@consiliency/agent-board-schema 1.60.0 → 1.64.0

package/tests/isolation/specs/session_identity_reclaim.spec

@@ -0,0 +1,125 @@
+# Two verified key holders reclaim one lapsed Claude identity. Distinct keys
+# avoid challenge/key serialization masking the identity-row race. Both commit
+# orders must produce one epoch bump, one token, one rotated holder and the named
+# duplicate_live_session refusal; the old epoch cannot resolve afterward.
+setup
+{
+  grant usage on schema extensions to service_role;
+  insert into auth.users(id, instance_id, aud, role, email)
+  values ('74000000-0000-4000-8000-000000000001', '00000000-0000-0000-0000-000000000000', 'authenticated', 'authenticated', 'sid-reclaim@test.invalid');
+  insert into agent_board.agents(id, agent_type, handle, display_name, status, auth_user_id, parent_agent_id, root_agent_id)
+  values ('75000000-0000-4000-8000-000000000001', 'agent', 'sid-reclaim-root', 'Reclaim root', 'active', null, null, null),
+    ('75000000-0000-4000-8000-000000000002', 'agent', 'sid-reclaim-child', 'Reclaim child', 'active', '74000000-0000-4000-8000-000000000001',
+      '75000000-0000-4000-8000-000000000001', '75000000-0000-4000-8000-000000000001');
+  insert into agent_board.agent_signing_keys(id, agent_id, key_id, key_version, public_key, public_key_format, fingerprint, status, proof_state)
+  values ('76000000-0000-4000-8000-000000000001', '75000000-0000-4000-8000-000000000002', 'holder-a', 1,
+    public.test_pubkey('sid-reclaim-a'), 'raw_ed25519_base64url', public.test_key_fingerprint('sid-reclaim-a'), 'active', 'proven'),
+    ('76000000-0000-4000-8000-000000000002', '75000000-0000-4000-8000-000000000002', 'holder-b', 2,
+    public.test_pubkey('sid-reclaim-b'), 'raw_ed25519_base64url', public.test_key_fingerprint('sid-reclaim-b'), 'active', 'proven');
+  insert into agent_board.session_identities(agent_id, parent_agent_id, root_agent_id, depth, identity_kind, harness,
+    approved_risky_digest, current_risky_digest, holder_secret_hash, last_heartbeat)
+  values ('75000000-0000-4000-8000-000000000001', null, '75000000-0000-4000-8000-000000000001', 0, 'legacy', null, 'approved', 'approved', null, null),
+    ('75000000-0000-4000-8000-000000000002', '75000000-0000-4000-8000-000000000001', '75000000-0000-4000-8000-000000000001', 1, 'session', 'claude',
+      'approved', 'approved', extensions.digest('old-holder', 'sha256'), now() - interval '181 seconds');
+  insert into agent_board.session_id_aliases(id, identity_agent_id, root_agent_id, harness, session_id)
+  values ('77000000-0000-4000-8000-000000000001', '75000000-0000-4000-8000-000000000002', '75000000-0000-4000-8000-000000000001', 'claude', 'original');
+  update agent_board.session_identities set lease_alias_id = '77000000-0000-4000-8000-000000000001'
+  where agent_id = '75000000-0000-4000-8000-000000000002';
+}
+
+teardown
+{
+  update agent_board.session_identities set lease_alias_id = null where root_agent_id = '75000000-0000-4000-8000-000000000001';
+  delete from agent_board.session_id_aliases where root_agent_id = '75000000-0000-4000-8000-000000000001';
+  delete from agent_board.session_identities where root_agent_id = '75000000-0000-4000-8000-000000000001';
+  delete from agent_board.nonfleet_sessions where agent_id in
+    (select id from agent_board.agents where root_agent_id = '75000000-0000-4000-8000-000000000001');
+  delete from agent_board.agents where root_agent_id = '75000000-0000-4000-8000-000000000001';
+  delete from agent_board.agents where id = '75000000-0000-4000-8000-000000000001';
+  delete from auth.users where id = '74000000-0000-4000-8000-000000000001';
+}
+
+session "a"
+step "a_begin" { BEGIN; SET LOCAL ROLE service_role; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "a_reclaim" {
+  do $$ declare c record; begin
+    select * into c from agent_board.issue_signing_key_challenge('75000000-0000-4000-8000-000000000002', 'holder-a');
+    perform * from agent_board.mint_fleet_agent_session(c.challenge_id, split_part(c.challenge, ':', 3),
+      '76000000-0000-4000-8000-000000000001', '75000000-0000-4000-8000-000000000002', 900, null, 'resumed');
+  end; $$;
+}
+step "a_first_claim" {
+  do $$ declare a uuid; k uuid; c record; begin
+    select id into a from agent_board.agents where handle = 'sid-stale-old';
+    select id into k from agent_board.agent_signing_keys where agent_id = a;
+    select id, challenge_nonce into c from agent_board.agent_signing_key_challenges where agent_id = a order by created_at desc limit 1;
+    perform * from agent_board.mint_fleet_agent_session(c.id, c.challenge_nonce, k, a, 900, null, 'stale-reservation');
+  end $$;
+}
+step "a_commit" { COMMIT; }
+
+session "b"
+step "b_begin" { BEGIN; SET LOCAL ROLE service_role; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "b_reclaim" {
+  do $$ declare c record; begin
+    select * into c from agent_board.issue_signing_key_challenge('75000000-0000-4000-8000-000000000002', 'holder-b');
+    perform * from agent_board.mint_fleet_agent_session(c.challenge_id, split_part(c.challenge, ':', 3),
+      '76000000-0000-4000-8000-000000000002', '75000000-0000-4000-8000-000000000002', 900, null, 'resumed');
+  end; $$;
+}
+step "b_supersede" {
+  do $$ begin
+    perform * from agent_board.mint_delegated_child('75000000-0000-4000-8000-000000000001', 'sid-stale-new', '[]',
+      public.test_pubkey('sid-stale-new'), interval '1 hour', false, 'claude', 'stale-reservation', null, '[]',
+      jsonb_build_object('resolution', 'resolved', 'risky_digest', 'approved'));
+  end $$;
+}
+step "b_commit" { COMMIT; }
+
+session "check"
+step "prepare_stale" {
+  update agent_board.agents set owner_user_id = '74000000-0000-4000-8000-000000000001'
+  where id = '75000000-0000-4000-8000-000000000001';
+  BEGIN;
+  SET LOCAL ROLE service_role;
+  SET LOCAL "request.jwt.claim.role" = 'service_role';
+  select count(*) from agent_board.upsert_delegation_policy('75000000-0000-4000-8000-000000000001', 'root_minted', '[]', 200, interval '8 hours', true);
+  do $$ declare m record; begin
+    select * into m from agent_board.mint_delegated_child('75000000-0000-4000-8000-000000000001', 'sid-stale-old', '[]',
+      public.test_pubkey('sid-stale-old'), interval '1 hour', false, 'claude', 'stale-reservation', null, '[]',
+      jsonb_build_object('resolution', 'resolved', 'risky_digest', 'approved'));
+    perform * from agent_board.issue_signing_key_challenge(m.child_agent_id, 'delegated-ephemeral');
+  end $$;
+  COMMIT;
+  update agent_board.session_identities set created_at = now() - interval '181 seconds'
+  where agent_id = (select id from agent_board.agents where handle = 'sid-stale-old');
+}
+step "check_stale" {
+  select a.status, si.tombstone_reason, si.credential_epoch, si.holder_secret_hash is not null as claimed,
+    (select count(*) from agent_board.fleet_revocation_events e where e.subject_id = a.id) as permanent_revocations
+  from agent_board.agents a join agent_board.session_identities si on si.agent_id = a.id where a.handle = 'sid-stale-old';
+  select a.handle as bound_principal from agent_board.session_id_aliases al join agent_board.agents a on a.id = al.identity_agent_id
+  where al.root_agent_id = '75000000-0000-4000-8000-000000000001' and al.session_id = 'stale-reservation';
+  select count(*) as successor_principals from agent_board.agents where handle = 'sid-stale-new';
+}
+step "check" {
+  select credential_epoch, holder_secret_hash <> extensions.digest('old-holder', 'sha256') as rotated_holder,
+    a.session_id as bound_alias
+  from agent_board.session_identities si join agent_board.session_id_aliases a on a.id = si.lease_alias_id
+  where si.agent_id = '75000000-0000-4000-8000-000000000002';
+  select count(*) as tokens from agent_board.nonfleet_sessions where agent_id = '75000000-0000-4000-8000-000000000002';
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '74000000-0000-4000-8000-000000000001';
+  SET LOCAL "request.jwt.claim.identity_lease_epoch" = '0';
+  select agent_board.current_agent_id() is null as old_epoch_fenced;
+  SET LOCAL "request.jwt.claim.identity_lease_epoch" = '1';
+  select agent_board.current_agent_id() = '75000000-0000-4000-8000-000000000002'::uuid as new_epoch_resolves;
+  COMMIT;
+}
+
+permutation "a_begin" "a_reclaim" "b_begin" "b_reclaim" "a_commit" "b_commit" "check"
+permutation "b_begin" "b_reclaim" "a_begin" "a_reclaim" "b_commit" "a_commit" "check"
+permutation "prepare_stale" "a_begin" "a_first_claim" "b_begin" "b_supersede" "a_commit" "b_commit" "check_stale"
+permutation "prepare_stale" "b_begin" "b_supersede" "a_begin" "a_first_claim" "b_commit" "a_commit" "check_stale"

package/tests/isolation/specs/session_identity_renew_revoke.spec

@@ -0,0 +1,84 @@
+# Renewal and owner revocation of a real minted/claimed identity, both commit
+# orders. The loser waits on the identity row; revoke-after-renew fences its
+# result, and renew-after-revoke must re-read the tombstone rather than revive it.
+setup
+{
+  grant usage on schema extensions to service_role, authenticated;
+  insert into auth.users(id) values ('81000000-0000-4000-8000-000000000001');
+  insert into agent_board.agents(id, agent_type, handle, display_name, status, auth_user_id, owner_user_id)
+  values ('82000000-0000-4000-8000-000000000001', 'human', 'sid-renew-owner', 'Renew owner', 'active',
+    '81000000-0000-4000-8000-000000000001', null),
+    ('82000000-0000-4000-8000-000000000002', 'agent', 'sid-renew-root', 'Renew root', 'active', null,
+    '81000000-0000-4000-8000-000000000001');
+  insert into agent_board.session_identities(agent_id, root_agent_id, depth, current_risky_digest, approved_risky_digest)
+  values ('82000000-0000-4000-8000-000000000002', '82000000-0000-4000-8000-000000000002', 0, 'approved', 'approved');
+  BEGIN;
+  SET LOCAL ROLE service_role;
+  SET LOCAL "request.jwt.claim.role" = 'service_role';
+  select count(*) from agent_board.upsert_delegation_policy('82000000-0000-4000-8000-000000000002', 'root_minted', '[]', 200, interval '7 days', true);
+  do $$ declare m record; c record; begin
+    select * into m from agent_board.mint_delegated_child('82000000-0000-4000-8000-000000000002', 'sid-renew-child', '[]',
+      public.test_pubkey('sid-renew-child'), interval '1 hour', false, 'claude', 'renew-original', null, '[]',
+      jsonb_build_object('resolution', 'resolved', 'risky_digest', 'approved'));
+    select * into c from agent_board.issue_signing_key_challenge(m.child_agent_id, 'delegated-ephemeral');
+    perform * from agent_board.mint_fleet_agent_session(c.challenge_id, split_part(c.challenge, ':', 3),
+      m.signing_key_id, m.child_agent_id, 900, null, 'renew-original');
+  end $$;
+  COMMIT;
+}
+
+teardown
+{
+  do $$ declare v_child uuid; v_auth uuid; begin
+    select id, auth_user_id into v_child, v_auth from agent_board.agents where handle = 'sid-renew-child';
+    update agent_board.session_identities set lease_alias_id = null where agent_id = v_child;
+    delete from agent_board.session_id_aliases where identity_agent_id = v_child;
+    delete from agent_board.session_identities where agent_id = v_child;
+    delete from agent_board.nonfleet_sessions where agent_id = v_child;
+    delete from agent_board.agents where id = v_child;
+    delete from auth.users where id = v_auth;
+    delete from agent_board.session_identities where agent_id = '82000000-0000-4000-8000-000000000002';
+    delete from agent_board.agents where id in ('82000000-0000-4000-8000-000000000001', '82000000-0000-4000-8000-000000000002');
+    delete from auth.users where id = '81000000-0000-4000-8000-000000000001';
+  end $$;
+}
+
+session "renew"
+step "renew_begin" {
+  BEGIN;
+  select set_config('request.jwt.claim.sub', (select auth_user_id::text from agent_board.agents where handle = 'sid-renew-child'), true) is not null as holder_forwarded;
+  SET LOCAL ROLE service_role;
+  SET LOCAL "request.jwt.claim.role" = 'service_role';
+  SET LOCAL "request.jwt.claim.identity_lease_epoch" = '0';
+}
+step "renew" {
+  select agent_board.renew_session_identity((select id from agent_board.agents where handle = 'sid-renew-child'), 'approved');
+}
+step "renew_commit" { COMMIT; }
+
+session "revoke"
+step "revoke_begin" {
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '81000000-0000-4000-8000-000000000001';
+}
+step "revoke" {
+  select agent_board.revoke_session_identity((select id from agent_board.agents where handle = 'sid-renew-child'));
+}
+step "revoke_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select si.tombstone_reason, si.credential_epoch, a.status, g.revoked_at is not null as grant_revoked,
+    g.last_renewed_at is not null as renewal_preceded_revoke,
+    (select count(*) from agent_board.fleet_revocation_events e where e.subject_id = a.id) as permanent_revocations,
+    (select count(*) from agent_board.agent_signing_keys k where k.agent_id = a.id and k.status <> 'revoked') as active_keys
+  from agent_board.agents a join agent_board.session_identities si on si.agent_id = a.id
+    join agent_board.delegation_grants g on g.child_agent_id = a.id where a.handle = 'sid-renew-child';
+  select bool_and(expires_at <= issued_at + interval '900 seconds') as bounded_pre_revoke_tokens
+  from agent_board.nonfleet_sessions where agent_id = (select id from agent_board.agents where handle = 'sid-renew-child');
+}
+
+permutation "renew_begin" "renew" "revoke_begin" "revoke" "renew_commit" "revoke_commit" "check"
+permutation "revoke_begin" "revoke" "renew_begin" "renew" "revoke_commit" "renew_commit" "check"

package/tests/isolation/specs/session_identity_renew_revoke_key_gate.spec

@@ -0,0 +1,94 @@
+# A third session holds only the signing key. Revoke acquires root/identity
+# then waits for that key, pinning renewal blocking BEFORE its state reread.
+# Renewal and owner revocation of a real minted/claimed identity, both commit
+# orders. The loser waits on the identity row; revoke-after-renew fences its
+# result, and renew-after-revoke must re-read the tombstone rather than revive it.
+setup
+{
+  grant usage on schema extensions to service_role, authenticated;
+  insert into auth.users(id) values ('81000000-0000-4000-8000-000000000001');
+  insert into agent_board.agents(id, agent_type, handle, display_name, status, auth_user_id, owner_user_id)
+  values ('82000000-0000-4000-8000-000000000001', 'human', 'sid-renew-owner', 'Renew owner', 'active',
+    '81000000-0000-4000-8000-000000000001', null),
+    ('82000000-0000-4000-8000-000000000002', 'agent', 'sid-renew-root', 'Renew root', 'active', null,
+    '81000000-0000-4000-8000-000000000001');
+  insert into agent_board.session_identities(agent_id, root_agent_id, depth, current_risky_digest, approved_risky_digest)
+  values ('82000000-0000-4000-8000-000000000002', '82000000-0000-4000-8000-000000000002', 0, 'approved', 'approved');
+  BEGIN;
+  SET LOCAL ROLE service_role;
+  SET LOCAL "request.jwt.claim.role" = 'service_role';
+  select count(*) from agent_board.upsert_delegation_policy('82000000-0000-4000-8000-000000000002', 'root_minted', '[]', 200, interval '7 days', true);
+  do $$ declare m record; c record; begin
+    select * into m from agent_board.mint_delegated_child('82000000-0000-4000-8000-000000000002', 'sid-renew-child', '[]',
+      public.test_pubkey('sid-renew-child'), interval '1 hour', false, 'claude', 'renew-original', null, '[]',
+      jsonb_build_object('resolution', 'resolved', 'risky_digest', 'approved'));
+    select * into c from agent_board.issue_signing_key_challenge(m.child_agent_id, 'delegated-ephemeral');
+    perform * from agent_board.mint_fleet_agent_session(c.challenge_id, split_part(c.challenge, ':', 3),
+      m.signing_key_id, m.child_agent_id, 900, null, 'renew-original');
+  end $$;
+  COMMIT;
+}
+
+teardown
+{
+  do $$ declare v_child uuid; v_auth uuid; begin
+    select id, auth_user_id into v_child, v_auth from agent_board.agents where handle = 'sid-renew-child';
+    update agent_board.session_identities set lease_alias_id = null where agent_id = v_child;
+    delete from agent_board.session_id_aliases where identity_agent_id = v_child;
+    delete from agent_board.session_identities where agent_id = v_child;
+    delete from agent_board.nonfleet_sessions where agent_id = v_child;
+    delete from agent_board.agents where id = v_child;
+    delete from auth.users where id = v_auth;
+    delete from agent_board.session_identities where agent_id = '82000000-0000-4000-8000-000000000002';
+    delete from agent_board.agents where id in ('82000000-0000-4000-8000-000000000001', '82000000-0000-4000-8000-000000000002');
+    delete from auth.users where id = '81000000-0000-4000-8000-000000000001';
+  end $$;
+}
+
+session "renew"
+step "renew_begin" {
+  BEGIN;
+  select set_config('request.jwt.claim.sub', (select auth_user_id::text from agent_board.agents where handle = 'sid-renew-child'), true) is not null as holder_forwarded;
+  SET LOCAL ROLE service_role;
+  SET LOCAL "request.jwt.claim.role" = 'service_role';
+  SET LOCAL "request.jwt.claim.identity_lease_epoch" = '0';
+}
+step "renew" {
+  select agent_board.renew_session_identity((select id from agent_board.agents where handle = 'sid-renew-child'), 'approved');
+}
+step "renew_commit" { COMMIT; }
+
+session "revoke"
+step "revoke_begin" {
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '81000000-0000-4000-8000-000000000001';
+}
+step "revoke" {
+  select agent_board.revoke_session_identity((select id from agent_board.agents where handle = 'sid-renew-child'));
+}
+step "revoke_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select si.tombstone_reason, si.credential_epoch, a.status, g.revoked_at is not null as grant_revoked,
+    g.last_renewed_at is not null as renewal_preceded_revoke,
+    (select count(*) from agent_board.fleet_revocation_events e where e.subject_id = a.id) as permanent_revocations,
+    (select count(*) from agent_board.agent_signing_keys k where k.agent_id = a.id and k.status <> 'revoked') as active_keys
+  from agent_board.agents a join agent_board.session_identities si on si.agent_id = a.id
+    join agent_board.delegation_grants g on g.child_agent_id = a.id where a.handle = 'sid-renew-child';
+  select bool_and(expires_at <= issued_at + interval '900 seconds') as bounded_pre_revoke_tokens
+  from agent_board.nonfleet_sessions where agent_id = (select id from agent_board.agents where handle = 'sid-renew-child');
+}
+
+session "key_gate"
+step "key_begin" { BEGIN; }
+step "key_hold" {
+  select 1 as held from agent_board.agent_signing_keys
+  where agent_id = (select id from agent_board.agents where handle = 'sid-renew-child') for update;
+}
+step "key_commit" { COMMIT; }
+
+permutation "key_begin" "key_hold" "revoke_begin" "revoke" "renew_begin" "renew" "key_commit" "revoke_commit" "renew_commit" "check"
+permutation "key_begin" "key_hold" "renew_begin" "renew" "revoke_begin" "revoke" "key_commit" "renew_commit" "revoke_commit" "check"

package/tests/isolation/specs/session_identity_tombstone_onboarding.spec

@@ -0,0 +1,107 @@
+# SIDSCHEMA integrity repair: real verified instance withdrawal, with a real
+# minted session descendant, against onboarding's cycle-relevant acquisitions.
+# The onboarding session is a lock-equivalent stand-in (the established
+# signed_grant_onboarding_deadlock.spec pattern), NOT a full onboarding replay.
+# It takes the actual board mutex, agents FOR UPDATE and memberships FOR UPDATE
+# in onboard_federated_fleet_agent's installed order and modes. Invite/bounds
+# locks before that mutex cannot cycle: withdrawal never accesses those rows.
+# All other onboarding locks follow the mutex; omission cannot create or hide a
+# shared-row cycle while withdrawal waits before its owner/instance/family rows.
+# No timing sleeps. Both orders and the mutex-alone interleaving must complete.
+# The separately mutated catalog class names withdrawal if its mutex is absent;
+# the order pin rejects a mutex moved after the instance. Withdrawal is NOT an
+# exemption based on the membership state it writes.
+
+setup
+{
+  grant usage on schema extensions to service_role;
+  insert into agent_board.agents(id,agent_type,handle,display_name,status,owner_user_id,is_delegate)
+  values ('85000000-0000-4000-8000-000000000001','agent','sid-ti-root','Integrity delegate','active',
+    agent_board._ensure_agent_auth_user(agent_board._federated_identity_slug('urn:sid-ti:issuer','sid-ti-owner')),true);
+  insert into agent_board.session_identities(agent_id,root_agent_id,depth,current_risky_digest,approved_risky_digest)
+  values ('85000000-0000-4000-8000-000000000001','85000000-0000-4000-8000-000000000001',0,'approved','approved');
+  insert into agent_board.delegate_instances(instance_id,owner_user_id,owner_issuer,owner_subject,agent_id)
+  select 'sid_ti_instance_00001',owner_user_id,'urn:sid-ti:issuer','sid-ti-owner',id
+    from agent_board.agents where id='85000000-0000-4000-8000-000000000001';
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('85000000-0000-4000-8000-000000000002','sid-ti-board','Integrity board',
+    '85000000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.board_memberships(board_id,agent_id,role,membership_state,created_by_agent_id)
+  values ('85000000-0000-4000-8000-000000000002','85000000-0000-4000-8000-000000000001',
+    'member','joined','85000000-0000-4000-8000-000000000001');
+  BEGIN;
+  SET LOCAL ROLE service_role;
+  SET LOCAL "request.jwt.claim.role" = 'service_role';
+  select count(*) from agent_board.upsert_delegation_policy('85000000-0000-4000-8000-000000000001',
+    'root_minted','["read"]',200,interval '7 days',true);
+  do $$ declare m record; begin
+    select * into m from agent_board.mint_delegated_child('85000000-0000-4000-8000-000000000001',
+      'sid-ti-child','["read"]',public.test_pubkey('sid-ti-child'),interval '1 hour',false,
+      'claude','sid-ti-session',null,'[]',jsonb_build_object('resolution','resolved','risky_digest','approved'));
+    perform * from agent_board._issue_agent_credential(m.child_agent_id,'sid-ti-fixture');
+  end $$;
+  COMMIT;
+}
+
+teardown
+{
+  do $$ declare v_auth_ids uuid[]; begin
+    select array_agg(auth_user_id) into v_auth_ids from agent_board.agents
+      where root_agent_id='85000000-0000-4000-8000-000000000001' and auth_user_id is not null;
+    v_auth_ids := array_append(v_auth_ids,(select owner_user_id from agent_board.agents
+      where id='85000000-0000-4000-8000-000000000001'));
+    delete from agent_board.fleet_revocation_events where revoked_by_agent_id='85000000-0000-4000-8000-000000000001';
+    delete from agent_board.board_membership_events where board_id='85000000-0000-4000-8000-000000000002';
+    delete from agent_board.boards where id='85000000-0000-4000-8000-000000000002';
+    delete from agent_board.delegate_instances where instance_id='sid_ti_instance_00001';
+    delete from agent_board.session_id_aliases where root_agent_id='85000000-0000-4000-8000-000000000001';
+    delete from agent_board.session_identities where root_agent_id='85000000-0000-4000-8000-000000000001';
+    delete from agent_board.agents where root_agent_id='85000000-0000-4000-8000-000000000001';
+    delete from agent_board.agents where id='85000000-0000-4000-8000-000000000001';
+    delete from auth.users where id=any(v_auth_ids);
+  end $$;
+}
+
+session "tomb"
+step "t_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "t_tomb" {
+  select first from agent_board.tombstone_delegate_instance(
+    'sid_ti_instance_00001','urn:sid-ti:issuer','sid-ti-owner','owner_revoked');
+}
+step "t_commit" { COMMIT; }
+
+session "onboard"
+step "o_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "o_advisory" {
+  select agent_board._lock_board_authority_ceiling('85000000-0000-4000-8000-000000000002') is null as advisory_taken;
+}
+step "o_agents" {
+  select count(*)::int as locked_agents from (
+    select 1 from agent_board.agents where id='85000000-0000-4000-8000-000000000001' for update) s;
+}
+step "o_membership" {
+  select count(*)::int as locked_memberships from (
+    select 1 from agent_board.board_memberships
+      where board_id='85000000-0000-4000-8000-000000000002'
+        and agent_id='85000000-0000-4000-8000-000000000001' for update) s;
+}
+step "o_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select tombstoned_at is not null as instance_tombstoned from agent_board.delegate_instances
+    where instance_id='sid_ti_instance_00001';
+  select status from agent_board.agents where id='85000000-0000-4000-8000-000000000001';
+  select membership_state from agent_board.board_memberships
+    where board_id='85000000-0000-4000-8000-000000000002'
+      and agent_id='85000000-0000-4000-8000-000000000001';
+  select si.tombstoned_at is not null as child_tombstoned,si.credential_epoch,
+    (select count(*) from agent_board.agent_credentials ac where ac.agent_id=si.agent_id and ac.revoked_at is null) as live_credentials
+    from agent_board.session_identities si join agent_board.agents a on a.id=si.agent_id where a.handle='sid-ti-child';
+  select count(*) as withdrawal_events from agent_board.board_membership_events
+    where board_id='85000000-0000-4000-8000-000000000002' and event_kind='operator_removal';
+}
+
+permutation "o_begin" "o_advisory" "o_agents" "t_begin" "t_tomb" "o_membership" "o_commit" "t_commit" "check"
+permutation "t_begin" "t_tomb" "o_begin" "o_advisory" "t_commit" "o_agents" "o_membership" "o_commit" "check"
+permutation "o_begin" "o_advisory" "t_begin" "t_tomb" "o_agents" "o_membership" "o_commit" "t_commit" "check"

package/tests/isolation/specs/signed_grant_onboarding_deadlock.spec

@@ -74,7 +74,6 @@ teardown
   delete from agent_board.signature_evidence
    where agent_id in (select id from agent_board.agents where handle like 'f4iso-%');
   delete from agent_board.board_authority_ceilings where board_id='f4950000-0000-4000-8000-000000000001';
-  delete from agent_board.board_memberships where board_id='f4950000-0000-4000-8000-000000000001';
   delete from agent_board.boards where id='f4950000-0000-4000-8000-000000000001';
   delete from agent_board.agent_signing_keys
    where agent_id in (select id from agent_board.agents where handle like 'f4iso-%');

package/tests/isolation/specs/signer_lifecycle_revoke.spec

@@ -84,7 +84,6 @@ teardown
    where agent_id in (select id from agent_board.agents where handle like 'k269iso-%')
       or revoked_by_agent_id in (select id from agent_board.agents where handle like 'k269iso-%');
   delete from agent_board.board_authority_ceilings where board_id='26950000-0000-4000-8000-000000000001';
-  delete from agent_board.board_memberships where board_id='26950000-0000-4000-8000-000000000001';
   delete from agent_board.boards where id='26950000-0000-4000-8000-000000000001';
   delete from agent_board.agent_signing_keys
    where agent_id in (select id from agent_board.agents where handle like 'k269iso-%');

package/tests/seeds/20261011000100_agent_board_session_identities.sql.pre.sql

@@ -0,0 +1,47 @@
+-- SIDSCHEMA backfill fixture.  These principals exist before the durable
+-- session-identity tables and must retain their original lineage afterwards.
+insert into auth.users(id) values ('61100000-0000-0000-0000-000000000010');
+insert into auth.users(id) values ('61100000-0000-0000-0000-000000000014');
+insert into agent_board.agents (
+  id, agent_type, kind, handle, display_name, status, root_agent_id, auth_user_id
+) values (
+  '61100000-0000-0000-0000-000000000001',
+  'agent', 'agent', 'sid-backfill-root', 'SID Backfill Root', 'active', null,
+  '61100000-0000-0000-0000-000000000014'
+);
+
+update agent_board.agents set owner_user_id='61100000-0000-0000-0000-000000000010',
+  created_at='2026-01-01 00:00:00+00', metadata='{"sid_backfill":"historical"}'
+where id='61100000-0000-0000-0000-000000000001';
+insert into agent_board.agent_signing_keys(id,agent_id,key_id,key_version,public_key,public_key_format,
+  fingerprint,status,proof_state,created_at,metadata)
+values ('61100000-0000-0000-0000-000000000011','61100000-0000-0000-0000-000000000001',
+  'historical-backfill',1,public.test_pubkey('sid-historical-backfill'),'raw_ed25519_base64url',
+  agent_board._raw_key_fingerprint(public.test_pubkey('sid-historical-backfill')),'pending_proof','unproven',
+  '2026-01-01 00:00:00+00','{"sid_backfill":"historical-key"}');
+insert into agent_board.boards(id,slug,name,created_by_agent_id,created_at)
+values ('61100000-0000-0000-0000-000000000012','sid-historical-backfill','Historical backfill',
+  '61100000-0000-0000-0000-000000000001','2026-01-01 00:00:00+00');
+insert into agent_board.board_membership_events(id,board_id,agent_id,event_kind,result_state,provenance,created_at)
+values ('61100000-0000-0000-0000-000000000013','61100000-0000-0000-0000-000000000012',
+  '61100000-0000-0000-0000-000000000001','historical-placement','joined','operator-designated','2026-01-01 00:00:00+00');
+
+insert into agent_board.agents (
+  id, agent_type, kind, handle, display_name, status, parent_agent_id, root_agent_id, owner_user_id
+) values (
+  '61100000-0000-0000-0000-000000000002',
+  'agent', 'agent', 'sid-backfill-child', 'SID Backfill Child', 'active',
+  '61100000-0000-0000-0000-000000000001',
+  '61100000-0000-0000-0000-000000000001',
+  '61100000-0000-0000-0000-000000000010'
+);
+
+insert into agent_board.agents (
+  id, agent_type, kind, handle, display_name, status, parent_agent_id, root_agent_id, owner_user_id
+) values (
+  '61100000-0000-0000-0000-000000000003',
+  'agent', 'agent', 'sid-backfill-grandchild', 'SID Backfill Grandchild', 'active',
+  '61100000-0000-0000-0000-000000000002',
+  '61100000-0000-0000-0000-000000000001',
+  '61100000-0000-0000-0000-000000000010'
+);