@consiliency/agent-board-schema 1.58.0 → 1.60.0

package/src/tooling.test.mjs

@@ -38,9 +38,9 @@ describe('manifest integrity', () => {
     expect(manifest.schemaVersion).toBe(8);
     expect(manifest.minClientVersion).toMatch(/^\d+\.\d+\.\d+$/);
   });
-  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 + two ROOMOWN + two ROOMLINK + one ROOMDELEG + one LOCALAUTH + one ROOMUIAPI + one FEDSESSION + one FEDSESSION-AUTOJOIN + one GATENULL + one MEMBSTATE + one AGENTSDIR + one LEAVEIDEM + one ROLERESET + one MBROWID + one MBHYGIENE + one MBCONSENT-A + one MBCONSENT-B(a) + one MBCONSENT-B(i) + one MBCONSENT-B(ii) + one MBCONSENT-B(iii) + one MBHARDEN-#97 + one MBHARDEN-#118 + one INVITEPOLICY + one OBSGATE + one OBSGATE-2 + one OBSGATE-3 + one OBSGATE-4 + one FLEETMACHINERLS + one RESOLVENOOP + one ROOMDELEG-LANEB + one CLAIMKEY + two MINTHARDEN + one FLEETMACHINEHIJACK + one CLAIMGATE-SHADOW + one CLAIMGATE-ENFORCE + one FLEETMACHINEREACTIVATION + one DELEGCAPCEILING + one FLEETMACHINERECLAIM + one DELEGSOLEWRITER + one FLEETDOMAINRECLAIM + five ATOMICFLEETONBOARDING (onboarding + ceiling-lock + revocation-evidence + fedsession-gate + fedsession-lock-order) + one OUTBOXWAKE + one ENROLLLOCKORDER + one FEDPROVIDERABSENCE + one WAKERECOVERY + one CONSENTRECONCILE + one ENROLLRESUMPTION + one SIGNEDAUTHORITY + one SIGNERLIFECYCLE + one LEDGERAUTHORITY + one CEILINGLOCKCOMMENT + one LEDGERBOARDCREATE + one RECEIPTSUBJECTGATE + one TASKTHREADLOCKORDER + one CLAIMSUBJECTGATE + one FEDSESSIONIDENTITYGATE + one FEDIDENTITYSLUG + one INVITENODOWNGRADE + one SIGNEDWRITEFLAG + one SIGNEDWRITEMODEL + one RTCREDCLAIM + one ORIGINPOSTURE + one BOARDCLAIMPOLICY + one HEARTBEATPRESERVE + one LIVENESSDENOM + one OWNERLESSRENEWTTL + one OWNERLESSQUOTACENSUS + one FLEETDOMAINNODOWNGRADE + one OWNERLESSQUOTACONVERGE + one ADVISORYREVERTRESET + one CLAIMPOLICYRACE + one CLAIMPOLICYLOCKGRANT + one SESSIONCHALLENGESUPERSEDE + one ROOMCONTRACT + one CALLBACKCONSUMER + one ENROLLTOKENSINGLEUSE + one ROOMCONTRACT-ACTIVEFIRST + one ONBOARD + one HOSTED forward migrations (migrationCount = prior 113 + 5 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 = 156)', () => {
+  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 + two ROOMOWN + two ROOMLINK + one ROOMDELEG + one LOCALAUTH + one ROOMUIAPI + one FEDSESSION + one FEDSESSION-AUTOJOIN + one GATENULL + one MEMBSTATE + one AGENTSDIR + one LEAVEIDEM + one ROLERESET + one MBROWID + one MBHYGIENE + one MBCONSENT-A + one MBCONSENT-B(a) + one MBCONSENT-B(i) + one MBCONSENT-B(ii) + one MBCONSENT-B(iii) + one MBHARDEN-#97 + one MBHARDEN-#118 + one INVITEPOLICY + one OBSGATE + one OBSGATE-2 + one OBSGATE-3 + one OBSGATE-4 + one FLEETMACHINERLS + one RESOLVENOOP + one ROOMDELEG-LANEB + one CLAIMKEY + two MINTHARDEN + one FLEETMACHINEHIJACK + one CLAIMGATE-SHADOW + one CLAIMGATE-ENFORCE + one FLEETMACHINEREACTIVATION + one DELEGCAPCEILING + one FLEETMACHINERECLAIM + one DELEGSOLEWRITER + one FLEETDOMAINRECLAIM + five ATOMICFLEETONBOARDING (onboarding + ceiling-lock + revocation-evidence + fedsession-gate + fedsession-lock-order) + one OUTBOXWAKE + one ENROLLLOCKORDER + one FEDPROVIDERABSENCE + one WAKERECOVERY + one CONSENTRECONCILE + one ENROLLRESUMPTION + one SIGNEDAUTHORITY + one SIGNERLIFECYCLE + one LEDGERAUTHORITY + one CEILINGLOCKCOMMENT + one LEDGERBOARDCREATE + one RECEIPTSUBJECTGATE + one TASKTHREADLOCKORDER + one CLAIMSUBJECTGATE + one FEDSESSIONIDENTITYGATE + one FEDIDENTITYSLUG + one INVITENODOWNGRADE + one SIGNEDWRITEFLAG + one SIGNEDWRITEMODEL + one RTCREDCLAIM + one ORIGINPOSTURE + one BOARDCLAIMPOLICY + one HEARTBEATPRESERVE + one LIVENESSDENOM + one OWNERLESSRENEWTTL + one OWNERLESSQUOTACENSUS + one FLEETDOMAINNODOWNGRADE + one OWNERLESSQUOTACONVERGE + one ADVISORYREVERTRESET + one CLAIMPOLICYRACE + one CLAIMPOLICYLOCKGRANT + one SESSIONCHALLENGESUPERSEDE + one ROOMCONTRACT + one CALLBACKCONSUMER + one ENROLLTOKENSINGLEUSE + one ROOMCONTRACT-ACTIVEFIRST + one ONBOARD + one HOSTED + one HOSTED-FOLLOWUPS + one OWNPOST forward migrations (migrationCount = prior 113 + 5 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 = 158)', () => {
     expect(manifest.migrationCount).toBe(manifest.migrations.length);
-    expect(manifest.migrationCount).toBe(156);
+    expect(manifest.migrationCount).toBe(158);
     // MBSESSION switched enforcement on (scoped-send re-grant): the client-visible
     // schema version bumped to 8. MBDELEG tightens delegation and MBFED adds only
     // enrollment-only additive surface (identity_providers registry, enrollment audit,
@@ -349,6 +349,13 @@ describe('manifest integrity', () => {
       // HOSTED (v11): the agent_board_delegate role, delegate instances, the exchange and
       // tombstone RPCs, add_delegate_to_board, the D14 read predicates and the D16 refusals.
       '20261008000100_agent_board_hosted_delegates.sql',
+      // HOSTED follow-ups (#591): the owner's verified (iss, sub) on each delegate instance and the
+      // revocation marker revoke_human_subtree derives from it; the tombstone's and the exchange's
+      // lock order against the subtree revokers (AB15).
+      '20261009000100_agent_board_hosted_followups.sql',
+      // OWNPOST (#608): an agent's own board post is a feed-only row for it, not an inbox item;
+      // a board-wide task fan-out skips its creator; own_inbox callbacks skip feed-only rows.
+      '20261010000100_agent_board_own_post_not_delivered.sql',
     ]) {
       expect(names.has(f)).toBe(true);
     }

package/tests/agent_board_addressing.test.sql

@@ -29,7 +29,9 @@ begin
   values
     (v_actor, 'agent', 'agent', 'addressing-actor-' || v_suffix, 'ADDRESSING Actor', 'active', '{"role":"phase_worker","groupAliases":["ops"]}'::jsonb),
     (v_worker, 'agent', 'agent', 'addressing-worker-' || v_suffix, 'ADDRESSING Worker', 'active', '{"role":"phase_worker","groupAliases":["ops"]}'::jsonb),
-    (v_reviewer, 'agent', 'agent', 'addressing-reviewer-' || v_suffix, 'ADDRESSING Reviewer', 'active', '{"roles":["reviewer"],"groupAliases":["review"]}'::jsonb),
+    -- `role: phase_worker` on the reviewer too: since #608 a set descriptor never reaches its own
+    -- sender, so the direct-send ambiguity case below needs TWO matching agents besides the actor.
+    (v_reviewer, 'agent', 'agent', 'addressing-reviewer-' || v_suffix, 'ADDRESSING Reviewer', 'active', '{"role":"phase_worker","roles":["reviewer"],"groupAliases":["review"]}'::jsonb),
     (v_human, 'human', 'human', 'addressing-human-' || v_suffix, 'ADDRESSING Human', 'active', '{}'::jsonb);
 
   insert into agent_board.threads(id, thread_type, created_by_agent_id, subject)

package/tests/agent_board_hosted_delegates.test.sql

@@ -21,7 +21,7 @@ set search_path = extensions, public, agent_board;
 
 begin;
 
-select plan(129);
+select plan(143);
 
 -- The test role switches to agent_board_delegate. On PostgreSQL 16+ the role's creator holds
 -- ADMIN OPTION but not SET, so grant SET to the current role for this transaction only (rolled
@@ -1105,9 +1105,11 @@ select is(
   'N2: a suspended owner cannot bring up a new delegate instance, and nothing is written');
 
 -- Owner E: never enrolled as a human on this board (no human row), then durably revoked. The
--- marker is SEEDED: revoke_human_subtree writes it only from a federated enrollment's audit row
--- of an agent the human owns (a keyed agent via enroll_federated_identity), which this file does
--- not build. The row is the shape revoke_human_subtree writes, keyed by the verified (iss, sub).
+-- marker is SEEDED here, by hand, so that E's delegate row stays active and 128 isolates the
+-- marker arm alone (revoke_human_subtree would also revoke the delegate). The row is the shape
+-- revoke_human_subtree writes, keyed by the verified (iss, sub). The real revocation of a
+-- delegate-only owner, which now writes the marker from the instance's recorded (iss, sub)
+-- (#591 item 4, AB15), is section 24.
 -- 127 -- control: an owner with no human row is allowed, as before
 select is(
   pg_temp.exch(pg_temp.claim('inst_eeeeeeeeeeeeeeee_01', 'grant_eeeeeeeeeeeeee_01_1', 1, 'hosted-owner-e', 'client-e'), 'E1'),
@@ -1130,5 +1132,147 @@ select is(
   '42501:owner_inactive 0 0 0',
   'N2: the revocation marker alone refuses a new instance, and nothing is written');
 
+-- ===========================================================================
+-- 24. #591 item 4 -- the owner's (iss, sub) on each instance, and the marker it gives
+--     revoke_human_subtree (AB15); #591 item 9 -- owner_inactive before instance_revoked
+-- ===========================================================================
+-- An owner whose only principals are hosted delegates has no enrollment audit row, so before
+-- 1.59.0 revoke_human_subtree wrote it no marker, and a fresh first exchange passed. Both RPCs now
+-- record the verified pair, and the revocation derives a marker from it.
+-- plpgsql, not sql: each read runs as its own query, so it sees what an action earlier in the
+-- same statement wrote (the reason pg_temp.q exists).
+create function pg_temp.pair(p_iid text) returns text language plpgsql as $$
+begin
+  return coalesce((select coalesce(owner_issuer, '(null)') || ' ' || coalesce(owner_subject, '(null)')
+                     from agent_board.delegate_instances where instance_id = p_iid), '(no row)');
+end $$;
+create function pg_temp.owner_of(p_iid text) returns uuid language plpgsql as $$
+begin
+  return (select owner_user_id from agent_board.delegate_instances where instance_id = p_iid);
+end $$;
+create function pg_temp.markers(p_sub text) returns text language plpgsql as $$
+begin
+  return (select count(*)::text || coalesce(' ' || string_agg(r.owner_user_id::text, ','), '')
+            from agent_board.fleet_human_revocations r
+           where r.issuer = 'https://portal.hosted.test' and r.subject = p_sub);
+end $$;
+-- 130 -- the exchange records the pair (D1 was exchanged in 123)
+select is(pg_temp.pair('inst_dddddddddddddddd_01'), 'https://portal.hosted.test hosted-owner-d',
+  'AB15: the exchange records the owner''s verified (iss, sub) on the instance');
+-- 131 -- a revocation before the first exchange records it too (owner H has nothing else)
+select is(
+  pg_temp.tomb('inst_hhhhhhhhhhhhhhhh_01', 'hosted-owner-h') || ' ' || pg_temp.pair('inst_hhhhhhhhhhhhhhhh_01'),
+  'first=true https://portal.hosted.test hosted-owner-h',
+  'AB15: a pre-exchange tombstone records the owner''s verified (iss, sub) on the row it creates');
+-- 132 -- once recorded, the pair never changes
+select is(
+  pg_temp.try($q$update agent_board.delegate_instances set owner_subject = 'someone-else' where instance_id = 'inst_dddddddddddddddd_01'$q$)
+  || ' ' || pg_temp.pair('inst_dddddddddddddddd_01'),
+  '23514:delegate_instances owner identity never changes once recorded https://portal.hosted.test hosted-owner-d',
+  'AB15: the recorded owner pair is immutable');
+
+-- Owner G: never enrolled, live; the control owner, and the legacy-row fills.
+select pg_temp.svc();
+-- 133 -- a LEGACY row (pre-1.59.0 shape: no pair) is filled by its first exchange
+select is(
+  pg_temp.exch(pg_temp.claim('inst_gggggggggggggggg_01', 'grant_gggggggggggggg_01_1', 1, 'hosted-owner-g', 'client-g'), 'G1')
+  || ' ' || pg_temp.try(format($q$insert into agent_board.delegate_instances(instance_id, owner_user_id) values ('inst_gggggggggggggggg_l1', %L), ('inst_gggggggggggggggg_l2', %L)$q$,
+                              pg_temp.owner_of('inst_gggggggggggggggg_01'), pg_temp.owner_of('inst_gggggggggggggggg_01')))
+  || ' ' || pg_temp.pair('inst_gggggggggggggggg_l1')
+  || ' ' || pg_temp.exch(pg_temp.claim('inst_gggggggggggggggg_l1', 'grant_gggggggggggggg_l1_1', 1, 'hosted-owner-g', 'client-g'), 'GL1')
+  || ' ' || pg_temp.pair('inst_gggggggggggggggg_l1'),
+  'ok ok (null) (null) ok https://portal.hosted.test hosted-owner-g',
+  'AB15: a legacy instance with no recorded pair is filled by its next exchange');
+-- 134 -- ...and by a tombstone
+select is(
+  pg_temp.tomb('inst_gggggggggggggggg_l2', 'hosted-owner-g') || ' ' || pg_temp.pair('inst_gggggggggggggggg_l2'),
+  'first=true https://portal.hosted.test hosted-owner-g',
+  'AB15: a legacy instance with no recorded pair is filled by its tombstone');
+
+-- Owner F: never enrolled as a human; its ONLY principal is a hosted delegate.
+-- 135 -- revoke_human_subtree for real, as service_role
+select is(
+  pg_temp.exch(pg_temp.claim('inst_ffffffffffffffff_01', 'grant_ffffffffffffff_01_1', 1, 'hosted-owner-f', 'client-f'), 'F1')
+  || ' ' || pg_temp.try(format($q$select agent_board.revoke_human_subtree(%L, %L, 'hosted 591 test')$q$,
+                               pg_temp.owner_of('inst_ffffffffffffffff_01'), pg_temp.v('K')))
+  || ' ' || pg_temp.q(format($q$select status from agent_board.agents where id = %L$q$, pg_temp.v('F1.agent'))),
+  'ok ok revoked',
+  '#591 item 4: an owner with only a hosted delegate is revoked, and its delegate with it');
+-- 136 -- the marker exists, keyed by the verified pair, naming the owner
+select is(pg_temp.markers('hosted-owner-f'), '1 ' || pg_temp.owner_of('inst_ffffffffffffffff_01')::text,
+  '#591 item 4: revoking a delegate-only owner writes the durable (iss, sub) marker from the instance''s recorded pair');
+-- 137 -- so a fresh first exchange is refused, and writes nothing
+select is(
+  pg_temp.exch(pg_temp.claim('inst_ffffffffffffffff_02', 'grant_ffffffffffffff_02_1', 1, 'hosted-owner-f', 'client-f'), 'x')
+  || ' ' || pg_temp.n2_rows('inst_ffffffffffffffff_02'),
+  '42501:owner_inactive 0 0 0',
+  '#591 item 4: after the revocation a new first exchange for that owner is refused owner_inactive, and nothing is written');
+-- 138 -- control: another live owner, never enrolled, still brings up a new instance
+select is(
+  pg_temp.exch(pg_temp.claim('inst_gggggggggggggggg_02', 'grant_gggggggggggggg_02_1', 1, 'hosted-owner-g', 'client-g'), 'G2')
+  || ' ' || pg_temp.markers('hosted-owner-g'),
+  'ok 0',
+  '#591 item 4 control: a different, unrevoked owner''s first exchange succeeds and has no marker');
+-- 139 -- #591 item 9: a revoked owner AND a tombstoned instance -> owner_inactive, not instance_revoked
+select is(
+  pg_temp.tomb('inst_ffffffffffffffff_01', 'hosted-owner-f')
+  || ' ' || pg_temp.exch(pg_temp.claim('inst_ffffffffffffffff_01', 'grant_ffffffffffffff_01_2', 2, 'hosted-owner-f', 'client-f'), 'x'),
+  'first=true 42501:owner_inactive',
+  'AB14 precedence: the owner check runs before the instance''s own refusals -- a tombstoned instance of a revoked owner is refused owner_inactive, not instance_revoked');
+-- 140 -- owner H, whose only row is a pre-exchange tombstone (131): its revocation marks it too
+select is(
+  pg_temp.try(format($q$select agent_board.revoke_human_subtree(%L, %L, 'hosted 591 test')$q$,
+                     pg_temp.owner_of('inst_hhhhhhhhhhhhhhhh_01'), pg_temp.v('K')))
+  || ' ' || pg_temp.markers('hosted-owner-h')
+  || ' ' || pg_temp.exch(pg_temp.claim('inst_hhhhhhhhhhhhhhhh_02', 'grant_hhhhhhhhhhhhhh_02_1', 1, 'hosted-owner-h', 'client-h'), 'x')
+  || ' ' || pg_temp.n2_rows('inst_hhhhhhhhhhhhhhhh_02'),
+  'ok 1 ' || pg_temp.owner_of('inst_hhhhhhhhhhhhhhhh_01')::text || ' 42501:owner_inactive 0 0 0',
+  '#591 item 4: an owner whose only row is a pre-exchange tombstone is marked by its revocation, and a new instance is refused');
+-- 141 -- the class: every function that WRITES delegate_instances (any INSERT, UPDATE, MERGE or
+-- DELETE, from the catalog, through the shared matcher family) is one of the two RPCs that record
+-- the pair, and every row this file created carries one except the two hand-inserted legacy rows,
+-- which their exchange and tombstone filled (133, 134). A new writer fails this and names itself.
+-- Every non-system schema, not only agent_board: a writer in public or extensions bypasses the pair
+-- just as well (mutation-checked with one in public). agent_board_test is excluded because it holds
+-- this suite's matcher functions, which carry relation names as data and write nothing.
+select is(
+  (select string_agg(p.proname, ',' order by p.proname)
+     from pg_proc p join pg_namespace n on n.oid = p.pronamespace
+    where n.nspname not in ('pg_catalog', 'information_schema', 'agent_board_test')
+      and n.nspname !~ '^pg_'
+      and p.prokind in ('f', 'p')
+      and agent_board_test.stripped_body(p.oid) ~ agent_board_test.write_re('delegate_instances'))
+  || ' ' || (select count(*) from agent_board.delegate_instances where owner_issuer is null)::text,
+  'exchange_delegate_credential,tombstone_delegate_instance 0',
+  'AB15: exactly the exchange and the tombstone write delegate_instances (catalog-derived), and no row is left without the owner pair');
+
+-- 142 -- the pair is both-or-neither and never empty (delegate_instances_owner_identity_shape)
+select is(
+  pg_temp.try(format($q$insert into agent_board.delegate_instances(instance_id, owner_user_id, owner_issuer) values ('inst_gggggggggggggggg_s1', %L, 'https://portal.hosted.test')$q$, pg_temp.owner_of('inst_gggggggggggggggg_01')))
+  || ' ' || pg_temp.try(format($q$insert into agent_board.delegate_instances(instance_id, owner_user_id, owner_issuer, owner_subject) values ('inst_gggggggggggggggg_s2', %L, 'https://portal.hosted.test', '')$q$, pg_temp.owner_of('inst_gggggggggggggggg_01'))),
+  '23514:new row for relation "delegate_instances" violates check constraint "delegate_instances_owner_identity_shape" 23514:new row for relation "delegate_instances" violates check constraint "delegate_instances_owner_identity_shape"',
+  'AB15: an owner pair is recorded whole or not at all, and never empty');
+
+-- 143 -- a LEGACY TOMBSTONED row (pre-1.59.0: tombstoned, no pair) is filled by a repeated
+-- revocation. Nothing else ever writes such a row again: the exchange refuses it
+-- (instance_revoked) before its UPDATE, and a tombstone used to return early. Owner J has only this
+-- row (never enrolled, never exchanged), so the pair is the only evidence revoke_human_subtree can
+-- mark it from. Then a new first exchange of J is refused owner_inactive and writes nothing.
+select pg_temp.put('J.owner', agent_board._ensure_agent_auth_user(
+  agent_board._federated_identity_slug('https://portal.hosted.test', 'hosted-owner-j'))::text);
+select is(
+  pg_temp.try(format($q$insert into agent_board.delegate_instances(instance_id, owner_user_id, tombstoned_at, tombstone_reason) values ('inst_jjjjjjjjjjjjjjjj_l1', %L, now(), 'owner_revoked')$q$, pg_temp.v('J.owner')))
+  || ' ' || pg_temp.pair('inst_jjjjjjjjjjjjjjjj_l1')
+  || ' ' || pg_temp.tomb('inst_jjjjjjjjjjjjjjjj_l1', 'hosted-owner-j')
+  || ' ' || pg_temp.pair('inst_jjjjjjjjjjjjjjjj_l1')
+  || ' ' || pg_temp.try(format($q$select agent_board.revoke_human_subtree(%L, %L, 'hosted 591 test')$q$,
+                               pg_temp.v('J.owner'), pg_temp.v('K')))
+  || ' ' || pg_temp.markers('hosted-owner-j')
+  || ' ' || pg_temp.exch(pg_temp.claim('inst_jjjjjjjjjjjjjjjj_02', 'grant_jjjjjjjjjjjjjj_02_1', 1, 'hosted-owner-j', 'client-j'), 'x')
+  || ' ' || pg_temp.n2_rows('inst_jjjjjjjjjjjjjjjj_02'),
+  'ok (null) (null) first=false https://portal.hosted.test hosted-owner-j ok 1 ' || pg_temp.v('J.owner')
+  || ' 42501:owner_inactive 0 0 0',
+  'AB15: a legacy tombstoned row is filled by a repeated revocation, so revoking its delegate-only owner marks it and a new instance is refused');
+
 select * from finish();
 rollback;

package/tests/agent_board_inbox_rpcs.test.sql

@@ -378,7 +378,9 @@ begin
       '{}'::jsonb
     );
   v_board_message := v_result.message_id;
-  insert into _tap(line) select is(v_result.delivered_recipient_count, 3, 'board delivery reaches joined and subscribed members only (incl. the seeded owner-creator)');
+  -- #608: the sender is the board's seeded owner-creator, and the author of a post is not one of
+  -- its recipients (its row is feed-only), so two of the three active members are counted.
+  insert into _tap(line) select is(v_result.delivered_recipient_count, 2, 'board delivery reaches joined and subscribed members only, not the author (#608)');
   insert into _tap(line) select is(
     (select count(*)::integer from agent_board.delivery_recipients where source_message_id = v_board_message and recipient_agent_id = v_left_member),
     0,
@@ -409,7 +411,8 @@ begin
       '{}'::jsonb
     );
   v_task := v_result.task_id;
-  insert into _tap(line) select is(v_result.delivered_recipient_count, 4, 'tasking counts explicit and board fan-out attempts (incl. the seeded owner-creator)');
+  -- #608: the creator (the seeded owner-creator) keeps a feed-only row that is not counted: 1 explicit + 2 board.
+  insert into _tap(line) select is(v_result.delivered_recipient_count, 3, 'tasking counts explicit and board fan-out attempts, not the creator (#608)');
   insert into _tap(line) select is(
     (select count(*)::integer from agent_board.delivery_recipients where source_task_id = v_task),
     3,