@consiliency/agent-board-schema 1.54.0 → 1.55.0

package/tests/isolation/expected/enroll_token_same_token_race.out

@@ -0,0 +1,58 @@
+Parsed test spec with 3 sessions
+
+starting permutation: a_begin a_enroll b_begin b_enroll a_commit b_rollback check
+step a_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step a_enroll: 
+  select agent_handle
+    from agent_board.enroll_federated_identity(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-agent',
+      public.test_pubkey('tok521-k1'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k1'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[], null
+    );
+
+agent_handle
+------------
+tok521-agent
+(1 row)
+
+step b_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step b_enroll: 
+  do $$ begin
+  perform agent_board.enroll_federated_identity(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-agent',
+      public.test_pubkey('tok521-k2'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k2'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[], null
+    );
+  exception when others then
+    raise exception 'SQLSTATE %: %', sqlstate, sqlerrm using errcode = sqlstate;
+  end $$;
+ <waiting ...>
+step a_commit: COMMIT;
+step b_enroll: <... completed>
+ERROR:  SQLSTATE MBT01: enroll token already bound to a different key
+step b_rollback: ROLLBACK;
+step check: 
+  select
+    (select count(*) from agent_board.agents where handle like 'tok521-agent%') as agents,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k1')) as k1_keys,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k2')) as k2_keys,
+    (select count(*) from agent_board.enroll_token_uses) as token_rows,
+    (select case u.agent_public_key_fingerprint
+              when public.test_key_fingerprint('tok521-k1') then 'K1'
+              when public.test_key_fingerprint('tok521-k2') then 'K2'
+              else 'other' end
+       from agent_board.enroll_token_uses u where u.token_sha256 = repeat('a', 64)) as token_bound_to;
+
+agents|k1_keys|k2_keys|token_rows|token_bound_to
+------+-------+-------+----------+--------------
+     1|      1|      0|         1|K1            
+(1 row)
+

package/tests/isolation/expected/onboarding_ceiling_lock_order.out

@@ -26,7 +26,7 @@ step onboard_call:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='19610000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='onboard-ceiling-board'),
     '19610000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -83,7 +83,7 @@ step onboard_call:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='19610000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='onboard-ceiling-board'),
     '19610000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/specs/atomic_fedsession_fleet_lock_order.spec

@@ -76,7 +76,7 @@ step "fleet_onboard" {
       'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
       'raw_ed25519_base64url',
       'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
-      true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+      true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
       (select code from agent_board.board_invite_tokens where created_by_agent_id='162a0000-0000-0000-0000-000000000001'),
       (select id from agent_board.boards where slug='atomic-cross-board'),
       '162a0000-0000-0000-0000-000000000003',

package/tests/isolation/specs/atomic_fleet_authority_races.spec

@@ -93,7 +93,7 @@ setup
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-authority-board'),
     '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -149,7 +149,7 @@ step "retry_onboard" {
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16250000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-authority-board'),
     '16250000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/specs/atomic_fleet_binding_revoke.spec

@@ -49,7 +49,7 @@ setup
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-binding-board'),
     '16230000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -95,7 +95,7 @@ step "retry_onboard" {
     jsonb_build_object('iss','https://atomic-binding.test','aud','message-board','sub','human-binding','iat',200),
     'atomic-binding-agent','yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url','sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true,null,'agent',ARRAY['board:send'],ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1),null,'agent',ARRAY['board:send'],ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-binding-board'),
     '16230000-0000-0000-0000-000000000003','codex','phase-loop',

package/tests/isolation/specs/atomic_fleet_board_archive.spec

@@ -49,7 +49,7 @@ setup
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-archive-board'),
     '16290000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -112,7 +112,7 @@ step "retry_onboard" {
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-archive-board'),
     '16290000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/specs/atomic_fleet_human_fresh_revoke.spec

@@ -42,7 +42,7 @@ setup
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[], null
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[], null
   );
   select count(*) from agent_board.create_fleet_onboarding_invite(
     (select id from agent_board.boards where slug='atomic-human-board'),
@@ -108,7 +108,7 @@ step "onboard_fresh" {
     'TDyof3w0SMg4SDYuj-qenolHC_n05cZbrLSckKVGtMo',
     'raw_ed25519_base64url',
     'sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16280000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-human-board'),
     '16280000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/specs/atomic_fleet_identity_disposition.spec

@@ -81,7 +81,7 @@ step "legacy_enroll" {
     jsonb_build_object('iss','https://atomic-disposition.test','aud','message-board','sub','human-disposition','iat',100),
     'atomic-disposition-agent',
     '5TG73fnNhqeYkoSvPf9QwmWkvKWe0yA7B8YinAWQ8m4', 'raw_ed25519_base64url',
-    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, null, 'agent',
+    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent',
     ARRAY['board:send'], ARRAY[]::text[], null
   );
 }
@@ -96,7 +96,7 @@ step "fleet_onboard" {
     jsonb_build_object('iss','https://atomic-disposition.test','aud','message-board','sub','human-disposition','iat',101),
     'atomic-disposition-agent',
     '5TG73fnNhqeYkoSvPf9QwmWkvKWe0yA7B8YinAWQ8m4', 'raw_ed25519_base64url',
-    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, null, 'agent',
+    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent',
     ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16260000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-disposition-board'),

package/tests/isolation/specs/atomic_fleet_lifecycle_races.spec

@@ -53,7 +53,7 @@ setup
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -114,7 +114,7 @@ step "retry_onboard" {
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/specs/atomic_fleet_onboarding.spec

@@ -57,7 +57,7 @@ step "first_onboard" {
       'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
       'raw_ed25519_base64url',
       'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
-      true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+      true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
       (select code from agent_board.board_invite_tokens where created_by_agent_id = '16220000-0000-0000-0000-000000000001'),
       (select id from agent_board.boards where slug = 'atomic-race-board'),
       '16220000-0000-0000-0000-000000000003',
@@ -78,7 +78,7 @@ step "second_onboard" {
       'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
       'raw_ed25519_base64url',
       'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
-      true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+      true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
       (select code from agent_board.board_invite_tokens where created_by_agent_id = '16220000-0000-0000-0000-000000000001'),
       (select id from agent_board.boards where slug = 'atomic-race-board'),
       '16220000-0000-0000-0000-000000000003',

package/tests/isolation/specs/atomic_fleet_subtree_lock_order.spec

@@ -51,7 +51,7 @@ setup
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='ffffffff-ffff-ffff-ffff-ffffffffff01'),
     (select id from agent_board.boards where slug='atomic-subtree-board'),
     '16270000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -114,7 +114,7 @@ step "retry_onboard" {
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='ffffffff-ffff-ffff-ffff-ffffffffff01'),
     (select id from agent_board.boards where slug='atomic-subtree-board'),
     '16270000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/specs/enroll_identity_board_owner_lock_order.spec

@@ -89,7 +89,7 @@ step "enroll_enroll" {
       'lo194-iso-agent',
       public.test_pubkey('lo194-iso-k1'), 'raw_ed25519_base64url',
       public.test_key_fingerprint('lo194-iso-k1'),
-      true, null, 'agent', ARRAY[]::text[], ARRAY[]::text[],
+      true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY[]::text[], ARRAY[]::text[],
       'lo194-iso-code'
     );
 }

package/tests/isolation/specs/enroll_token_fleet_abort.spec

@@ -0,0 +1,138 @@
+# Consiliency/message-board#521 I-7 -- a fleet onboarding that fails AFTER its nested
+# enroll_federated_identity has bound the token, while a contender waits behind it.
+#
+# A presents (T, K1) with a slug whose server-assigned handle is NOT the invite's authorized
+# handle, so onboard_federated_fleet_agent raises `server-assigned handle does not match`
+# right after the nested call returns -- by then A's transaction holds the bind row, the K1
+# key and the K1 agent. B presents (T, K2) with the correct slug.
+#
+# The failure has to happen while B is ALREADY waiting, or the spec proves nothing about a
+# contender: a statement error releases the transaction's locks at once, so a failure that
+# fires before B arrives leaves B nothing to wait for (measured -- the first draft of this
+# spec did exactly that). So a "hold" session inserts, uncommitted, an agent carrying A's
+# handle: A binds the token, reaches its agent insert inside the nested call and waits on
+# that uncommitted handle. B then waits behind A (on the invite row, which onboarding locks
+# first -- the outcome does not depend on which lock). The hold rolls back, A creates its
+# agent, returns to onboard, fails; its whole transaction -- bind row included -- is gone.
+# B SUCCEEDS, the token row names K2, and nothing of K1 survives.
+
+setup
+{
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://tok521-iso.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent']
+  );
+
+  -- Materialize the owner auth.users row the enrollment derives, through the SAME helper,
+  -- so a contender blocks on the owner row lock (the serialisation under test) and not on
+  -- a racing INSERT inside _ensure_agent_auth_user.
+  create table tok521_owner as
+  select agent_board._ensure_agent_auth_user(
+    agent_board._federated_identity_slug('https://tok521-iso.test', 'tok521-human')) as uid;
+
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('52100000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'tok521-creator', 'Tok521 Creator', 'active');
+  select count(*) from agent_board.create_board(
+    '52100000-0000-0000-0000-000000000001',
+    'tok521-board', 'Tok521 Board',
+    'Consiliency/message-board#521 token single-use isolation proof',
+    jsonb_build_object(), 'private'
+  );
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '52100000-0000-0000-0000-000000000002', 'tok521-domain',
+    'Tok521 Domain', 'tailnet', '52100000-0000-0000-0000-000000000001',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '52100000-0000-0000-0000-000000000003',
+    '52100000-0000-0000-0000-000000000002',
+    '52100000-0000-0000-0000-000000000001',
+    'claw', 'sha256:tok521-machine', 'active', 'portal', now()
+  );
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug='tok521-board'),
+    '52100000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:tok521-repo', 'worker', 'phase_worker',
+    'tok521-agent', 2, now() + interval '1 hour',
+    '52100000-0000-0000-0000-000000000001', jsonb_build_object()
+  );
+}
+
+session "hold"
+step "hold_begin" { BEGIN; }
+step "hold_handle" {
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('52100000-0000-0000-0000-0000000000ff', 'agent', 'agent', 'tok521-wrong-handle', 'Tok521 Hold', 'active');
+}
+step "hold_rollback" { ROLLBACK; }
+
+session "a"
+step "a_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "a_onboard" {
+  select agent_handle, identity_disposition
+    from agent_board.onboard_federated_fleet_agent(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-wrong-handle',
+      public.test_pubkey('tok521-k1'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k1'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[],
+      (select code from agent_board.board_invite_tokens where created_by_agent_id='52100000-0000-0000-0000-000000000001'),
+      (select id from agent_board.boards where slug='tok521-board'),
+      '52100000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+      'message-board', 'sha256:tok521-repo', 'worker', 'phase_worker',
+      'tok521-agent'
+    );
+}
+step "a_rollback" { ROLLBACK; }
+
+session "b"
+step "b_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "b_onboard" {
+  select agent_handle, identity_disposition
+    from agent_board.onboard_federated_fleet_agent(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-agent',
+      public.test_pubkey('tok521-k2'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k2'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[],
+      (select code from agent_board.board_invite_tokens where created_by_agent_id='52100000-0000-0000-0000-000000000001'),
+      (select id from agent_board.boards where slug='tok521-board'),
+      '52100000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+      'message-board', 'sha256:tok521-repo', 'worker', 'phase_worker',
+      'tok521-agent'
+    );
+}
+step "b_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select
+    (select count(*) from agent_board.agents where handle like 'tok521-agent%') as agents,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k1')) as k1_keys,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k2')) as k2_keys,
+    (select count(*) from agent_board.enroll_token_uses) as token_rows,
+    (select case u.agent_public_key_fingerprint
+              when public.test_key_fingerprint('tok521-k1') then 'K1'
+              when public.test_key_fingerprint('tok521-k2') then 'K2'
+              else 'other' end
+       from agent_board.enroll_token_uses u where u.token_sha256 = repeat('a', 64)) as token_bound_to,
+    (select count(*) from agent_board.fleet_harness_registrations where machine_id='52100000-0000-0000-0000-000000000003') as harnesses,
+    (select count(*) from agent_board.fleet_repo_scopes r join agent_board.fleet_harness_registrations h on h.id = r.harness_registration_id
+      where h.machine_id='52100000-0000-0000-0000-000000000003') as repo_scopes,
+    (select count(*) from agent_board.fleet_machine_agents where machine_id='52100000-0000-0000-0000-000000000003') as bindings;
+}
+
+permutation "hold_begin" "hold_handle" "a_begin" "a_onboard" "b_begin" "b_onboard" "hold_rollback" "a_rollback" "b_commit" "check"

package/tests/isolation/specs/enroll_token_pk_backstop.spec

@@ -0,0 +1,37 @@
+# Consiliency/message-board#521 I-6 -- the primary key is the fail-closed backstop. Two
+# sessions call _enroll_token_bind directly, as its owner, WITHOUT the owner lock the RPCs
+# take, with the same token and different fingerprints. B's insert waits on A's
+# uncommitted key; when A commits, B fails 23505. It never binds a second key silently.
+#
+# The step expected to FAIL runs inside a DO block that re-raises with the SQLSTATE in the
+# message, because isolationtester prints only `ERROR:  <message>`: without it a raise with
+# the same text and a different errcode would leave this golden green.
+
+setup
+{
+  select 1;
+}
+
+session "a"
+step "a_begin" { BEGIN; }
+step "a_bind" { select agent_board._enroll_token_bind(repeat('a', 64), now() + interval '1 hour', 'sha256:tok521-fp-a'); }
+step "a_commit" { COMMIT; }
+
+session "b"
+step "b_begin" { BEGIN; }
+step "b_bind" {
+  do $$ begin
+  perform agent_board._enroll_token_bind(repeat('a', 64), now() + interval '1 hour', 'sha256:tok521-fp-b');
+  exception when others then
+    raise exception 'SQLSTATE %: %', sqlstate, sqlerrm using errcode = sqlstate;
+  end $$;
+}
+step "b_rollback" { ROLLBACK; }
+
+session "check"
+step "check" {
+  select token_sha256 = repeat('a', 64) as is_t, agent_public_key_fingerprint
+    from agent_board.enroll_token_uses order by 1, 2;
+}
+
+permutation "a_begin" "a_bind" "b_begin" "b_bind" "a_commit" "b_rollback" "check"

package/tests/isolation/specs/enroll_token_placement.spec

@@ -0,0 +1,136 @@
+# Consiliency/message-board#521 I-5 -- PLACEMENT of the bind, not merely its presence.
+# A guard session holds the invite creator's board_memberships row. The fleet onboarding
+# (T, K2) takes the derived owner row FOR UPDATE and then parks on the guard. The identity
+# enrollment (T, K1) parks on that owner row. When the guard commits, the fleet onboarding
+# completes and binds T -> K2; the identity enrollment then binds and gets MBT01.
+#
+# If the bind were hoisted ABOVE the owner lock (the rejected "token lock at the top"
+# design), the identity enrollment would insert T -> K1 and THEN wait for the owner, while
+# the fleet onboarding holds the owner and waits on that uncommitted token row: the golden
+# would show `deadlock detected` (40P01) instead of a clean MBT01. The golden records only
+# the deterministic outcome: which session completes, and with what.
+#
+# The step expected to FAIL runs inside a DO block that re-raises with the SQLSTATE in the
+# message, because isolationtester prints only `ERROR:  <message>`: without it a raise with
+# the same text and a different errcode would leave this golden green.
+
+setup
+{
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://tok521-iso.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent']
+  );
+
+  -- Materialize the owner auth.users row the enrollment derives, through the SAME helper,
+  -- so a contender blocks on the owner row lock (the serialisation under test) and not on
+  -- a racing INSERT inside _ensure_agent_auth_user.
+  create table tok521_owner as
+  select agent_board._ensure_agent_auth_user(
+    agent_board._federated_identity_slug('https://tok521-iso.test', 'tok521-human')) as uid;
+
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('52100000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'tok521-creator', 'Tok521 Creator', 'active');
+  select count(*) from agent_board.create_board(
+    '52100000-0000-0000-0000-000000000001',
+    'tok521-board', 'Tok521 Board',
+    'Consiliency/message-board#521 token single-use isolation proof',
+    jsonb_build_object(), 'private'
+  );
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '52100000-0000-0000-0000-000000000002', 'tok521-domain',
+    'Tok521 Domain', 'tailnet', '52100000-0000-0000-0000-000000000001',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '52100000-0000-0000-0000-000000000003',
+    '52100000-0000-0000-0000-000000000002',
+    '52100000-0000-0000-0000-000000000001',
+    'claw', 'sha256:tok521-machine', 'active', 'portal', now()
+  );
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug='tok521-board'),
+    '52100000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:tok521-repo', 'worker', 'phase_worker',
+    'tok521-agent', 2, now() + interval '1 hour',
+    '52100000-0000-0000-0000-000000000001', jsonb_build_object()
+  );
+}
+
+session "guard"
+step "guard_begin" { BEGIN; }
+step "guard_lock" {
+  select 1 as locked from agent_board.board_memberships bm
+   where bm.board_id = (select id from agent_board.boards where slug='tok521-board')
+     and bm.agent_id = '52100000-0000-0000-0000-000000000001'
+   for update;
+}
+step "guard_commit" { COMMIT; }
+
+session "fleet"
+step "fleet_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "fleet_onboard" {
+  select agent_handle, identity_disposition
+    from agent_board.onboard_federated_fleet_agent(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-agent',
+      public.test_pubkey('tok521-k2'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k2'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[],
+      (select code from agent_board.board_invite_tokens where created_by_agent_id='52100000-0000-0000-0000-000000000001'),
+      (select id from agent_board.boards where slug='tok521-board'),
+      '52100000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+      'message-board', 'sha256:tok521-repo', 'worker', 'phase_worker',
+      'tok521-agent'
+    );
+}
+step "fleet_commit" { COMMIT; }
+
+session "ident"
+step "ident_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "ident_enroll" {
+  do $$ begin
+  perform agent_board.enroll_federated_identity(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-agent',
+      public.test_pubkey('tok521-k1'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k1'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[], null
+    );
+  exception when others then
+    raise exception 'SQLSTATE %: %', sqlstate, sqlerrm using errcode = sqlstate;
+  end $$;
+}
+step "ident_rollback" { ROLLBACK; }
+
+session "check"
+step "check" {
+  select
+    (select count(*) from agent_board.agents where handle like 'tok521-agent%') as agents,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k1')) as k1_keys,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k2')) as k2_keys,
+    (select count(*) from agent_board.enroll_token_uses) as token_rows,
+    (select case u.agent_public_key_fingerprint
+              when public.test_key_fingerprint('tok521-k1') then 'K1'
+              when public.test_key_fingerprint('tok521-k2') then 'K2'
+              else 'other' end
+       from agent_board.enroll_token_uses u where u.token_sha256 = repeat('a', 64)) as token_bound_to,
+    (select count(*) from agent_board.fleet_harness_registrations where machine_id='52100000-0000-0000-0000-000000000003') as harnesses,
+    (select count(*) from agent_board.fleet_repo_scopes r join agent_board.fleet_harness_registrations h on h.id = r.harness_registration_id
+      where h.machine_id='52100000-0000-0000-0000-000000000003') as repo_scopes,
+    (select count(*) from agent_board.fleet_machine_agents where machine_id='52100000-0000-0000-0000-000000000003') as bindings;
+}
+
+permutation "guard_begin" "guard_lock" "fleet_begin" "fleet_onboard" "ident_begin" "ident_enroll" "guard_commit" "fleet_commit" "ident_rollback" "check"

package/tests/isolation/specs/enroll_token_rollback_unstrands.spec

@@ -0,0 +1,71 @@
+# Consiliency/message-board#521 I-2 -- a transaction that aborts AFTER binding strands
+# nothing. A binds token T to K1 inside its enrollment and then ROLLS BACK; B, waiting at
+# the owner lock with the same token and K2, then succeeds, and the token row names K2. No
+# K1 key survives. The bind row is written inside the enrolling transaction, so it goes
+# with it.
+
+setup
+{
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://tok521-iso.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent']
+  );
+
+  -- Materialize the owner auth.users row the enrollment derives, through the SAME helper,
+  -- so a contender blocks on the owner row lock (the serialisation under test) and not on
+  -- a racing INSERT inside _ensure_agent_auth_user.
+  create table tok521_owner as
+  select agent_board._ensure_agent_auth_user(
+    agent_board._federated_identity_slug('https://tok521-iso.test', 'tok521-human')) as uid;
+}
+
+session "a"
+step "a_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "a_enroll" {
+  select agent_handle
+    from agent_board.enroll_federated_identity(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-agent',
+      public.test_pubkey('tok521-k1'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k1'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[], null
+    );
+}
+step "a_rollback" { ROLLBACK; }
+
+session "b"
+step "b_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "b_enroll" {
+  select agent_handle
+    from agent_board.enroll_federated_identity(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-agent',
+      public.test_pubkey('tok521-k2'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k2'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[], null
+    );
+}
+step "b_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select
+    (select count(*) from agent_board.agents where handle like 'tok521-agent%') as agents,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k1')) as k1_keys,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k2')) as k2_keys,
+    (select count(*) from agent_board.enroll_token_uses) as token_rows,
+    (select case u.agent_public_key_fingerprint
+              when public.test_key_fingerprint('tok521-k1') then 'K1'
+              when public.test_key_fingerprint('tok521-k2') then 'K2'
+              else 'other' end
+       from agent_board.enroll_token_uses u where u.token_sha256 = repeat('a', 64)) as token_bound_to;
+}
+
+permutation "a_begin" "a_enroll" "b_begin" "b_enroll" "a_rollback" "b_commit" "check"