@consiliency/agent-board-schema 1.57.0 → 1.59.0

package/tests/agent_board_ledger_authority.test.sql

@@ -49,7 +49,8 @@ begin;
 
 -- 88 at #276; #280 deletes 7 (EXEMPTION B1/B2/B3, the three RESIDUAL assertions, and a fourth
 -- residual companion in section 10 that named only the slug) and adds 10 in section 11.
-select plan(91);
+-- 92 with HOSTED (20261008000100): EXEMPTION E below licenses add_delegate_to_board.
+select plan(92);
 
 create function pg_temp.claims(p_sub text) returns void language plpgsql as $$
 begin
@@ -566,10 +567,10 @@ select is(
       and agent_board_test.stripped_body(p.oid)
           ~ agent_board_test.re(agent_board_test.call_frag('_assert_actor_not_fleet_revoked')
                                 || '|' || agent_board_test.call_frag('_actor_fleet_revoked'))),
-  '_redeem_unbounded_invite_for_agent,create_board,create_invite_link,grant_board_role,'
+  '_redeem_unbounded_invite_for_agent,add_delegate_to_board,create_board,create_invite_link,grant_board_role,'
   || 'set_board_authority_ceiling,set_board_claim_policy,set_board_role_gate',
-  'the functions that consult the fleet revocation ledger are exactly these seven (#280 added '
-  'create_board)');
+  'the functions that consult the fleet revocation ledger are exactly these eight (#280 added '
+  'create_board; HOSTED added add_delegate_to_board)');
 
 -- The gate proper: the two sets must differ by EXACTLY the three asserted exemptions, and any
 -- other member of the difference is NAMED in the failure. Each excluded name is licensed by a
@@ -593,6 +594,9 @@ select is(
                 -- the three asserted exemptions (create_board was the fourth until #280)...
                 '_upsert_board_membership_state',
                 '_fedsession_autojoin_default_board', 'bootstrap_board_owner_memberships',
+                -- ...HOSTED's add_delegate_to_board, which consults the ledger for the OWNER and
+                -- writes no authority relation itself (EXEMPTION E, positively, below)...
+                'add_delegate_to_board',
                 -- ...and the two helpers, which ARE the gate rather than users of it
                 '_assert_actor_not_fleet_revoked', '_actor_fleet_revoked')
           and ((agent_board_test.stripped_body(p.oid) ~ agent_board_test.stmt_re('insert into', 'board_memberships')
@@ -688,7 +692,8 @@ select is(
     where n.nspname = 'agent_board'
       and p.proname <> '_upsert_board_membership_state'
       and agent_board_test.stripped_body(p.oid) ~ agent_board_test.call_re('_upsert_board_membership_state')),
-  'invite_board_member(p_board_id uuid, p_agent_id uuid, p_created_by_agent_id uuid, p_metadata jsonb)'
+  'add_delegate_to_board(p_agent_id uuid, p_board_id uuid)'
+  || ' | invite_board_member(p_board_id uuid, p_agent_id uuid, p_created_by_agent_id uuid, p_metadata jsonb)'
   || ' | join_board(p_board_id uuid, p_agent_id uuid, p_membership_state text, p_created_by_agent_id uuid, p_metadata jsonb)'
   || ' | request_join_board(p_board_id uuid, p_agent_id uuid, p_metadata jsonb)'
   || ' | resolve_board_request(p_board_id uuid, p_agent_id uuid, p_membership_state text, p_created_by_agent_id uuid, p_metadata jsonb)'
@@ -726,6 +731,30 @@ select is(
   'EXEMPTION D: bootstrap_board_owner_memberships takes NO arguments — it backfills the board '
   'own recorded owner_agent_id and can name no other principal');
 
+-- EXEMPTION E — add_delegate_to_board (HOSTED, 20261008000100). It is in the ledger-consult set
+-- (the owner must not be fleet-revoked, IF-0-HOSTED-12) and NOT in the authority-writer set, so
+-- the pairing assertion above excludes it by name. Licensed positively here: it consults the
+-- ledger, it reaches board_memberships ONLY through the sink, it names no role, and it writes
+-- no other authority relation in its own body. Each conjunct is reported, so a change names
+-- which one moved.
+select is(
+  (select string_agg(
+            'ledger=' || (b ~ agent_board_test.call_re('_assert_actor_not_fleet_revoked', false))::text
+            || ' sink=' || (b ~ agent_board_test.call_re('_upsert_board_membership_state', false))::text
+            || ' direct_membership_write=' || (b ~ agent_board_test.write_re('board_memberships'))::text
+            || ' role_write=' || (b ~ agent_board_test.col_write_re('board_memberships', 'role'))::text
+            || ' other_authority_write=' || (b ~ agent_board_test.stmt_re('insert into|update', 'board_authority_ceilings')
+                                              or b ~ agent_board_test.col_write_re('boards', 'role_gate_enforced')
+                                              or b ~ agent_board_test.col_write_re('boards', 'claim_policy')
+                                              or b ~ agent_board_test.stmt_re('insert into', 'board_invite_tokens'))::text,
+            ' | ')
+     from (select agent_board_test.stripped_body(p.oid) as b
+             from pg_proc p join pg_namespace n on n.oid = p.pronamespace
+            where n.nspname = 'agent_board' and p.proname = 'add_delegate_to_board') x),
+  'ledger=true sink=true direct_membership_write=false role_write=false other_authority_write=false',
+  'EXEMPTION E: add_delegate_to_board consults the ledger and writes membership only through the '
+  'sink — no role, no other authority relation');
+
 
 -- ===========================================================================
 -- 10. G3 — THE INVITE ROUTE. An admin-preset link is a deferred grant of admin, so a

package/tests/agent_board_signer_lifecycle.test.sql

@@ -727,6 +727,9 @@ select is(
      from agg
     where locks_agents and locks_memberships),
   array[
+    -- HOSTED (20261008000100): the fleet-ledger gate on the owner row-locks agents, and the sink
+    -- writes the delegate's membership. Serialised by the advisory lock, as grant_board_role is.
+    'add_delegate_to_board => serialised by the board advisory lock',
     -- Joined this class in #276 (20260909000100). The fleet-ledger gate row-locks the actor's
     -- agents row, so the live grant chokepoint -- and therefore every caller of it -- now locks
     -- both relations. It takes the advisory lock rather than arguing from its ordering: this

package/tests/agent_board_write_enforcement_class.test.sql

@@ -427,10 +427,13 @@ select distinct p.oid,
 -- 59 -> 60 with #521's agent_board.enroll_token_uses. Its only writer, _enroll_token_bind, is
 -- EXECUTE-able by no API role and is reached only from the service_role-only
 -- enroll_federated_identity, so it adds no member to the `authenticated` writer population.
+-- 60 -> 62 with HOSTED's delegate_instances and delegate_allowed_operations (20261008000100).
+-- Both are written only by service_role-only definers or the migration itself, so neither joins
+-- the `authenticated` writer population below.
 select is(
   (select count(*)::text from _wec_target where relkind = 'r'),
-  '60',
-  '#325 canary: agent_board has 60 base tables — the universe the write scan runs over, pinned so an empty violating set below cannot mean an empty universe');
+  '62',
+  '#325 canary: agent_board has 62 base tables — the universe the write scan runs over, pinned so an empty violating set below cannot mean an empty universe');
 
 -- WEC-2. The relations the class writes, as an EXACT SET. A new one names itself.
 select is(
@@ -489,6 +492,8 @@ select is( -- pgtap-allow-raise-checked
   array[
     'agent_board.acquire_claim(uuid,text,text,timestamp with time zone,uuid,uuid,jsonb)',
     'agent_board.add_artifact(uuid,text,text,text,uuid,uuid,uuid,uuid,jsonb)',
+    -- HOSTED (20261008000100): the owner places its hosted delegate through the sink.
+    'agent_board.add_delegate_to_board(uuid,uuid)',
     'agent_board.append_task_event(uuid,uuid,text,jsonb,text,uuid,timestamp with time zone)',
     'agent_board.block_board_inviter(uuid,uuid,uuid,jsonb)',
     'agent_board.create_board(uuid,text,text,text,jsonb,text)',
@@ -548,7 +553,7 @@ select is( -- pgtap-allow-raise-checked
     'agent_board.upsert_delegation_policy(uuid,text,jsonb,integer,interval,boolean)',
     'agent_board.verify_callback_endpoint(uuid,uuid,jsonb)'
     ]::text[],
-  '#325: the effect-derived class is exactly these 60 authenticated-executable writer OVERLOADS — per-OID, and TRANSITIVE, so a delegating wrapper whose own body holds no DML is a member rather than a blind spot');
+  '#325: the effect-derived class is exactly these 61 authenticated-executable writer OVERLOADS — per-OID, and TRANSITIVE, so a delegating wrapper whose own body holds no DML is a member rather than a blind spot');
 
 -- WEC-4. THE DELEGATION-CHAIN LIVENESS PIN, and the mitigation for the fail-open inversion the
 -- header describes. Everything above depends on `fn_call_closure()` actually resolving edges; a

package/tests/catalog/function_execute_privileges.json

@@ -1,5 +1,5 @@
 {
-  "$comment": "GENERATED by scripts/build-function-privileges-snapshot.mjs from pg_catalog — do not hand-edit. EVERY agent_board function (each overload by signature) with has_function_privilege for the three PostgREST roles, and EVERY agent_board view with has_table_privilege(SELECT). Derived with NO name filter. The MCP tool-group boundary test ranks a tool elevated_admin when it reaches a function or view authenticated cannot use, refuses a name whose overloads disagree, and fails a reachable name with no row here (#425).",
+  "$comment": "GENERATED by scripts/build-function-privileges-snapshot.mjs from pg_catalog — do not hand-edit. EVERY agent_board function (each overload by signature) with has_function_privilege for the three PostgREST roles, and EVERY agent_board view with has_table_privilege(SELECT). Derived with NO name filter. The MCP tool-group boundary test ranks a tool elevated_admin when it reaches a function or view authenticated cannot use, refuses a name whose overloads disagree, and fails a reachable name with no row here (#425). The `delegate` block (HOSTED) is additive: the agent_board_delegate allow set as delegate_allowed_operations states it, and what that role can actually EXECUTE (non-definer functions keep PUBLIC EXECUTE and appear too) and SELECT.",
   "functions": [
     {
       "name": "_active_board_membership_id",
@@ -64,6 +64,15 @@
         "authenticated": false
       }
     },
+    {
+      "name": "_agents_is_delegate_immutable",
+      "signature": "_agents_is_delegate_immutable()",
+      "executable_by": {
+        "anon": false,
+        "service_role": false,
+        "authenticated": false
+      }
+    },
     {
       "name": "_append_task_event",
       "signature": "_append_task_event(p_origin_posture text, p_task_id uuid, p_actor_agent_id uuid, p_event_type text, p_payload jsonb, p_status text, p_assigned_agent_id uuid, p_completed_at timestamp with time zone)",
@@ -325,6 +334,51 @@
         "authenticated": false
       }
     },
+    {
+      "name": "_delegate_instance_slug",
+      "signature": "_delegate_instance_slug(p_issuer text, p_instance_id text)",
+      "executable_by": {
+        "anon": false,
+        "service_role": false,
+        "authenticated": false
+      }
+    },
+    {
+      "name": "_delegate_instances_owner_identity_immutable",
+      "signature": "_delegate_instances_owner_identity_immutable()",
+      "executable_by": {
+        "anon": false,
+        "service_role": false,
+        "authenticated": false
+      }
+    },
+    {
+      "name": "_delegate_principal_agent_id",
+      "signature": "_delegate_principal_agent_id(p_agent_id uuid)",
+      "executable_by": {
+        "anon": false,
+        "service_role": false,
+        "authenticated": false
+      }
+    },
+    {
+      "name": "_delegate_visible_agent",
+      "signature": "_delegate_visible_agent(p_agent_id uuid)",
+      "executable_by": {
+        "anon": false,
+        "service_role": false,
+        "authenticated": false
+      }
+    },
+    {
+      "name": "_delegate_visible_board_ids",
+      "signature": "_delegate_visible_board_ids()",
+      "executable_by": {
+        "anon": false,
+        "service_role": false,
+        "authenticated": false
+      }
+    },
     {
       "name": "_emit_membership_event",
       "signature": "_emit_membership_event(p_board_id uuid, p_agent_id uuid, p_membership_state text, p_event_kind text)",
@@ -658,6 +712,24 @@
         "authenticated": false
       }
     },
+    {
+      "name": "_refuse_delegate_addressee",
+      "signature": "_refuse_delegate_addressee(p_agent_id uuid, p_board_id uuid, p_what text)",
+      "executable_by": {
+        "anon": false,
+        "service_role": false,
+        "authenticated": false
+      }
+    },
+    {
+      "name": "_refuse_delegate_membership_target",
+      "signature": "_refuse_delegate_membership_target(p_agent_id uuid, p_operation text)",
+      "executable_by": {
+        "anon": false,
+        "service_role": false,
+        "authenticated": false
+      }
+    },
     {
       "name": "_require_platform_admin_user_id",
       "signature": "_require_platform_admin_user_id()",
@@ -784,6 +856,15 @@
         "authenticated": true
       }
     },
+    {
+      "name": "add_delegate_to_board",
+      "signature": "add_delegate_to_board(p_agent_id uuid, p_board_id uuid)",
+      "executable_by": {
+        "anon": false,
+        "service_role": false,
+        "authenticated": true
+      }
+    },
     {
       "name": "agent_liveness_summary",
       "signature": "agent_liveness_summary()",
@@ -991,6 +1072,15 @@
         "authenticated": false
       }
     },
+    {
+      "name": "exchange_delegate_credential",
+      "signature": "exchange_delegate_credential(p_claims jsonb)",
+      "executable_by": {
+        "anon": false,
+        "service_role": true,
+        "authenticated": false
+      }
+    },
     {
       "name": "expand_recipients_dry_run",
       "signature": "expand_recipients_dry_run(p_actor_agent_id uuid, p_recipient_descriptors jsonb, p_thread_idempotency_key text)",
@@ -1675,6 +1765,15 @@
         "authenticated": true
       }
     },
+    {
+      "name": "tombstone_delegate_instance",
+      "signature": "tombstone_delegate_instance(p_instance_id text, p_issuer text, p_owner_sub text, p_reason text)",
+      "executable_by": {
+        "anon": false,
+        "service_role": true,
+        "authenticated": false
+      }
+    },
     {
       "name": "unblock_board_inviter",
       "signature": "unblock_board_inviter(p_board_id uuid, p_inviter_agent_id uuid, p_target_agent_id uuid)",
@@ -1955,5 +2054,173 @@
         "authenticated": true
       }
     }
-  ]
+  ],
+  "delegate": {
+    "role": "agent_board_delegate",
+    "allowed_operations": [
+      {
+        "kind": "ambient_rpc",
+        "name": "get_schema_version",
+        "signature": "get_schema_version()"
+      },
+      {
+        "kind": "predicate",
+        "name": "_delegate_visible_agent",
+        "signature": "_delegate_visible_agent(uuid)"
+      },
+      {
+        "kind": "predicate",
+        "name": "_delegate_visible_board_ids",
+        "signature": "_delegate_visible_board_ids()"
+      },
+      {
+        "kind": "predicate",
+        "name": "current_agent_id",
+        "signature": "current_agent_id()"
+      },
+      {
+        "kind": "read_table",
+        "name": "agent_signing_keys",
+        "signature": "agent_signing_keys"
+      },
+      {
+        "kind": "read_table",
+        "name": "agents",
+        "signature": "agents"
+      },
+      {
+        "kind": "read_table",
+        "name": "board_memberships",
+        "signature": "board_memberships"
+      },
+      {
+        "kind": "read_table",
+        "name": "boards",
+        "signature": "boards"
+      },
+      {
+        "kind": "read_table",
+        "name": "claims",
+        "signature": "claims"
+      },
+      {
+        "kind": "read_table",
+        "name": "delivery_recipients",
+        "signature": "delivery_recipients"
+      },
+      {
+        "kind": "read_table",
+        "name": "escalations",
+        "signature": "escalations"
+      },
+      {
+        "kind": "read_table",
+        "name": "inbox_items",
+        "signature": "inbox_items"
+      },
+      {
+        "kind": "read_table",
+        "name": "messages",
+        "signature": "messages"
+      },
+      {
+        "kind": "read_table",
+        "name": "presence",
+        "signature": "presence"
+      },
+      {
+        "kind": "read_table",
+        "name": "signature_evidence",
+        "signature": "signature_evidence"
+      },
+      {
+        "kind": "read_table",
+        "name": "task_events",
+        "signature": "task_events"
+      },
+      {
+        "kind": "read_table",
+        "name": "tasks",
+        "signature": "tasks"
+      },
+      {
+        "kind": "read_view",
+        "name": "v_agent_dashboard",
+        "signature": "v_agent_dashboard"
+      },
+      {
+        "kind": "read_view",
+        "name": "v_agent_inbox",
+        "signature": "v_agent_inbox"
+      },
+      {
+        "kind": "read_view",
+        "name": "v_board_feed",
+        "signature": "v_board_feed"
+      },
+      {
+        "kind": "read_view",
+        "name": "v_board_memberships",
+        "signature": "v_board_memberships"
+      },
+      {
+        "kind": "read_view",
+        "name": "v_thread_feed",
+        "signature": "v_thread_feed"
+      },
+      {
+        "kind": "rpc",
+        "name": "create_or_find_thread",
+        "signature": "create_or_find_thread(uuid, text, text, text, jsonb)"
+      },
+      {
+        "kind": "rpc",
+        "name": "post_board_message",
+        "signature": "post_board_message(uuid, uuid, text, text, text, text, text, text, text, jsonb)"
+      },
+      {
+        "kind": "rpc",
+        "name": "post_board_message",
+        "signature": "post_board_message(uuid, uuid, uuid, text, text, text, text, text, jsonb)"
+      },
+      {
+        "kind": "rpc",
+        "name": "post_message",
+        "signature": "post_message(uuid, uuid, text, text, uuid, jsonb)"
+      }
+    ],
+    "executable_functions": [
+      "_addressing_descriptors_array(p_descriptors jsonb)",
+      "_board_membership_events_provenance_guard()",
+      "_delegate_visible_agent(p_agent_id uuid)",
+      "_delegate_visible_board_ids()",
+      "create_or_find_thread(p_created_by_agent_id uuid, p_subject text, p_idempotency_key text, p_thread_type text, p_metadata jsonb)",
+      "current_agent_id()",
+      "get_schema_version()",
+      "post_board_message(p_thread_id uuid, p_author_agent_id uuid, p_board_id uuid, p_subject text, p_body text, p_message_type text, p_priority text, p_idempotency_key text, p_metadata jsonb)",
+      "post_board_message(p_thread_id uuid, p_author_agent_id uuid, p_board_slug text, p_addressing_mode text, p_subject text, p_body text, p_message_type text, p_priority text, p_idempotency_key text, p_metadata jsonb)",
+      "post_message(p_thread_id uuid, p_author_agent_id uuid, p_body text, p_message_type text, p_task_id uuid, p_metadata jsonb)",
+      "sync_agent_principal_columns()"
+    ],
+    "selectable_relations": [
+      "agent_signing_keys",
+      "agents",
+      "board_memberships",
+      "boards",
+      "claims",
+      "delivery_recipients",
+      "escalations",
+      "inbox_items",
+      "messages",
+      "presence",
+      "signature_evidence",
+      "task_events",
+      "tasks",
+      "v_agent_dashboard",
+      "v_agent_inbox",
+      "v_board_feed",
+      "v_board_memberships",
+      "v_thread_feed"
+    ]
+  }
 }

package/tests/catalog/p_metadata_parameters.json

@@ -29,6 +29,10 @@
       "signature": "_agent_principal_active(p_agent_id uuid)",
       "declares_p_metadata": false
     },
+    {
+      "signature": "_agents_is_delegate_immutable()",
+      "declares_p_metadata": false
+    },
     {
       "signature": "_append_task_event(p_origin_posture text, p_task_id uuid, p_actor_agent_id uuid, p_event_type text, p_payload jsonb, p_status text, p_assigned_agent_id uuid, p_completed_at timestamp with time zone)",
       "declares_p_metadata": false
@@ -145,6 +149,26 @@
       "signature": "_default_provision_display_name(p_slug text)",
       "declares_p_metadata": false
     },
+    {
+      "signature": "_delegate_instance_slug(p_issuer text, p_instance_id text)",
+      "declares_p_metadata": false
+    },
+    {
+      "signature": "_delegate_instances_owner_identity_immutable()",
+      "declares_p_metadata": false
+    },
+    {
+      "signature": "_delegate_principal_agent_id(p_agent_id uuid)",
+      "declares_p_metadata": false
+    },
+    {
+      "signature": "_delegate_visible_agent(p_agent_id uuid)",
+      "declares_p_metadata": false
+    },
+    {
+      "signature": "_delegate_visible_board_ids()",
+      "declares_p_metadata": false
+    },
     {
       "signature": "_emit_membership_event(p_board_id uuid, p_agent_id uuid, p_membership_state text, p_event_kind text)",
       "declares_p_metadata": false
@@ -293,6 +317,14 @@
       "signature": "_redeem_unbounded_invite_for_agent(p_code text, p_agent_id uuid)",
       "declares_p_metadata": false
     },
+    {
+      "signature": "_refuse_delegate_addressee(p_agent_id uuid, p_board_id uuid, p_what text)",
+      "declares_p_metadata": false
+    },
+    {
+      "signature": "_refuse_delegate_membership_target(p_agent_id uuid, p_operation text)",
+      "declares_p_metadata": false
+    },
     {
       "signature": "_require_platform_admin_user_id()",
       "declares_p_metadata": false
@@ -349,6 +381,10 @@
       "signature": "add_artifact(p_created_by_agent_id uuid, p_uri text, p_artifact_type text, p_storage_kind text, p_thread_id uuid, p_task_id uuid, p_message_id uuid, p_task_event_id uuid, p_metadata jsonb)",
       "declares_p_metadata": true
     },
+    {
+      "signature": "add_delegate_to_board(p_agent_id uuid, p_board_id uuid)",
+      "declares_p_metadata": false
+    },
     {
       "signature": "agent_liveness_summary()",
       "declares_p_metadata": false
@@ -441,6 +477,10 @@
       "signature": "evaluate_signed_write_fleet_policy(p_operation text, p_payload jsonb, p_gateway_decision jsonb)",
       "declares_p_metadata": false
     },
+    {
+      "signature": "exchange_delegate_credential(p_claims jsonb)",
+      "declares_p_metadata": false
+    },
     {
       "signature": "expand_recipients_dry_run(p_actor_agent_id uuid, p_recipient_descriptors jsonb, p_thread_idempotency_key text)",
       "declares_p_metadata": false
@@ -745,6 +785,10 @@
       "signature": "sync_agent_principal_columns()",
       "declares_p_metadata": false
     },
+    {
+      "signature": "tombstone_delegate_instance(p_instance_id text, p_issuer text, p_owner_sub text, p_reason text)",
+      "declares_p_metadata": false
+    },
     {
       "signature": "unblock_board_inviter(p_board_id uuid, p_inviter_agent_id uuid, p_target_agent_id uuid)",
       "declares_p_metadata": false

package/tests/isolation/expected/hosted_delegate_add_tombstone_race.out

@@ -0,0 +1,105 @@
+Parsed test spec with 3 sessions
+
+starting permutation: o_begin o_add t_begin t_tomb o_commit t_commit check
+step o_begin: 
+  BEGIN;
+  select set_config('request.jwt.claims', json_build_object('role', 'authenticated', 'sub',
+    (select auth_user_id from agent_board.agents
+      where handle = agent_board._federated_identity_slug('https://iso-at.test', 'iso-at-owner')))::text, true) is not null as owner_session;
+
+owner_session
+-------------
+t            
+(1 row)
+
+step o_add: 
+  select membership_state from agent_board.add_delegate_to_board(
+    (select agent_id from agent_board.delegate_instances where instance_id = 'iso_at_instance_00001'),
+    '16591300-0000-4000-8000-000000000001');
+
+membership_state
+----------------
+joined          
+(1 row)
+
+step t_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step t_tomb: 
+  select first from agent_board.tombstone_delegate_instance(
+    'iso_at_instance_00001', 'https://iso-at.test', 'iso-at-owner', 'owner_revoked');
+ <waiting ...>
+step o_commit: COMMIT;
+step t_tomb: <... completed>
+first
+-----
+t    
+(1 row)
+
+step t_commit: COMMIT;
+step check: 
+  select (select (di.tombstoned_at is not null)::text from agent_board.delegate_instances di
+           where di.instance_id = 'iso_at_instance_00001') as tombstoned,
+         (select a.status from agent_board.agents a
+            join agent_board.delegate_instances di on di.agent_id = a.id
+           where di.instance_id = 'iso_at_instance_00001') as delegate_status,
+         (select string_agg(bm.membership_state, ',' order by bm.created_at, bm.id) from agent_board.board_memberships bm
+            join agent_board.delegate_instances di on di.agent_id = bm.agent_id
+           where di.instance_id = 'iso_at_instance_00001') as delegate_memberships,
+         (select count(*) from agent_board.board_memberships bm
+            join agent_board.delegate_instances di on di.agent_id = bm.agent_id
+           where di.tombstoned_at is not null and bm.membership_state in ('joined', 'subscribed')) as tombstoned_and_active;
+
+tombstoned|delegate_status|delegate_memberships|tombstoned_and_active
+----------+---------------+--------------------+---------------------
+true      |revoked        |left                |                    0
+(1 row)
+
+
+starting permutation: t_begin t_tomb o_begin o_add t_commit o_commit check
+step t_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step t_tomb: 
+  select first from agent_board.tombstone_delegate_instance(
+    'iso_at_instance_00001', 'https://iso-at.test', 'iso-at-owner', 'owner_revoked');
+
+first
+-----
+t    
+(1 row)
+
+step o_begin: 
+  BEGIN;
+  select set_config('request.jwt.claims', json_build_object('role', 'authenticated', 'sub',
+    (select auth_user_id from agent_board.agents
+      where handle = agent_board._federated_identity_slug('https://iso-at.test', 'iso-at-owner')))::text, true) is not null as owner_session;
+
+owner_session
+-------------
+t            
+(1 row)
+
+step o_add: 
+  select membership_state from agent_board.add_delegate_to_board(
+    (select agent_id from agent_board.delegate_instances where instance_id = 'iso_at_instance_00001'),
+    '16591300-0000-4000-8000-000000000001');
+ <waiting ...>
+step t_commit: COMMIT;
+step o_add: <... completed>
+ERROR:  the hosted delegate instance is not live
+step o_commit: COMMIT;
+step check: 
+  select (select (di.tombstoned_at is not null)::text from agent_board.delegate_instances di
+           where di.instance_id = 'iso_at_instance_00001') as tombstoned,
+         (select a.status from agent_board.agents a
+            join agent_board.delegate_instances di on di.agent_id = a.id
+           where di.instance_id = 'iso_at_instance_00001') as delegate_status,
+         (select string_agg(bm.membership_state, ',' order by bm.created_at, bm.id) from agent_board.board_memberships bm
+            join agent_board.delegate_instances di on di.agent_id = bm.agent_id
+           where di.instance_id = 'iso_at_instance_00001') as delegate_memberships,
+         (select count(*) from agent_board.board_memberships bm
+            join agent_board.delegate_instances di on di.agent_id = bm.agent_id
+           where di.tombstoned_at is not null and bm.membership_state in ('joined', 'subscribed')) as tombstoned_and_active;
+
+tombstoned|delegate_status|delegate_memberships|tombstoned_and_active
+----------+---------------+--------------------+---------------------
+true      |revoked        |                    |                    0
+(1 row)
+