agent_board.fleet_harness_registrations where id='00000000-0000-0000-0000-000000000001';
+
+insert into agent_board.fleet_repo_scopes(
+  id, harness_registration_id, repo_slug, repo_fingerprint, scope_role,
+  lifecycle_state, revoked_at
+) values (
+  'ffffffff-ffff-ffff-ffff-fffffffffff2',
+  (select harness_registration_id from _atomic_result where attempt='first'),
+  'message-board', 'sha256:atomic-runtime-repo', 'worker', 'revoked', now()
+);
+select is(pg_temp._atomic_history_attempt(212), '42501',
+  'a later-sorting revoked repo tombstone blocks active-row replay');
+delete from agent_board.fleet_repo_scopes where id='ffffffff-ffff-ffff-ffff-fffffffffff2';
+insert into agent_board.fleet_repo_scopes(
+  id, harness_registration_id, repo_slug, repo_fingerprint, scope_role,
+  lifecycle_state, revoked_at
+) values (
+  '00000000-0000-0000-0000-000000000002',
+  (select harness_registration_id from _atomic_result where attempt='first'),
+  'message-board', 'sha256:atomic-runtime-repo', 'worker', 'revoked', now()
+);
+select is(pg_temp._atomic_history_attempt(213), '42501',
+  'an earlier-sorting revoked repo tombstone blocks active-row replay');
+delete from agent_board.fleet_repo_scopes where id='00000000-0000-0000-0000-000000000002';
+
+insert into agent_board.fleet_machine_agents(
+  id, machine_id, agent_id, repo_scope_id, signing_key_id, agent_role,
+  lifecycle_state, revoked_at
+) values (
+  'ffffffff-ffff-ffff-ffff-fffffffffff3', (select machine_id from _atomic_cfg),
+  (select agent_id from _atomic_result where attempt='first'),
+  (select repo_scope_id from _atomic_result where attempt='first'),
+  (select signing_key_id from _atomic_result where attempt='first'),
+  'phase_worker', 'revoked', now()
+);
+select is(pg_temp._atomic_history_attempt(214), '42501',
+  'a later-sorting revoked binding tombstone blocks active-row replay');
+delete from agent_board.fleet_machine_agents where id='ffffffff-ffff-ffff-ffff-fffffffffff3';
+insert into agent_board.fleet_machine_agents(
+  id, machine_id, agent_id, repo_scope_id, signing_key_id, agent_role,
+  lifecycle_state, revoked_at
+) values (
+  '00000000-0000-0000-0000-000000000003', (select machine_id from _atomic_cfg),
+  (select agent_id from _atomic_result where attempt='first'),
+  (select repo_scope_id from _atomic_result where attempt='first'),
+  (select signing_key_id from _atomic_result where attempt='first'),
+  'phase_worker', 'revoked', now()
+);
+select is(pg_temp._atomic_history_attempt(215), '42501',
+  'an earlier-sorting revoked binding tombstone blocks active-row replay');
+delete from agent_board.fleet_machine_agents where id='00000000-0000-0000-0000-000000000003';
+
+update agent_board.board_invite_tokens
+   set expires_at = now() - interval '1 minute'
+ where id = (select invite_id from _atomic_cfg);
+select lives_ok(
+  $$insert into _atomic_result
+    select 'expired-complete-replay', r.agent_id, r.signing_key_id, r.board_id,
+           r.harness_registration_id, r.repo_scope_id, r.fleet_machine_agent_id,
+           r.binding_signing_key_id,
+           r.identity_disposition, r.membership_disposition,
+           r.harness_disposition, r.repo_scope_disposition, r.binding_disposition
+      from agent_board.onboard_federated_fleet_agent(
+        'https://atomic-runtime.test', 'message-board', 'human-runtime',
+        '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":250}'::jsonb,
+        'atomic-runtime-agent',
+        'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+        'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+        '{board:send}', '{}', (select invite_code from _atomic_cfg),
+        (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+        'codex', 'phase-loop', 'message-board', 'sha256:atomic-runtime-repo',
+        'worker', 'phase_worker', 'atomic-runtime-agent') r$$,
+  'a fully complete active replay may bypass only expiry and its consumed use cap'
+);
+select is((select count(*)::int from _atomic_result where attempt='expired-complete-replay'), 1,
+  'expired complete replay returns the exact receipt');
+select is((select uses_count from agent_board.board_invite_tokens
+            where id=(select invite_id from _atomic_cfg)), 1,
+  'expired complete replay consumes no additional use');
+update agent_board.board_invite_tokens
+   set expires_at = now() + interval '1 hour'
+ where id = (select invite_id from _atomic_cfg);
+
+select throws_ok(
+  $$select * from agent_board._redeem_invite_for_agent(
+      (select invite_code from _atomic_cfg),
+      (select agent_id from _atomic_result where attempt='first'))$$,
+  '42501', null,
+  'generic redemption rejects the bounded invite'
+);
+select throws_ok(
+  $$select * from agent_board.enroll_federated_identity(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":300}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg))$$,
+  '42501', null,
+  'legacy enrollment rejects the bounded invite before replay'
+);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":300}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg), 'codex', 'substituted-label',
+      'message-board', 'sha256:atomic-runtime-repo', 'worker', 'phase_worker',
+      'atomic-runtime-agent')$$,
+  '42501', null,
+  'altered bound tuple is rejected before replay writes'
+);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":350}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      gen_random_uuid(), (select machine_id from _atomic_cfg), 'codex', 'phase-loop',
+      'message-board', 'sha256:atomic-runtime-repo', 'worker', 'phase_worker',
+      'atomic-runtime-agent')$$,
+  '42501', null,
+  'wrong board id is rejected against the locked invite before replay writes'
+);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":351}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), gen_random_uuid(), 'codex', 'phase-loop',
+      'message-board', 'sha256:atomic-runtime-repo', 'worker', 'phase_worker',
+      'atomic-runtime-agent')$$,
+  '42501', null, 'altered machine bound is rejected before replay writes'
+);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":352}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg), 'claude', 'phase-loop',
+      'message-board', 'sha256:atomic-runtime-repo', 'worker', 'phase_worker',
+      'atomic-runtime-agent')$$,
+  '42501', null, 'altered harness-kind bound is rejected before replay writes'
+);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":353}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg), 'codex', 'phase-loop',
+      'other-repo', 'sha256:atomic-runtime-repo', 'worker', 'phase_worker',
+      'atomic-runtime-agent')$$,
+  '42501', null, 'altered repo-slug bound is rejected before replay writes'
+);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":354}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg), 'codex', 'phase-loop',
+      'message-board', 'sha256:substituted-repo', 'worker', 'phase_worker',
+      'atomic-runtime-agent')$$,
+  '42501', null, 'altered repo-fingerprint bound is rejected before replay writes'
+);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":355}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg), 'codex', 'phase-loop',
+      'message-board', 'sha256:atomic-runtime-repo', 'reviewer', 'reviewer',
+      'atomic-runtime-agent')$$,
+  '42501', null, 'altered role-pair bound is rejected before replay writes'
+);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":356}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg), 'codex', 'phase-loop',
+      'message-board', 'sha256:atomic-runtime-repo', 'worker', 'phase_worker',
+      'substituted-handle')$$,
+  '42501', null, 'altered expected-handle bound is rejected before replay writes'
+);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":357}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg), 'codex', 'phase-loop',
+      'message-board', 'sha256:atomic-runtime-repo', 'worker', 'reviewer',
+      'atomic-runtime-agent')$$,
+  '42501', null, 'altered agent-role bound is rejected before replay writes'
+);
+select is(
+  (select count(*)::text from agent_board.agents where handle='atomic-runtime-agent') || '/' ||
+  (select count(*)::text from agent_board.board_invite_redemptions where invite_id=(select invite_id from _atomic_cfg)) || '/' ||
+  (select count(*)::text from agent_board.fleet_machine_agents where agent_id=(select agent_id from _atomic_result where attempt='first')),
+  '1/1/1',
+  'wrong-board rejection leaves identity, redemption, and fleet counts unchanged'
+);
+select is((select count(*)::int from agent_board.fleet_machine_agents
+            where agent_id=(select agent_id from _atomic_result where attempt='first')), 1,
+  'rejected legacy and altered-bound paths leave one fleet binding');
+select throws_ok(
+  $$update agent_board.fleet_onboarding_invite_bounds
+       set harness_label='mutated'
+     where invite_id=(select invite_id from _atomic_cfg)$$,
+  '55000', null,
+  'creator-authorized bounds remain immutable'
+);
+
+create temp table _cascade_invite as
+select invite_id
+  from agent_board.create_fleet_onboarding_invite(
+    (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+    'codex', 'cascade-proof', 'message-board', 'sha256:cascade-proof',
+    'worker', 'phase_worker', 'agent-board/cascade-proof/codex',
+    1, now() + interval '1 hour', (select owner_id from _atomic_cfg), '{}'::jsonb
+  );
+delete from agent_board.board_invite_tokens where id=(select invite_id from _cascade_invite);
+select is(
+  (select count(*)::int from agent_board.fleet_onboarding_invite_bounds
+    where invite_id=(select invite_id from _cascade_invite)),
+  0,
+  'deleting an unused invite reaches the declared bounds cascade'
+);
+
+update agent_board.board_invite_tokens
+   set revoked_at = now()
+ where id = (select invite_id from _atomic_cfg);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":360}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg), 'codex', 'phase-loop',
+      'message-board', 'sha256:atomic-runtime-repo', 'worker', 'phase_worker',
+      'atomic-runtime-agent')$$,
+  '42501', null,
+  'even a complete replay cannot bypass explicit invite revocation'
+);
+
+delete from agent_board.fleet_machine_agents
+ where id = (select fleet_machine_agent_id from _atomic_result where attempt='first');
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":361}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg), 'codex', 'phase-loop',
+      'message-board', 'sha256:atomic-runtime-repo', 'worker', 'phase_worker',
+      'atomic-runtime-agent')$$,
+  '42501', null,
+  'a revoked invite cannot repair a partial fleet suffix'
+);
+select is((select count(*)::int from agent_board.fleet_machine_agents
+            where agent_id=(select agent_id from _atomic_result where attempt='first')), 0,
+  'revoked partial recovery rolls back without a replacement binding');
+
+update agent_board.board_invite_tokens
+   set revoked_at = null
+ where id = (select invite_id from _atomic_cfg);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":362}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg), 'codex', 'phase-loop',
+      'message-board', 'sha256:atomic-runtime-repo', 'worker', 'phase_worker',
+      'atomic-runtime-agent')$$,
+  '42501', null,
+  'an exhausted invite cannot repair a partial fleet suffix'
+);
+
+update agent_board.board_invite_tokens
+   set max_uses = 2, expires_at = now() - interval '1 minute'
+ where id = (select invite_id from _atomic_cfg);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":363}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg), 'codex', 'phase-loop',
+      'message-board', 'sha256:atomic-runtime-repo', 'worker', 'phase_worker',
+      'atomic-runtime-agent')$$,
+  '42501', null,
+  'an expired invite cannot repair a partial fleet suffix'
+);
+
+update agent_board.board_invite_tokens
+   set expires_at = now() + interval '1 hour'
+ where id = (select invite_id from _atomic_cfg);
+update agent_board.agents set status = 'suspended'
+ where id = (select owner_id from _atomic_cfg);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":364}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg), 'codex', 'phase-loop',
+      'message-board', 'sha256:atomic-runtime-repo', 'worker', 'phase_worker',
+      'atomic-runtime-agent')$$,
+  '42501', null,
+  'an inactive invite creator cannot repair a partial fleet suffix'
+);
+
+update agent_board.agents set status = 'active'
+ where id = (select owner_id from _atomic_cfg);
+select lives_ok(
+  $$insert into _atomic_result
+    select 'partial-recovery', r.agent_id, r.signing_key_id, r.board_id,
+           r.harness_registration_id, r.repo_scope_id, r.fleet_machine_agent_id,
+           r.binding_signing_key_id,
+           r.identity_disposition, r.membership_disposition,
+           r.harness_disposition, r.repo_scope_disposition, r.binding_disposition
+      from agent_board.onboard_federated_fleet_agent(
+        'https://atomic-runtime.test', 'message-board', 'human-runtime',
+        '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":365}'::jsonb,
+        'atomic-runtime-agent',
+        'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+        'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+        '{board:send}', '{}', (select invite_code from _atomic_cfg),
+        (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+        'codex', 'phase-loop', 'message-board', 'sha256:atomic-runtime-repo',
+        'worker', 'phase_worker', 'atomic-runtime-agent') r$$,
+  'a current authorized invite repairs an exact partial suffix'
+);
+select is((select count(*)::int from agent_board.fleet_machine_agents
+            where agent_id=(select agent_id from _atomic_result where attempt='first')), 1,
+  'authorized partial recovery creates exactly one replacement binding');
+select is((select binding_disposition from _atomic_result where attempt='partial-recovery'), 'recovered',
+  'authorized partial recovery reports recovered disposition');
+select is(
+  (select count(*)::text from agent_board.board_invite_redemptions
+    where invite_id=(select invite_id from _atomic_cfg)) || '/' ||
+  (select count(*)::text from agent_board.board_memberships
+    where board_id=(select board_id from _atomic_cfg)
+      and agent_id=(select agent_id from _atomic_result where attempt='first')
+      and membership_state in ('joined','subscribed')),
+  '1/1',
+  'partial recovery preserves one redemption and one active membership'
+);
+update _atomic_result
+   set fleet_machine_agent_id = (
+     select fleet_machine_agent_id from _atomic_result where attempt='partial-recovery'
+   )
+ where attempt in ('first', 'replay', 'expired-complete-replay');
+
+select lives_ok(
+  format(
+    'select * from agent_board.revoke_fleet_machine_agent_binding(%L::uuid,%L::uuid,%L,%L::jsonb)',
+    (select fleet_machine_agent_id from _atomic_result where attempt='first'),
+    (select owner_id from _atomic_cfg), 'runtime test', '{}'
+  ),
+  'the exact-binding sole writer permanently revokes the binding'
+);
+select is((select lifecycle_state from agent_board.fleet_machine_agents
+            where id=(select fleet_machine_agent_id from _atomic_result where attempt='first')),
+          'revoked',
+  'the exact binding remains a revoked tombstone');
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":400}'::jsonb, 'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg), 'codex', 'phase-loop',
+      'message-board', 'sha256:atomic-runtime-repo', 'worker', 'phase_worker',
+      'atomic-runtime-agent')$$,
+  '42501', null,
+  'post-revocation exact replay cannot create replacement authority'
+);
+select is((select count(*)::int from agent_board.fleet_machine_agents
+            where agent_id=(select agent_id from _atomic_result where attempt='first')), 1,
+  'post-revocation replay leaves only the original tombstone');
+
+do $$
+declare
+  v_agent uuid;
+  v_key uuid;
+  v_invite uuid;
+  v_code text;
+begin
+  select e.agent_id, e.signing_key_id
+    into v_agent, v_key
+    from agent_board.enroll_federated_identity(
+      'https://atomic-runtime.test', 'message-board', 'human-recovery',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-recovery","iat":500}'::jsonb,
+      'atomic-recovery-agent',
+      'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+      'raw_ed25519_base64url',
+      'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+      true, null, 'agent', '{board:send}', '{}', null
+    ) e;
+
+  select invite_id, code into v_invite, v_code
+    from agent_board.create_fleet_onboarding_invite(
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'recovery-harness', 'message-board', 'sha256:recovery-repo',
+      'worker', 'phase_worker', 'atomic-recovery-agent', 1,
+      now() + interval '1 hour', (select owner_id from _atomic_cfg), '{}'::jsonb
+    );
+  insert into _recovery_cfg values (v_agent, v_key, v_invite, v_code);
+end
+$$;
+
+select lives_ok(
+  $$insert into _recovery_result
+    select r.agent_id, r.signing_key_id, r.identity_disposition,
+           r.membership_disposition, r.harness_disposition,
+           r.repo_scope_disposition, r.binding_disposition
+      from agent_board.onboard_federated_fleet_agent(
+        'https://atomic-runtime.test', 'message-board', 'human-recovery',
+        '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-recovery","iat":501,"jti":"rotated"}'::jsonb,
+        'atomic-recovery-agent',
+        'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk', 'raw_ed25519_base64url',
+        'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA', true, null, 'agent',
+        '{board:send}', '{}', (select invite_code from _recovery_cfg),
+        (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+        'codex', 'recovery-harness', 'message-board', 'sha256:recovery-repo',
+        'worker', 'phase_worker', 'atomic-recovery-agent') r$$,
+  'an exact legacy identity recovers its missing membership and fleet suffix'
+);
+select is((select agent_id from _recovery_result),
+          (select legacy_agent_id from _recovery_cfg),
+  'legacy recovery reuses the exact principal');
+select is((select signing_key_id from _recovery_result),
+          (select legacy_signing_key_id from _recovery_cfg),
+  'legacy recovery reuses the exact proven signing key');
+select is(
+  (select identity_disposition || '/' || membership_disposition || '/' ||
+          harness_disposition || '/' || repo_scope_disposition || '/' || binding_disposition
+     from _recovery_result),
+  'reused/created/recovered/recovered/recovered',
+  'legacy recovery reports the created and recovered suffix components');
+select is(
+  (select count(*)::text from agent_board.board_invite_redemptions
+    where invite_id=(select invite_id from _recovery_cfg)) || '/' ||
+  (select count(*)::text from agent_board.board_memberships
+    where board_id=(select board_id from _atomic_cfg)
+      and agent_id=(select legacy_agent_id from _recovery_cfg)
+      and membership_state in ('joined','subscribed')) || '/' ||
+  (select count(*)::text from agent_board.fleet_machine_agents
+    where agent_id=(select legacy_agent_id from _recovery_cfg)),
+  '1/1/1',
+  'legacy recovery creates exactly one redemption, membership, and binding');
+
+insert into agent_board.agents(
+  id, agent_type, handle, display_name, status
+) values (
+  '16210000-0000-0000-0000-000000000099', 'agent',
+  'atomic-collision-agent', 'Atomic Collision Occupant', 'active'
+);
+insert into _collision_cfg
+select invite_id, code
+  from agent_board.create_fleet_onboarding_invite(
+    (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+    'codex', 'collision-harness', 'message-board', 'sha256:collision-repo',
+    'worker', 'phase_worker', 'atomic-collision-agent', 1,
+    now() + interval '1 hour', (select owner_id from _atomic_cfg), '{}'::jsonb
+  );
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-collision',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-collision","iat":600}'::jsonb,
+      'atomic-collision-agent',
+      '4KAcBIlVxExOCkFemWSjOREACgi90CE_2-EFbmRYAzM', 'raw_ed25519_base64url',
+      'sha256:M-L7uu74kuf1rPVyZcW9Ar-LD1ZULN3E36HKqy93O3Q', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _collision_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'collision-harness', 'message-board', 'sha256:collision-repo',
+      'worker', 'phase_worker', 'atomic-collision-agent')$$,
+  '23505', null,
+  'server handle disambiguation is a late failure, not committed substitution'
+);
+select is((select count(*)::int from agent_board.agent_signing_keys
+            where fingerprint='sha256:M-L7uu74kuf1rPVyZcW9Ar-LD1ZULN3E36HKqy93O3Q'), 0,
+  'late handle collision rolls back the newly proven key');
+select is((select count(*)::int from agent_board.enrollment_federation_audit
+            where issuer='https://atomic-runtime.test' and subject='human-collision'), 0,
+  'late handle collision rolls back enrollment audit evidence');
+select is(
+  (select uses_count::text from agent_board.board_invite_tokens
+    where id=(select invite_id from _collision_cfg)) || '/' ||
+  (select count(*)::text from agent_board.board_invite_redemptions
+    where invite_id=(select invite_id from _collision_cfg)) || '/' ||
+  (select count(*)::text from agent_board.fleet_harness_registrations
+    where harness_label='collision-harness'),
+  '0/0/0',
+  'late handle collision rolls back invite, redemption, and fleet writes');
+
+insert into agent_board.agents(id, agent_type, handle, display_name, status)
+values ('16210000-0000-0000-0000-000000000098', 'agent',
+        'atomic-wrong-creator', 'Atomic Wrong Creator', 'active');
+select throws_ok(
+  $$select * from agent_board.create_fleet_onboarding_invite(
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'wrong-creator', 'message-board', 'sha256:wrong-creator',
+      'worker', 'phase_worker', 'wrong-creator-agent', 1,
+      now() + interval '1 hour',
+      '16210000-0000-0000-0000-000000000098'::uuid, '{}'::jsonb)$$,
+  '42501', null,
+  'an agent that does not own the machine cannot mint its bounded invite'
+);
+
+update agent_board.fleet_machines
+   set lifecycle_state='revoked', revoked_at=now()
+ where id=(select machine_id from _atomic_cfg);
+select is(pg_temp._atomic_history_attempt(650), '42501',
+  'composed fleet replay rejects a revoked machine');
+select throws_ok(
+  $$select * from agent_board.create_fleet_onboarding_invite(
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'inactive-machine', 'message-board', 'sha256:inactive-machine',
+      'worker', 'phase_worker', 'inactive-machine-agent', 1,
+      now() + interval '1 hour', (select owner_id from _atomic_cfg), '{}'::jsonb)$$,
+  '42501', null,
+  'a revoked machine cannot mint a bounded fleet invite'
+);
+update agent_board.fleet_machines
+   set lifecycle_state='active', revoked_at=null
+ where id=(select machine_id from _atomic_cfg);
+
+update agent_board.fleet_trust_domains
+   set lifecycle_state='revoked', revoked_at=now()
+ where id=(select trust_domain_id from agent_board.fleet_machines
+            where id=(select machine_id from _atomic_cfg));
+select is(pg_temp._atomic_history_attempt(651), '42501',
+  'composed fleet replay rejects a revoked trust domain');
+select throws_ok(
+  $$select * from agent_board.create_fleet_onboarding_invite(
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'inactive-domain', 'message-board', 'sha256:inactive-domain',
+      'worker', 'phase_worker', 'inactive-domain-agent', 1,
+      now() + interval '1 hour', (select owner_id from _atomic_cfg), '{}'::jsonb)$$,
+  '42501', null,
+  'an inactive trust domain cannot mint a bounded fleet invite'
+);
+update agent_board.fleet_trust_domains
+   set lifecycle_state='active', revoked_at=null
+ where id=(select trust_domain_id from agent_board.fleet_machines
+            where id=(select machine_id from _atomic_cfg));
+
+select throws_ok(
+  $$select * from agent_board.create_fleet_onboarding_invite(
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      '../bad-kind', 'malformed', 'message-board', 'sha256:malformed',
+      'worker', 'phase_worker', 'malformed-agent', 1,
+      now() + interval '1 hour', (select owner_id from _atomic_cfg), '{}'::jsonb)$$,
+  '22023', null,
+  'malformed fleet descriptors are rejected before invite creation'
+);
+
+create temp table _matrix_invites(
+  case_name text primary key,
+  invite_id uuid not null,
+  invite_code text not null
+);
+
+insert into _matrix_invites
+select 'generic', invite_id, code
+  from agent_board.create_invite_link(
+    (select board_id from _atomic_cfg), 'member', 'joined', 1,
+    now() + interval '1 hour', (select owner_id from _atomic_cfg), '{}'::jsonb
+  );
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":700}'::jsonb,
+      'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _matrix_invites where case_name='generic'),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'phase-loop', 'message-board', 'sha256:atomic-runtime-repo',
+      'worker', 'phase_worker', 'atomic-runtime-agent')$$,
+  '42501', null, 'a generic invite cannot enter the composed fleet path'
+);
+select is(
+  (select uses_count::text from agent_board.board_invite_tokens
+    where id=(select invite_id from _matrix_invites where case_name='generic')) || '/' ||
+  (select count(*)::text from agent_board.board_invite_redemptions
+    where invite_id=(select invite_id from _matrix_invites where case_name='generic')),
+  '0/0', 'generic-invite rejection leaves uses and redemption counts unchanged'
+);
+
+update agent_board.board_memberships
+   set membership_state='removed', left_at=now(), updated_at=now()
+ where board_id=(select board_id from _atomic_cfg)
+   and agent_id=(select owner_id from _atomic_cfg)
+   and membership_state in ('joined','subscribed');
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":701}'::jsonb,
+      'atomic-runtime-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0', 'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _atomic_cfg),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'phase-loop', 'message-board', 'sha256:atomic-runtime-repo',
+      'worker', 'phase_worker', 'atomic-runtime-agent')$$,
+  '42501', null, 'an invite whose creator is no longer a board member fails closed'
+);
+select is((select uses_count from agent_board.board_invite_tokens where id=(select invite_id from _atomic_cfg)), 1,
+  'non-member creator rejection does not consume another invite use');
+update agent_board.board_memberships
+   set membership_state='joined', role='owner', left_at=null, updated_at=now()
+ where board_id=(select board_id from _atomic_cfg)
+   and agent_id=(select owner_id from _atomic_cfg)
+   and membership_state='removed';
+
+select throws_ok(
+  $$select * from agent_board.create_fleet_onboarding_invite(
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'elevated-role', 'message-board', 'sha256:elevated-role',
+      'worker', 'reviewer', 'elevated-role-agent', 1,
+      now() + interval '1 hour', (select owner_id from _atomic_cfg), '{}'::jsonb)$$,
+  '22023', null, 'an elevated or mismatched role pair cannot mint a fleet invite'
+);
+
+insert into _matrix_invites
+select 'conflict', invite_id, code
+  from agent_board.create_fleet_onboarding_invite(
+    (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+    'codex', 'conflict-harness', 'message-board', 'sha256:conflict-repo',
+    'worker', 'phase_worker', 'atomic-conflict-agent', 1,
+    now() + interval '1 hour', (select owner_id from _atomic_cfg), '{}'::jsonb
+  );
+insert into agent_board.fleet_harness_registrations(machine_id, harness_kind, harness_label)
+values ((select machine_id from _atomic_cfg), 'codex', 'conflict-harness');
+insert into agent_board.fleet_repo_scopes(
+  harness_registration_id, repo_slug, repo_fingerprint, scope_role
+) select id, 'other-repo', 'sha256:conflict-repo', 'worker'
+    from agent_board.fleet_harness_registrations
+   where machine_id=(select machine_id from _atomic_cfg)
+     and harness_kind='codex' and harness_label='conflict-harness';
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-conflict',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-conflict","iat":702}'::jsonb,
+      'atomic-conflict-agent',
+      '5TG73fnNhqeYkoSvPf9QwmWkvKWe0yA7B8YinAWQ8m4', 'raw_ed25519_base64url',
+      'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _matrix_invites where case_name='conflict'),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'conflict-harness', 'message-board', 'sha256:conflict-repo',
+      'worker', 'phase_worker', 'atomic-conflict-agent')$$,
+  '42501', null, 'a conflicting active repo registration rejects atomic onboarding'
+);
+select is(
+  (select count(*)::text from agent_board.agent_signing_keys
+    where fingerprint='sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8') || '/' ||
+  (select count(*)::text from agent_board.board_invite_redemptions
+    where invite_id=(select invite_id from _matrix_invites where case_name='conflict')),
+  '0/0', 'conflicting active registration rolls back identity and redemption writes'
+);
+
+do $$
+declare
+  v_agent uuid;
+  v_invite uuid;
+  v_code text;
+begin
+  select agent_id into v_agent from agent_board.enroll_federated_identity(
+    'https://atomic-runtime.test', 'message-board', 'human-blocked',
+    '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-blocked","iat":703}'::jsonb,
+    'atomic-blocked-agent',
+    'HdUqLbj-jcUwvwE4rf9WXeDQrjrAtYUT6YmnsGMKcNQ', 'raw_ed25519_base64url',
+    'sha256:d115bUBikhOk-QFOCc-lItU2nRZMKf79kAHmvgLsKng', true, null, 'agent',
+    '{board:send}', '{}', null
+  );
+  insert into agent_board.board_memberships(
+    board_id, agent_id, membership_state, role, left_at, created_by_agent_id
+  ) values (
+    (select board_id from _atomic_cfg), v_agent, 'removed', 'member', now(),
+    (select owner_id from _atomic_cfg)
+  );
+  select invite_id, code into v_invite, v_code
+    from agent_board.create_fleet_onboarding_invite(
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'blocked-harness', 'message-board', 'sha256:blocked-repo',
+      'worker', 'phase_worker', 'atomic-blocked-agent', 1,
+      now() + interval '1 hour', (select owner_id from _atomic_cfg), '{}'::jsonb
+    );
+  insert into _matrix_invites values ('blocked', v_invite, v_code);
+end
+$$;
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-blocked',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-blocked","iat":704}'::jsonb,
+      'atomic-blocked-agent',
+      'HdUqLbj-jcUwvwE4rf9WXeDQrjrAtYUT6YmnsGMKcNQ', 'raw_ed25519_base64url',
+      'sha256:d115bUBikhOk-QFOCc-lItU2nRZMKf79kAHmvgLsKng', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _matrix_invites where case_name='blocked'),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'blocked-harness', 'message-board', 'sha256:blocked-repo',
+      'worker', 'phase_worker', 'atomic-blocked-agent')$$,
+  '42501', null, 'a removed target membership blocks fleet invite redemption'
+);
+select is(
+  (select uses_count::text from agent_board.board_invite_tokens
+    where id=(select invite_id from _matrix_invites where case_name='blocked')) || '/' ||
+  (select count(*)::text from agent_board.fleet_harness_registrations where harness_label='blocked-harness'),
+  '0/0', 'blocked invite leaves invite and fleet counts unchanged'
+);
+
+insert into _matrix_invites
+select 'late-failure', invite_id, code
+  from agent_board.create_fleet_onboarding_invite(
+    (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+    'codex', 'late-failure-harness', 'message-board', 'sha256:late-failure-repo',
+    'worker', 'phase_worker', 'atomic-late-failure-agent', 1,
+    now() + interval '1 hour', (select owner_id from _atomic_cfg), '{}'::jsonb
+  );
+create function pg_temp._atomic_late_binding_failure() returns trigger
+language plpgsql as $$
+begin
+  if new.agent_role = 'phase_worker' then
+    raise exception 'injected late fleet constraint failure' using errcode = '23514';
+  end if;
+  return new;
+end
+$$;
+create trigger atomic_late_binding_failure
+before insert on agent_board.fleet_machine_agents
+for each row execute function pg_temp._atomic_late_binding_failure();
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-late-failure',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-late-failure","iat":705}'::jsonb,
+      'atomic-late-failure-agent',
+      'TDyof3w0SMg4SDYuj-qenolHC_n05cZbrLSckKVGtMo', 'raw_ed25519_base64url',
+      'sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _matrix_invites where case_name='late-failure'),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'late-failure-harness', 'message-board', 'sha256:late-failure-repo',
+      'worker', 'phase_worker', 'atomic-late-failure-agent')$$,
+  '23514', null, 'an injected late binding constraint aborts the composed transaction'
+);
+drop trigger atomic_late_binding_failure on agent_board.fleet_machine_agents;
+select is(
+  (select count(*)::text from agent_board.agent_signing_keys
+    where fingerprint='sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M') || '/' ||
+  (select count(*)::text from agent_board.enrollment_federation_audit
+    where subject='human-late-failure') || '/' ||
+  (select count(*)::text from agent_board.board_invite_redemptions
+    where invite_id=(select invite_id from _matrix_invites where case_name='late-failure')) || '/' ||
+  (select count(*)::text from agent_board.fleet_harness_registrations where harness_label='late-failure-harness'),
+  '0/0/0/0', 'late fleet failure rolls back identity, audit, redemption, and fleet writes'
+);
+select is(
+  (select uses_count::text from agent_board.board_invite_tokens
+    where id=(select invite_id from _matrix_invites where case_name='late-failure')) || '/' ||
+  (select count(*)::text from agent_board.board_memberships
+    where agent_id in (select id from agent_board.agents where handle='atomic-late-failure-agent')),
+  '0/0', 'late fleet failure preserves invite use and membership counts'
+);
+
+update agent_board.boards set status='archived'
+ where id=(select board_id from _atomic_cfg);
+select throws_ok(
+  $$select * from agent_board.create_fleet_onboarding_invite(
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'archived-board', 'message-board', 'sha256:archived-board',
+      'worker', 'phase_worker', 'archived-board-agent', 1,
+      now() + interval '1 hour', (select owner_id from _atomic_cfg), '{}'::jsonb)$$,
+  '42501', null, 'an archived board cannot mint a bounded fleet invite'
+);
+select is(pg_temp._atomic_history_attempt(800), '42501',
+  'an archived board cannot redeem an existing bounded fleet invite');
+select is((select uses_count from agent_board.board_invite_tokens
+            where id=(select invite_id from _atomic_cfg)), 1,
+  'archived-board rejection consumes no invite use');
+update agent_board.boards set status='active'
+ where id=(select board_id from _atomic_cfg);
+
+select set_config('request.jwt.claim.role', 'authenticated', true);
+select set_config(
+  'request.jwt.claim.sub',
+  (select auth_user_id::text from agent_board.agents
+    where id=(select agent_id from _atomic_result where attempt='first')),
+  true
+);
+select throws_ok(
+  $$select * from agent_board.register_agent(
+      'agent', 'atomic-runtime-agent', 'Atomic Runtime Agent', 'active',
+      '{"federation":{"replay":{"subject":"forged"}}}'::jsonb)$$,
+  '42501', null, 'authenticated register_agent cannot rewrite frozen federation metadata'
+);
+select throws_ok(
+  $$select * from agent_board.register_agent(
+      'agent', 'atomic-runtime-agent-renamed', 'Atomic Runtime Agent', 'active', '{}'::jsonb)$$,
+  '42501', null, 'authenticated register_agent cannot rename a frozen replay principal'
+);
+select set_config('request.jwt.claim.role', 'service_role', true);
+select set_config('request.jwt.claim.sub', '', true);
+select is(
+  (select handle || '/' || (metadata #>> '{federation,replay,subject}')
+     from agent_board.agents
+    where id=(select agent_id from _atomic_result where attempt='first')),
+  'atomic-runtime-agent/human-runtime',
+  'rejected authenticated mutations leave the frozen replay projection unchanged'
+);
+
+insert into _matrix_invites
+select 'human-revoked', invite_id, code
+  from agent_board.create_fleet_onboarding_invite(
+    (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+    'codex', 'human-revoked', 'message-board', 'sha256:human-revoked',
+    'worker', 'phase_worker', 'atomic-revoked-future', 1,
+    now() + interval '1 hour', (select owner_id from _atomic_cfg), '{}'::jsonb
+  );
+select lives_ok(
+  format(
+    'select * from agent_board.revoke_human_subtree(%L::uuid,%L::uuid,%L)',
+    (select owner_user_id from agent_board.agents
+      where id=(select agent_id from _atomic_result where attempt='first')),
+    (select owner_id from _atomic_cfg), 'runtime total human revoke'
+  ),
+  'total human revocation durably marks and revokes the existing subtree'
+);
+insert into _human_revocation_cfg
+select owner_user_id from agent_board.agents
+ where id=(select agent_id from _atomic_result where attempt='first');
+select is(
+  (select count(*)::int from agent_board.fleet_human_revocations
+    where owner_user_id=(select owner_user_id from agent_board.agents
+      where id=(select agent_id from _atomic_result where attempt='first'))),
+  1, 'total human revocation stores one durable owner marker'
+);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":801}'::jsonb,
+      'atomic-revoked-future',
+      'TDyof3w0SMg4SDYuj-qenolHC_n05cZbrLSckKVGtMo', 'raw_ed25519_base64url',
+      'sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _matrix_invites where case_name='human-revoked'),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'human-revoked', 'message-board', 'sha256:human-revoked',
+      'worker', 'phase_worker', 'atomic-revoked-future')$$,
+  '42501', null, 'a durably revoked human cannot onboard a fresh key'
+);
+select is(
+  (select count(*)::int from agent_board.agent_signing_keys
+    where fingerprint='sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M'),
+  0, 'revoked-human fresh onboarding creates no signing key'
+);
+
+insert into auth.users(id, instance_id, aud, role, email, created_at, updated_at)
+values (
+  '16200000-0000-0000-0000-000000000098',
+  '00000000-0000-0000-0000-000000000000',
+  'authenticated', 'authenticated', 'atomic-audit-owner@example.test', now(), now()
+);
+insert into agent_board.agents(
+  id, agent_type, kind, handle, display_name, status, auth_user_id, owner_user_id, metadata
+) values (
+  '16200000-0000-0000-0000-000000000198', 'agent', 'agent',
+  'atomic-audit-owner', 'Atomic Audit Owner', 'active',
+  '16200000-0000-0000-0000-000000000098',
+  '16200000-0000-0000-0000-000000000098',
+  '{"federation":{"issuer":"https://forged-metadata.test","subject":"forged-metadata-subject"}}'::jsonb
+);
+insert into agent_board.enrollment_federation_audit(
+  issuer, audience, subject, human_identity_claim, provider_id,
+  agent_id, auth_user_id, requested_scopes, granted_scopes
+) values (
+  'https://immutable-audit.test', 'message-board', 'immutable-audit-subject',
+  '{"iss":"https://immutable-audit.test","aud":"message-board","sub":"immutable-audit-subject"}'::jsonb,
+  null, '16200000-0000-0000-0000-000000000198',
+  '16200000-0000-0000-0000-000000000098', '{}', '{}'
+);
+select lives_ok(
+  $$select * from agent_board.revoke_human_subtree(
+      '16200000-0000-0000-0000-000000000098',
+      (select owner_id from _atomic_cfg), 'immutable evidence runtime')$$,
+  'total human revocation accepts stable audit evidence even when metadata is forged'
+);
+select is(
+  (select count(*)::int from agent_board.fleet_human_revocations
+    where issuer='https://immutable-audit.test' and subject='immutable-audit-subject'),
+  1, 'human revocation marker is derived from append-only audit evidence'
+);
+select is(
+  (select count(*)::int from agent_board.fleet_human_revocations
+    where issuer='https://forged-metadata.test' or subject='forged-metadata-subject'),
+  0, 'historically mutable federation metadata cannot choose the revocation marker'
+);
+
+insert into auth.users(id, instance_id, aud, role, email, created_at, updated_at)
+values (
+  '16200000-0000-0000-0000-000000000097',
+  '00000000-0000-0000-0000-000000000000',
+  'authenticated', 'authenticated', 'atomic-missing-audit@example.test', now(), now()
+);
+insert into agent_board.agents(
+  id, agent_type, kind, handle, display_name, status, auth_user_id, owner_user_id, metadata
+) values (
+  '16200000-0000-0000-0000-000000000197', 'agent', 'agent',
+  'atomic-missing-audit', 'Atomic Missing Audit', 'active',
+  '16200000-0000-0000-0000-000000000097',
+  '16200000-0000-0000-0000-000000000097',
+  '{"federation":{"issuer":"https://missing-audit.test","subject":"missing-audit-subject"}}'::jsonb
+);
+select throws_ok(
+  $$select * from agent_board.revoke_human_subtree(
+      '16200000-0000-0000-0000-000000000097',
+      (select owner_id from _atomic_cfg), 'missing evidence runtime')$$,
+  'P0002', null, 'federation-linked human revocation fails closed without stable audit evidence'
+);
+select is(
+  (select status from agent_board.agents where id='16200000-0000-0000-0000-000000000197'),
+  'active', 'missing-evidence failure commits no partial subtree revocation'
+);
+
+insert into auth.users(id, instance_id, aud, role, email, created_at, updated_at)
+values (
+  '16200000-0000-0000-0000-000000000096',
+  '00000000-0000-0000-0000-000000000000',
+  'authenticated', 'authenticated', 'atomic-mixed-audit@example.test', now(), now()
+);
+insert into agent_board.agents(
+  id, agent_type, kind, handle, display_name, status, auth_user_id, owner_user_id, metadata
+) values
+  (
+    '16200000-0000-0000-0000-000000000196', 'agent', 'agent',
+    'atomic-mixed-audited', 'Atomic Mixed Audited', 'active',
+    '16200000-0000-0000-0000-000000000096',
+    '16200000-0000-0000-0000-000000000096',
+    '{"federation":{"issuer":"https://mixed-audit.test","subject":"mixed-audited"}}'::jsonb
+  ),
+  (
+    '16200000-0000-0000-0000-000000000296', 'agent', 'agent',
+    'atomic-mixed-unaudited', 'Atomic Mixed Unaudited', 'active',
+    null, '16200000-0000-0000-0000-000000000096',
+    '{"federation":{"issuer":"https://mixed-audit.test","subject":"mixed-unaudited"}}'::jsonb
+  );
+insert into agent_board.enrollment_federation_audit(
+  issuer, audience, subject, human_identity_claim, provider_id,
+  agent_id, auth_user_id, requested_scopes, granted_scopes
+) values (
+  'https://mixed-audit.test', 'message-board', 'mixed-audited',
+  '{"iss":"https://mixed-audit.test","aud":"message-board","sub":"mixed-audited"}'::jsonb,
+  null, '16200000-0000-0000-0000-000000000196',
+  '16200000-0000-0000-0000-000000000096', '{}', '{}'
+);
+select throws_ok(
+  $$select * from agent_board.revoke_human_subtree(
+      '16200000-0000-0000-0000-000000000096',
+      (select owner_id from _atomic_cfg), 'mixed evidence runtime')$$,
+  'P0002', null, 'mixed federation owner fails closed when any linked agent lacks stable audit evidence'
+);
+select is(
+  (select count(*)::int from agent_board.agents
+    where owner_user_id='16200000-0000-0000-0000-000000000096' and status='active'),
+  2, 'mixed-evidence failure commits no partial subtree revocation'
+);
+select is(
+  (select count(*)::int from agent_board.fleet_human_revocations
+    where issuer='https://mixed-audit.test'),
+  0, 'mixed-evidence failure commits no partial durable marker'
+);
+
+select lives_ok(
+  $$delete from auth.users where id=(select owner_user_id from _human_revocation_cfg)$$,
+  'auth-user cleanup does not erase the stable federation revocation marker'
+);
+select is(
+  (select count(*)::int from agent_board.fleet_human_revocations
+    where issuer='https://atomic-runtime.test' and subject='human-runtime'
+      and owner_user_id is null),
+  1, 'stable federation revocation survives owner UUID deletion'
+);
+select throws_ok(
+  $$select * from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-runtime.test', 'message-board', 'human-runtime',
+      '{"iss":"https://atomic-runtime.test","aud":"message-board","sub":"human-runtime","iat":802}'::jsonb,
+      'atomic-revoked-future',
+      '8lbFi0KooZCbgv7LYQzJ455CsFFnoeOK9qkcsEwUBZg', 'raw_ed25519_base64url',
+      'sha256:SiF8ib634OSMsAhUlMQk44VFekSV1EcRHzkdhv-R8vc', true, null, 'agent',
+      '{board:send}', '{}', (select invite_code from _matrix_invites where case_name='human-revoked'),
+      (select board_id from _atomic_cfg), (select machine_id from _atomic_cfg),
+      'codex', 'human-revoked', 'message-board', 'sha256:human-revoked',
+      'worker', 'phase_worker', 'atomic-revoked-future')$$,
+  '42501', null, 'deleted-owner identity remains durably barred from fresh-key onboarding'
+);
+select is(
+  (select count(*)::int from agent_board.agent_signing_keys
+    where fingerprint='sha256:SiF8ib634OSMsAhUlMQk44VFekSV1EcRHzkdhv-R8vc'),
+  0, 'deleted-owner rejection creates no fresh signing key'
+);
+
+select * from finish();
+rollback;