@consiliency/agent-board-schema 1.64.0 → 1.74.0

package/src/deployment-drift-script.test.mjs

@@ -67,6 +67,8 @@ let PRELOAD;
 beforeAll(() => {
   SHIMS = mkdtempSync(join(tmpdir(), "drift-shims-"));
   ARGV_LOG = join(SHIMS, "argv.log");
+  writeFileSync(join(SHIMS, "package.json"), readFileSync(PKG_JSON));
+  writeFileSync(join(SHIMS, "manifest.json"), readFileSync(MANIFEST));
 
   // One arg per line, `--` between invocations, so an assertion can read exact argv rather
   // than a space-joined approximation.
@@ -78,7 +80,7 @@ beforeAll(() => {
   );
   writeFileSync(
     join(SHIMS, "git"),
-    `#!/bin/sh\n${logArgv}\ncase " $* " in\n  *" rev-parse "*) printf "%s\\n" "\${FAKE_SHALLOW:-false}" ;;\n  *" log "*) [ -n "\${FAKE_BUMP_ISO:-}" ] || exit 1; printf "%s\\n" "$FAKE_BUMP_ISO" ;;\n  *) exit 1 ;;\nesac\n`,
+    `#!/bin/sh\n${logArgv}\ncase " $* " in\n  *" --is-shallow-repository "*) printf "%s\n" "\${FAKE_SHALLOW:-false}" ;;\n  *" cat-file "*) exit 0 ;;\n  *" show "*"/package.json "*) cat "$DRIFT_SHIMS/package.json" ;;\n  *" show "*"/schema-manifest.json "*) cat "$DRIFT_SHIMS/manifest.json" ;;\n  *" log "*) [ -n "\${FAKE_BUMP_ISO:-}" ] || exit 1; printf "%s\n" "$FAKE_BUMP_ISO" ;;\n  *) exit 1 ;;\nesac\n`,
   );
   chmodSync(join(SHIMS, "npm"), 0o755);
   chmodSync(join(SHIMS, "git"), 0o755);
@@ -139,6 +141,11 @@ function runScript(args = [], env = {}) {
       PATH: `${SHIMS}:${process.env.PATH}`,
       NODE_OPTIONS: `--import ${pathToFileURL(PRELOAD).href}`,
       DRIFT_ARGV_LOG: ARGV_LOG,
+      DRIFT_SHIMS: SHIMS,
+      GITHUB_ACTIONS: "true",
+      GITHUB_EVENT_NAME: "push",
+      GITHUB_REF: "refs/heads/main",
+      GITHUB_SHA: "a".repeat(40),
       FAKE_BUMP_ISO: FRESH_BUMP,
       FAKE_SHALLOW: "false",
       FAKE_FETCH_MODE: "",
@@ -186,6 +193,12 @@ describe("the shipped script's exit mapping", () => {
     expect(r.status).toBe(2);
   });
 
+  it("missing bump history is UNKNOWN even when merged and published agree", () => {
+    const r = runScript([], { FAKE_NPM_VERSION: MERGED, FAKE_BUMP_ISO: "" });
+    expect(r.status).toBe(2);
+    expect(r.out).toMatch(/authoritative main\/history unavailable/);
+  });
+
   it("refuses to date the bump on a shallow clone, so an unpublished gap is UNKNOWN", () => {
     // FAKE_SHALLOW was never true in any test, so the shallow-clone refusal the previous
     // round added was driven by nothing. Making isShallowClone() return false

package/src/policy-comment.test.mjs

@@ -0,0 +1,17 @@
+import { expect, it } from 'vitest';
+import { readFileSync } from 'node:fs';
+
+const comment = (file) => {
+  const sql = readFileSync(new URL('../migrations/' + file, import.meta.url), 'utf8');
+  const statement = sql.match(/^comment on function agent_board\._current_agent_can_access_thread\(uuid\) is\s*((?:'(?:''|[^'])*'\s*)+);/im);
+  if (!statement) throw new Error('thread-access comment missing in ' + file);
+  return [...statement[1].matchAll(/'((?:''|[^'])*)'/g)].map((part) => part[1].replaceAll("''", "'")).join('');
+};
+
+it('RLS-comment-ruling: authenticated grants preserve the complete ratified thread-access comment', () => {
+  const ruling = comment('20260914000100_agent_board_claim_subject_gate.sql');
+  expect(ruling).toContain('message-board#291');
+  expect(ruling).toContain('REVERSING A RULING');
+  expect(comment('20261015000300_agent_board_rls_correlation.sql')).toBe(
+    ruling + ' Callable by authenticated for its RLS policies and by service_role.');
+});

package/src/tooling.test.mjs

@@ -41,9 +41,9 @@ describe('manifest integrity', () => {
     expect(manifest.schemaVersion).toBe(8);
     expect(manifest.minClientVersion).toMatch(/^\d+\.\d+\.\d+$/);
   });
-  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 + two ROOMOWN + two ROOMLINK + one ROOMDELEG + one LOCALAUTH + one ROOMUIAPI + one FEDSESSION + one FEDSESSION-AUTOJOIN + one GATENULL + one MEMBSTATE + one AGENTSDIR + one LEAVEIDEM + one ROLERESET + one MBROWID + one MBHYGIENE + one MBCONSENT-A + one MBCONSENT-B(a) + one MBCONSENT-B(i) + one MBCONSENT-B(ii) + one MBCONSENT-B(iii) + one MBHARDEN-#97 + one MBHARDEN-#118 + one INVITEPOLICY + one OBSGATE + one OBSGATE-2 + one OBSGATE-3 + one OBSGATE-4 + one FLEETMACHINERLS + one RESOLVENOOP + one ROOMDELEG-LANEB + one CLAIMKEY + two MINTHARDEN + one FLEETMACHINEHIJACK + one CLAIMGATE-SHADOW + one CLAIMGATE-ENFORCE + one FLEETMACHINEREACTIVATION + one DELEGCAPCEILING + one FLEETMACHINERECLAIM + one DELEGSOLEWRITER + one FLEETDOMAINRECLAIM + five ATOMICFLEETONBOARDING (onboarding + ceiling-lock + revocation-evidence + fedsession-gate + fedsession-lock-order) + one OUTBOXWAKE + one ENROLLLOCKORDER + one FEDPROVIDERABSENCE + one WAKERECOVERY + one CONSENTRECONCILE + one ENROLLRESUMPTION + one SIGNEDAUTHORITY + one SIGNERLIFECYCLE + one LEDGERAUTHORITY + one CEILINGLOCKCOMMENT + one LEDGERBOARDCREATE + one RECEIPTSUBJECTGATE + one TASKTHREADLOCKORDER + one CLAIMSUBJECTGATE + one FEDSESSIONIDENTITYGATE + one FEDIDENTITYSLUG + one INVITENODOWNGRADE + one SIGNEDWRITEFLAG + one SIGNEDWRITEMODEL + one RTCREDCLAIM + one ORIGINPOSTURE + one BOARDCLAIMPOLICY + one HEARTBEATPRESERVE + one LIVENESSDENOM + one OWNERLESSRENEWTTL + one OWNERLESSQUOTACENSUS + one FLEETDOMAINNODOWNGRADE + one OWNERLESSQUOTACONVERGE + one ADVISORYREVERTRESET + one CLAIMPOLICYRACE + one CLAIMPOLICYLOCKGRANT + one SESSIONCHALLENGESUPERSEDE + one ROOMCONTRACT + one CALLBACKCONSUMER + one ENROLLTOKENSINGLEUSE + one ROOMCONTRACT-ACTIVEFIRST + one ONBOARD + one HOSTED + one HOSTED-FOLLOWUPS + one OWNPOST + one SIDSCHEMA + one SIDOWNER + one GRANTTARGETROLE (#674) + one LASTOWNER (Consiliency/message-board#675) forward migrations (migrationCount = prior 113 + 5 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 = 162)', () => {
+  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 + two ROOMOWN + two ROOMLINK + one ROOMDELEG + one LOCALAUTH + one ROOMUIAPI + one FEDSESSION + one FEDSESSION-AUTOJOIN + one GATENULL + one MEMBSTATE + one AGENTSDIR + one LEAVEIDEM + one ROLERESET + one MBROWID + one MBHYGIENE + one MBCONSENT-A + one MBCONSENT-B(a) + one MBCONSENT-B(i) + one MBCONSENT-B(ii) + one MBCONSENT-B(iii) + one MBHARDEN-#97 + one MBHARDEN-#118 + one INVITEPOLICY + one OBSGATE + one OBSGATE-2 + one OBSGATE-3 + one OBSGATE-4 + one FLEETMACHINERLS + one RESOLVENOOP + one ROOMDELEG-LANEB + one CLAIMKEY + two MINTHARDEN + one FLEETMACHINEHIJACK + one CLAIMGATE-SHADOW + one CLAIMGATE-ENFORCE + one FLEETMACHINEREACTIVATION + one DELEGCAPCEILING + one FLEETMACHINERECLAIM + one DELEGSOLEWRITER + one FLEETDOMAINRECLAIM + five ATOMICFLEETONBOARDING (onboarding + ceiling-lock + revocation-evidence + fedsession-gate + fedsession-lock-order) + one OUTBOXWAKE + one ENROLLLOCKORDER + one FEDPROVIDERABSENCE + one WAKERECOVERY + one CONSENTRECONCILE + one ENROLLRESUMPTION + one SIGNEDAUTHORITY + one SIGNERLIFECYCLE + one LEDGERAUTHORITY + one CEILINGLOCKCOMMENT + one LEDGERBOARDCREATE + one RECEIPTSUBJECTGATE + one TASKTHREADLOCKORDER + one CLAIMSUBJECTGATE + one FEDSESSIONIDENTITYGATE + one FEDIDENTITYSLUG + one INVITENODOWNGRADE + one SIGNEDWRITEFLAG + one SIGNEDWRITEMODEL + one RTCREDCLAIM + one ORIGINPOSTURE + one BOARDCLAIMPOLICY + one HEARTBEATPRESERVE + one LIVENESSDENOM + one OWNERLESSRENEWTTL + one OWNERLESSQUOTACENSUS + one FLEETDOMAINNODOWNGRADE + one OWNERLESSQUOTACONVERGE + one ADVISORYREVERTRESET + one CLAIMPOLICYRACE + one CLAIMPOLICYLOCKGRANT + one SESSIONCHALLENGESUPERSEDE + one ROOMCONTRACT + one CALLBACKCONSUMER + one ENROLLTOKENSINGLEUSE + one ROOMCONTRACT-ACTIVEFIRST + one ONBOARD + one HOSTED + one HOSTED-FOLLOWUPS + one OWNPOST + one SIDSCHEMA + one SIDOWNER + one GRANTTARGETROLE (#674) + one LASTOWNER (Consiliency/message-board#675) + one SESSIONPROVENANCE (Consiliency/message-board#665) + one REQUESTREMOVED (Consiliency/message-board#680) + one RLSCORRELATION (Consiliency/message-board#589) + one RESOLUTIONAUTHORITY (Consiliency/message-board#668) + one THREADASSOCIATION checkpoint (#667) + one SIDSERVER-MEASUREDMINT (Consiliency/message-board#653) + one REPLYDELIVERY (#661) + one DELIVERYWRITEREXEC (#717 F1) + one REPLAYSCOPE (#717 F2) + one MESSAGEREPLAYSCOPE (#717 F2b) forward migrations (migrationCount = prior 113 + 5 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 = 172)', () => {
     expect(manifest.migrationCount).toBe(manifest.migrations.length);
-    expect(manifest.migrationCount).toBe(162);
+    expect(manifest.migrationCount).toBe(172);
     // MBSESSION switched enforcement on (scoped-send re-grant): the client-visible
     // schema version bumped to 8. MBDELEG tightens delegation and MBFED adds only
     // enrollment-only additive surface (identity_providers registry, enrollment audit,
@@ -364,6 +364,16 @@ describe('manifest integrity', () => {
       // #674: grant_board_role checks the target's current role (C-A + C-B).
       '20261014000100_agent_board_grant_target_role.sql',
       '20261014000200_agent_board_last_owner.sql',
+      '20261015000100_agent_board_session_provenance.sql',
+      '20261015000200_agent_board_request_preserve_removed.sql',
+      '20261015000300_agent_board_rls_correlation.sql',
+      '20261015000400_agent_board_resolution_authority.sql',
+      '20261026000100_agent_board_thread_association.sql',
+      '20261101000100_agent_board_session_measured_mint.sql',
+      '20261104065658_agent_board_reply_delivery.sql',
+      '20261104170000_agent_board_tasking_replay_scope.sql',
+      '20261104180000_agent_board_delivery_writer_execute.sql',
+      '20261104190000_agent_board_message_replay_scope.sql',
     ]) {
       expect(names.has(f)).toBe(true);
     }

package/tests/agent_board_661_reply_delivery.test.sql

@@ -0,0 +1,185 @@
+create extension if not exists pgtap with schema extensions;
+set search_path=extensions,public,agent_board;
+begin;
+select no_plan();
+create temp table f(a uuid,b uuid,ua uuid,ub uuid,board uuid,thread uuid, outsider uuid, uo uuid, private_thread uuid);
+grant select on f to authenticated;
+do $$
+declare a uuid:=gen_random_uuid(); b uuid:=gen_random_uuid(); ua uuid; ub uuid; board uuid:=gen_random_uuid(); t uuid:=gen_random_uuid(); o uuid:=gen_random_uuid(); uo uuid; pt uuid:=gen_random_uuid();
+begin
+ ua:=public.ensure_github_user('661a-'||a,'661a-'||a||'@example.test','661a-'||a,'A');
+ ub:=public.ensure_github_user('661b-'||b,'661b-'||b||'@example.test','661b-'||b,'B');
+ insert into agent_board.agents(id,agent_type,handle,display_name,status,auth_user_id,owner_user_id) values(a,'agent','661a-'||a,'A','active',ua,ua),(b,'agent','661b-'||b,'B','active',ub,ub);
+ insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility) values(board,'661-'||board,'661',a,'private');
+ insert into agent_board.board_memberships(board_id,agent_id,membership_state,role) values(board,a,'joined','owner'),(board,b,'joined','member');
+ insert into agent_board.threads(id,thread_type,created_by_agent_id,subject,board_id) values(t,'coordination',a,'661 reply',board);
+ uo:=public.ensure_github_user('661o-'||o,'661o-'||o||'@example.test','661o-'||o,'Outsider');
+ insert into agent_board.agents(id,agent_type,handle,display_name,status,auth_user_id,owner_user_id) values(o,'agent','661o-'||o,'Outsider','active',uo,uo);
+ insert into agent_board.threads(id,thread_type,created_by_agent_id,subject) values(pt,'coordination',a,'Private');
+ insert into agent_board.callback_endpoints(id,owner_agent_id,endpoint_url,endpoint_status) values(o,b,'https://example.test/661','verified');
+ insert into agent_board.callback_subscriptions(endpoint_id,agent_id,subscription_scope,event_category) values(o,b,'own_inbox','inbox.item.delivered');
+ insert into agent_board.callback_endpoints(id,owner_agent_id,endpoint_url,endpoint_status) values(a,a,'https://example.test/661-author','verified');
+ insert into agent_board.callback_subscriptions(endpoint_id,agent_id,subscription_scope,event_category) values(a,a,'own_inbox','inbox.item.delivered');
+ insert into agent_board.callback_subscriptions(endpoint_id,agent_id,subscription_scope,event_category,board_id,board_membership_id)
+ select o,b,'board','board.post.delivered',board,bm.id from agent_board.board_memberships bm where bm.board_id=board and bm.agent_id=b;
+ insert into f values(a,b,ua,ub,board,t,o,uo,pt);
+end $$;
+select set_config('request.jwt.claim.role','authenticated',true);
+select set_config('request.jwt.claim.sub',(select ua::text from f),true);
+set local role authenticated;
+select lives_ok($$select * from agent_board.post_message((select thread from f),(select a from f),'661 reply')$$,'661 author posts reply');
+select is((select count(*) from agent_board.messages where thread_id=(select thread from f)),1::bigint,'661 author reads persisted reply');
+reset role;
+select is((select count(*) from agent_board.delivery_recipients where board_id=(select board from f)),2::bigint,'661 reply has member and feed-only author deliveries');
+select is((select count(*) from agent_board.inbox_items where board_id=(select board from f) and visible_in_inbox),1::bigint,'661 reply creates recipient inbox');
+select set_config('request.jwt.claim.sub',(select ub::text from f),true);
+set local role authenticated;
+select is((select count(*) from agent_board.threads where id=(select thread from f)),1::bigint,'661 second principal reads thread');
+select is((select count(*) from agent_board.messages where thread_id=(select thread from f)),1::bigint,'661 second principal reads reply');
+reset role;
+
+select is((select count(*) from agent_board.inbox_items where board_id=(select board from f) and recipient_agent_id=(select a from f) and not visible_in_inbox),1::bigint,'661 author has feed-only self delivery');
+select is((select count(*) from agent_board.callback_outbox_events where source_message_id in (select id from agent_board.messages where thread_id=(select thread from f)) and event_category='inbox.item.delivered'),1::bigint,'661 recipient inbox callback queued once');
+select is((select count(*) from agent_board.callback_outbox_events where source_message_id in (select id from agent_board.messages where thread_id=(select thread from f)) and event_category='board.post.delivered'),1::bigint,'661 board callback queued once');
+select set_config('request.jwt.claim.sub',(select ub::text from f),true);
+set local role authenticated;
+select lives_ok($$select * from agent_board.post_message((select thread from f),null,'661 response')$$,'661 second principal replies with session-derived author');
+reset role;
+select is((select author_agent_id from agent_board.messages where thread_id=(select thread from f) and body='661 response'),(select b from f),'661 null caller author resolves from second session');
+select set_config('request.jwt.claim.sub',(select ua::text from f),true);
+set local role authenticated;
+select is((select count(*) from agent_board.messages where thread_id=(select thread from f) and body='661 response'),1::bigint,'661 first principal reads second principal response');
+select throws_ok($$select * from agent_board.post_message((select thread from f),(select b from f),'spoof')$$,'42501',null,'661 spoofed author denied');
+select lives_ok($$select * from agent_board.post_message((select private_thread from f),null,'661 private')$$,'661 non-board posting succeeds');
+select lives_ok($$select * from agent_board.send_direct_message((select thread from f),null,(select b from f),'private direct','661 direct')$$,'661 private direct send on board thread succeeds');
+select lives_ok($$select * from agent_board.send_multicast_message((select thread from f),null,array[(select b from f)],'private multi','661 multi')$$,'661 private multicast send on board thread succeeds');
+reset role;
+select is((select count(*) from agent_board.delivery_recipients d join agent_board.messages m on m.id=d.source_message_id where m.thread_id=(select private_thread from f)),0::bigint,'661 non-board message retains no implicit deliveries');
+select is((select count(*) from agent_board.delivery_recipients d join agent_board.messages m on m.id=d.source_message_id where m.body in ('661 direct','661 multi') and m.thread_id=(select thread from f) and d.board_id is null and d.recipient_agent_id=(select b from f)),2::bigint,'661 private sends deliver only explicit recipient with null board');
+select is((select count(*) from agent_board.delivery_recipients d join agent_board.messages m on m.id=d.source_message_id where m.body in ('661 direct','661 multi') and m.thread_id=(select thread from f) and d.board_id is not null),0::bigint,'661 private sends never fan out to board');
+select set_config('request.jwt.claim.sub',(select uo::text from f),true);
+set local role authenticated;
+select is((select count(*) from agent_board.messages where thread_id=(select thread from f)),0::bigint,'661 nonmember cannot read board messages');
+select throws_ok($$select * from agent_board.post_message((select thread from f),null,'outsider')$$,'42501',null,'661 nonmember cannot post');
+reset role;
+update agent_board.board_memberships set membership_state='removed',left_at=now() where board_id=(select board from f) and agent_id=(select b from f);
+select set_config('request.jwt.claim.sub',(select ub::text from f),true);
+set local role authenticated;
+select throws_ok($$select * from agent_board.post_message((select thread from f),null,'removed')$$,'42501',null,'661 removed member cannot post');
+reset role;
+select set_config('request.jwt.claim.sub',(select ua::text from f),true);
+set local role authenticated;
+select lives_ok($$select * from agent_board.post_message((select thread from f),null,'661 after removal')$$,'661 remaining member can reply after removal');
+reset role;
+select is((select count(*) from agent_board.delivery_recipients d join agent_board.messages m on m.id=d.source_message_id where m.body='661 after removal' and m.thread_id=(select thread from f) and d.recipient_agent_id=(select b from f)),0::bigint,'661 removed member receives no new delivery');
+select is((select count(*) from agent_board.delivery_recipients d join agent_board.messages m on m.id=d.source_message_id where m.body='661 after removal' and m.thread_id=(select thread from f)),1::bigint,'661 author-only board preserves feed anchor');
+update agent_board.board_memberships set membership_state='subscribed',role='observer',left_at=null where board_id=(select board from f) and agent_id=(select b from f);
+select set_config('request.jwt.claim.sub',(select ub::text from f),true);
+set local role authenticated;
+select throws_ok($$select * from agent_board.post_message((select thread from f),null,'observer')$$,'42501',null,'661 observer cannot post');
+reset role;
+select set_config('request.jwt.claim.sub',(select ua::text from f),true);
+set local role authenticated;
+select lives_ok($$select * from agent_board.post_message((select thread from f),null,'661 subscribed')$$,'661 reply with subscribed recipient succeeds');
+reset role;
+select is((select count(*) from agent_board.delivery_recipients d join agent_board.messages m on m.id=d.source_message_id where m.body='661 subscribed' and m.thread_id=(select thread from f) and d.recipient_agent_id=(select b from f)),1::bigint,'661 subscribed member receives reply');
+select is((select board_id from agent_board.threads where id=(select thread from f)),(select board from f),'661 replies preserve board association');
+select is((select visibility from agent_board.boards where id=(select board from f)),'private','661 replies preserve private board');
+-- Catalog census: new direct writers or overloads name themselves. Internal
+-- helpers have no API grants; their callers must remain the reviewed routes.
+select is((select string_agg(p.oid::regprocedure::text,', ' order by p.oid::regprocedure::text) from pg_proc p where p.pronamespace='agent_board'::regnamespace and agent_board_test.stripped_body(p.oid) ~ agent_board_test.stmt_re('insert into','messages')),
+ '_insert_thread_message(uuid,uuid,text,text,uuid,jsonb)','661 catalog message insertion has one authorized primitive');
+select is((select string_agg(p.oid::regprocedure::text,', ' order by p.oid::regprocedure::text) from pg_proc p where p.pronamespace='agent_board'::regnamespace and agent_board_test.stripped_body(p.oid) ~ agent_board_test.call_re('_insert_thread_message')),
+ 'post_board_message(uuid,uuid,uuid,text,text,text,text,text,jsonb), post_message(uuid,uuid,text,text,uuid,jsonb), send_direct_message(uuid,uuid,uuid,text,text,text,text,text,jsonb), send_multicast_message(uuid,uuid,uuid[],text,text,text,text,text,jsonb)',
+ '661 catalog insertion callers name every route and overload');
+select is((select string_agg(p.oid::regprocedure::text,', ' order by p.oid::regprocedure::text) from pg_proc p where p.pronamespace='agent_board'::regnamespace and agent_board_test.stripped_body(p.oid) ~ agent_board_test.call_re('_deliver_board_message')),
+ 'post_board_message(uuid,uuid,uuid,text,text,text,text,text,jsonb), post_message(uuid,uuid,text,text,uuid,jsonb)',
+ '661 catalog fan-out callers are canonical board post and reply');
+select is((select string_agg(p.oid::regprocedure::text||':'||r,', ' order by p.oid,r) from pg_proc p cross join unnest(array['anon','authenticated','service_role','agent_board_delegate']) r where p.pronamespace='agent_board'::regnamespace and p.proname in ('_insert_thread_message','_deliver_board_message') and has_function_privilege(r,p.oid,'execute')),null::text,'661 internal insertion and delivery helpers are not API callable');
+
+
+-- Existing metadata keys are data, never an internal delivery bypass switch.
+select set_config('request.jwt.claim.sub',(select ua::text from f),true);
+set local role authenticated;
+select lives_ok($$select * from agent_board.post_message((select thread from f),null,'661 forged metadata',p_metadata=>'{"rpcName":"send_direct_message","boardId":"forged","delegate":{"delegate":true}}')$$,'661 caller metadata cannot select private routing');
+reset role;
+select is((select count(*) from agent_board.delivery_recipients d join agent_board.messages m on m.id=d.source_message_id where m.thread_id=(select thread from f) and m.body='661 forged metadata' and d.board_id=(select board from f)),2::bigint,'661 forged rpcName still receives canonical board delivery');
+select ok((select not (metadata ? 'delegate') from agent_board.messages where thread_id=(select thread from f) and body='661 forged metadata'),'661 nondelegate cannot forge hosted attribution');
+insert into agent_board.board_memberships(board_id,agent_id,membership_state,role) select board,outsider,'joined','member' from f;
+select set_config('request.jwt.claim.sub',(select uo::text from f),true);
+set local role authenticated;
+select is((select count(*) from agent_board.messages where thread_id=(select thread from f) and body in ('661 direct','661 multi')),0::bigint,'661 unrelated board member cannot read private sends');
+select is((select count(*) from agent_board.messages where thread_id=(select thread from f) and body='661 forged metadata'),1::bigint,'661 current board member can read delivered board reply');
+reset role;
+create temp table result661(id uuid);
+grant insert on result661 to authenticated;
+select set_config('request.jwt.claim.sub',(select ua::text from f),true);
+set local role authenticated;
+select lives_ok($$insert into result661 select message_id from agent_board.post_board_message((select thread from f),null,(select board from f),'Canonical','661 canonical',p_idempotency_key=>'661-key')$$,'661 canonical board post succeeds');
+select lives_ok($$insert into result661 select message_id from agent_board.post_board_message((select thread from f),null,(select board from f),'Canonical','661 replay preview',p_idempotency_key=>'661-key')$$,'661 canonical board replay succeeds');
+reset role;
+select is((select count(distinct id) from result661),1::bigint,'661 canonical replay reuses message');
+select is((select count(*) from agent_board.delivery_recipients where source_message_id in(select id from result661)),3::bigint,'661 canonical post uses one fan-out without duplicate delivery');
+select is((select count(*) from agent_board.inbox_items where source_message_id in(select id from result661) and visible_in_inbox),2::bigint,'661 canonical post retains recipient count excluding sender');
+select is((select array_agg(distinct p.proname||'('||oidvectortypes(p.proargtypes)||')' order by p.proname||'('||oidvectortypes(p.proargtypes)||')')
+ from agent_board_test.fn_call_closure() c join pg_proc p on p.oid=c.root_oid
+ where c.reached_name='_insert_thread_message' and (has_function_privilege('authenticated',p.oid,'execute') or has_function_privilege('service_role',p.oid,'execute') or has_function_privilege('agent_board_delegate',p.oid,'execute'))),
+ array[
+ 'post_board_message(uuid, uuid, text, text, text, text, text, text, text, jsonb)',
+ 'post_board_message(uuid, uuid, uuid, text, text, text, text, text, jsonb)',
+ 'post_message(uuid, uuid, text, text, uuid, jsonb)',
+ 'send_direct_message(uuid, uuid, jsonb, text, text, text, text, text, text, jsonb)',
+ 'send_direct_message(uuid, uuid, uuid, text, text, text, text, text, jsonb)',
+ 'send_multicast_message(uuid, uuid, jsonb, text, text, text, text, text, text, jsonb)',
+ 'send_multicast_message(uuid, uuid, uuid[], text, text, text, text, text, jsonb)',
+ 'signed_post_board_message(jsonb, jsonb)',
+ 'signed_send_direct_message(jsonb, jsonb)',
+ 'signed_send_multicast_message(jsonb, jsonb)']::text[],
+ '661 catalog transitive message entrypoints name every overload and signed route');
+
+
+create temp table task661(id uuid);
+insert into task661 values(gen_random_uuid());
+insert into agent_board.tasks(id,thread_id,created_by_agent_id,title) select t.id,f.thread,f.a,'661 task' from task661 t cross join f;
+grant select on task661 to authenticated;
+create temp table reply661(message_id uuid,thread_id uuid,task_id uuid,message_sequence bigint,created_at timestamptz);
+grant insert on reply661 to authenticated;
+set local role authenticated;
+select lives_ok($$insert into reply661 select * from agent_board.post_message((select thread from f),null,'661 task reply',p_task_id=>(select id from task661),p_metadata=>'{"custom":"kept"}')$$,'661 task reply retains public return shape');
+reset role;
+select ok((select r.task_id=t.id and r.thread_id=f.thread and r.message_sequence=m.message_sequence and r.created_at=m.created_at from reply661 r cross join task661 t cross join f join agent_board.messages m on m.thread_id=f.thread and m.body='661 task reply'),'661 reply result preserves task thread sequence and timestamp');
+select is((select metadata->>'custom' from agent_board.messages where id=(select message_id from reply661)),'kept','661 reply preserves caller application metadata');
+select is((select count(*) from agent_board.inbox_items where source_message_id=(select message_id from reply661) and subject='661 reply' and priority='medium'),3::bigint,'661 reply inbox uses thread subject and medium priority');
+create function pg_temp.fail661() returns trigger language plpgsql as $$
+begin
+ if new.preview='661 atomic' then raise exception '661 injected inbox failure'; end if;
+ return new;
+end $$;
+create trigger fail661 before insert on agent_board.inbox_items for each row execute function pg_temp.fail661();
+set local role authenticated;
+select throws_ok($$select * from agent_board.post_message((select thread from f),null,'661 atomic')$$,'P0001','661 injected inbox failure','661 downstream delivery failure reaches caller');
+reset role;
+select is((select count(*) from agent_board.messages where thread_id=(select thread from f) and body='661 atomic'),0::bigint,'661 delivery failure rolls back persisted reply');
+
+
+-- Dormant restricted state is seeded by the operator, never made public by a reply.
+create temp table restricted661(id uuid);
+insert into restricted661 values(gen_random_uuid());
+grant select on restricted661 to authenticated;
+insert into agent_board.threads(id,thread_type,created_by_agent_id,subject,board_id,access_mode)
+ select r.id,'coordination',f.a,'Restricted',f.board,'restricted' from restricted661 r cross join f;
+insert into agent_board.thread_memberships(thread_id,agent_id,role,granted_by_agent_id)
+ select r.id,f.a,'member',f.a from restricted661 r cross join f;
+set local role authenticated;
+select lives_ok($$select * from agent_board.post_message((select id from restricted661),null,'661 restricted')$$,'661 authorized restricted-thread reply succeeds');
+reset role;
+select is((select count(*) from agent_board.messages where thread_id=(select id from restricted661)),1::bigint,'661 restricted reply persists');
+select is((select count(*) from agent_board.delivery_recipients d join agent_board.messages m on m.id=d.source_message_id where m.thread_id=(select id from restricted661)),0::bigint,'661 restricted reply does not implicitly broadcast to board');
+select set_config('request.jwt.claim.sub',(select ub::text from f),true);
+set local role authenticated;
+select is((select count(*) from agent_board.messages where thread_id=(select id from restricted661)),0::bigint,'661 board membership does not disclose restricted reply');
+reset role;
+select is((select count(*) from agent_board.inbox_items where source_message_id in(select id from result661) and preview='661 replay preview'),3::bigint,'661 canonical retry retains caller-body preview semantics');
+select ok((select access_mode='restricted' from agent_board.threads where id=(select id from restricted661)) and (select access_mode='inherit' from agent_board.threads where id=(select thread from f)),'661 replies preserve both access modes');
+select * from finish();
+rollback;

package/tests/agent_board_667_boundary.test.sql

@@ -0,0 +1,162 @@
+-- #667 association, private-history and delivery-source boundary witnesses.
+create extension if not exists pgtap with schema extensions;
+set search_path = extensions, public, agent_board;
+begin;
+select plan(36);
+create temp table xb_fixture (board1 uuid, board2 uuid, empty_board uuid, actor uuid, actor_user uuid, thread uuid, private_thread uuid) on commit drop;
+do $$
+declare
+  suffix text := replace(substr(gen_random_uuid()::text, 1, 8), '-', '');
+  actor_user uuid; actor uuid := gen_random_uuid(); creator uuid := gen_random_uuid();
+  board1 uuid; board2 uuid; empty_board uuid := gen_random_uuid(); th uuid := gen_random_uuid(); private_th uuid := gen_random_uuid();
+begin
+  actor_user := public.ensure_github_user('xb-actor-' || suffix, 'xb-actor-' || suffix || '@example.test', 'xb-actor-' || suffix, 'XB Actor');
+  insert into agent_board.agents(id,agent_type,handle,display_name,status,auth_user_id,owner_user_id)
+  values (creator,'agent','xb-creator-' || suffix,'XB Creator','active',null,null),
+         (actor,'agent','xb-actor-' || suffix,'XB Actor','active',actor_user,actor_user);
+  select board_id into board1 from agent_board.create_board(creator,'xb-one-' || suffix,'XB One','fixture','{}'::jsonb,'private');
+  select board_id into board2 from agent_board.create_board(creator,'xb-two-' || suffix,'XB Two','fixture','{}'::jsonb,'private');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values (empty_board,'xb-empty-' || suffix,'XB empty board',creator,'private','active');
+  insert into agent_board.board_memberships(board_id,agent_id,membership_state,created_by_agent_id,role)
+  values (board1,actor,'joined',creator,'member'), (board2,actor,'joined',creator,'member');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values (th,'coordination',actor,'XB associated'),(private_th,'coordination',actor,'XB private');
+  perform set_config('request.jwt.claim.role','authenticated',true);
+  perform set_config('request.jwt.claim.sub',actor_user::text,true);
+  insert into xb_fixture values(board1,board2,empty_board,actor,actor_user,th,private_th);
+end $$;
+select lives_ok($$select * from agent_board.post_board_message((select thread from xb_fixture),(select actor from xb_fixture),(select board1 from xb_fixture),'first','first')$$,'XB empty first association succeeds');
+select is((select board_id from agent_board.threads where id=(select thread from xb_fixture)),(select board1 from xb_fixture),'XB first association stamps the target');
+select throws_ok($$select * from agent_board.post_board_message((select thread from xb_fixture),(select actor from xb_fixture),(select board2 from xb_fixture),'second','second')$$,'42501','thread belongs to a different board','XB mismatch refuses before delivery');
+select is((select count(*) from agent_board.messages where thread_id=(select thread from xb_fixture)),1::bigint,'XB mismatch leaves message count unchanged');
+select is((select board_id from agent_board.threads where id=(select thread from xb_fixture)),(select board1 from xb_fixture),'XB mismatch preserves original stamp');
+select lives_ok($$select * from agent_board.post_message((select private_thread from xb_fixture),(select actor from xb_fixture),'private')$$,'XB setup writes private history');
+select throws_ok($$select * from agent_board.post_board_message((select private_thread from xb_fixture),(select actor from xb_fixture),(select board1 from xb_fixture),'shared','shared')$$,'42501','thread has private history','XB private history cannot be associated');
+select is((select board_id from agent_board.threads where id=(select private_thread from xb_fixture)),null::uuid,'XB private thread remains unstamped');
+select throws_ok($$select set_config('request.jwt.claim.role','service_role',true); select * from agent_board.post_board_message((select thread from xb_fixture),(select actor from xb_fixture),(select board2 from xb_fixture),'service','service')$$,'42501','thread belongs to a different board','XB service transport cannot bypass mismatch');
+select is((select count(*) from agent_board.messages where thread_id=(select thread from xb_fixture)),1::bigint,'XB service mismatch writes no message');
+select throws_ok($$select set_config('request.jwt.claim.role','service_role',true); select agent_board._upsert_delivery_recipient('board',(select actor from xb_fixture),'message',(select id from agent_board.messages where thread_id=(select thread from xb_fixture)),null,null,(select board2 from xb_fixture),null)$$,'42501','thread belongs to a different board','XB sink independently refuses mismatch');
+select is((select board_id from agent_board.threads where id=(select thread from xb_fixture)),(select board1 from xb_fixture),'XB sink mismatch preserves the stamp');
+-- With no board memberships, no delivery sink runs: this independently pins
+-- the sender's early boundary instead of accepting a later sink refusal.
+select throws_ok($$select set_config('request.jwt.claim.role','service_role',true); select * from agent_board.post_board_message((select thread from xb_fixture),(select actor from xb_fixture),(select empty_board from xb_fixture),'early','early')$$,
+  '42501','thread belongs to a different board','XB early sender refuses mismatch without sink recipients');
+select is((select count(*) from agent_board.messages where thread_id=(select thread from xb_fixture)),1::bigint,
+  'XB early refusal leaves message count unchanged');
+-- Isolate the task and event predicates: the event's task belongs to another
+-- thread, so a task predicate on the event thread cannot mask its omission.
+create temp table xb_history_case(kind text primary key,thread_id uuid not null,task_id uuid) on commit drop;
+select lives_ok($q$
+do $setup$
+declare task_thread uuid:=gen_random_uuid(); event_thread uuid:=gen_random_uuid(); sink_thread uuid:=gen_random_uuid();
+  task_only uuid:=gen_random_uuid(); parent_task uuid:=gen_random_uuid();
+begin
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values (task_thread,'coordination',(select actor from xb_fixture),'XB task only'),
+         (event_thread,'coordination',(select actor from xb_fixture),'XB event only'),
+         (sink_thread,'coordination',(select actor from xb_fixture),'XB sink source only');
+  insert into agent_board.messages(thread_id,author_agent_id,message_sequence,body) values (sink_thread,(select actor from xb_fixture),1,'XB private sink source');
+  insert into agent_board.tasks(id,thread_id,created_by_agent_id,title)
+  values (task_only,task_thread,(select actor from xb_fixture),'XB isolated task'),
+         (parent_task,(select private_thread from xb_fixture),(select actor from xb_fixture),'XB event parent');
+  insert into agent_board.task_events(task_id,thread_id,actor_agent_id,event_sequence,event_type,payload,origin_posture)
+  values (parent_task,event_thread,(select actor from xb_fixture),1,'created','{}'::jsonb,'unattested:signed-metadata-rpc');
+  insert into xb_history_case values ('task',task_thread,task_only),('event',event_thread,parent_task),('sink',sink_thread,null);
+end $setup$;
+$q$, 'XB isolated task and event histories are seeded');
+select throws_ok($$select * from agent_board.post_board_message((select thread_id from xb_history_case where kind='task'),
+  (select actor from xb_fixture),(select board1 from xb_fixture),'task','body')$$,
+  '42501','thread has private history','XB task-only history refuses association');
+select ok((select board_id is null from agent_board.threads where id=(select thread_id from xb_history_case where kind='task'))
+  and exists(select 1 from agent_board.tasks where id=(select task_id from xb_history_case where kind='task')),
+  'XB task-only refusal preserves task and null stamp');
+select throws_ok($$select * from agent_board.post_board_message((select thread_id from xb_history_case where kind='event'),
+  (select actor from xb_fixture),(select board1 from xb_fixture),'event','body')$$,
+  '42501','thread has private history','XB event-only history refuses association');
+select ok((select board_id is null from agent_board.threads where id=(select thread_id from xb_history_case where kind='event'))
+  and exists(select 1 from agent_board.task_events where thread_id=(select thread_id from xb_history_case where kind='event')),
+  'XB event-only refusal preserves event and null stamp');
+select throws_ok($$select agent_board._upsert_delivery_recipient('board',(select actor from xb_fixture),'message',
+  (select id from agent_board.messages where thread_id=(select thread_id from xb_history_case where kind='sink')),null,null,(select board1 from xb_fixture),
+  (select id from agent_board.board_memberships where board_id=(select board1 from xb_fixture) and agent_id=(select actor from xb_fixture)))$$,
+  '42501','thread has private history','XB direct sink cannot associate an existing private source');
+select ok((select board_id is null from agent_board.threads where id=(select thread_id from xb_history_case where kind='sink'))
+  and (select count(*) from agent_board.messages where thread_id=(select thread_id from xb_history_case where kind='sink'))=1,
+  'XB direct sink refusal preserves source and null stamp');
+select is((select count(*) from agent_board.delivery_recipients d join agent_board.messages m on m.id=d.source_message_id
+  where m.thread_id=(select thread_id from xb_history_case where kind='sink')),
+  0::bigint,'XB direct sink refusal creates no delivery for its private source');
+-- The existing board remains usable; replaying the same key returns the
+-- original message rather than inserting a second copy.
+create temp table xb_same_board_results(message_id uuid) on commit drop;
+select lives_ok($$insert into xb_same_board_results select message_id from agent_board.post_board_message(
+  (select thread from xb_fixture),(select actor from xb_fixture),(select board1 from xb_fixture),
+  'same board','replayed body',p_idempotency_key=>'xb-same-board')$$,
+  'XB same-board keyed post succeeds');
+select lives_ok($$insert into xb_same_board_results select message_id from agent_board.post_board_message(
+  (select thread from xb_fixture),(select actor from xb_fixture),(select board1 from xb_fixture),
+  'same board','replayed body',p_idempotency_key=>'xb-same-board')$$,
+  'XB same-board keyed replay succeeds');
+select is((select count(distinct message_id) from xb_same_board_results),1::bigint,
+  'XB same-board replay returns the original message');
+select is((select count(*) from agent_board.messages where thread_id=(select thread from xb_fixture)),2::bigint,
+  'XB same-board replay inserts exactly one new message');
+select is((select board_id from agent_board.threads where id=(select thread from xb_fixture)),(select board1 from xb_fixture),
+  'XB same-board replay preserves the original stamp');
+-- A task and a delegation each carry their own real canonical parent. Their
+-- private histories cannot be promoted by calling the sink directly; a
+-- same-board source, however, remains a valid delivery.
+create temp table xb_sink_sources(kind text primary key,thread_id uuid not null,source_id uuid not null) on commit drop;
+select lives_ok($q$
+do $setup$
+declare private_thread uuid:=gen_random_uuid(); private_parent uuid:=gen_random_uuid(); private_child uuid:=gen_random_uuid();
+  private_delegation uuid:=gen_random_uuid(); board_parent uuid:=gen_random_uuid(); board_child uuid:=gen_random_uuid(); board_delegation uuid:=gen_random_uuid();
+begin
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+    values(private_thread,'coordination',(select actor from xb_fixture),'XB private delegation');
+  insert into agent_board.tasks(id,thread_id,created_by_agent_id,title)
+  values(private_parent,private_thread,(select actor from xb_fixture),'private parent'),
+        (private_child,private_thread,(select actor from xb_fixture),'private child'),
+        (board_parent,(select thread from xb_fixture),(select actor from xb_fixture),'board parent'),
+        (board_child,(select thread from xb_fixture),(select actor from xb_fixture),'board child');
+  insert into agent_board.delegations(id,parent_task_id,child_task_id,delegated_by_agent_id,delegated_to_agent_id)
+  values(private_delegation,private_parent,private_child,(select actor from xb_fixture),(select actor from xb_fixture)),
+        (board_delegation,board_parent,board_child,(select actor from xb_fixture),(select actor from xb_fixture));
+  insert into xb_sink_sources values ('private_task',(select thread_id from xb_history_case where kind='task'),(select task_id from xb_history_case where kind='task')),
+    ('private_delegation',private_thread,private_delegation),('board_task',(select thread from xb_fixture),board_parent),
+    ('board_delegation',(select thread from xb_fixture),board_delegation);
+end $setup$;
+$q$, 'XB task and delegation sink sources are seeded');
+select throws_ok($$select agent_board._upsert_delivery_recipient('tasking',(select actor from xb_fixture),'task',null,
+  (select source_id from xb_sink_sources where kind='private_task'),null,(select board1 from xb_fixture),
+  (select id from agent_board.board_memberships where board_id=(select board1 from xb_fixture) and agent_id=(select actor from xb_fixture)))$$,
+  '42501','thread has private history','XB direct task sink refuses private parent history');
+select ok((select board_id is null from agent_board.threads where id=(select thread_id from xb_sink_sources where kind='private_task'))
+  and not exists(select 1 from agent_board.delivery_recipients where source_task_id=(select source_id from xb_sink_sources where kind='private_task')),
+  'XB private task sink leaves stamp and delivery unchanged');
+select throws_ok($$select agent_board._upsert_delivery_recipient('tasking',(select actor from xb_fixture),'delegation',null,null,
+  (select source_id from xb_sink_sources where kind='private_delegation'),(select board1 from xb_fixture),
+  (select id from agent_board.board_memberships where board_id=(select board1 from xb_fixture) and agent_id=(select actor from xb_fixture)))$$,
+  '42501','thread has private history','XB direct delegation sink refuses private child history');
+select ok((select board_id is null from agent_board.threads where id=(select thread_id from xb_sink_sources where kind='private_delegation'))
+  and not exists(select 1 from agent_board.delivery_recipients where source_delegation_id=(select source_id from xb_sink_sources where kind='private_delegation'))
+  and exists(select 1 from agent_board.delegations d join agent_board.tasks c on c.id=d.child_task_id
+    where d.id=(select source_id from xb_sink_sources where kind='private_delegation') and c.thread_id=(select thread_id from xb_sink_sources where kind='private_delegation')),
+  'XB private delegation sink preserves canonical child and leaves no delivery');
+select lives_ok($$select agent_board._upsert_delivery_recipient('tasking',(select actor from xb_fixture),'task',null,
+  (select source_id from xb_sink_sources where kind='board_task'),null,(select board1 from xb_fixture),
+  (select id from agent_board.board_memberships where board_id=(select board1 from xb_fixture) and agent_id=(select actor from xb_fixture)))$$,
+  'XB same-board direct task sink succeeds');
+select ok(exists(select 1 from agent_board.delivery_recipients where source_task_id=(select source_id from xb_sink_sources where kind='board_task')
+  and board_id=(select board1 from xb_fixture)), 'XB same-board task sink retains source and board');
+select lives_ok($$select agent_board._upsert_delivery_recipient('tasking',(select actor from xb_fixture),'delegation',null,null,
+  (select source_id from xb_sink_sources where kind='board_delegation'),(select board1 from xb_fixture),
+  (select id from agent_board.board_memberships where board_id=(select board1 from xb_fixture) and agent_id=(select actor from xb_fixture)))$$,
+  'XB same-board direct delegation sink succeeds');
+select ok(exists(select 1 from agent_board.delivery_recipients d join agent_board.delegations g on g.id=d.source_delegation_id
+  join agent_board.tasks c on c.id=g.child_task_id where g.id=(select source_id from xb_sink_sources where kind='board_delegation')
+  and d.board_id=(select board1 from xb_fixture) and c.thread_id=(select thread from xb_fixture)),
+  'XB same-board delegation sink retains canonical child and board');
+select * from finish();
+rollback;

package/tests/agent_board_667_conversion_branches.test.sql

@@ -0,0 +1,91 @@
+-- Native calls execute only when their full overload identity is present.
+-- The plan is derived from those present cases; absence earns no call credit.
+create extension if not exists pgtap with schema extensions;
+set search_path=extensions,public,agent_board;
+begin;
+\ir fixtures/agent_board_667_conversion_guard.sql
+select set_config('request.jwt.claim.role','service_role',true);
+insert into agent_board.agents(id,agent_type,handle,display_name,status)
+values('667f0000-0000-4000-8000-000000000001','agent','conversion-branches','Conversion branches','active');
+insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+values('667f0000-0000-4000-8000-000000000010','coordination','667f0000-0000-4000-8000-000000000001','Quoted values are data');
+create type pg_temp.xb_cf_pair as(i integer,t text);
+create temp table xb_cf_cases(fn text,label text,expression text,expected jsonb,primary key(label)) on commit drop;
+insert into xb_cf_cases values
+ ('realtime."cast"(text,regtype)','cast integer',$q$realtime."cast"('4','integer')$q$,'4'),
+ ('realtime."cast"(text,regtype)','cast quoted text',$q$realtime."cast"('a''b','text')$q$,to_jsonb('a''b'::text)),
+ ('realtime."cast"(text,regtype)','cast bytea preserves encoded text',$q$realtime."cast"('\x0041','bytea')$q$,to_jsonb('\x0041'::text)),
+ ('realtime."cast"(text,regtype)','cast bytea preserves plain text',$q$realtime."cast"('hello','bytea')$q$,to_jsonb('hello'::text)),
+ ('realtime."cast"(text,regtype)','cast integer array',$q$realtime."cast"('{1,2}','integer[]')$q$,'[1,2]'),
+ ('realtime."cast"(text,regtype)','cast composite',$q$realtime."cast"('(7,"a,b")','pg_temp.xb_cf_pair')$q$,'{"i":7,"t":"a,b"}'),
+ ('realtime."cast"(text,regtype)','cast reviewed domain',$q$realtime."cast"('4','information_schema.cardinal_number')$q$,'4'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text)','four argument equality',$q$realtime.check_equality_op('eq','integer','4','4')$q$,'true'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text)','four argument membership',$q$realtime.check_equality_op('in','integer','4','{3,4}')$q$,'true'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text)','four argument inequality',$q$realtime.check_equality_op('neq','integer','4','4')$q$,'false'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','five argument equality',$q$realtime.check_equality_op('eq','integer','4','4',false)$q$,'true'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','five argument negation',$q$realtime.check_equality_op('eq','integer','4','4',true)$q$,'false'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','distinct',$q$realtime.check_equality_op('isdistinct','integer','4','5',false)$q$,'true'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','not distinct',$q$realtime.check_equality_op('isdistinct','integer','4','4',true)$q$,'true'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','is null',$q$realtime.check_equality_op('is','integer',null::text,'null',false)$q$,'true'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','is not null',$q$realtime.check_equality_op('is','integer',null::text,'null',true)$q$,'false'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','like quoted text',$q$realtime.check_equality_op('like','text','a''b','%''%',false)$q$,'true'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','case insensitive like',$q$realtime.check_equality_op('ilike','text','Alpha','a%',false)$q$,'true'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','regular expression',$q$realtime.check_equality_op('match','text','alpha','^a.*',false)$q$,'true'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','case insensitive regular expression',$q$realtime.check_equality_op('imatch','text','ALPHA','^a.*',false)$q$,'true'),
+ ('realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','negated membership',$q$realtime.check_equality_op('in','integer','4','{3,4}',true)$q$,'false');
+-- Removing native literal quoting turns this valid text value into a successful
+-- guarded task write. The final scoped assertion detects that side effect.
+insert into xb_cf_cases
+select 'realtime."cast"(text,regtype)','cast expression-looking text',
+  format('realtime."cast"(%L,''text'')',p),to_jsonb(p)
+from(values($v$agent_board.create_task('667f0000-0000-4000-8000-000000000010','667f0000-0000-4000-8000-000000000001','escaped literal')$v$)) v(p);
+insert into xb_cf_cases
+select 'realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','distinct expression-looking text',
+  format('realtime.check_equality_op(''isdistinct'',''text'',%L,%L,false)',p,p),'false'::jsonb
+from(values($v$agent_board.create_task('667f0000-0000-4000-8000-000000000010','667f0000-0000-4000-8000-000000000001','escaped literal')$v$)) v(p);
+insert into xb_cf_cases
+select 'realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','is-null expression-looking text',
+  format('realtime.check_equality_op(''is'',''text'',%L,''null'',false)',p),'false'::jsonb
+from(values($v$agent_board.create_task('667f0000-0000-4000-8000-000000000010','667f0000-0000-4000-8000-000000000001','escaped literal')$v$)) v(p);
+insert into xb_cf_cases
+select 'realtime.check_equality_op(realtime.equality_op,regtype,text,text)','four argument expression-looking text',
+  format('realtime.check_equality_op(''eq'',''text'',%L,%L)',p,p),'true'::jsonb
+from(values($v$agent_board.create_task('667f0000-0000-4000-8000-000000000010','667f0000-0000-4000-8000-000000000001','escaped literal')$v$)) v(p);
+insert into xb_cf_cases
+select 'realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)','five argument expression-looking text',
+  format('realtime.check_equality_op(''eq'',''text'',%L,%L,false)',p,p),'true'::jsonb
+from(values($v$agent_board.create_task('667f0000-0000-4000-8000-000000000010','667f0000-0000-4000-8000-000000000001','escaped literal')$v$)) v(p);
+create temp table xb_cf_values(label text primary key,value jsonb) on commit drop;
+create function pg_temp.xb_cf_run(p_label text,p_expression text,p_expected jsonb) returns setof text
+language plpgsql volatile as $$
+begin
+  return next lives_ok(format('insert into pg_temp.xb_cf_values select %L,to_jsonb((%s))',p_label,p_expression),
+    'CB '||p_label||' call succeeds');
+  return next is((select value from pg_temp.xb_cf_values where label=p_label),p_expected,
+    'CB '||p_label||' returns the expected value');
+end$$;
+select plan(4+2*(select count(*)::integer from xb_cf_cases where to_regprocedure(fn) is not null)
+  +(to_regprocedure('realtime."cast"(text,regtype)') is not null)::integer
+  +(to_regprocedure('realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)') is not null)::integer);
+select ok((select count(distinct fn) from xb_cf_cases)=3,'CB fixtures cover exactly three native overloads');
+select is((select count(*) from pg_temp.xb_cf_problems()),0::bigint,'CB call fixtures retain the reviewed dispatch profile')
+where exists(select 1 from xb_cf_cases where to_regprocedure(fn) is not null);
+select * from skip('native converters absent; no primitive admission credit',1)
+where not exists(select 1 from xb_cf_cases where to_regprocedure(fn) is not null);
+select is((select count(*) from pg_temp.xb_cf_wrapper_problems()),0::bigint,'CB present native definitions and security metadata are exact');
+select diag('Native calls absent; no native branch execution credit')
+where not exists(select 1 from xb_cf_cases where to_regprocedure(fn) is not null);
+select r.* from (select * from xb_cf_cases where to_regprocedure(fn) is not null order by label) c
+cross join lateral pg_temp.xb_cf_run(c.label,c.expression,c.expected) r;
+select throws_ok($$select realtime."cast"('-1','information_schema.cardinal_number')$$,'23514',
+  'value for domain information_schema.cardinal_number violates check constraint "cardinal_number_domain_check"',
+  'CB native cast preserves the reviewed domain refusal')
+where to_regprocedure('realtime."cast"(text,regtype)') is not null;
+select throws_ok($$select realtime.check_equality_op('is','integer','4','true; select 1',false)$$,'P0001',
+  'invalid value for is filter: must be null, true, false, or unknown',
+  'CB is-filter rejects a non-keyword before interpolation')
+where to_regprocedure('realtime.check_equality_op(realtime.equality_op,regtype,text,text,boolean)') is not null;
+select is((select count(*) from agent_board.tasks where thread_id='667f0000-0000-4000-8000-000000000010'),0::bigint,
+  'CB native literal interpolation creates no fixture history');
+select * from finish();
+rollback;