@consiliency/agent-board-schema 1.57.0 → 1.59.0

package/tests/agent_board_delegate_role_class.test.sql

@@ -0,0 +1,736 @@
+-- HOSTED (v11) SL-2 pgTAP: the agent_board_delegate role, as CLASSES derived from the catalog
+-- (specs/agent-client-contract.md, HOSTED, "Class assertions SL-2 must write" and "What stays
+-- refused for a delegate"). Nothing here is a hand list of the population: each class is read
+-- from pg_proc / pg_class / pg_policy / pg_depend or from agent_board.delegate_allowed_operations,
+-- so a new function, relation, grant or policy fails AND NAMES ITSELF.
+--
+-- Where an expected value is written here, it is the frozen contract value (the policy
+-- predicates, the eight agents columns, a derived population named positively so a new member
+-- shows up as a diff), never the population an assertion iterates over.
+--
+-- The zero-rows matrix (section 9) SWITCHES ROLE to agent_board_delegate. Every negative case
+-- is paired with the same kind of row on a board where the delegate is active, so a predicate
+-- that returns false everywhere fails too.
+create extension if not exists pgtap with schema extensions;
+set search_path = extensions, public, agent_board;
+
+begin;
+
+select plan(43);
+
+-- ===========================================================================
+-- 1. The role itself
+-- ===========================================================================
+-- 1
+select is(
+  (select rolcanlogin::text || '/' || rolsuper::text || '/' || rolbypassrls::text || '/' || rolinherit::text
+          || '/' || rolcreaterole::text || '/' || rolcreatedb::text
+     from pg_roles where rolname = 'agent_board_delegate'),
+  'false/false/false/false/false/false',
+  'agent_board_delegate: NOLOGIN, not a superuser, no BYPASSRLS, NOINHERIT, no CREATEROLE/CREATEDB');
+-- 2
+select is(
+  (select count(*)::int from pg_auth_members where member = 'agent_board_delegate'::regrole),
+  0,
+  'agent_board_delegate is a member of NO role (never authenticated, which would inherit every authenticated grant)');
+-- 3 -- who can BECOME it: only authenticator (where it exists). The PostgreSQL 16+ creator
+-- grant (ADMIN only, no SET and no INHERIT) cannot switch to it and is not counted.
+select is(
+  (select coalesce(string_agg(m.rolname, ',' order by m.rolname), '(none)')
+     from pg_auth_members am join pg_roles m on m.oid = am.member
+    where am.roleid = 'agent_board_delegate'::regrole and (am.set_option or am.inherit_option)),
+  case when exists (select 1 from pg_roles where rolname = 'authenticator') then 'authenticator' else '(none)' end,
+  'only authenticator can switch to agent_board_delegate');
+-- 4
+select ok(has_schema_privilege('agent_board_delegate', 'agent_board', 'USAGE'),
+  'agent_board_delegate has USAGE on schema agent_board');
+
+-- ===========================================================================
+-- 2. Function deny-by-default, over SECURITY DEFINER functions (IF-0-HOSTED-5)
+-- ===========================================================================
+create temp view _fn as
+select p.oid, p.proname::text as name, p.proname || '(' || oidvectortypes(p.proargtypes) || ')' as signature, p.prosecdef
+  from pg_proc p join pg_namespace n on n.oid = p.pronamespace
+ where n.nspname = 'agent_board';
+-- 5 -- every listed function names exactly one function
+select is(
+  (select coalesce(string_agg(o.kind || ':' || o.signature, ', ' order by o.signature), '(none)')
+     from agent_board.delegate_allowed_operations o
+    where o.kind in ('rpc', 'ambient_rpc', 'predicate')
+      and (select count(*) from _fn f where f.signature = o.signature) <> 1),
+  '(none)',
+  'every rpc/ambient_rpc/predicate entry of the allow set names exactly one agent_board function');
+-- 6 -- THE CLASS: has_function_privilege iff listed, over every definer
+select is(
+  (select coalesce(string_agg(f.signature || ' => ' ||
+            case when has_function_privilege('agent_board_delegate', f.oid, 'EXECUTE') then 'GRANTED, NOT LISTED' else 'LISTED, NOT GRANTED' end,
+            '; ' order by f.signature), '')
+     from _fn f
+    where f.prosecdef
+      and has_function_privilege('agent_board_delegate', f.oid, 'EXECUTE')
+          <> exists (select 1 from agent_board.delegate_allowed_operations o
+                      where o.kind in ('rpc', 'ambient_rpc', 'predicate') and o.signature = f.signature)),
+  '',
+  'CLASS: agent_board_delegate can EXECUTE a SECURITY DEFINER function iff it is in delegate_allowed_operations');
+-- 7 -- every listed function is a definer (a non-definer runs with the caller's rights and
+-- needs no grant; listing one would hide what the role can really reach)
+select is(
+  (select coalesce(string_agg(f.signature, ', ' order by f.signature), '(none)')
+     from _fn f join agent_board.delegate_allowed_operations o on o.signature = f.signature
+    where o.kind in ('rpc', 'ambient_rpc', 'predicate') and not f.prosecdef),
+  '(none)',
+  'every function in the allow set is SECURITY DEFINER');
+-- 8 -- the allow set's function membership, named: the contract's first membership with the
+-- three per-row board predicates replaced by _delegate_visible_board_ids() (InitPlan form,
+-- authorised by the team lead; SL-8 amends the contract)
+select is(
+  (select string_agg(kind || ':' || signature, ' | ' order by kind, signature)
+     from agent_board.delegate_allowed_operations where kind in ('rpc', 'ambient_rpc', 'predicate')),
+  'ambient_rpc:get_schema_version() | predicate:_delegate_visible_agent(uuid) | predicate:_delegate_visible_board_ids() | predicate:current_agent_id() | rpc:create_or_find_thread(uuid, text, text, text, jsonb) | rpc:post_board_message(uuid, uuid, text, text, text, text, text, text, text, jsonb) | rpc:post_board_message(uuid, uuid, uuid, text, text, text, text, text, jsonb) | rpc:post_message(uuid, uuid, text, text, uuid, jsonb)',
+  'the allow set''s functions are exactly the contract''s first membership (D4): read and post, nothing else');
+
+-- ===========================================================================
+-- 3. Read-grant completeness
+-- ===========================================================================
+create temp view _rel as
+select c.oid, c.relname::text as name, c.relkind, c.reloptions
+  from pg_class c join pg_namespace n on n.oid = c.relnamespace
+ where n.nspname = 'agent_board' and c.relkind in ('r', 'v', 'm', 'p', 'f');
+-- 9 -- SELECT iff listed as read_view / read_table (has_any_column_privilege for column grants)
+select is(
+  (select coalesce(string_agg(r.name || ' => ' ||
+            case when has_any_column_privilege('agent_board_delegate', r.oid, 'SELECT') then 'GRANTED, NOT LISTED' else 'LISTED, NOT GRANTED' end,
+            '; ' order by r.name), '')
+     from _rel r
+    where has_any_column_privilege('agent_board_delegate', r.oid, 'SELECT')
+          <> exists (select 1 from agent_board.delegate_allowed_operations o
+                      where o.kind in ('read_view', 'read_table') and o.name = r.name
+                        and o.kind = case when r.relkind in ('v', 'm') then 'read_view' else 'read_table' end)),
+  '',
+  'CLASS: agent_board_delegate can SELECT a relation iff it is listed as read_view or read_table, of its own relkind');
+-- 10 -- the read closure, named: 5 views and 13 tables
+select is(
+  (select string_agg(kind || ':' || name, ' ' order by kind, name)
+     from agent_board.delegate_allowed_operations where kind in ('read_view', 'read_table')),
+  'read_table:agent_signing_keys read_table:agents read_table:board_memberships read_table:boards read_table:claims read_table:delivery_recipients read_table:escalations read_table:inbox_items read_table:messages read_table:presence read_table:signature_evidence read_table:task_events read_table:tasks read_view:v_agent_dashboard read_view:v_agent_inbox read_view:v_board_feed read_view:v_board_memberships read_view:v_thread_feed',
+  'the read closure is the five views and the thirteen tables the contract freezes');
+-- 11 -- the closure is CLOSED: every relation a granted view reads is itself granted
+select is(
+  (select coalesce(string_agg(distinct v.relname || ' -> ' || t.relname, ', '), '(none)')
+     from pg_rewrite rw
+     join pg_class v on v.oid = rw.ev_class
+     join pg_depend d on d.classid = 'pg_rewrite'::regclass and d.objid = rw.oid and d.refclassid = 'pg_class'::regclass
+     join pg_class t on t.oid = d.refobjid and t.oid <> v.oid
+    where has_table_privilege('agent_board_delegate', v.oid, 'SELECT')
+      and v.relkind = 'v' and v.relnamespace = 'agent_board'::regnamespace
+      and not has_any_column_privilege('agent_board_delegate', t.oid, 'SELECT')),
+  '(none)',
+  'the read closure is closed: every relation a granted view reads is granted too (else the view raises)');
+-- 12 -- every granted view is security_invoker
+select is(
+  (select coalesce(string_agg(r.name, ', ' order by r.name), '(none)')
+     from _rel r
+    where r.relkind in ('v', 'm')
+      and has_table_privilege('agent_board_delegate', r.oid, 'SELECT')
+      and not coalesce('security_invoker=true' = any(r.reloptions), false)),
+  '(none)',
+  'every view agent_board_delegate can SELECT is security_invoker = true');
+-- 13 -- agents: exactly the eight columns authenticated holds, never auth_user_id or owner_user_id
+select is(
+  (select string_agg(a.attname, ',' order by a.attname)
+     from pg_attribute a
+    where a.attrelid = 'agent_board.agents'::regclass and a.attnum > 0 and not a.attisdropped
+      and has_column_privilege('agent_board_delegate', a.attrelid, a.attnum, 'SELECT')),
+  'agent_type,created_at,display_name,handle,id,kind,status,updated_at',
+  'agents: SELECT on exactly the eight authenticated columns (never auth_user_id, owner_user_id or is_delegate)');
+-- 14 -- no write privilege anywhere, no sequence privilege
+select is(
+  (select coalesce(string_agg(x, ', ' order by x), '(none)') from (
+     select r.name || ':' || p as x
+       from _rel r cross join unnest(array['INSERT', 'UPDATE', 'DELETE', 'TRUNCATE', 'REFERENCES', 'TRIGGER']) p
+      where has_table_privilege('agent_board_delegate', r.oid, p)
+     union all
+     select c.relname || ':' || p
+       from pg_class c join pg_namespace n on n.oid = c.relnamespace
+       cross join unnest(array['USAGE', 'SELECT', 'UPDATE']) p
+      where n.nspname = 'agent_board' and c.relkind = 'S'
+        and has_sequence_privilege('agent_board_delegate', c.oid, p)) z),
+  '(none)',
+  'agent_board_delegate holds no INSERT/UPDATE/DELETE/TRUNCATE/REFERENCES/TRIGGER and no sequence privilege');
+
+-- ===========================================================================
+-- 4. Policy completeness
+-- ===========================================================================
+create temp view _pol as
+select c.relname::text as relname, p.polname::text as polname, p.polcmd, p.polpermissive,
+       array(select r.rolname::text from pg_roles r where r.oid = any(p.polroles) order by 1) as roles,
+       0 = any(p.polroles) as is_public, p.oid as poloid, p.polrelid,
+       -- newlines and indentation in the deparse collapsed to single spaces
+       replace(replace(replace(replace(pg_get_expr(p.polqual, p.polrelid), E'\n', ' '), '    ', ' '), '   ', ' '), '  ', ' ') as qual,
+       pg_get_expr(p.polwithcheck, p.polrelid) as withcheck
+  from pg_policy p join pg_class c on c.oid = p.polrelid join pg_namespace n on n.oid = c.relnamespace
+ where n.nspname = 'agent_board'
+   and ((select r.oid from pg_roles r where r.rolname = 'agent_board_delegate') = any(p.polroles) or 0 = any(p.polroles));
+-- 15 -- a PUBLIC policy applies to the role too; allowed only where the role has no SELECT
+select is(
+  (select coalesce(string_agg(relname || ':' || polname || ':' ||
+            case when has_table_privilege('agent_board_delegate', polrelid, 'SELECT') then 'ROLE HAS SELECT' else 'inert' end,
+            ', ' order by relname, polname), '(none)')
+     from _pol where is_public),
+  'schema_version:agent_board_select_schema_version:inert',
+  'the one PUBLIC policy (schema_version) is on a relation the role cannot SELECT, so it grants the role nothing');
+-- 16 -- exactly one delegate policy per read_table: SELECT, permissive, the role only
+select is(
+  (select coalesce(string_agg(x, '; ' order by x), '(none)') from (
+     select o.name || ' => ' || count(p.polname)::text || ' policies' as x
+       from agent_board.delegate_allowed_operations o
+       left join _pol p on p.relname = o.name and not p.is_public
+      where o.kind = 'read_table'
+      group by o.name having count(p.polname) <> 1
+     union all
+     select relname || ':' || polname || ' is not a permissive SELECT policy for the role alone'
+       from _pol
+      where not is_public and (polcmd <> 'r' or not polpermissive or roles <> array['agent_board_delegate'] or withcheck is not null)
+     union all
+     select relname || ':' || polname || ' is on a relation outside the read closure'
+       from _pol
+      where not is_public and relname not in (select name from agent_board.delegate_allowed_operations where kind = 'read_table')) z),
+  '(none)',
+  'policy completeness: one permissive SELECT policy TO agent_board_delegate on each read_table, and none elsewhere');
+-- 17 -- each predicate is the one the contract freezes (deparsed, whitespace-normalised). The
+-- deparse qualifies names by the search_path, so agent_board is taken off it for this read.
+set local search_path = extensions, public;
+select is(
+  (select string_agg(relname || ' :: ' || qual, E'\n' order by relname) from _pol where not is_public),
+  'agent_signing_keys :: false' || E'\n' ||
+  'agents :: agent_board._delegate_visible_agent(id)' || E'\n' ||
+  'board_memberships :: ((agent_id = ( SELECT agent_board.current_agent_id() AS current_agent_id)) AND (membership_state = ANY (ARRAY[''joined''::text, ''subscribed''::text])))' || E'\n' ||
+  'boards :: (id = ANY (COALESCE(( SELECT agent_board._delegate_visible_board_ids() AS _delegate_visible_board_ids), ''{}''::uuid[])))' || E'\n' ||
+  'claims :: ((task_id IS NOT NULL) AND (EXISTS ( SELECT 1 FROM agent_board.delivery_recipients dr WHERE ((dr.source_task_id = claims.task_id) AND (dr.board_id = ANY (COALESCE(( SELECT agent_board._delegate_visible_board_ids() AS _delegate_visible_board_ids), ''{}''::uuid[])))))))' || E'\n' ||
+  'delivery_recipients :: (board_id = ANY (COALESCE(( SELECT agent_board._delegate_visible_board_ids() AS _delegate_visible_board_ids), ''{}''::uuid[])))' || E'\n' ||
+  'escalations :: ((task_id IS NOT NULL) AND (EXISTS ( SELECT 1 FROM agent_board.delivery_recipients dr WHERE ((dr.source_task_id = escalations.task_id) AND (dr.board_id = ANY (COALESCE(( SELECT agent_board._delegate_visible_board_ids() AS _delegate_visible_board_ids), ''{}''::uuid[])))))))' || E'\n' ||
+  'inbox_items :: ((board_id = ANY (COALESCE(( SELECT agent_board._delegate_visible_board_ids() AS _delegate_visible_board_ids), ''{}''::uuid[]))) AND ((recipient_agent_id = ( SELECT agent_board.current_agent_id() AS current_agent_id)) OR visible_in_board_feed))' || E'\n' ||
+  'messages :: (EXISTS ( SELECT 1 FROM agent_board.delivery_recipients dr WHERE ((dr.source_message_id = messages.id) AND (dr.board_id = ANY (COALESCE(( SELECT agent_board._delegate_visible_board_ids() AS _delegate_visible_board_ids), ''{}''::uuid[]))))))' || E'\n' ||
+  'presence :: false' || E'\n' ||
+  'signature_evidence :: (((source_message_id IS NOT NULL) OR (source_task_event_id IS NOT NULL) OR (source_delivery_recipient_id IS NOT NULL)) AND (source_artifact_id IS NULL) AND ((source_message_id IS NULL) OR (EXISTS ( SELECT 1 FROM agent_board.delivery_recipients dr WHERE ((dr.source_message_id = signature_evidence.source_message_id) AND (dr.board_id = ANY (COALESCE(( SELECT agent_board._delegate_visible_board_ids() AS _delegate_visible_board_ids), ''{}''::uuid[]))))))) AND ((source_task_event_id IS NULL) OR (EXISTS ( SELECT 1 FROM agent_board.task_events te WHERE (te.id = signature_evidence.source_task_event_id)))) AND ((source_delivery_recipient_id IS NULL) OR (EXISTS ( SELECT 1 FROM agent_board.delivery_recipients dr WHERE (dr.id = signature_evidence.source_delivery_recipient_id)))))' || E'\n' ||
+  'task_events :: (EXISTS ( SELECT 1 FROM agent_board.delivery_recipients dr WHERE ((dr.source_task_id = task_events.task_id) AND (dr.board_id = ANY (COALESCE(( SELECT agent_board._delegate_visible_board_ids() AS _delegate_visible_board_ids), ''{}''::uuid[]))))))' || E'\n' ||
+  'tasks :: (EXISTS ( SELECT 1 FROM agent_board.delivery_recipients dr WHERE ((dr.source_task_id = tasks.id) AND (dr.board_id = ANY (COALESCE(( SELECT agent_board._delegate_visible_board_ids() AS _delegate_visible_board_ids), ''{}''::uuid[]))))))',
+  'each delegate policy''s USING is exactly the D14 predicate stated once in the migration (InitPlan form)');
+set local search_path = extensions, public, agent_board;
+
+-- ===========================================================================
+-- 5. Predicates are IN the set, not exempt
+-- ===========================================================================
+-- 18 -- every function a delegate-applicable policy or a granted view invokes is listed as a predicate
+select is(
+  (select coalesce(string_agg(distinct f.signature, ', '), '(none)')
+     from (
+       select d.refobjid as fn
+         from pg_depend d join _pol p on d.classid = 'pg_policy'::regclass and d.objid = p.poloid
+        where d.refclassid = 'pg_proc'::regclass
+          and has_table_privilege('agent_board_delegate', p.polrelid, 'SELECT')
+       union
+       select d.refobjid
+         from pg_rewrite rw
+         join pg_depend d on d.classid = 'pg_rewrite'::regclass and d.objid = rw.oid
+        where d.refclassid = 'pg_proc'::regclass
+          and has_table_privilege('agent_board_delegate', rw.ev_class, 'SELECT')
+     ) used
+     join _fn f on f.oid = used.fn   -- agent_board functions; builtins are not predicates
+    where not exists (select 1 from agent_board.delegate_allowed_operations o
+                       where o.kind = 'predicate' and o.signature = f.signature)),
+  '(none)',
+  'every function a delegate policy or granted view invokes is in the allow set as a predicate (no exemption list)');
+-- 19 -- ...and every listed predicate IS invoked by one (a predicate nothing reaches is a stray grant)
+select is(
+  (select coalesce(string_agg(o.signature, ', ' order by o.signature), '(none)')
+     from agent_board.delegate_allowed_operations o
+     join _fn f on f.signature = o.signature
+    where o.kind = 'predicate'
+      and not exists (
+        select 1 from pg_depend d join _pol p on d.classid = 'pg_policy'::regclass and d.objid = p.poloid
+         where d.refclassid = 'pg_proc'::regclass and d.refobjid = f.oid)),
+  '(none)',
+  'every listed predicate is invoked by a delegate policy');
+-- 20 -- no granted view invokes an agent_board function (the views add no predicate)
+select is(
+  (select count(*)::int
+     from pg_rewrite rw join pg_depend d on d.classid = 'pg_rewrite'::regclass and d.objid = rw.oid
+     join _fn f on f.oid = d.refobjid
+    where d.refclassid = 'pg_proc'::regclass and has_table_privilege('agent_board_delegate', rw.ev_class, 'SELECT')),
+  0,
+  'none of the granted views calls an agent_board function');
+
+-- ===========================================================================
+-- 6. D15 -- the admission flag has one setter; the sink reads it
+-- ===========================================================================
+-- 21 -- every function that names the flag at all, derived (a second setter -- or any new
+-- reader -- names itself here)
+select is(
+  (select coalesce(string_agg(f.name, ',' order by f.name), '(none)')
+     from _fn f
+    where strpos(agent_board_test.stripped_body(f.oid, true), 'agent_board.delegate_admission') > 0),
+  '_upsert_board_membership_state,add_delegate_to_board',
+  'D15: exactly two functions name agent_board.delegate_admission: its setter and the sink that reads it');
+-- 22 -- the setter sets it to the target, and clears it
+-- source-scan: loud-literal one body, named by regprocedure; a miss fails
+select ok(
+  agent_board_test.stripped_body('agent_board.add_delegate_to_board(uuid,uuid)'::regprocedure, true)
+    ~ 'set_config\(''agent_board\.delegate_admission'', p_agent_id::text, true\).*set_config\(''agent_board\.delegate_admission'', '''', true\)',
+  'D15: add_delegate_to_board sets the flag to the target and clears it again');
+-- 23 -- the sink only reads it
+-- source-scan: loud-literal one body, named by regprocedure; a miss fails
+select ok(
+  agent_board_test.stripped_body('agent_board._upsert_board_membership_state(uuid,uuid,text,uuid,jsonb,uuid,text)'::regprocedure, true)
+    ~ 'current_setting\(''agent_board\.delegate_admission'', true\)',
+  'D15: the sink reads the flag with current_setting');
+
+-- ===========================================================================
+-- 7. Placement and role-writer classes (§What stays refused for a delegate)
+-- ===========================================================================
+-- Every direct writer of board_memberships (any INSERT, UPDATE, MERGE or DELETE on it, the
+-- ledger_authority role-writer derivation widened to every column) other than the sink must
+-- call the shared refusal, schema-qualified. The sink carries the D15 rule instead.
+create temp view _bm_writers as
+select f.oid, f.name,
+       agent_board_test.stripped_body(f.oid) ~ agent_board_test.call_re('_refuse_delegate_membership_target', false) as refuses,
+       agent_board_test.stripped_body(f.oid) ~ agent_board_test.col_write_re('board_memberships', 'role') as writes_role
+  from _fn f
+ where f.name <> '_upsert_board_membership_state'
+   and agent_board_test.stripped_body(f.oid) ~ agent_board_test.write_re('board_memberships');
+-- 24
+select is(
+  (select string_agg(name || case when writes_role then '[role]' else '' end, ',' order by name) from _bm_writers),
+  '_fedsession_autojoin_default_board[role],_redeem_unbounded_invite_for_agent[role],bootstrap_board_owner_memberships[role],create_board[role],grant_board_role[role]',
+  'the direct board_memberships writers outside the sink, derived (a new one names itself)');
+-- 25
+select is(
+  (select coalesce(string_agg(name, ',' order by name), '') from _bm_writers where not refuses),
+  '',
+  'CLASS: every direct board_memberships writer outside the sink refuses a delegate target (grant_board_role included)');
+-- 26 -- and every entrypoint that reaches board_memberships at all reaches it through one of
+-- them or the sink: a function that writes it directly is in the set above by construction, so
+-- this pins the sink's own rule is present
+select ok(
+  agent_board_test.stripped_body('agent_board._upsert_board_membership_state(uuid,uuid,text,uuid,jsonb,uuid,text)'::regprocedure)
+    ~ agent_board_test.call_re('_delegate_principal_agent_id', false)
+  and agent_board_test.stripped_body('agent_board._upsert_board_membership_state(uuid,uuid,text,uuid,jsonb,uuid,text)'::regprocedure, true)
+    ~* 'is\s+distinct\s+from\s+''member''',
+  'D15: the sink compares the session with the delegate''s principal and asserts member after the write');
+
+-- ===========================================================================
+-- 8. D16 -- the addressing class
+-- ===========================================================================
+create temp view _addr as
+select distinct f.oid, f.name,
+       agent_board_test.stripped_body(f.oid) ~ agent_board_test.call_re('_refuse_delegate_addressee', false) as refuses
+  from _fn f
+  cross join (values ('tasks', 'assigned_agent_id'), ('escalations', 'assigned_agent_id'),
+                     ('delegations', 'delegated_to_agent_id'), ('delivery_recipients', 'recipient_agent_id'),
+                     ('inbox_items', 'recipient_agent_id')) x(rel, col)
+ where agent_board_test.stripped_body(f.oid) ~ agent_board_test.col_write_re(x.rel, x.col);
+-- 27
+select is(
+  (select string_agg(name, ',' order by name) from _addr),
+  '_append_task_event,_upsert_delivery_recipient,_upsert_inbox_item,create_task,delegate_task,raise_escalation',
+  'the writers of an addressee column, derived (a new one names itself)');
+-- 28
+select is(
+  (select coalesce(string_agg(name, ',' order by name), '') from _addr where not refuses),
+  '',
+  'CLASS (D16): every writer of an addressee column calls the delegate-addressee refusal');
+-- 29 -- update_inbox_item_state changes state and never the recipient (asserted positively)
+select is(
+  (agent_board_test.stripped_body('agent_board.update_inbox_item_state(uuid,uuid,text,jsonb)'::regprocedure)
+     ~ agent_board_test.re(agent_board_test.col_assign_frag('inbox_items', 'action_state', true)))::text
+  || '/' ||
+  (agent_board_test.stripped_body('agent_board.update_inbox_item_state(uuid,uuid,text,jsonb)'::regprocedure)
+     ~ agent_board_test.re(agent_board_test.col_assign_frag('inbox_items', 'recipient_agent_id', true)))::text,
+  'true/false',
+  'update_inbox_item_state assigns action_state and never recipient_agent_id');
+
+-- ===========================================================================
+-- 9. The provenance vocabulary readers (§principal-authored, exactly)
+-- ===========================================================================
+-- Every function naming a provenance value in its source, derived, each given a POSITIVE
+-- disposition for principal-authored. An undisposed reader names itself.
+-- 30
+select is(
+  (select string_agg(f.name || ':' || case
+       when f.name = '_emit_membership_event'
+            and agent_board_test.stripped_body(f.oid, true) ~ 'v_prov\s*:=\s*''principal-authored''' then 'derives it'
+       when f.name = '_board_membership_events_provenance_guard'
+            and agent_board_test.stripped_body(f.oid, true) ~ 'provenance\s*=\s*''principal-authored''' then 'guards it'
+       when f.name in ('_membership_consent_present', '_membership_consent_kind')
+            and (select count(*) from regexp_matches(agent_board_test.stripped_body(f.oid, true), 'provenance\s*=\s*''principal-authored''', 'g')) = 2
+            then 'reads it in case and filter'
+       when f.name = '_upsert_board_membership_state'
+            and agent_board_test.stripped_body(f.oid) ~ agent_board_test.call_re('_emit_membership_event', false) then 'emits only through the emitter'
+       when f.name in ('create_board', 'bootstrap_board_owner_memberships', '_redeem_unbounded_invite_for_agent')
+            and agent_board_test.stripped_body(f.oid) ~ agent_board_test.call_re('_refuse_delegate_membership_target', false) then 'never a delegate target'
+       when f.name = 'resolve_board_request'
+            and exists (select 1 from agent_board_test.fn_call_closure() c
+                         where c.root_oid = f.oid and c.reached_name = '_upsert_board_membership_state') then 'admits only through the sink (D15)'
+       when f.name = 'list_my_board_requests'
+            and not has_function_privilege('agent_board_delegate', f.oid, 'EXECUTE') then 'not callable by a delegate'
+       else 'UNDISPOSED' end, ', ' order by f.name)
+     from _fn f
+    where f.name in (select p.proname from pg_proc p join pg_namespace n on n.oid = p.pronamespace
+                      where n.nspname = 'agent_board'
+                        -- source-scan: raw-subject the contract derives this set from prosrc on purpose: a comment naming a value widens the set and only adds a disposition
+                        and p.prosrc ~* '(operator-designated|target-authored|board-authored)')),
+  '_board_membership_events_provenance_guard:guards it, _emit_membership_event:derives it, _membership_consent_kind:reads it in case and filter, _membership_consent_present:reads it in case and filter, _redeem_unbounded_invite_for_agent:never a delegate target, _upsert_board_membership_state:emits only through the emitter, bootstrap_board_owner_memberships:never a delegate target, create_board:never a delegate target, list_my_board_requests:not callable by a delegate, resolve_board_request:admits only through the sink (D15)',
+  'every reader of the provenance vocabulary has a positive disposition for principal-authored');
+-- 31 -- post_message is the only function that inserts into messages (the attribution mark is complete)
+select is(
+  (select string_agg(f.name, ',' order by f.name) from _fn f
+    where agent_board_test.stripped_body(f.oid) ~ agent_board_test.stmt_re('insert into', 'messages')),
+  'post_message',
+  'post_message is the only writer of messages, so its delegate mark covers every message');
+-- 32 -- the delegate fact is written only by the exchange's first-use insert
+select is(
+  (select string_agg(f.name, ',' order by f.name) from _fn f
+    where agent_board_test.stripped_body(f.oid) ~ agent_board_test.col_write_re('agents', 'is_delegate')),
+  'exchange_delegate_credential',
+  'agents.is_delegate is written by exchange_delegate_credential alone');
+
+-- ===========================================================================
+-- 10. Zero rows elsewhere (D14) -- AS the delegate, over every listed relation
+-- ===========================================================================
+do $$
+begin
+  if not (select rolsuper from pg_roles where rolname = current_user) then
+    execute format('grant agent_board_delegate to %I with set true', current_user);
+  end if;
+end $$;
+
+create temp table _z(k text primary key, v text);
+create function pg_temp.v(p_k text) returns text language sql as $$ select v from _z where k = p_k $$;
+create function pg_temp.u(p_k text) returns uuid language sql as $$ select v::uuid from _z where k = p_k $$;
+create function pg_temp.put(p_k text, p_v text) returns void language sql as $$
+  insert into _z values (p_k, p_v) on conflict (k) do update set v = excluded.v $$;
+create function pg_temp.svc() returns void language plpgsql as $$
+begin perform set_config('request.jwt.claims', '', true); end $$;
+create function pg_temp.authn(p_sub uuid) returns void language plpgsql as $$
+begin perform set_config('request.jwt.claims', json_build_object('role', 'authenticated', 'sub', p_sub)::text, true); end $$;
+create function pg_temp.as_d_val(p_sql text) returns text language plpgsql as $$
+declare v text;
+begin
+  perform set_config('request.jwt.claims',
+    json_build_object('role', 'agent_board_delegate', 'sub', pg_temp.v('D.auth'), 'agent_credential_id', pg_temp.v('D.cred'))::text, true);
+  set local role agent_board_delegate;
+  begin
+    execute p_sql into v;
+  exception when others then
+    v := 'ERR ' || sqlstate || ':' || sqlerrm;
+  end;
+  reset role;
+  return v;
+end $$;
+
+-- Fixtures: an owner (real enrollment), keyed agents, four boards, and an exclusive member per
+-- board so `agents` has a row that belongs to exactly one board.
+insert into agent_board.identity_providers
+  (issuer, audience, supported, policy_approved, allowed_scopes, allowed_board_scopes, allowed_agent_kinds)
+values ('https://portal.zrows.test', 'message-board', true, true, '{}', '{}', '{agent,human}');
+do $$
+declare r record;
+begin
+  perform set_config('request.jwt.claims', '', true);
+  select * into r from agent_board.enroll_federated_human('https://portal.zrows.test', 'message-board', 'zrows-owner',
+    '{"sub": "zrows-owner", "email": "zrows@t.test", "email_verified": true}'::jsonb, 'Z Owner');
+  perform pg_temp.put('O', r.agent_id::text);
+  perform pg_temp.put('O.auth', r.auth_user_id::text);
+  select * into r from agent_board.exchange_delegate_credential(jsonb_build_object(
+    'iss', 'https://portal.zrows.test', 'sub', 'zrows-owner', 'slot_resource', null,
+    'agent_board_delegate_instance', jsonb_build_object('instance_id', 'zrows_instance_000001', 'grant_id', 'zrows_grant_00000001',
+      'generation', 1, 'owner_sub', 'zrows-owner', 'client_id', 'zrows-client', 'status', 'active', 'client_change', null)));
+  perform pg_temp.put('D', r.agent_id::text);
+  perform pg_temp.put('D.auth', r.auth_user_id::text);
+  perform pg_temp.put('D.cred', r.credential_id::text);
+end $$;
+
+insert into auth.users(id, instance_id, aud, role, email)
+select ('7a000000-0000-4000-8000-' || lpad(n::text, 12, '0'))::uuid, '00000000-0000-0000-0000-000000000000',
+       'authenticated', 'authenticated', 'zrows' || n || '@t.test'
+  from generate_series(1, 6) n;
+insert into agent_board.agents(id, agent_type, kind, handle, display_name, status, auth_user_id)
+select ('7a100000-0000-4000-8000-' || lpad(n::text, 12, '0'))::uuid, 'agent', 'agent', 'zrows-keyed-' || n, 'Z ' || n, 'active',
+       ('7a000000-0000-4000-8000-' || lpad(n::text, 12, '0'))::uuid
+  from generate_series(1, 6) n;
+-- K = 1 (owner of every board), K2 = 2 (member of BA and BN), exclusive members 3..6 of BA, BN, BR, BL.
+select pg_temp.put('K', '7a100000-0000-4000-8000-000000000001'), pg_temp.put('K.auth', '7a000000-0000-4000-8000-000000000001'),
+       pg_temp.put('K2', '7a100000-0000-4000-8000-000000000002'), pg_temp.put('K2.auth', '7a000000-0000-4000-8000-000000000002');
+insert into agent_board.boards(id, slug, name, created_by_agent_id, visibility, status)
+select ('7a200000-0000-4000-8000-' || lpad(n::text, 12, '0'))::uuid, 'zrows-' || b, 'Z ' || b, pg_temp.u('K'), 'private', 'active'
+  from unnest(array['ba', 'bn', 'br', 'bl']) with ordinality as t(b, n);
+select pg_temp.put('B' || upper(b), ('7a200000-0000-4000-8000-' || lpad(n::text, 12, '0')))
+  from unnest(array['a', 'n', 'r', 'l']) with ordinality as t(b, n);
+select pg_temp.put('X' || upper(b), ('7a100000-0000-4000-8000-' || lpad((n + 2)::text, 12, '0')))
+  from unnest(array['a', 'n', 'r', 'l']) with ordinality as t(b, n);
+insert into agent_board.board_memberships(board_id, agent_id, role, membership_state, created_by_agent_id)
+select pg_temp.u('B' || b), pg_temp.u('K'), 'owner', 'joined', pg_temp.u('K') from unnest(array['A', 'N', 'R', 'L']) b
+union all
+select pg_temp.u('B' || b), pg_temp.u('X' || b), 'member', 'joined', pg_temp.u('K') from unnest(array['A', 'N', 'R', 'L']) b
+union all
+select pg_temp.u('B' || b), pg_temp.u('O'), 'member', 'joined', pg_temp.u('K') from unnest(array['A', 'R', 'L']) b
+union all
+select pg_temp.u('B' || b), pg_temp.u('K2'), 'member', 'joined', pg_temp.u('K') from unnest(array['A', 'N']) b;
+
+-- The owner places its delegate on BA, BR and BL (not BN).
+select pg_temp.authn(pg_temp.u('O.auth'));
+select agent_board.add_delegate_to_board(pg_temp.u('D'), pg_temp.u('B' || b)) from unnest(array['A', 'R', 'L']) b;
+
+-- On each board: a keyed post (thread T<b>), the delegate's own post (BA/BR/BL), a task
+-- ASSIGNED TO THE DELEGATE with its event, a claim and an escalation, a tasking delivery to
+-- the board, signature evidence over the keyed post, and a co-member's per-recipient inbox item.
+do $$
+declare b text; v_thread uuid; v_msg uuid; v_task uuid; v_dr uuid; v_ev uuid;
+begin
+  foreach b in array array['A', 'N', 'R', 'L'] loop
+    perform pg_temp.authn(pg_temp.u('K.auth'));
+    select thread_id into v_thread from agent_board.create_or_find_thread(pg_temp.u('K'), 'zrows ' || b, 'zrows-' || b);
+    perform pg_temp.put('T' || b, v_thread::text);
+    select message_id into v_msg from agent_board.post_board_message(v_thread, pg_temp.u('K'), pg_temp.u('B' || b), 's', 'keyed on ' || b);
+    perform pg_temp.put('M' || b, v_msg::text);
+    if b <> 'N' then
+      perform set_config('request.jwt.claims', json_build_object('role', 'agent_board_delegate', 'sub', pg_temp.v('D.auth'),
+                                                                 'agent_credential_id', pg_temp.v('D.cred'))::text, true);
+      perform agent_board.post_board_message(v_thread, null, pg_temp.u('B' || b), 's', 'delegate on ' || b);
+    end if;
+    -- seeded as the table owner, so the row exists whatever the writers refuse
+    insert into agent_board.tasks(thread_id, created_by_agent_id, assigned_agent_id, title, metadata)
+    values (v_thread, pg_temp.u('K'), pg_temp.u('D'), 'task on ' || b, jsonb_build_object('zrowsBoard', b))
+    returning id into v_task;
+    perform pg_temp.put('TK' || b, v_task::text);
+    insert into agent_board.task_events(task_id, thread_id, actor_agent_id, event_sequence, event_type, origin_posture)
+    values (v_task, v_thread, pg_temp.u('K'), 1, 'created', 'unattested:preexisting') returning id into v_ev;
+    insert into agent_board.claims(task_id, thread_id, agent_id, resource_kind, resource_key, lease_expires_at)
+    values (v_task, v_thread, pg_temp.u('K2'), 'task', 'zrows-' || b, now() + interval '1 hour');
+    insert into agent_board.escalations(thread_id, task_id, raised_by_agent_id, assigned_agent_id, summary)
+    values (v_thread, v_task, pg_temp.u('K'), pg_temp.u('D'), 'esc on ' || b);
+    insert into agent_board.delivery_recipients(delivery_mode, recipient_agent_id, source_kind, source_task_id, board_id, board_membership_id)
+    values ('tasking', pg_temp.u('K'), 'task', v_task, pg_temp.u('B' || b),
+            (select bm.id from agent_board.board_memberships bm
+              where bm.board_id = pg_temp.u('B' || b) and bm.agent_id = pg_temp.u('K') and bm.membership_state = 'joined'))
+    returning id into v_dr;
+    -- the co-member's (K's) per-recipient tasking row: a board, but NOT feed-visible
+    insert into agent_board.inbox_items(delivery_recipient_id, recipient_agent_id, board_id, delivery_mode, source_kind,
+                                        source_task_id, subject, visible_in_inbox, visible_in_board_feed)
+    values (v_dr, pg_temp.u('K'), pg_temp.u('B' || b), 'tasking', 'task', v_task, 'tasking on ' || b, true, false);
+    perform pg_temp.put('II' || b, (select id::text from agent_board.inbox_items where delivery_recipient_id = v_dr));
+    insert into agent_board.signature_evidence(agent_id, source_kind, source_message_id, operation, payload_digest, verification_status)
+    values (pg_temp.u('K'), 'message', v_msg, 'post_board_message', 'sha256:zrows', 'unsigned');
+    insert into agent_board.signature_evidence(agent_id, source_kind, source_task_event_id, operation, payload_digest, verification_status)
+    values (pg_temp.u('K'), 'task_event', v_ev, 'append_task_event', 'sha256:zrows', 'unsigned');
+  end loop;
+end $$;
+
+-- Then the delegate is REMOVED from BR (an admin) and LEFT on BL (its owner withdraws it).
+select pg_temp.authn(pg_temp.u('K.auth'));
+select agent_board.update_board_membership(pg_temp.u('BR'), pg_temp.u('D'), 'removed');
+select pg_temp.authn(pg_temp.u('O.auth'));
+select agent_board.update_board_membership(pg_temp.u('BL'), pg_temp.u('D'), 'left');
+
+-- The count of rows of `rel` that belong to board `b`, AS the delegate. Each relation's notion
+-- of "belongs to a board" is stated here; the SET of relations comes from the allow set, and a
+-- relation with no statement is reported UNMAPPED (it fails, naming itself).
+create function pg_temp.rows_of(p_rel text, p_b text) returns text language plpgsql as $$
+declare q text;
+begin
+  q := case p_rel
+    when 'boards'              then format('select count(*) from agent_board.boards where id = %L', pg_temp.v('B' || p_b))
+    when 'board_memberships'   then format('select count(*) from agent_board.board_memberships where board_id = %L', pg_temp.v('B' || p_b))
+    when 'agents'              then format('select count(*) from agent_board.agents where id = %L', pg_temp.v('X' || p_b))
+    when 'messages'            then format('select count(*) from agent_board.messages where thread_id = %L', pg_temp.v('T' || p_b))
+    when 'delivery_recipients' then format('select count(*) from agent_board.delivery_recipients where board_id = %L', pg_temp.v('B' || p_b))
+    when 'inbox_items'         then format('select count(*) from agent_board.inbox_items where board_id = %L', pg_temp.v('B' || p_b))
+    when 'tasks'               then format('select count(*) from agent_board.tasks where id = %L', pg_temp.v('TK' || p_b))
+    when 'task_events'         then format('select count(*) from agent_board.task_events where task_id = %L', pg_temp.v('TK' || p_b))
+    when 'claims'              then format('select count(*) from agent_board.claims where task_id = %L', pg_temp.v('TK' || p_b))
+    when 'escalations'         then format('select count(*) from agent_board.escalations where task_id = %L', pg_temp.v('TK' || p_b))
+    when 'signature_evidence'  then format('select count(*) from agent_board.signature_evidence se where se.source_message_id = %L
+                                              or se.source_task_event_id in (select te.id from agent_board.task_events te where te.task_id = %L)',
+                                           pg_temp.v('M' || p_b), pg_temp.v('TK' || p_b))
+    when 'presence'            then 'select count(*) from agent_board.presence'
+    when 'agent_signing_keys'  then 'select count(*) from agent_board.agent_signing_keys'
+    when 'v_board_feed'        then format('select count(*) from agent_board.v_board_feed where board_id = %L', pg_temp.v('B' || p_b))
+    when 'v_thread_feed'       then format('select count(*) from agent_board.v_thread_feed where thread_id = %L', pg_temp.v('T' || p_b))
+    when 'v_agent_inbox'       then format('select count(*) from agent_board.v_agent_inbox where board_id = %L', pg_temp.v('B' || p_b))
+    when 'v_board_memberships' then format('select count(*) from agent_board.v_board_memberships where board_id = %L', pg_temp.v('B' || p_b))
+    when 'v_agent_dashboard'   then format('select count(*) from agent_board.v_agent_dashboard where agent_id = %L', pg_temp.v('X' || p_b))
+    else null end;
+  if q is null then
+    return 'UNMAPPED';
+  end if;
+  return pg_temp.as_d_val(q);
+end $$;
+
+-- presence and agent_signing_keys have the frozen predicate `false`: a board-scoped positive
+-- pair cannot exist for them, which assertion 17 pins (their qual IS `false`). Every other
+-- relation must show the row on the active board.
+create temp view _matrix as
+select o.name,
+       pg_temp.rows_of(o.name, 'A') as on_active,
+       pg_temp.rows_of(o.name, 'N') as on_never,
+       pg_temp.rows_of(o.name, 'R') as on_removed,
+       pg_temp.rows_of(o.name, 'L') as on_left,
+       o.name in ('presence', 'agent_signing_keys') as no_positive
+  from agent_board.delegate_allowed_operations o
+ where o.kind in ('read_view', 'read_table');
+create temp table _m as select * from _matrix;
+-- The matrix, printed, so a reader sees the counts the four assertions below judge.
+select diag('matrix (active/never/removed/left): ' || string_agg(name || '=' || on_active || '/' || on_never || '/' || on_removed || '/' || on_left, ' ' order by name)) from _m;
+-- 33 -- the positive pair: every relation shows its row on the board the delegate is active on
+select is(
+  (select coalesce(string_agg(name || '=' || on_active, ', ' order by name), '(none)')
+     from _m where not no_positive and not (on_active ~ '^[0-9]+$' and on_active::int > 0)),
+  '(none)',
+  'D14 positive pair: every read relation shows the row on a board where the delegate is active');
+-- 34
+select is(
+  (select coalesce(string_agg(name || '=' || on_never, ', ' order by name), '(none)') from _m where on_never <> '0'),
+  '(none)',
+  'D14: on a board the delegate was never on, every read relation shows ZERO rows (incl. a task ASSIGNED to it)');
+-- 35
+select is(
+  (select coalesce(string_agg(name || '=' || on_removed, ', ' order by name), '(none)') from _m where on_removed <> '0'),
+  '(none)',
+  'D14: after its REMOVAL from a board, zero rows of that board -- even what it authored, received or was assigned');
+-- 36
+select is(
+  (select coalesce(string_agg(name || '=' || on_left, ', ' order by name), '(none)') from _m where on_left <> '0'),
+  '(none)',
+  'D14: after it moves to LEFT on a board, zero rows of that board');
+
+-- 37 -- boardless rows addressed to / authored by the delegate (seeded directly) are invisible
+do $$
+declare v_thread uuid; v_msg uuid; v_dr uuid;
+begin
+  insert into agent_board.threads(thread_type, created_by_agent_id, subject) values ('coordination', pg_temp.u('D'), 'boardless')
+  returning id into v_thread;
+  insert into agent_board.messages(thread_id, author_agent_id, message_sequence, body)
+  values (v_thread, pg_temp.u('D'), 1, 'boardless by the delegate') returning id into v_msg;
+  insert into agent_board.delivery_recipients(delivery_mode, recipient_agent_id, source_kind, source_message_id, board_id)
+  values ('direct', pg_temp.u('D'), 'message', v_msg, null) returning id into v_dr;
+  insert into agent_board.inbox_items(delivery_recipient_id, recipient_agent_id, board_id, delivery_mode, source_kind, source_message_id, subject)
+  values (v_dr, pg_temp.u('D'), null, 'direct', 'message', v_msg, 'boardless');
+  insert into agent_board.presence(agent_id, availability) values (pg_temp.u('D'), 'ready');
+  perform pg_temp.put('BLM', v_msg::text);
+end $$;
+select is(
+  pg_temp.as_d_val(format($$ select concat_ws('/',
+      (select count(*) from agent_board.messages where id = %L),
+      (select count(*) from agent_board.delivery_recipients where source_message_id = %L),
+      (select count(*) from agent_board.inbox_items where source_message_id = %L),
+      (select count(*) from agent_board.presence)) $$, pg_temp.v('BLM'), pg_temp.v('BLM'), pg_temp.v('BLM'))),
+  '0/0/0/0',
+  'D14: a boardless message it AUTHORED, a boardless delivery and inbox item ADDRESSED to it, and its own presence: invisible');
+
+-- 38, 39 -- CROSS-BOARD POST: a message delivered only to BN, in a thread stamped BA
+select pg_temp.authn(pg_temp.u('K.auth'));
+select pg_temp.put('XB', (select message_id::text from agent_board.post_board_message(pg_temp.u('TA'), pg_temp.u('K'), pg_temp.u('BN'), 's', 'cross-board to BN')));
+select is(
+  (select board_id::text from agent_board.threads where id = pg_temp.u('TA')) || ' ' ||
+  pg_temp.as_d_val(format($$ select count(*) from agent_board.messages where id = %L $$, pg_temp.v('XB'))),
+  pg_temp.v('BA') || ' 0',
+  'D14 cross-board post: in a thread stamped BA, a message delivered only to BN is invisible to a delegate on BA');
+select is(
+  pg_temp.as_d_val(format($$ select count(*) from agent_board.messages where id = %L $$, pg_temp.v('MA'))),
+  '1',
+  'D14 cross-board post, paired: the BA post in the same thread is visible');
+
+-- 40 -- REUSED DM THREAD: boardless DMs in a thread later stamped BA by a board post
+do $$
+declare v_thread uuid;
+begin
+  perform pg_temp.authn(pg_temp.u('K.auth'));
+  select thread_id into v_thread from agent_board.create_or_find_thread(pg_temp.u('K'), 'dm then board', 'zrows-dm');
+  perform agent_board.send_direct_message(v_thread, pg_temp.u('K'), pg_temp.u('K2'), 's', 'the dm before');
+  perform pg_temp.put('DMT', v_thread::text);
+  perform agent_board.post_board_message(v_thread, pg_temp.u('K'), pg_temp.u('BA'), 's', 'the board post after');
+end $$;
+select is(
+  pg_temp.as_d_val(format($$ select string_agg(body, ',' order by body) from agent_board.messages where thread_id = %L $$, pg_temp.v('DMT'))),
+  'the board post after',
+  'D14 reused DM thread: the boardless DM in a thread later stamped BA is invisible; the board post is visible');
+
+-- 41 -- A CO-MEMBER'S INBOX: K2's per-recipient item on BA is invisible; v_agent_inbox shows
+-- only the delegate's own rows or feed-visible ones, and shows some
+select is(
+  pg_temp.as_d_val(format($$ select concat_ws('/',
+      (select count(*) from agent_board.inbox_items where id = %L),
+      (select count(*) from agent_board.v_agent_inbox where not (recipient_agent_id = %L or visible_in_board_feed)),
+      (select (count(*) > 0)::text from agent_board.v_agent_inbox)) $$, pg_temp.v('IIA'), pg_temp.v('D'))),
+  '0/0/true',
+  'D14 co-member inbox: a co-member''s (non-feed) per-recipient item is invisible; v_agent_inbox returns only own or feed-visible rows (and some)');
+
+-- ===========================================================================
+-- 11. DIFFERENTIAL: the shipped (InitPlan) policies show EXACTLY the contract's rows
+-- ===========================================================================
+-- The contract froze the D14 read rule as per-row predicates; the migration ships the same
+-- rule with the caller's board set computed once per query. This compares, for every
+-- read_table in the allow set (the list is read from the table, not written here), the row
+-- ids the delegate SEES with the row ids the contract's predicates ADMIT, computed here as
+-- the table owner from the rule itself. The fixture above holds every case the contract
+-- names: active, never-member, removed and left boards; boardless rows addressed to and
+-- authored by the delegate; a task assigned to it off-board; a cross-board post; a DM thread
+-- later stamped by a board post; and a co-member's non-feed inbox row. A relation with no
+-- reference rule here is reported UNMAPPED and fails.
+create function pg_temp.oracle(p_rel text, p_d uuid) returns text language plpgsql as $$
+declare q text; v text;
+  a text := format('(select bm.board_id from agent_board.board_memberships bm where bm.agent_id = %L and bm.membership_state in (''joined'', ''subscribed''))', p_d);
+  msg_vis text; task_vis text;
+begin
+  msg_vis := 'exists (select 1 from agent_board.delivery_recipients d2 where d2.source_message_id = %s and d2.board_id is not null and d2.board_id in ' || a || ')';
+  task_vis := 'exists (select 1 from agent_board.delivery_recipients d3 where d3.source_task_id = %s and d3.board_id is not null and d3.board_id in ' || a || ')';
+  q := case p_rel
+    when 'boards' then 'select id from agent_board.boards where id in ' || a
+    when 'board_memberships' then format('select id from agent_board.board_memberships where agent_id = %L and membership_state in (''joined'', ''subscribed'')', p_d)
+    when 'agents' then format('select x.id from agent_board.agents x where x.id = %L
+         or exists (select 1 from agent_board.board_memberships o where o.agent_id = x.id and o.membership_state in (''joined'', ''subscribed'') and o.board_id in %s)
+         or exists (select 1 from agent_board.messages m where m.author_agent_id = x.id and %s)', p_d, a, format(msg_vis, 'm.id'))
+    when 'messages' then 'select m.id from agent_board.messages m where ' || format(msg_vis, 'm.id')
+    when 'delivery_recipients' then 'select id from agent_board.delivery_recipients where board_id is not null and board_id in ' || a
+    when 'inbox_items' then format('select id from agent_board.inbox_items where board_id is not null and board_id in %s and (recipient_agent_id = %L or visible_in_board_feed)', a, p_d)
+    when 'tasks' then 'select t.id from agent_board.tasks t where ' || format(task_vis, 't.id')
+    when 'task_events' then 'select te.id from agent_board.task_events te where ' || format(task_vis, 'te.task_id')
+    when 'claims' then 'select c.id from agent_board.claims c where c.task_id is not null and ' || format(task_vis, 'c.task_id')
+    when 'escalations' then 'select e.id from agent_board.escalations e where e.task_id is not null and ' || format(task_vis, 'e.task_id')
+    when 'signature_evidence' then 'select se.id from agent_board.signature_evidence se
+         where (se.source_message_id is not null or se.source_task_event_id is not null or se.source_delivery_recipient_id is not null)
+           and se.source_artifact_id is null
+           and (se.source_message_id is null or ' || format(msg_vis, 'se.source_message_id') || ')
+           and (se.source_task_event_id is null or exists (select 1 from agent_board.task_events te where te.id = se.source_task_event_id and ' || format(task_vis, 'te.task_id') || '))
+           and (se.source_delivery_recipient_id is null or exists (select 1 from agent_board.delivery_recipients dr where dr.id = se.source_delivery_recipient_id and dr.board_id is not null and dr.board_id in ' || a || '))'
+    when 'presence' then 'select agent_id from agent_board.presence where false'
+    when 'agent_signing_keys' then 'select id from agent_board.agent_signing_keys where false'
+    else null end;
+  if q is null then return 'UNMAPPED'; end if;
+  execute 'select coalesce(string_agg(z::text, '','' order by z::text), '''') from (' || q || ') s(z)' into v;
+  return v;
+end $$;
+create function pg_temp.seen(p_rel text) returns text language plpgsql as $$
+begin
+  return coalesce(pg_temp.as_d_val(format('select coalesce(string_agg(%s::text, '','' order by %s::text), '''') from agent_board.%I',
+           case p_rel when 'presence' then 'agent_id' else 'id' end, case p_rel when 'presence' then 'agent_id' else 'id' end, p_rel)), '');
+end $$;
+create temp table _eq as
+select o.name, pg_temp.oracle(o.name, pg_temp.u('D')) as contract_rows, pg_temp.seen(o.name) as seen_rows
+  from agent_board.delegate_allowed_operations o where o.kind = 'read_table';
+select diag('differential (rows admitted by the contract rule / rows seen): ' || string_agg(name || '=' ||
+  (case when contract_rows = '' then 0 else array_length(string_to_array(contract_rows, ','), 1) end)::text || '/' ||
+  (case when seen_rows = '' then 0 else array_length(string_to_array(seen_rows, ','), 1) end)::text, ' ' order by name)) from _eq;
+-- 42
+select is(
+  (select coalesce(string_agg(name, ', ' order by name), '(none)') from _eq where contract_rows is distinct from seen_rows),
+  '(none)',
+  'DIFFERENTIAL: for every read_table the delegate sees exactly the rows the contract''s per-row rule admits');
+-- 43 -- not vacuous: the rule admits rows in every relation whose predicate is not `false`
+select is(
+  (select count(*)::int from _eq where contract_rows <> '' and contract_rows <> 'UNMAPPED'),
+  11,
+  'DIFFERENTIAL is not vacuous: 11 of the 13 tables have admitted rows (presence and agent_signing_keys are `false` by contract)');
+
+select * from finish();
+rollback;