@consiliency/agent-board-schema 1.68.0 → 1.74.0

package/tests/agent_board_667_storage_timestamp_controls.test.sql

@@ -0,0 +1,22 @@
+-- Resolution checks remain exercised even when native Storage is absent.
+create extension if not exists pgtap with schema extensions;
+set search_path=extensions,public,agent_board;
+begin;
+\ir fixtures/agent_board_667_conversion_guard.sql
+\ir fixtures/agent_board_667_sender_guard.sql
+\ir fixtures/agent_board_667_timestamp_guard.sql
+select plan(4);
+create temp table xb_st_prior_problems on commit drop as select * from pg_temp.xb_st_prerequisite_problems();
+create function pg_temp.replace(text,text,text) returns text language sql immutable as $body$select $1$body$;
+select ok(exists(select 1 from pg_proc where oid='pg_temp.replace(text,text,text)'::regprocedure),
+  'ST own overload control is installed in the live catalog');
+select ok(exists(select 1 from pg_temp.xb_st_prerequisite_problems()
+  where identity=pg_temp.xb_cf_fn('pg_temp.replace(text,text,text)'::regprocedure) and problem='unreviewed overload or shadow'),
+  'ST resolution census names the injected overload identity');
+select is((select count(*) from pg_temp.xb_st_admitted()),0::bigint,'ST injected overload closes admission');
+drop function pg_temp.replace(text,text,text);
+select is((select jsonb_agg(jsonb_build_array(identity,problem) order by identity,problem) from pg_temp.xb_st_prerequisite_problems()),
+  (select jsonb_agg(jsonb_build_array(identity,problem) order by identity,problem) from xb_st_prior_problems),
+  'ST removing own overload restores the exact prior prerequisite findings');
+select * from finish();
+rollback;

package/tests/agent_board_667_storage_timestamp_profile.test.sql

@@ -0,0 +1,54 @@
+-- Admission requires a complete native reader, not a similarly named stand-in.
+create extension if not exists pgtap with schema extensions;
+create extension if not exists plpgsql_check with schema extensions;
+set search_path=extensions,public,agent_board;
+begin;
+\ir fixtures/agent_board_667_conversion_guard.sql
+\ir fixtures/agent_board_667_sender_guard.sql
+\ir fixtures/agent_board_667_timestamp_guard.sql
+select to_regprocedure('storage.search_by_timestamp(text,text,integer,integer,text,text,text,text,text,text,text)') is not null as native_present \gset
+\if :native_present
+select plan(15);
+select is((select string_agg(identity||': '||problem,', ' order by identity,problem) from pg_temp.xb_st_problems()),
+  null::text,'ST finite query, target, resolution and callback profile matches');
+select is((select array_agg(fn order by fn) from pg_temp.xb_st_admitted()),
+  array['storage.search_by_timestamp(text,text,integer,integer,text,text,text,text,text,text,text)'::regprocedure::oid],
+  'ST exactly the native timestamp reader OID is admitted');
+select is((select count(*) from pg_temp.xb_st_views),9::bigint,'ST all eight SELECT shapes and helper are parsed');
+select ok(exists(select 1 from pg_temp.xb_st_roots() where fn='pg_catalog.min(timestamp with time zone)'::regprocedure),
+  'ST pinned built-in aggregate is discovered despite pg_depend omission');
+select ok(exists(select 1 from pg_temp.xb_st_reach() where fn='pg_catalog.timestamptz_smaller(timestamp with time zone,timestamp with time zone)'::regprocedure),
+  'ST aggregate transition and combine callbacks are reached');
+select ok(exists(select 1 from pg_temp.xb_st_roots() where fn='storage.get_common_prefix(text,text,text)'::regprocedure),
+  'ST parsed query reaches the reviewed SQL folder helper');
+select ok(exists(select 1 from pg_temp.xb_st_roots() where fn='pg_catalog.replace(text,text,text)'::regprocedure),
+  'ST static normalization callable class is discovered');
+select ok(exists(select 1 from pg_temp.xb_st_roots() where fn='pg_catalog.string_to_array(text,text)'::regprocedure),
+  'ST stored generated-column expression is included');
+select is((select count(*) from pg_temp.xb_st_static where problem is not null),0::bigint,
+  'ST PLpgSQL static dependency parser completed');
+select is((select count(*) from pg_temp.xb_st_reference where kind='aggregate'),1::bigint,
+  'ST only the reached timestamp MIN aggregate receives executable aggregate credit');
+-- A SELECT cannot fire a DML trigger. Prove the exemption positively with one
+-- live callback and its DML control, rather than excluding trigger names.
+create temp table xb_st_dml_effect(note text) on commit drop;
+create function pg_temp.xb_st_dml_callback() returns trigger language plpgsql as $callback$
+begin insert into pg_temp.xb_st_dml_effect values('called'); return new; end $callback$;
+create trigger xb_st_dml_control before insert on storage.objects for each row execute function pg_temp.xb_st_dml_callback();
+insert into storage.buckets(id,name) values('667-timestamp-dml-control','667-timestamp-dml-control');
+select lives_ok($call$select * from storage.search_by_timestamp('','667-timestamp-dml-control',10,1,'','asc','updated_at','')$call$,
+  'ST SELECT lives with a live DML callback installed');
+select is((select count(*) from pg_temp.xb_st_dml_effect),0::bigint,'ST SELECT does not invoke the DML callback');
+select lives_ok($call$insert into storage.objects(bucket_id,name) values('667-timestamp-dml-control','own-trigger-control')$call$,
+  'ST own DML trigger control lives');
+select is((select count(*) from pg_temp.xb_st_dml_effect),1::bigint,'ST DML control positively invokes the same callback');
+select is((select array_agg(fn order by fn) from pg_temp.xb_st_admitted()),
+  array['storage.search_by_timestamp(text,text,integer,integer,text,text,text,text,text,text,text)'::regprocedure::oid],
+  'ST DML-only callbacks do not change this SELECT effect admission');
+\else
+select plan(1);
+select ok(to_regprocedure('storage.search_by_timestamp(text,text,integer,integer,text,text,text,text,text,text,text)') is null
+  and not exists(select 1 from pg_temp.xb_st_admitted()),'ST absent native reader receives no admission or behavior credit');
+\endif
+select * from finish();
+rollback;

package/tests/agent_board_667_writers.test.sql

@@ -0,0 +1,281 @@
+-- #667 writer and own-operation behavior witnesses; class and race proof still required.
+create extension if not exists pgtap with schema extensions;
+set search_path = extensions, public, agent_board;
+begin;
+select plan(81);
+create temp table xb_fixture (board1 uuid, board2 uuid, actor uuid, actor_user uuid, thread uuid, private_thread uuid) on commit drop;
+do $$
+declare
+  suffix text := replace(substr(gen_random_uuid()::text, 1, 8), '-', '');
+  actor_user uuid; actor uuid := gen_random_uuid(); creator uuid := gen_random_uuid();
+  board1 uuid; board2 uuid; th uuid := gen_random_uuid(); private_th uuid := gen_random_uuid();
+begin
+  actor_user := public.ensure_github_user('xb-actor-' || suffix, 'xb-actor-' || suffix || '@example.test', 'xb-actor-' || suffix, 'XB Actor');
+  insert into agent_board.agents(id,agent_type,handle,display_name,status,auth_user_id,owner_user_id)
+  values (creator,'agent','xb-creator-' || suffix,'XB Creator','active',null,null),
+         (actor,'agent','xb-actor-' || suffix,'XB Actor','active',actor_user,actor_user);
+  select board_id into board1 from agent_board.create_board(creator,'xb-one-' || suffix,'XB One','fixture','{}'::jsonb,'private');
+  select board_id into board2 from agent_board.create_board(creator,'xb-two-' || suffix,'XB Two','fixture','{}'::jsonb,'private');
+  insert into agent_board.board_memberships(board_id,agent_id,membership_state,created_by_agent_id,role)
+  values (board1,actor,'joined',creator,'member'), (board2,actor,'joined',creator,'member');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values (th,'coordination',actor,'XB associated'),(private_th,'coordination',actor,'XB private');
+  perform set_config('request.jwt.claim.role','authenticated',true);
+  perform set_config('request.jwt.claim.sub',actor_user::text,true);
+  insert into xb_fixture values(board1,board2,actor,actor_user,th,private_th);
+end $$;
+create temp table xb_writer_threads(kind text primary key, id uuid not null) on commit drop;
+insert into xb_writer_threads select kind, gen_random_uuid() from unnest(array['artifact','claim','heartbeat','task','conflict','anchor','receipt','explicit','rollback','rollback_post','signed_post','signed_task','released_claim','resolved_conflict','escalation','membership']) kind;
+insert into agent_board.threads(id, thread_type, created_by_agent_id, subject)
+select id, 'coordination', (select actor from xb_fixture), kind from xb_writer_threads;
+select lives_ok($$select * from agent_board.add_artifact((select actor from xb_fixture),'https://example.test/private', p_thread_id => (select id from xb_writer_threads where kind='artifact'))$$, 'XB artifact writes private history');
+select throws_ok($$select * from agent_board.post_board_message((select id from xb_writer_threads where kind='artifact'),(select actor from xb_fixture),(select board1 from xb_fixture),'s','b')$$,'42501','thread has private history','XB artifact history refuses association');
+select is((select board_id from agent_board.threads where id=(select id from xb_writer_threads where kind='artifact')),null::uuid,'XB artifact thread remains unstamped');
+select lives_ok($$select * from agent_board.acquire_claim((select actor from xb_fixture),'custom','xb-writer-claim',now()+interval '1 hour',p_thread_id => (select id from xb_writer_threads where kind='claim'))$$,'XB thread-only claim writes history');
+select throws_ok($$select * from agent_board.post_board_message((select id from xb_writer_threads where kind='claim'),(select actor from xb_fixture),(select board1 from xb_fixture),'s','b')$$,'42501','thread has private history','XB thread-only claim refuses association');
+select is((select board_id from agent_board.threads where id=(select id from xb_writer_threads where kind='claim')),null::uuid,'XB claim thread remains unstamped');
+select lives_ok($$select * from agent_board.heartbeat((select actor from xb_fixture),(select id from xb_writer_threads where kind='heartbeat'),p_activity_summary => 'first')$$,'XB heartbeat establishes thread');
+select lives_ok($$select * from agent_board.heartbeat((select actor from xb_fixture),null,p_activity_summary => 'retained',p_metadata => '{"note":"private"}'::jsonb)$$,'XB heartbeat retains thread with private metadata');
+select is((select thread_id from agent_board.presence where agent_id=(select actor from xb_fixture)),(select id from xb_writer_threads where kind='heartbeat'),'XB heartbeat retains stored thread');
+select ok(exists (select 1 from pg_locks l where l.pid=pg_backend_pid() and l.locktype='advisory' and l.granted
+  and l.classid::bigint=(hashtext('agent_board.heartbeat_thread')::bigint & 4294967295)
+  and l.objid::bigint=(hashtext((select actor::text from xb_fixture))::bigint & 4294967295) and l.objsubid=2),
+  'XB heartbeat actually holds its actor-scoped advisory namespace');
+select is((select jsonb_build_object('summary',activity_summary,'note',metadata->>'note') from agent_board.presence where agent_id=(select actor from xb_fixture)),
+  '{"summary":"retained","note":"private"}'::jsonb, 'XB presence stores caller summary and metadata before history refusal');
+select throws_ok($$select * from agent_board.post_board_message((select id from xb_writer_threads where kind='heartbeat'),(select actor from xb_fixture),(select board1 from xb_fixture),'s','b')$$,'42501','thread has private history','XB retained presence refuses association');
+select is((select board_id from agent_board.threads where id=(select id from xb_writer_threads where kind='heartbeat')),null::uuid,'XB presence thread remains unstamped');
+select lives_ok($$select * from agent_board.create_tasking_delivery((select id from xb_writer_threads where kind='task'),(select actor from xb_fixture),'own task',p_board_id => (select board1 from xb_fixture))$$,'XB empty first board task succeeds');
+select is((select board_id from agent_board.threads where id=(select id from xb_writer_threads where kind='task')),(select board1 from xb_fixture),'XB task stamps before own history');
+select is((select count(*) from agent_board.tasks where thread_id=(select id from xb_writer_threads where kind='task')),1::bigint,'XB own task is recorded');
+select lives_ok($$select * from agent_board.create_task((select id from xb_writer_threads where kind='anchor'),(select actor from xb_fixture),'anchor')$$,'XB foreign task anchor created');
+select lives_ok($$select * from agent_board.raise_conflict((select id from xb_writer_threads where kind='conflict'),(select actor from xb_fixture),'foreign task',p_task_id => (select id from agent_board.tasks where thread_id=(select id from xb_writer_threads where kind='anchor')))$$,'XB taskful conflict stores a different thread');
+select throws_ok($$select * from agent_board.post_board_message((select id from xb_writer_threads where kind='conflict'),(select actor from xb_fixture),(select board1 from xb_fixture),'s','b')$$,'42501','thread has private history','XB foreign-task conflict refuses association');
+select lives_ok($$select * from agent_board.mark_read((select id from xb_writer_threads where kind='receipt'),(select actor from xb_fixture),0)$$,'XB creator can write empty-thread receipt');
+select is((select last_read_message_sequence from agent_board.read_receipts where thread_id=(select id from xb_writer_threads where kind='receipt') and agent_id=(select actor from xb_fixture)),0::bigint,'XB receipt is bounded to sequence zero');
+select lives_ok($$select * from agent_board.post_board_message((select id from xb_writer_threads where kind='receipt'),(select actor from xb_fixture),(select board1 from xb_fixture),'s','b')$$,'XB receipt alone permits first association');
+select is((select board_id from agent_board.threads where id=(select id from xb_writer_threads where kind='receipt')),(select board1 from xb_fixture),'XB receipt control actually stamps the empty thread');
+select lives_ok($$select * from agent_board.acquire_claim((select actor from xb_fixture),'custom','xb-task-claim',now()+interval '1 hour',p_task_id => (select id from agent_board.tasks where thread_id=(select id from xb_writer_threads where kind='anchor')))$$,'XB taskful claim is created');
+select is((select c.thread_id from agent_board.claims c join agent_board.tasks t on t.id=c.task_id where c.resource_key='xb-task-claim'),(select id from xb_writer_threads where kind='anchor'),'XB taskful claim stores its task-derived thread');
+select ok(exists(select 1 from agent_board.task_events e join agent_board.tasks t on t.id=e.task_id
+  where t.thread_id=(select id from xb_writer_threads where kind='anchor')), 'XB task-event equality checks an actual event');
+select is((select count(*) from agent_board.task_events e join agent_board.tasks t on t.id=e.task_id where t.thread_id=(select id from xb_writer_threads where kind='anchor') and e.thread_id is distinct from t.thread_id),0::bigint,'XB task events store the task thread');
+select throws_ok($$select set_config('request.jwt.claim.role','service_role',true); select * from agent_board.mark_read((select id from xb_writer_threads where kind='anchor'),(select created_by_agent_id from agent_board.boards where id=(select board1 from xb_fixture)),0)$$,'42501','read receipt subject has no access to thread','XB receipt subject gate blocks a service caller from minting access');
+select is((select count(*) from agent_board.read_receipts where thread_id=(select id from xb_writer_threads where kind='anchor') and agent_id=(select created_by_agent_id from agent_board.boards where id=(select board1 from xb_fixture))),0::bigint,'XB denied subject has no receipt');
+-- Multi-anchor controls: parent histories exist before the artifact. A mixed
+-- artifact stores references to a task and a message on different threads.
+select lives_ok($$select * from agent_board.post_message((select private_thread from xb_fixture),(select actor from xb_fixture),'private message anchor')$$,
+  'XB private message anchor is created');
+select lives_ok($$select * from agent_board.add_artifact((select actor from xb_fixture),'https://example.test/mixed',
+  p_task_id => (select id from agent_board.tasks where thread_id=(select id from xb_writer_threads where kind='anchor')),
+  p_message_id => (select id from agent_board.messages where thread_id=(select private_thread from xb_fixture)))$$,
+  'XB mixed task and message artifact is created');
+select is((select count(*) from agent_board.artifacts a join agent_board.tasks t on t.id=a.task_id join agent_board.messages m on m.id=a.message_id
+  where a.uri='https://example.test/mixed' and t.thread_id=(select id from xb_writer_threads where kind='anchor')
+    and m.thread_id=(select private_thread from xb_fixture)), 1::bigint, 'XB artifact stores both distinct anchors');
+select lives_ok($$select * from agent_board.add_artifact((select actor from xb_fixture),'https://example.test/event',
+  p_task_event_id => (select id from agent_board.task_events where thread_id=(select id from xb_writer_threads where kind='anchor') order by event_sequence limit 1))$$,
+  'XB task-event anchored artifact is created');
+select is((select count(*) from agent_board.artifacts where uri='https://example.test/event' and task_event_id is not null),1::bigint,
+  'XB event-anchored artifact retains its parent');
+select throws_ok($$select * from agent_board.post_board_message((select private_thread from xb_fixture),(select actor from xb_fixture),(select board1 from xb_fixture),'s','b')$$,
+  '42501','thread has private history','XB message-anchor thread cannot be promoted');
+select throws_ok($$select * from agent_board.post_board_message((select id from xb_writer_threads where kind='anchor'),(select actor from xb_fixture),(select board1 from xb_fixture),'s','b')$$,
+  '42501','thread has private history','XB task and event anchor thread cannot be promoted');
+-- The service-only retention routine dynamically updates existing presence rows.
+-- Exercise its actual state effect: it must preserve the thread and caller data.
+update agent_board.presence set expires_at=now()-interval '1 hour' where agent_id=(select actor from xb_fixture);
+select lives_ok($$select agent_board.mark_retention_metadata('presence',now(),gen_random_uuid(),'xb test')$$,
+  'XB retention processes existing presence');
+select is((select thread_id from agent_board.presence where agent_id=(select actor from xb_fixture)),
+  (select id from xb_writer_threads where kind='heartbeat'), 'XB retention preserves presence thread');
+select is((select metadata->>'note' from agent_board.presence where agent_id=(select actor from xb_fixture)),
+  'private', 'XB retention preserves caller metadata');
+select ok((select metadata ? 'ops_retained_at' from agent_board.presence where agent_id=(select actor from xb_fixture)),
+  'XB retention actually updates the existing row');
+-- A board task can also explicitly address an agent. Its private explicit
+-- recipient is NULL-board even while the board copy uses the task's board.
+select lives_ok($$select * from agent_board.create_tasking_delivery((select id from xb_writer_threads where kind='explicit'),
+  (select actor from xb_fixture),'XB explicit task',p_recipient_agent_ids=>array[(select actor from xb_fixture)],p_board_id=>(select board1 from xb_fixture))$$,
+  'XB empty board task with explicit recipient succeeds');
+select is((select board_id from agent_board.threads where id=(select id from xb_writer_threads where kind='explicit')),
+  (select board1 from xb_fixture),'XB explicit task stamps its thread');
+select ok(exists(select 1 from agent_board.delivery_recipients d join agent_board.tasks t on t.id=d.source_task_id
+  where t.thread_id=(select id from xb_writer_threads where kind='explicit') and d.recipient_agent_id=(select actor from xb_fixture)
+    and d.delivery_mode='tasking' and d.board_id is null), 'XB explicit task recipient remains private');
+-- Delegation is anchored to an existing parent, rather than an empty-thread
+-- first-association route. Verify its actual child/task linkage on a board.
+select lives_ok($$select * from agent_board.delegate_task((select id from agent_board.tasks where thread_id=(select id from xb_writer_threads where kind='task') and title='own task'),
+  (select actor from xb_fixture),'XB child',p_delegated_to_agent_id=>(select actor from xb_fixture))$$,
+  'XB delegation on an associated parent task succeeds');
+select ok(exists(select 1 from agent_board.delegations d join agent_board.tasks parent on parent.id=d.parent_task_id
+  join agent_board.tasks child on child.id=d.child_task_id join agent_board.threads th on th.id=child.thread_id
+  where parent.thread_id=(select id from xb_writer_threads where kind='task') and child.thread_id=parent.thread_id
+    and child.title='XB child' and th.board_id=(select board1 from xb_fixture)),
+  'XB delegation child preserves its parent thread and board');
+-- Inject a late failure after create_task has inserted its task but before its
+-- event can complete. The caller's first stamp and all its writes must roll back.
+create function pg_temp.xb_fail_task_event() returns trigger language plpgsql as $body$
+begin
+  if exists(select 1 from agent_board.tasks where id=new.task_id and title='XB rollback task') then
+    if not exists(select 1 from agent_board.tasks t join agent_board.threads th on th.id=t.thread_id
+      where t.id=new.task_id and th.board_id=(select board1 from xb_fixture)) then
+      raise exception 'XB event reached before first stamp' using errcode='P0001';
+    end if;
+    raise exception 'XB injected task-event failure' using errcode='P0001';
+  end if;
+  return new;
+end $body$;
+create trigger xb_fail_task_event before insert on agent_board.task_events for each row execute function pg_temp.xb_fail_task_event();
+create temp table xb_rollback_before on commit drop as
+select (select count(*) from agent_board.delivery_recipients where board_id=(select board1 from xb_fixture)) as deliveries,
+       (select count(*) from agent_board.inbox_items where board_id=(select board1 from xb_fixture)) as inbox;
+select throws_ok($$select * from agent_board.create_tasking_delivery((select id from xb_writer_threads where kind='rollback'),
+  (select actor from xb_fixture),'XB rollback task',p_board_id=>(select board1 from xb_fixture))$$,
+  'P0001','XB injected task-event failure','XB tasking late failure is caught after the first stamp');
+select is((select board_id from agent_board.threads where id=(select id from xb_writer_threads where kind='rollback')),
+  null::uuid,'XB late tasking failure rolls back the first stamp');
+select is((select count(*) from agent_board.tasks where thread_id=(select id from xb_writer_threads where kind='rollback'))
+  +(select count(*) from agent_board.task_events where thread_id=(select id from xb_writer_threads where kind='rollback'))
+  +(select count(*) from agent_board.messages where thread_id=(select id from xb_writer_threads where kind='rollback')),
+  0::bigint,'XB late tasking failure leaves no task, event or message');
+select ok((select deliveries=(select count(*) from agent_board.delivery_recipients where board_id=(select board1 from xb_fixture))
+  and inbox=(select count(*) from agent_board.inbox_items where board_id=(select board1 from xb_fixture)) from xb_rollback_before),
+  'XB late tasking failure leaves board deliveries and inbox unchanged');
+-- A post failure at the inbox insertion boundary occurs after its message and
+-- first delivery row exist. Observe that custody before raising, then verify
+-- the complete operation including its initial stamp rolled back.
+create function pg_temp.xb_fail_post_inbox() returns trigger language plpgsql as $body$
+begin
+  if new.subject='XB rollback post' then
+    if not exists(select 1 from agent_board.messages m join agent_board.threads th on th.id=m.thread_id
+      join agent_board.delivery_recipients d on d.source_message_id=m.id
+      where m.id=new.source_message_id and th.board_id=(select board1 from xb_fixture) and d.id=new.delivery_recipient_id) then
+      raise exception 'XB inbox reached without stamped message and delivery' using errcode='P0001';
+    end if;
+    raise exception 'XB injected inbox failure' using errcode='P0001';
+  end if;
+  return new;
+end $body$;
+create trigger xb_fail_post_inbox before insert on agent_board.inbox_items for each row execute function pg_temp.xb_fail_post_inbox();
+create temp table xb_post_before on commit drop as
+select (select count(*) from agent_board.delivery_recipients where board_id=(select board1 from xb_fixture)) as deliveries,
+       (select count(*) from agent_board.inbox_items where board_id=(select board1 from xb_fixture)) as inbox;
+select throws_ok($$select * from agent_board.post_board_message((select id from xb_writer_threads where kind='rollback_post'),
+  (select actor from xb_fixture),(select board1 from xb_fixture),'XB rollback post','body')$$,
+  'P0001','XB injected inbox failure','XB post fails after stamp, message and delivery exist');
+select is((select board_id from agent_board.threads where id=(select id from xb_writer_threads where kind='rollback_post')),
+  null::uuid,'XB late post failure rolls back its stamp');
+select is((select count(*) from agent_board.messages where thread_id=(select id from xb_writer_threads where kind='rollback_post')),
+  0::bigint,'XB late post failure rolls back its message');
+select ok((select deliveries=(select count(*) from agent_board.delivery_recipients where board_id=(select board1 from xb_fixture))
+  and inbox=(select count(*) from agent_board.inbox_items where board_id=(select board1 from xb_fixture)) from xb_post_before),
+  'XB late post failure rolls back delivery and inbox rows');
+-- Signed wrappers must use the same empty-thread boundary and retain the
+-- actor/source evidence linking the operation to the resulting history.
+select lives_ok($$select * from agent_board.signed_post_board_message(
+  jsonb_build_object('p_thread_id',(select id from xb_writer_threads where kind='signed_post'),
+    'p_author_agent_id',(select actor from xb_fixture),'p_board_id',(select board1 from xb_fixture),
+    'p_subject','XB signed post','p_body','signed body'),
+  jsonb_build_object('agent_id',(select actor from xb_fixture),'verification_status','warn',
+    'payload_digest','sha256:'||repeat('a',64),'enforcement_mode','warn'))$$,
+  'XB signed board post first-associates an empty thread');
+select ok(exists(select 1 from agent_board.messages m join agent_board.threads th on th.id=m.thread_id
+  join agent_board.signature_evidence e on e.source_message_id=m.id
+  where th.id=(select id from xb_writer_threads where kind='signed_post') and th.board_id=(select board1 from xb_fixture)
+    and e.agent_id=(select actor from xb_fixture) and e.operation='post_board_message' and e.verification_status='warn'),
+  'XB signed board post retains board, actor and message evidence');
+select lives_ok($$select * from agent_board.signed_create_tasking_delivery(
+  jsonb_build_object('p_thread_id',(select id from xb_writer_threads where kind='signed_task'),
+    'p_created_by_agent_id',(select actor from xb_fixture),'p_board_id',(select board1 from xb_fixture),'p_title','XB signed task'),
+  jsonb_build_object('agent_id',(select actor from xb_fixture),'verification_status','warn',
+    'payload_digest','sha256:'||repeat('b',64),'enforcement_mode','warn'))$$,
+  'XB signed board task first-associates an empty thread');
+select ok(exists(select 1 from agent_board.tasks t join agent_board.threads th on th.id=t.thread_id
+  join agent_board.task_events ev on ev.task_id=t.id join agent_board.signature_evidence e on e.source_task_event_id=ev.id
+  where th.id=(select id from xb_writer_threads where kind='signed_task') and th.board_id=(select board1 from xb_fixture)
+    and e.agent_id=(select actor from xb_fixture) and e.operation='create_tasking_delivery' and e.verification_status='warn'),
+  'XB signed board task retains board, actor and task-event evidence');
+select lives_ok($$select * from agent_board.delegate_task((select id from agent_board.tasks where thread_id=(select id from xb_writer_threads where kind='anchor') and title='anchor'),
+  (select actor from xb_fixture),'XB private child',p_delegated_to_agent_id=>(select actor from xb_fixture))$$,
+  'XB delegation on a private parent succeeds without association');
+select ok(exists(select 1 from agent_board.delegations d join agent_board.tasks parent on parent.id=d.parent_task_id
+  join agent_board.tasks child on child.id=d.child_task_id where parent.thread_id=(select id from xb_writer_threads where kind='anchor')
+    and child.thread_id=parent.thread_id and child.title='XB private child'),
+  'XB private delegation keeps the actual parent and child on the same thread');
+select throws_ok($$select * from agent_board.post_board_message((select id from xb_writer_threads where kind='anchor'),
+  (select actor from xb_fixture),(select board1 from xb_fixture),'after delegation','body')$$,
+  '42501','thread has private history','XB delegated private history cannot be associated');
+select ok((select board_id is null from agent_board.threads where id=(select id from xb_writer_threads where kind='anchor'))
+  and exists(select 1 from agent_board.tasks where title='XB private child' and thread_id=(select id from xb_writer_threads where kind='anchor')),
+  'XB refusal preserves the private delegated child and null stamp');
+-- Existing-row updates do not erase private history. Exercise a released
+-- claim and a resolved conflict, retaining each real thread anchor.
+create temp table xb_retained_claim(lease_token uuid) on commit drop;
+select lives_ok($$insert into xb_retained_claim select lease_token from agent_board.acquire_claim((select actor from xb_fixture),
+  'custom','xb-released-history',now()+interval '1 hour',p_thread_id=>(select id from xb_writer_threads where kind='released_claim'))$$,
+  'XB released-history claim is created');
+select lives_ok($$select * from agent_board.release_claim((select lease_token from xb_retained_claim))$$,
+  'XB claim release succeeds');
+select ok(exists(select 1 from agent_board.claims where lease_token=(select lease_token from xb_retained_claim)
+  and status='released' and thread_id=(select id from xb_writer_threads where kind='released_claim')),
+  'XB released claim retains its thread anchor');
+select throws_ok($$select * from agent_board.post_board_message((select id from xb_writer_threads where kind='released_claim'),
+  (select actor from xb_fixture),(select board1 from xb_fixture),'released','body')$$,
+  '42501','thread has private history','XB released claim still prevents association');
+select is((select board_id from agent_board.threads where id=(select id from xb_writer_threads where kind='released_claim')),
+  null::uuid,'XB released-claim refusal preserves null stamp');
+create temp table xb_resolved_conflict(conflict_id uuid) on commit drop;
+select lives_ok($$insert into xb_resolved_conflict select conflict_id from agent_board.raise_conflict(
+  (select id from xb_writer_threads where kind='resolved_conflict'),(select actor from xb_fixture),'XB resolved history')$$,
+  'XB resolved-history conflict is created');
+select lives_ok($$select * from agent_board.resolve_conflict((select conflict_id from xb_resolved_conflict),(select actor from xb_fixture))$$,
+  'XB conflict resolution succeeds');
+select ok(exists(select 1 from agent_board.conflicts where id=(select conflict_id from xb_resolved_conflict)
+  and status='resolved' and thread_id=(select id from xb_writer_threads where kind='resolved_conflict')),
+  'XB resolved conflict retains its thread anchor');
+select throws_ok($$select * from agent_board.post_board_message((select id from xb_writer_threads where kind='resolved_conflict'),
+  (select actor from xb_fixture),(select board1 from xb_fixture),'resolved','body')$$,
+  '42501','thread has private history','XB resolved conflict still prevents association');
+select is((select board_id from agent_board.threads where id=(select id from xb_writer_threads where kind='resolved_conflict')),
+  null::uuid,'XB resolved-conflict refusal preserves null stamp');
+-- Escalations and thread memberships are history too (#707 B1). Each thread's
+-- only history is that one row; association must refuse and leave it unstamped
+-- and messageless. The membership is a direct insert under the service_role
+-- grant, which is the only writer of that relation.
+select lives_ok($$select * from agent_board.raise_escalation((select id from xb_writer_threads where kind='escalation'),
+  (select actor from xb_fixture),'XB private escalation')$$,'XB thread-level escalation writes history');
+select ok((select count(*) from agent_board.escalations where thread_id=t.id)=1
+  and not exists(select 1 from agent_board.messages where thread_id=t.id) and not exists(select 1 from agent_board.tasks where thread_id=t.id)
+  and not exists(select 1 from agent_board.task_events where thread_id=t.id) and not exists(select 1 from agent_board.artifacts where thread_id=t.id)
+  and not exists(select 1 from agent_board.claims where thread_id=t.id) and not exists(select 1 from agent_board.conflicts where thread_id=t.id)
+  and not exists(select 1 from agent_board.presence where thread_id=t.id) and not exists(select 1 from agent_board.thread_memberships where thread_id=t.id),
+  'XB escalation is the thread''s only history') from xb_writer_threads t where t.kind='escalation';
+select throws_ok($$select * from agent_board.post_board_message((select id from xb_writer_threads where kind='escalation'),
+  (select actor from xb_fixture),(select board1 from xb_fixture),'escalated','body')$$,
+  '42501','thread has private history','XB escalation-only history refuses association');
+select is((select board_id from agent_board.threads where id=(select id from xb_writer_threads where kind='escalation')),
+  null::uuid,'XB escalation-only refusal preserves null stamp');
+select is((select count(*) from agent_board.messages where thread_id=(select id from xb_writer_threads where kind='escalation')),
+  0::bigint,'XB escalation-only refusal leaves the message count at zero');
+-- Ids are interpolated first: service_role cannot read this file's temp tables.
+select lives_ok(format($$set local role service_role;
+  insert into agent_board.thread_memberships(thread_id,agent_id,granted_by_agent_id) values (%L::uuid,%L::uuid,%L::uuid);
+  reset role$$,(select id from xb_writer_threads where kind='membership'),
+  (select created_by_agent_id from agent_board.boards where id=(select board1 from xb_fixture)),(select actor from xb_fixture)),
+  'XB service_role direct membership insert writes history');
+select ok((select count(*) from agent_board.thread_memberships where thread_id=t.id)=1
+  and not exists(select 1 from agent_board.messages where thread_id=t.id) and not exists(select 1 from agent_board.tasks where thread_id=t.id)
+  and not exists(select 1 from agent_board.task_events where thread_id=t.id) and not exists(select 1 from agent_board.artifacts where thread_id=t.id)
+  and not exists(select 1 from agent_board.claims where thread_id=t.id) and not exists(select 1 from agent_board.conflicts where thread_id=t.id)
+  and not exists(select 1 from agent_board.presence where thread_id=t.id) and not exists(select 1 from agent_board.escalations where thread_id=t.id),
+  'XB membership is the thread''s only history') from xb_writer_threads t where t.kind='membership';
+select throws_ok($$select * from agent_board.post_board_message((select id from xb_writer_threads where kind='membership'),
+  (select actor from xb_fixture),(select board1 from xb_fixture),'membership','body')$$,
+  '42501','thread has private history','XB membership-only history refuses association');
+select is((select board_id from agent_board.threads where id=(select id from xb_writer_threads where kind='membership')),
+  null::uuid,'XB membership-only refusal preserves null stamp');
+select is((select count(*) from agent_board.messages where thread_id=(select id from xb_writer_threads where kind='membership')),
+  0::bigint,'XB membership-only refusal leaves the message count at zero');
+select * from finish();
+rollback;