@consiliency/agent-board-schema 1.53.0 → 1.55.0

package/tests/agent_board_fk_lock_edges.test.sql

@@ -300,6 +300,27 @@ select is(
 -- callback_subscriptions (fabricated; `OF coe` does not name it -- lock_edges() now reads
 -- the OF list). `callback_endpoints <-> callback_outbox_events` is still reported after
 -- the fix; this comment does not claim to know which routes carry it.
+--
+-- TWO PAIRS WERE ADDED BY #521, and both are the SAME function pair:
+-- enroll_federated_identity writes enroll_token_uses (its token bind) BEFORE it locks
+-- agents and inserts board_memberships, while onboard_federated_fleet_agent locks agents
+-- and the creator's board_memberships BEFORE its nested enroll_federated_identity call
+-- reaches the bind. Neither pair can close a cycle, and the reason is a row lock this
+-- detector does not model as serialisation (it credits only the board advisory lock):
+--   * the only wait on enroll_token_uses is two transactions on the SAME token row. The
+--     primary key is token_sha256, so two DIFFERENT tokens insert different key values and
+--     never wait on each other -- even for one fingerprint, which may legitimately hold many
+--     token rows (a key re-presented under several tokens). The prune selects with
+--     `skip locked`, so it never waits either;
+--   * the same token => the same verified (issuer, subject) => the same owner, and BOTH
+--     routes take that auth.users owner row FOR UPDATE before either touches
+--     enroll_token_uses or (on the fleet route) agents/board_memberships -- so the second
+--     transaction waits at the owner and never holds the other half.
+-- That is pinned POSITIVELY, not by this list: agent_board_enroll_token_single_use.test.sql
+-- asserts over stripped_body() that the bind sits after the owner lock (PLACEMENT), and the
+-- isolation specs enroll_token_route_race_{identity,fleet}_first, enroll_token_placement and
+-- enroll_token_same_key_{identity_then_fleet,fleet_then_identity} run the two routes against
+-- each other in both orders and show a clean MBT01 or a fall-through, never 40P01.
 -- ===========================================================================
 select is(
   (select array_agg(p order by p) from (
@@ -315,6 +336,7 @@ select is(
     'agent_board.agents <-> agent_board.board_invite_tokens',
     'agent_board.agents <-> agent_board.board_memberships',
     'agent_board.agents <-> agent_board.boards',
+    'agent_board.agents <-> agent_board.enroll_token_uses',
     'agent_board.agents <-> agent_board.fleet_machine_agents',
     'agent_board.agents <-> agent_board.fleet_machines',
     'agent_board.agents <-> agent_board.fleet_trust_domains',
@@ -324,6 +346,7 @@ select is(
     'agent_board.board_invite_tokens <-> agent_board.fleet_machines',
     'agent_board.board_invite_tokens <-> agent_board.fleet_trust_domains',
     'agent_board.board_memberships <-> agent_board.boards',
+    'agent_board.board_memberships <-> agent_board.enroll_token_uses',
     'agent_board.boards <-> auth.users',
     'agent_board.callback_endpoints <-> agent_board.callback_outbox_events',
     'agent_board.fleet_harness_registrations <-> agent_board.fleet_machine_agents',

package/tests/agent_board_identity_providers.test.sql

@@ -101,10 +101,11 @@ select is(
       and not policy_approved),
   1, 'the mock issuer row is untouched (present, supported, inert)');
 
--- enroll_federated_identity is service_role-only (ROOMLINK-extended 14-arg signature)
+-- enroll_federated_identity is service_role-only (ROOMLINK-extended signature; #521 added
+-- the two token arguments after p_pop_verified, so it is 16-arg now)
 select function_privs_are(
   'agent_board', 'enroll_federated_identity',
-  array['text','text','text','jsonb','text','text','text','text','boolean','text','text','text[]','text[]','text'],
+  array['text','text','text','jsonb','text','text','text','text','boolean','text','timestamptz','text','text','text[]','text[]','text'],
   'authenticated', array[]::text[],
   'ROOMLINK-extended enroll_federated_identity execute is revoked from authenticated');
 

package/tests/agent_board_portal_offline_invariant.test.sql

@@ -48,7 +48,7 @@ begin
     from agent_board.enroll_federated_identity(
       'https://mock-portal-'||s||'.test', 'message-board', 'portal|'||s,
       jsonb_build_object('iss','https://mock-portal-'||s||'.test','aud','message-board','sub','portal|'||s),
-      'pofx-'||s, v_pub, 'raw_ed25519_base64url', v_fp, true, null, 'agent', '{board:send}', '{}') e;
+      'pofx-'||s, v_pub, 'raw_ed25519_base64url', v_fp, true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', '{board:send}', '{}') e;
 
   -- A SECOND signing key (key_version 2; enroll auto-enrolled version 1) + a pending
   -- challenge bound to it, so the mint step below can drive PoP -> mint deterministically.

package/tests/agent_board_roomlink.test.sql

@@ -343,7 +343,7 @@ begin
     from _lf f, agent_board.enroll_federated_identity(
       f.prov_iss, 'message-board', f.prov_sub,
       jsonb_build_object('iss',f.prov_iss,'aud','message-board','sub', f.prov_sub), f.prov_slug,
-      f.pub1, 'raw_ed25519_base64url', f.fp1, true, null, 'agent', '{}', '{}', f.code_enroll) e;
+      f.pub1, 'raw_ed25519_base64url', f.fp1, true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', '{}', '{}', f.code_enroll) e;
   insert into _er values ('X', v_aid, v_red);
 
   -- Bad code: enrollment still succeeds, invite_redeemed=false, no membership.
@@ -351,7 +351,7 @@ begin
     from _lf f, agent_board.enroll_federated_identity(
       f.prov_iss, 'message-board', f.prov_sub || '-2',
       jsonb_build_object('iss',f.prov_iss,'aud','message-board','sub', f.prov_sub || '-2'), f.prov_slug || '-2',
-      f.pub2, 'raw_ed25519_base64url', f.fp2, true, null, 'agent', '{}', '{}', 'bogus-code-nonexistent') e;
+      f.pub2, 'raw_ed25519_base64url', f.fp2, true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', '{}', '{}', 'bogus-code-nonexistent') e;
   insert into _er values ('Y', v_aid, v_red);
 end
 $$;

package/tests/agent_board_write_enforcement_class.test.sql

@@ -424,10 +424,13 @@ select distinct p.oid,
 
 -- WEC-1. The universe canary. Without it, a write-target set that had gone empty would empty the
 -- writer population too. Base tables only — see limit 4 on why the 26 views are not pinned.
+-- 59 -> 60 with #521's agent_board.enroll_token_uses. Its only writer, _enroll_token_bind, is
+-- EXECUTE-able by no API role and is reached only from the service_role-only
+-- enroll_federated_identity, so it adds no member to the `authenticated` writer population.
 select is(
   (select count(*)::text from _wec_target where relkind = 'r'),
-  '59',
-  '#325 canary: agent_board has 59 base tables — the universe the write scan runs over, pinned so an empty violating set below cannot mean an empty universe');
+  '60',
+  '#325 canary: agent_board has 60 base tables — the universe the write scan runs over, pinned so an empty violating set below cannot mean an empty universe');
 
 -- WEC-2. The relations the class writes, as an EXACT SET. A new one names itself.
 select is(

package/tests/catalog/function_execute_privileges.json

@@ -366,7 +366,16 @@
       "signature": "_enroll_federated_identity_once(p_issuer text, p_audience text, p_subject text, p_human_identity_claim jsonb, p_slug text, p_agent_public_key text, p_agent_public_key_format text, p_agent_public_key_fingerprint text, p_pop_verified boolean, p_actor_sub text, p_agent_kind text, p_requested_scopes text[], p_requested_board_scopes text[], p_invite_code text)",
       "executable_by": {
         "anon": false,
-        "service_role": true,
+        "service_role": false,
+        "authenticated": false
+      }
+    },
+    {
+      "name": "_enroll_token_bind",
+      "signature": "_enroll_token_bind(p_token_sha256 text, p_token_expires_at timestamp with time zone, p_fingerprint text)",
+      "executable_by": {
+        "anon": false,
+        "service_role": false,
         "authenticated": false
       }
     },
@@ -957,7 +966,7 @@
     },
     {
       "name": "enroll_federated_identity",
-      "signature": "enroll_federated_identity(p_issuer text, p_audience text, p_subject text, p_human_identity_claim jsonb, p_slug text, p_agent_public_key text, p_agent_public_key_format text, p_agent_public_key_fingerprint text, p_pop_verified boolean, p_actor_sub text, p_agent_kind text, p_requested_scopes text[], p_requested_board_scopes text[], p_invite_code text)",
+      "signature": "enroll_federated_identity(p_issuer text, p_audience text, p_subject text, p_human_identity_claim jsonb, p_slug text, p_agent_public_key text, p_agent_public_key_format text, p_agent_public_key_fingerprint text, p_pop_verified boolean, p_token_sha256 text, p_token_expires_at timestamp with time zone, p_actor_sub text, p_agent_kind text, p_requested_scopes text[], p_requested_board_scopes text[], p_invite_code text)",
       "executable_by": {
         "anon": false,
         "service_role": true,
@@ -1119,7 +1128,7 @@
     },
     {
       "name": "onboard_federated_fleet_agent",
-      "signature": "onboard_federated_fleet_agent(p_issuer text, p_audience text, p_subject text, p_human_identity_claim jsonb, p_slug text, p_agent_public_key text, p_agent_public_key_format text, p_agent_public_key_fingerprint text, p_pop_verified boolean, p_actor_sub text, p_agent_kind text, p_requested_scopes text[], p_requested_board_scopes text[], p_invite_code text, p_board_id uuid, p_machine_id uuid, p_harness_kind text, p_harness_label text, p_repo_slug text, p_repo_fingerprint text, p_repo_scope_role text, p_agent_role text, p_expected_agent_handle text)",
+      "signature": "onboard_federated_fleet_agent(p_issuer text, p_audience text, p_subject text, p_human_identity_claim jsonb, p_slug text, p_agent_public_key text, p_agent_public_key_format text, p_agent_public_key_fingerprint text, p_pop_verified boolean, p_token_sha256 text, p_token_expires_at timestamp with time zone, p_actor_sub text, p_agent_kind text, p_requested_scopes text[], p_requested_board_scopes text[], p_invite_code text, p_board_id uuid, p_machine_id uuid, p_harness_kind text, p_harness_label text, p_repo_slug text, p_repo_fingerprint text, p_repo_scope_role text, p_agent_role text, p_expected_agent_handle text)",
       "executable_by": {
         "anon": false,
         "service_role": true,

package/tests/catalog/p_metadata_parameters.json

@@ -165,6 +165,10 @@
       "signature": "_enroll_federated_identity_once(p_issuer text, p_audience text, p_subject text, p_human_identity_claim jsonb, p_slug text, p_agent_public_key text, p_agent_public_key_format text, p_agent_public_key_fingerprint text, p_pop_verified boolean, p_actor_sub text, p_agent_kind text, p_requested_scopes text[], p_requested_board_scopes text[], p_invite_code text)",
       "declares_p_metadata": false
     },
+    {
+      "signature": "_enroll_token_bind(p_token_sha256 text, p_token_expires_at timestamp with time zone, p_fingerprint text)",
+      "declares_p_metadata": false
+    },
     {
       "signature": "_ensure_agent_auth_user(p_slug text)",
       "declares_p_metadata": false
@@ -426,7 +430,7 @@
       "declares_p_metadata": false
     },
     {
-      "signature": "enroll_federated_identity(p_issuer text, p_audience text, p_subject text, p_human_identity_claim jsonb, p_slug text, p_agent_public_key text, p_agent_public_key_format text, p_agent_public_key_fingerprint text, p_pop_verified boolean, p_actor_sub text, p_agent_kind text, p_requested_scopes text[], p_requested_board_scopes text[], p_invite_code text)",
+      "signature": "enroll_federated_identity(p_issuer text, p_audience text, p_subject text, p_human_identity_claim jsonb, p_slug text, p_agent_public_key text, p_agent_public_key_format text, p_agent_public_key_fingerprint text, p_pop_verified boolean, p_token_sha256 text, p_token_expires_at timestamp with time zone, p_actor_sub text, p_agent_kind text, p_requested_scopes text[], p_requested_board_scopes text[], p_invite_code text)",
       "declares_p_metadata": false
     },
     {
@@ -498,7 +502,7 @@
       "declares_p_metadata": false
     },
     {
-      "signature": "onboard_federated_fleet_agent(p_issuer text, p_audience text, p_subject text, p_human_identity_claim jsonb, p_slug text, p_agent_public_key text, p_agent_public_key_format text, p_agent_public_key_fingerprint text, p_pop_verified boolean, p_actor_sub text, p_agent_kind text, p_requested_scopes text[], p_requested_board_scopes text[], p_invite_code text, p_board_id uuid, p_machine_id uuid, p_harness_kind text, p_harness_label text, p_repo_slug text, p_repo_fingerprint text, p_repo_scope_role text, p_agent_role text, p_expected_agent_handle text)",
+      "signature": "onboard_federated_fleet_agent(p_issuer text, p_audience text, p_subject text, p_human_identity_claim jsonb, p_slug text, p_agent_public_key text, p_agent_public_key_format text, p_agent_public_key_fingerprint text, p_pop_verified boolean, p_token_sha256 text, p_token_expires_at timestamp with time zone, p_actor_sub text, p_agent_kind text, p_requested_scopes text[], p_requested_board_scopes text[], p_invite_code text, p_board_id uuid, p_machine_id uuid, p_harness_kind text, p_harness_label text, p_repo_slug text, p_repo_fingerprint text, p_repo_scope_role text, p_agent_role text, p_expected_agent_handle text)",
       "declares_p_metadata": false
     },
     {

package/tests/isolation/expected/atomic_fedsession_fleet_lock_order.out

@@ -26,7 +26,7 @@ step fleet_onboard:
       'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
       'raw_ed25519_base64url',
       'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
-      true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+      true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
       (select code from agent_board.board_invite_tokens where created_by_agent_id='162a0000-0000-0000-0000-000000000001'),
       (select id from agent_board.boards where slug='atomic-cross-board'),
       '162a0000-0000-0000-0000-000000000003',

package/tests/isolation/expected/atomic_fleet_authority_races.out

@@ -11,7 +11,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-authority-board'),
     '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -71,7 +71,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-authority-board'),
     '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -129,7 +129,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-authority-board'),
     '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -202,7 +202,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-authority-board'),
     '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -256,7 +256,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-authority-board'),
     '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -312,7 +312,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-authority-board'),
     '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -355,7 +355,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-authority-board'),
     '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -436,7 +436,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-authority-board'),
     '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/expected/atomic_fleet_binding_revoke.out

@@ -13,7 +13,7 @@ step retry_onboard:
     jsonb_build_object('iss','https://atomic-binding.test','aud','message-board','sub','human-binding','iat',200),
     'atomic-binding-agent','yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url','sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true,null,'agent',ARRAY['board:send'],ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1),null,'agent',ARRAY['board:send'],ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-binding-board'),
     '16230000-0000-0000-0000-000000000003','codex','phase-loop',
@@ -78,7 +78,7 @@ step retry_onboard:
     jsonb_build_object('iss','https://atomic-binding.test','aud','message-board','sub','human-binding','iat',200),
     'atomic-binding-agent','yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url','sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true,null,'agent',ARRAY['board:send'],ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1),null,'agent',ARRAY['board:send'],ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-binding-board'),
     '16230000-0000-0000-0000-000000000003','codex','phase-loop',

package/tests/isolation/expected/atomic_fleet_board_archive.out

@@ -26,7 +26,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-archive-board'),
     '16290000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -76,7 +76,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-archive-board'),
     '16290000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/expected/atomic_fleet_human_fresh_revoke.out

@@ -26,7 +26,7 @@ step onboard_fresh:
     'TDyof3w0SMg4SDYuj-qenolHC_n05cZbrLSckKVGtMo',
     'raw_ed25519_base64url',
     'sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16280000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-human-board'),
     '16280000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -103,7 +103,7 @@ step onboard_fresh:
     'TDyof3w0SMg4SDYuj-qenolHC_n05cZbrLSckKVGtMo',
     'raw_ed25519_base64url',
     'sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16280000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-human-board'),
     '16280000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/expected/atomic_fleet_identity_disposition.out

@@ -14,7 +14,7 @@ step legacy_enroll:
     jsonb_build_object('iss','https://atomic-disposition.test','aud','message-board','sub','human-disposition','iat',100),
     'atomic-disposition-agent',
     '5TG73fnNhqeYkoSvPf9QwmWkvKWe0yA7B8YinAWQ8m4', 'raw_ed25519_base64url',
-    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, null, 'agent',
+    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent',
     ARRAY['board:send'], ARRAY[]::text[], null
   );
 
@@ -31,7 +31,7 @@ step fleet_onboard:
     jsonb_build_object('iss','https://atomic-disposition.test','aud','message-board','sub','human-disposition','iat',101),
     'atomic-disposition-agent',
     '5TG73fnNhqeYkoSvPf9QwmWkvKWe0yA7B8YinAWQ8m4', 'raw_ed25519_base64url',
-    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, null, 'agent',
+    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent',
     ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16260000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-disposition-board'),

package/tests/isolation/expected/atomic_fleet_lifecycle_races.out

@@ -16,7 +16,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -85,7 +85,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -154,7 +154,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -223,7 +223,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -292,7 +292,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -361,7 +361,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -430,7 +430,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -499,7 +499,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -568,7 +568,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -638,7 +638,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -707,7 +707,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -789,7 +789,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -854,7 +854,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -919,7 +919,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -984,7 +984,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1049,7 +1049,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1114,7 +1114,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1179,7 +1179,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1244,7 +1244,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1310,7 +1310,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1375,7 +1375,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1441,7 +1441,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/expected/atomic_fleet_onboarding.out

@@ -16,7 +16,7 @@ step first_onboard:
       'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
       'raw_ed25519_base64url',
       'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
-      true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+      true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
       (select code from agent_board.board_invite_tokens where created_by_agent_id = '16220000-0000-0000-0000-000000000001'),
       (select id from agent_board.boards where slug = 'atomic-race-board'),
       '16220000-0000-0000-0000-000000000003',
@@ -39,7 +39,7 @@ step second_onboard:
       'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
       'raw_ed25519_base64url',
       'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
-      true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+      true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
       (select code from agent_board.board_invite_tokens where created_by_agent_id = '16220000-0000-0000-0000-000000000001'),
       (select id from agent_board.boards where slug = 'atomic-race-board'),
       '16220000-0000-0000-0000-000000000003',

package/tests/isolation/expected/atomic_fleet_subtree_lock_order.out

@@ -20,7 +20,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='ffffffff-ffff-ffff-ffff-ffffffffff01'),
     (select id from agent_board.boards where slug='atomic-subtree-board'),
     '16270000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/expected/enroll_identity_board_owner_lock_order.out

@@ -21,7 +21,7 @@ step enroll_enroll:
       'lo194-iso-agent',
       public.test_pubkey('lo194-iso-k1'), 'raw_ed25519_base64url',
       public.test_key_fingerprint('lo194-iso-k1'),
-      true, null, 'agent', ARRAY[]::text[], ARRAY[]::text[],
+      true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY[]::text[], ARRAY[]::text[],
       'lo194-iso-code'
     );
  <waiting ...>