@consiliency/agent-board-schema 1.54.0 → 1.56.0

package/tests/isolation/expected/atomic_fleet_binding_revoke.out

@@ -13,7 +13,7 @@ step retry_onboard:
     jsonb_build_object('iss','https://atomic-binding.test','aud','message-board','sub','human-binding','iat',200),
     'atomic-binding-agent','yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url','sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true,null,'agent',ARRAY['board:send'],ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1),null,'agent',ARRAY['board:send'],ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-binding-board'),
     '16230000-0000-0000-0000-000000000003','codex','phase-loop',
@@ -78,7 +78,7 @@ step retry_onboard:
     jsonb_build_object('iss','https://atomic-binding.test','aud','message-board','sub','human-binding','iat',200),
     'atomic-binding-agent','yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url','sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true,null,'agent',ARRAY['board:send'],ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1),null,'agent',ARRAY['board:send'],ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-binding-board'),
     '16230000-0000-0000-0000-000000000003','codex','phase-loop',

package/tests/isolation/expected/atomic_fleet_board_archive.out

@@ -26,7 +26,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-archive-board'),
     '16290000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -76,7 +76,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-archive-board'),
     '16290000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/expected/atomic_fleet_human_fresh_revoke.out

@@ -26,7 +26,7 @@ step onboard_fresh:
     'TDyof3w0SMg4SDYuj-qenolHC_n05cZbrLSckKVGtMo',
     'raw_ed25519_base64url',
     'sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16280000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-human-board'),
     '16280000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -103,7 +103,7 @@ step onboard_fresh:
     'TDyof3w0SMg4SDYuj-qenolHC_n05cZbrLSckKVGtMo',
     'raw_ed25519_base64url',
     'sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16280000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-human-board'),
     '16280000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/expected/atomic_fleet_identity_disposition.out

@@ -14,7 +14,7 @@ step legacy_enroll:
     jsonb_build_object('iss','https://atomic-disposition.test','aud','message-board','sub','human-disposition','iat',100),
     'atomic-disposition-agent',
     '5TG73fnNhqeYkoSvPf9QwmWkvKWe0yA7B8YinAWQ8m4', 'raw_ed25519_base64url',
-    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, null, 'agent',
+    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent',
     ARRAY['board:send'], ARRAY[]::text[], null
   );
 
@@ -31,7 +31,7 @@ step fleet_onboard:
     jsonb_build_object('iss','https://atomic-disposition.test','aud','message-board','sub','human-disposition','iat',101),
     'atomic-disposition-agent',
     '5TG73fnNhqeYkoSvPf9QwmWkvKWe0yA7B8YinAWQ8m4', 'raw_ed25519_base64url',
-    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, null, 'agent',
+    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent',
     ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16260000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-disposition-board'),

package/tests/isolation/expected/atomic_fleet_lifecycle_races.out

@@ -16,7 +16,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -85,7 +85,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -154,7 +154,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -223,7 +223,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -292,7 +292,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -361,7 +361,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -430,7 +430,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -499,7 +499,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -568,7 +568,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -638,7 +638,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -707,7 +707,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -789,7 +789,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -854,7 +854,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -919,7 +919,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -984,7 +984,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1049,7 +1049,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1114,7 +1114,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1179,7 +1179,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1244,7 +1244,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1310,7 +1310,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1375,7 +1375,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
@@ -1441,7 +1441,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='16240000-0000-0000-0000-000000000001'),
     (select id from agent_board.boards where slug='atomic-lifecycle-board'),
     '16240000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/expected/atomic_fleet_onboarding.out

@@ -16,7 +16,7 @@ step first_onboard:
       'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
       'raw_ed25519_base64url',
       'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
-      true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+      true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
       (select code from agent_board.board_invite_tokens where created_by_agent_id = '16220000-0000-0000-0000-000000000001'),
       (select id from agent_board.boards where slug = 'atomic-race-board'),
       '16220000-0000-0000-0000-000000000003',
@@ -39,7 +39,7 @@ step second_onboard:
       'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
       'raw_ed25519_base64url',
       'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
-      true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+      true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
       (select code from agent_board.board_invite_tokens where created_by_agent_id = '16220000-0000-0000-0000-000000000001'),
       (select id from agent_board.boards where slug = 'atomic-race-board'),
       '16220000-0000-0000-0000-000000000003',

package/tests/isolation/expected/atomic_fleet_subtree_lock_order.out

@@ -20,7 +20,7 @@ step retry_onboard:
     'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
     'raw_ed25519_base64url',
     'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
-    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
     (select code from agent_board.board_invite_tokens where created_by_agent_id='ffffffff-ffff-ffff-ffff-ffffffffff01'),
     (select id from agent_board.boards where slug='atomic-subtree-board'),
     '16270000-0000-0000-0000-000000000003', 'codex', 'phase-loop',

package/tests/isolation/expected/enroll_identity_board_owner_lock_order.out

@@ -21,7 +21,7 @@ step enroll_enroll:
       'lo194-iso-agent',
       public.test_pubkey('lo194-iso-k1'), 'raw_ed25519_base64url',
       public.test_key_fingerprint('lo194-iso-k1'),
-      true, null, 'agent', ARRAY[]::text[], ARRAY[]::text[],
+      true, md5(random()::text) || md5(random()::text), now() + make_interval(hours => 1), null, 'agent', ARRAY[]::text[], ARRAY[]::text[],
       'lo194-iso-code'
     );
  <waiting ...>

package/tests/isolation/expected/enroll_token_fleet_abort.out

@@ -0,0 +1,81 @@
+Parsed test spec with 4 sessions
+
+starting permutation: hold_begin hold_handle a_begin a_onboard b_begin b_onboard hold_rollback a_rollback b_commit check
+count
+-----
+    1
+(1 row)
+
+step hold_begin: BEGIN;
+step hold_handle: 
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('52100000-0000-0000-0000-0000000000ff', 'agent', 'agent', 'tok521-wrong-handle', 'Tok521 Hold', 'active');
+
+step a_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step a_onboard: 
+  select agent_handle, identity_disposition
+    from agent_board.onboard_federated_fleet_agent(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-wrong-handle',
+      public.test_pubkey('tok521-k1'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k1'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[],
+      (select code from agent_board.board_invite_tokens where created_by_agent_id='52100000-0000-0000-0000-000000000001'),
+      (select id from agent_board.boards where slug='tok521-board'),
+      '52100000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+      'message-board', 'sha256:tok521-repo', 'worker', 'phase_worker',
+      'tok521-agent'
+    );
+ <waiting ...>
+step b_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step b_onboard: 
+  select agent_handle, identity_disposition
+    from agent_board.onboard_federated_fleet_agent(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-agent',
+      public.test_pubkey('tok521-k2'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k2'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[],
+      (select code from agent_board.board_invite_tokens where created_by_agent_id='52100000-0000-0000-0000-000000000001'),
+      (select id from agent_board.boards where slug='tok521-board'),
+      '52100000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+      'message-board', 'sha256:tok521-repo', 'worker', 'phase_worker',
+      'tok521-agent'
+    );
+ <waiting ...>
+step hold_rollback: ROLLBACK;
+step a_onboard: <... completed>
+ERROR:  server-assigned handle does not match the authorized handle
+step b_onboard: <... completed>
+agent_handle|identity_disposition
+------------+--------------------
+tok521-agent|created             
+(1 row)
+
+step a_rollback: ROLLBACK;
+step b_commit: COMMIT;
+step check: 
+  select
+    (select count(*) from agent_board.agents where handle like 'tok521-agent%') as agents,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k1')) as k1_keys,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k2')) as k2_keys,
+    (select count(*) from agent_board.enroll_token_uses) as token_rows,
+    (select case u.agent_public_key_fingerprint
+              when public.test_key_fingerprint('tok521-k1') then 'K1'
+              when public.test_key_fingerprint('tok521-k2') then 'K2'
+              else 'other' end
+       from agent_board.enroll_token_uses u where u.token_sha256 = repeat('a', 64)) as token_bound_to,
+    (select count(*) from agent_board.fleet_harness_registrations where machine_id='52100000-0000-0000-0000-000000000003') as harnesses,
+    (select count(*) from agent_board.fleet_repo_scopes r join agent_board.fleet_harness_registrations h on h.id = r.harness_registration_id
+      where h.machine_id='52100000-0000-0000-0000-000000000003') as repo_scopes,
+    (select count(*) from agent_board.fleet_machine_agents where machine_id='52100000-0000-0000-0000-000000000003') as bindings;
+
+agents|k1_keys|k2_keys|token_rows|token_bound_to|harnesses|repo_scopes|bindings
+------+-------+-------+----------+--------------+---------+-----------+--------
+     1|      0|      1|         1|K2            |        1|          1|       1
+(1 row)
+

package/tests/isolation/expected/enroll_token_pk_backstop.out

@@ -0,0 +1,36 @@
+Parsed test spec with 3 sessions
+
+starting permutation: a_begin a_bind b_begin b_bind a_commit b_rollback check
+?column?
+--------
+       1
+(1 row)
+
+step a_begin: BEGIN;
+step a_bind: select agent_board._enroll_token_bind(repeat('a', 64), now() + interval '1 hour', 'sha256:tok521-fp-a');
+_enroll_token_bind
+------------------
+                  
+(1 row)
+
+step b_begin: BEGIN;
+step b_bind: 
+  do $$ begin
+  perform agent_board._enroll_token_bind(repeat('a', 64), now() + interval '1 hour', 'sha256:tok521-fp-b');
+  exception when others then
+    raise exception 'SQLSTATE %: %', sqlstate, sqlerrm using errcode = sqlstate;
+  end $$;
+ <waiting ...>
+step a_commit: COMMIT;
+step b_bind: <... completed>
+ERROR:  SQLSTATE 23505: duplicate key value violates unique constraint "enroll_token_uses_pkey"
+step b_rollback: ROLLBACK;
+step check: 
+  select token_sha256 = repeat('a', 64) as is_t, agent_public_key_fingerprint
+    from agent_board.enroll_token_uses order by 1, 2;
+
+is_t|agent_public_key_fingerprint
+----+----------------------------
+t   |sha256:tok521-fp-a          
+(1 row)
+

package/tests/isolation/expected/enroll_token_placement.out

@@ -0,0 +1,86 @@
+Parsed test spec with 4 sessions
+
+starting permutation: guard_begin guard_lock fleet_begin fleet_onboard ident_begin ident_enroll guard_commit fleet_commit ident_rollback check
+count
+-----
+    1
+(1 row)
+
+step guard_begin: BEGIN;
+step guard_lock: 
+  select 1 as locked from agent_board.board_memberships bm
+   where bm.board_id = (select id from agent_board.boards where slug='tok521-board')
+     and bm.agent_id = '52100000-0000-0000-0000-000000000001'
+   for update;
+
+locked
+------
+     1
+(1 row)
+
+step fleet_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step fleet_onboard: 
+  select agent_handle, identity_disposition
+    from agent_board.onboard_federated_fleet_agent(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-agent',
+      public.test_pubkey('tok521-k2'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k2'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[],
+      (select code from agent_board.board_invite_tokens where created_by_agent_id='52100000-0000-0000-0000-000000000001'),
+      (select id from agent_board.boards where slug='tok521-board'),
+      '52100000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+      'message-board', 'sha256:tok521-repo', 'worker', 'phase_worker',
+      'tok521-agent'
+    );
+ <waiting ...>
+step ident_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step ident_enroll: 
+  do $$ begin
+  perform agent_board.enroll_federated_identity(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-agent',
+      public.test_pubkey('tok521-k1'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k1'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[], null
+    );
+  exception when others then
+    raise exception 'SQLSTATE %: %', sqlstate, sqlerrm using errcode = sqlstate;
+  end $$;
+ <waiting ...>
+step guard_commit: COMMIT;
+step fleet_onboard: <... completed>
+agent_handle|identity_disposition
+------------+--------------------
+tok521-agent|created             
+(1 row)
+
+step fleet_commit: COMMIT;
+step ident_enroll: <... completed>
+ERROR:  SQLSTATE MBT01: enroll token already bound to a different key
+step ident_rollback: ROLLBACK;
+step check: 
+  select
+    (select count(*) from agent_board.agents where handle like 'tok521-agent%') as agents,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k1')) as k1_keys,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k2')) as k2_keys,
+    (select count(*) from agent_board.enroll_token_uses) as token_rows,
+    (select case u.agent_public_key_fingerprint
+              when public.test_key_fingerprint('tok521-k1') then 'K1'
+              when public.test_key_fingerprint('tok521-k2') then 'K2'
+              else 'other' end
+       from agent_board.enroll_token_uses u where u.token_sha256 = repeat('a', 64)) as token_bound_to,
+    (select count(*) from agent_board.fleet_harness_registrations where machine_id='52100000-0000-0000-0000-000000000003') as harnesses,
+    (select count(*) from agent_board.fleet_repo_scopes r join agent_board.fleet_harness_registrations h on h.id = r.harness_registration_id
+      where h.machine_id='52100000-0000-0000-0000-000000000003') as repo_scopes,
+    (select count(*) from agent_board.fleet_machine_agents where machine_id='52100000-0000-0000-0000-000000000003') as bindings;
+
+agents|k1_keys|k2_keys|token_rows|token_bound_to|harnesses|repo_scopes|bindings
+------+-------+-------+----------+--------------+---------+-----------+--------
+     1|      0|      1|         1|K2            |        1|          1|       1
+(1 row)
+

package/tests/isolation/expected/enroll_token_rollback_unstrands.out

@@ -0,0 +1,59 @@
+Parsed test spec with 3 sessions
+
+starting permutation: a_begin a_enroll b_begin b_enroll a_rollback b_commit check
+step a_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step a_enroll: 
+  select agent_handle
+    from agent_board.enroll_federated_identity(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-agent',
+      public.test_pubkey('tok521-k1'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k1'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[], null
+    );
+
+agent_handle
+------------
+tok521-agent
+(1 row)
+
+step b_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step b_enroll: 
+  select agent_handle
+    from agent_board.enroll_federated_identity(
+      'https://tok521-iso.test', 'message-board', 'tok521-human',
+      jsonb_build_object('iss','https://tok521-iso.test','aud','message-board','sub','tok521-human'),
+      'tok521-agent',
+      public.test_pubkey('tok521-k2'), 'raw_ed25519_base64url',
+      public.test_key_fingerprint('tok521-k2'),
+      true, repeat('a', 64), now() + interval '1 hour', null, 'agent',
+      ARRAY['board:send'], ARRAY[]::text[], null
+    );
+ <waiting ...>
+step a_rollback: ROLLBACK;
+step b_enroll: <... completed>
+agent_handle
+------------
+tok521-agent
+(1 row)
+
+step b_commit: COMMIT;
+step check: 
+  select
+    (select count(*) from agent_board.agents where handle like 'tok521-agent%') as agents,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k1')) as k1_keys,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint = public.test_key_fingerprint('tok521-k2')) as k2_keys,
+    (select count(*) from agent_board.enroll_token_uses) as token_rows,
+    (select case u.agent_public_key_fingerprint
+              when public.test_key_fingerprint('tok521-k1') then 'K1'
+              when public.test_key_fingerprint('tok521-k2') then 'K2'
+              else 'other' end
+       from agent_board.enroll_token_uses u where u.token_sha256 = repeat('a', 64)) as token_bound_to;
+
+agents|k1_keys|k2_keys|token_rows|token_bound_to
+------+-------+-------+----------+--------------
+     1|      0|      1|         1|K2            
+(1 row)
+