@consiliency/agent-board-schema 1.9.0 → 1.12.0

package/tests/agent_board_enrollment_audit_content.test.sql

@@ -76,10 +76,13 @@ select is(
         -- ("X is an aggregate function"); restrict to callable functions +
         -- procedures (the RPC surface this invariant is about).
         and p.prokind in ('f', 'p')
-        and p.proname <> 'enroll_federated_identity'
+        -- The federation enroll RPCs WRITE the audit (enroll_federated_human added by
+        -- FEDSESSION, F-6); the invariant is that nothing on the send/session read path
+        -- touches it (asserted specifically in the next case).
+        and p.proname not in ('enroll_federated_identity', 'enroll_federated_human')
    ) d
    where lower(d.def) like '%enrollment_federation_audit%'),
-  0, 'no agent_board RPC other than enroll_federated_identity references enrollment_federation_audit');
+  0, 'no agent_board RPC other than the federation enroll RPCs references enrollment_federation_audit');
 select is(
   (select count(*)::int from (
      select pg_get_functiondef(p.oid) as def

package/tests/agent_board_fedsession.test.sql

@@ -0,0 +1,314 @@
+-- FEDSESSION pgTAP: enroll_federated_human() — service_role no-PoP federated-HUMAN
+-- provisioning (Option A minter substrate).
+--
+-- Proves: the 5-arg signature + service_role-only privs; one provision mints a kind=human
+-- SELF-owned agent (auth_user_id = owner_user_id = a synthetic uid) with a real auth.users
+-- row + NO signing key + a mode='fedsession' audit row; the verified email lives ONLY in
+-- auth.users.raw_user_meta_data (provenance-tagged, MERGED preserving slug) with just the
+-- boolean email_verified in agents.metadata (no '@' anywhere in agents.metadata);
+-- idempotency + L-4b (one agent per synthetic uid); current_agent_id() resolves the
+-- no-credential session to the agent; the IDLINK shared-uid invariant against
+-- enroll_federated_identity; and the provider/kind/subject/non-service rejection matrix.
+-- Runs as postgres (service_role-equivalent), mirroring
+-- agent_board_enroll_federated_identity.test.sql + agent_board_localauth.test.sql.
+
+create extension if not exists pgtap with schema extensions;
+set search_path = extensions, public, agent_board;
+
+begin;
+
+select plan(36);
+
+-- ---------------------------------------------------------------------------
+-- Phase 0 (superuser): function metadata + privileges
+-- ---------------------------------------------------------------------------
+-- 1
+select has_function(
+  'agent_board', 'enroll_federated_human',
+  array['text','text','text','jsonb','text'],
+  'enroll_federated_human(text,text,text,jsonb,text) exists');
+-- 2
+select function_privs_are(
+  'agent_board', 'enroll_federated_human', array['text','text','text','jsonb','text'],
+  'service_role', array['EXECUTE'], 'service_role may EXECUTE enroll_federated_human');
+-- 3
+select function_privs_are(
+  'agent_board', 'enroll_federated_human', array['text','text','text','jsonb','text'],
+  'authenticated', array[]::text[], 'authenticated may NOT EXECUTE enroll_federated_human');
+-- 4
+select function_privs_are(
+  'agent_board', 'enroll_federated_human', array['text','text','text','jsonb','text'],
+  'anon', array[]::text[], 'anon may NOT EXECUTE enroll_federated_human');
+
+-- ---------------------------------------------------------------------------
+-- Fixtures + provision identity A (email_verified) and B (unverified)
+-- ---------------------------------------------------------------------------
+create temp table _f (
+  s text, iss text, aud text,
+  sub_a text, email_a text, sub_b text
+) on commit drop;
+grant all on table _f to authenticated, service_role;
+
+create temp table _r (
+  label text, agent_id uuid, auth_user_id uuid, owner_user_id uuid,
+  handle text, kind text, status text, created_at timestamptz
+) on commit drop;
+grant all on table _r to authenticated, service_role;
+
+do $$
+declare
+  s text := replace(substr(gen_random_uuid()::text, 1, 8), '-', '');
+  v_iss text; v_agent uuid; v_auth uuid; v_owner uuid; v_handle text;
+  v_kind text; v_status text; v_created timestamptz;
+begin
+  v_iss := 'https://fed-hs-' || s || '.test';
+  insert into _f values (
+    s, v_iss, 'message-board',
+    'portal-user-' || s, 'alice-' || s || '@example.test', 'portal-user2-' || s);
+
+  -- Approved provider that permits BOTH agent + human (agent needed for the IDLINK case).
+  insert into agent_board.identity_providers
+    (issuer, audience, supported, policy_approved, allowed_scopes, allowed_board_scopes, allowed_agent_kinds)
+  values
+    (v_iss, 'message-board', true, true, '{board:send}', '{board:x}', '{agent,human}');
+
+  -- Provision A (verified email present in the claim).
+  select e.agent_id, e.auth_user_id, e.handle, e.kind, e.status, e.created_at
+    into v_agent, v_auth, v_handle, v_kind, v_status, v_created
+    from agent_board.enroll_federated_human(
+      v_iss, 'message-board', 'portal-user-' || s,
+      jsonb_build_object('sub', 'portal-user-' || s, 'email', 'alice-' || s || '@example.test',
+                         'email_verified', true, 'name', 'Alice ' || s),
+      'Alice ' || s) e;
+  select a.owner_user_id into v_owner from agent_board.agents a where a.id = v_agent;
+  insert into _r values ('A', v_agent, v_auth, v_owner, v_handle, v_kind, v_status, v_created);
+
+  -- Provision B (DIFFERENT identity, email_verified=false).
+  select e.agent_id, e.auth_user_id, e.handle, e.kind, e.status, e.created_at
+    into v_agent, v_auth, v_handle, v_kind, v_status, v_created
+    from agent_board.enroll_federated_human(
+      v_iss, 'message-board', 'portal-user2-' || s,
+      jsonb_build_object('sub', 'portal-user2-' || s, 'email', 'bob-' || s || '@example.test',
+                         'email_verified', false),
+      null) e;
+  select a.owner_user_id into v_owner from agent_board.agents a where a.id = v_agent;
+  insert into _r values ('B', v_agent, v_auth, v_owner, v_handle, v_kind, v_status, v_created);
+end
+$$;
+
+-- One provision mints a kind=human, self-owned, active agent -----------------------------
+-- 5
+select is((select count(*)::int from _r where label = 'A'), 1, 'provision A returned exactly one row');
+-- 6
+select is((select kind from _r where label = 'A'), 'human', 'agent A kind = human');
+-- 7
+select is(
+  (select a.agent_type from agent_board.agents a where a.id = (select agent_id from _r where label='A')),
+  'human', 'agent A agent_type = human');
+-- 8
+select is((select status from _r where label = 'A'), 'active', 'agent A status = active');
+-- 9
+select is(
+  (select auth_user_id from _r where label='A'),
+  (select owner_user_id from _r where label='A'),
+  'agent A is self-owned (auth_user_id = owner_user_id = the synthetic uid)');
+-- 10
+select is(
+  (select count(*)::int from auth.users u where u.id = (select auth_user_id from _r where label='A')),
+  1, 'the synthetic auth.users row for agent A exists');
+-- 11
+select is(
+  (select handle from _r where label='A'),
+  'fed-human-' || substr(
+    encode(extensions.digest(convert_to((select iss from _f) || '|' || (select sub_a from _f), 'UTF8'), 'sha256'), 'hex'),
+    1, 32),
+  'handle = fed-human-<sha256(issuer|subject)[:32]> (byte-identical to enroll_federated_identity)');
+
+-- metadata carries the federation snapshot, boolean-only email, no PII --------------------
+-- 12
+select is(
+  (select a.metadata->'federation'->>'issuer' from agent_board.agents a where a.id=(select agent_id from _r where label='A')),
+  (select iss from _f), 'metadata.federation.issuer round-trips');
+-- 13
+select is(
+  (select a.metadata->'federation'->>'subject' from agent_board.agents a where a.id=(select agent_id from _r where label='A')),
+  (select sub_a from _f), 'metadata.federation.subject round-trips');
+-- 14
+select is(
+  (select a.metadata->'federation'->>'mode' from agent_board.agents a where a.id=(select agent_id from _r where label='A')),
+  'fedsession', 'metadata.federation.mode = fedsession');
+-- 15
+select is(
+  (select a.metadata->'federation'->>'email_verified' from agent_board.agents a where a.id=(select agent_id from _r where label='A')),
+  'true', 'verified identity -> metadata.federation.email_verified = true');
+-- 16
+select ok(
+  (select a.metadata::text not like '%@%' from agent_board.agents a where a.id=(select agent_id from _r where label='A')),
+  'agent A metadata carries NO plaintext email/@ (PII stays out of fleet-readable metadata)');
+
+-- verified email + slug live (merged) in auth.users.raw_user_meta_data --------------------
+-- 17
+select is(
+  (select u.raw_user_meta_data->>'fedsession_email' from auth.users u where u.id=(select auth_user_id from _r where label='A')),
+  (select email_a from _f), 'verified email is stored in auth.users.raw_user_meta_data');
+-- 18
+select is(
+  (select u.raw_user_meta_data->>'fedsession_email_provenance' from auth.users u where u.id=(select auth_user_id from _r where label='A')),
+  'portal-claim-unverified', 'stored email is tagged provenance=portal-claim-unverified (F-12)');
+-- 19 (F-4 merge preserved _ensure_agent_auth_user's slug)
+select is(
+  (select u.raw_user_meta_data->>'slug' from auth.users u where u.id=(select auth_user_id from _r where label='A')),
+  (select handle from _r where label='A'),
+  'raw_user_meta_data merge preserved the _ensure_agent_auth_user slug (no overwrite)');
+
+-- NO signing key; audit row written ------------------------------------------------------
+-- 20
+select is(
+  (select count(*)::int from agent_board.agent_signing_keys k where k.agent_id=(select agent_id from _r where label='A')),
+  0, 'agent A holds NO agent_signing_keys row (humans hold no key)');
+-- 21
+select is(
+  (select count(*)::int from agent_board.enrollment_federation_audit e
+     where e.agent_id=(select agent_id from _r where label='A') and e.mode='fedsession'),
+  1, 'provision A wrote exactly one mode=fedsession audit row');
+
+-- Identity B: unverified boolean + PII guard ---------------------------------------------
+-- 22
+select is(
+  (select a.metadata->'federation'->>'email_verified' from agent_board.agents a where a.id=(select agent_id from _r where label='B')),
+  'false', 'unverified identity -> metadata.federation.email_verified = false');
+-- 23
+select ok(
+  (select a.metadata::text not like '%@%' from agent_board.agents a where a.id=(select agent_id from _r where label='B')),
+  'agent B metadata carries NO plaintext email/@');
+
+-- Idempotency + L-4b ---------------------------------------------------------------------
+-- 24
+select is(
+  (select e.agent_id from agent_board.enroll_federated_human(
+     (select iss from _f), 'message-board', (select sub_a from _f),
+     jsonb_build_object('sub', (select sub_a from _f), 'email_verified', true), 'Alice again') e),
+  (select agent_id from _r where label='A'),
+  're-provision of the same (issuer,sub) is idempotent (same agent_id)');
+-- 25
+select is(
+  (select count(*)::int from agent_board.agents a where a.auth_user_id=(select auth_user_id from _r where label='A')),
+  1, 'still exactly one agent on the synthetic uid (L-4b)');
+-- 26
+select is(
+  (select count(*)::int from agent_board.agents a
+     where a.owner_user_id=(select auth_user_id from _r where label='A') and a.kind <> 'human'),
+  0, 'no non-human agent was ever created on this owner uid (kind is structural)');
+
+-- IDLINK: enroll_federated_identity for the SAME (issuer,sub) shares the owner uid --------
+create temp table _idlink (owner uuid) on commit drop;
+do $$
+declare
+  f record;
+  v_pub text; v_fp text; v_agent uuid;
+begin
+  select * into f from _f;
+  -- A deterministic canonical 32-byte raw key + its raw-byte fingerprint (same construction
+  -- as the enroll_federated_identity B1 harness).
+  v_pub := rtrim(translate(encode(extensions.digest(convert_to('idlink-'||f.s,'UTF8'),'sha256'),'base64'),'+/','-_'),'=');
+  v_fp := 'sha256:' || rtrim(translate(encode(extensions.digest(decode(translate(v_pub,'-_','+/')||'=','base64'),'sha256'),'base64'),'+/','-_'),'=');
+  select e.agent_id into v_agent
+    from agent_board.enroll_federated_identity(
+      f.iss, 'message-board', f.sub_a, jsonb_build_object('sub', f.sub_a),
+      'idlink-'||f.s, v_pub, 'raw_ed25519_base64url', v_fp,
+      true, null, 'agent', '{board:send}', '{}') e;
+  insert into _idlink select a.owner_user_id from agent_board.agents a where a.id = v_agent;
+end
+$$;
+-- 27
+select is(
+  (select owner from _idlink),
+  (select auth_user_id from _r where label='A'),
+  'IDLINK: enroll_federated_identity for the same (issuer,sub) shares the fed-human owner uid');
+
+-- current_agent_id() resolves the no-credential session to the fed-human agent -----------
+set local role authenticated;
+select set_config('request.jwt.claim.role', 'authenticated', true);
+select set_config('request.jwt.claim.sub', (select auth_user_id::text from _r where label='A'), true);
+-- 28
+select is(
+  agent_board.current_agent_id(),
+  (select agent_id from _r where label='A'),
+  'current_agent_id() (no agent_credential_id claim) resolves to the fed-human agent');
+-- 29 (non-service caller: authenticated lacks EXECUTE -> 42501)
+select throws_ok(
+  $$ select agent_board.enroll_federated_human('https://x.test','message-board','portal-x','{}'::jsonb,null) $$,
+  '42501', null, 'a non-service (authenticated) caller is rejected with 42501');
+reset role;
+-- Clear BOTH request.jwt GUCs: reset role alone leaves request.jwt.claim.role set (it
+-- persists as is_local), so auth.role() would stay 'authenticated' and _is_service_role()
+-- would wrongly reject the following superuser calls (they must run as service_role-equiv).
+select set_config('request.jwt.claim.role', '', true);
+select set_config('request.jwt.claim.sub', '', true);
+
+-- Provider / kind / subject rejection matrix (superuser) ---------------------------------
+-- 30 unknown (issuer, audience)
+select throws_ok(
+  (select format($q$select agent_board.enroll_federated_human('https://nope-%s.test','message-board',%L,%L::jsonb,null)$q$,
+     s, sub_a, jsonb_build_object('sub', sub_a)::text) from _f),
+  '42501', null, 'unknown (issuer,audience) is rejected');
+-- 31 null verified subject
+select throws_ok(
+  (select format($q$select agent_board.enroll_federated_human(%L,'message-board',NULL,%L::jsonb,null)$q$,
+     iss, jsonb_build_object('x', 1)::text) from _f),
+  '22023', null, 'a null verified subject is rejected');
+-- 32 subject contains a '|' (F-11 preimage-injection guard)
+select throws_ok(
+  (select format($q$select agent_board.enroll_federated_human(%L,'message-board',%L,%L::jsonb,null)$q$,
+     iss, 'portal|evil', jsonb_build_object('sub','portal|evil')::text) from _f),
+  '22023', null, 'a subject containing a pipe separator is rejected (F-11)');
+-- 32b subject is email-shaped ('@') (F-11 PII backstop; subject is stored fleet-readable)
+select throws_ok(
+  (select format($q$select agent_board.enroll_federated_human(%L,'message-board',%L,%L::jsonb,null)$q$,
+     iss, 'evil@example.test', jsonb_build_object('sub','evil@example.test')::text) from _f),
+  '22023', null, 'an email-shaped (@) subject is rejected before it reaches fleet-readable metadata (F-11)');
+
+-- provider present but NOT policy_approved -> 42501
+do $$
+declare s2 text := replace(substr(gen_random_uuid()::text,1,8),'-','');
+begin
+  insert into agent_board.identity_providers
+    (issuer, audience, supported, policy_approved, allowed_scopes, allowed_board_scopes, allowed_agent_kinds)
+  values ('https://fed-unapproved-'||s2||'.test','message-board', true, false, '{}','{}','{human}');
+  insert into _f(s,iss,aud,sub_a,email_a,sub_b)
+    values ('U'||s2, 'https://fed-unapproved-'||s2||'.test','message-board','portal-u-'||s2,null,null);
+end $$;
+-- 33
+select throws_ok(
+  (select format($q$select agent_board.enroll_federated_human(%L,'message-board',%L,%L::jsonb,null)$q$,
+     iss, sub_a, jsonb_build_object('sub', sub_a)::text) from _f where s like 'U%'),
+  '42501', null, 'an un-approved (policy_approved=false) provider is rejected');
+
+-- provider approved but allowed_agent_kinds EXCLUDES human (non-empty {agent}) -> 42501
+do $$
+declare s3 text := replace(substr(gen_random_uuid()::text,1,8),'-','');
+begin
+  insert into agent_board.identity_providers
+    (issuer, audience, supported, policy_approved, allowed_scopes, allowed_board_scopes, allowed_agent_kinds)
+  values ('https://fed-nohuman-'||s3||'.test','message-board', true, true, '{}','{}','{agent}');
+  insert into _f(s,iss,aud,sub_a,email_a,sub_b)
+    values ('N'||s3, 'https://fed-nohuman-'||s3||'.test','message-board','portal-n-'||s3,null,null);
+end $$;
+-- 34
+select throws_ok(
+  (select format($q$select agent_board.enroll_federated_human(%L,'message-board',%L,%L::jsonb,null)$q$,
+     iss, sub_a, jsonb_build_object('sub', sub_a)::text) from _f where s like 'N%'),
+  '42501', null, 'a non-empty allowed_agent_kinds that excludes human is rejected');
+
+-- Non-active identity cannot re-provision (no self-reactivation; F-13 lever) --------------
+update agent_board.agents set status='suspended', updated_at=now()
+  where id = (select agent_id from _r where label='A');
+-- 35
+select throws_ok(
+  (select format($q$select agent_board.enroll_federated_human(%L,'message-board',%L,%L::jsonb,null)$q$,
+     iss, sub_a, jsonb_build_object('sub', sub_a)::text) from _f where sub_a like 'portal-user-%'),
+  '42501', null, 'a suspended (non-active) fed-human cannot re-provision a session (42501)');
+
+select finish();
+
+rollback;

package/tests/agent_board_fedsession_autojoin.test.sql

@@ -0,0 +1,181 @@
+-- FEDSESSION-AUTOJOIN pgTAP: enroll_federated_human auto-joins a freshly provisioned
+-- federated human to the provider's designated default board.
+--
+-- Proves: the additive default_board_id column + the service_role-only helper; a first
+-- provision with an ACTIVE designated board yields exactly one baseline 'member'/'joined'
+-- self-created membership tagged source=fedsession-autojoin; re-provision is idempotent (no
+-- duplicate); a NULL default_board_id yields no membership; an INACTIVE designated board is
+-- a non-fatal skip (the human still provisions, no membership); and a human who LEFT the
+-- board is NOT re-joined on re-provision (first-time-only). Runs as postgres
+-- (service_role-equivalent), mirroring agent_board_fedsession.test.sql.
+
+create extension if not exists pgtap with schema extensions;
+set search_path = extensions, public, agent_board;
+
+begin;
+
+select plan(14);
+
+-- ---------------------------------------------------------------------------
+-- Phase 0: metadata + privileges
+-- ---------------------------------------------------------------------------
+-- 1
+select has_column('agent_board', 'identity_providers', 'default_board_id',
+  'identity_providers.default_board_id exists');
+-- 2
+select has_function('agent_board', '_fedsession_autojoin_default_board',
+  array['agent_board.identity_providers', 'uuid'],
+  '_fedsession_autojoin_default_board(identity_providers,uuid) exists');
+-- 3
+select function_privs_are('agent_board', '_fedsession_autojoin_default_board',
+  array['agent_board.identity_providers', 'uuid'], 'service_role', array['EXECUTE'],
+  'service_role may EXECUTE _fedsession_autojoin_default_board');
+-- 4
+select function_privs_are('agent_board', '_fedsession_autojoin_default_board',
+  array['agent_board.identity_providers', 'uuid'], 'authenticated', array[]::text[],
+  'authenticated may NOT EXECUTE _fedsession_autojoin_default_board');
+
+-- ---------------------------------------------------------------------------
+-- Fixtures + provisioning
+-- ---------------------------------------------------------------------------
+create temp table _aj (
+  board_active uuid, board_inactive uuid,
+  agent_h1 uuid, agent_h2 uuid, agent_h3 uuid,
+  iss1 text, sub1 text
+) on commit drop;
+grant all on table _aj to authenticated, service_role;
+
+do $$
+declare
+  s text := replace(substr(gen_random_uuid()::text, 1, 8), '-', '');
+  v_owner_agent uuid;
+  v_board_active uuid; v_board_inactive uuid;
+  v_iss1 text; v_iss2 text; v_iss3 text;
+  v_sub1 text := 'aj-user1-';
+  v_h1 uuid; v_h2 uuid; v_h3 uuid;
+begin
+  v_iss1 := 'https://aj1-' || s || '.test';
+  v_iss2 := 'https://aj2-' || s || '.test';
+  v_iss3 := 'https://aj3-' || s || '.test';
+  v_sub1 := 'aj-user1-' || s;
+
+  -- A board-owner agent (created_by for the seeded boards).
+  insert into agent_board.agents(agent_type, kind, handle, display_name, status)
+  values ('system', 'system'::agent_board.agent_kind, 'aj-owner-' || s, 'AJ Owner', 'active')
+  returning id into v_owner_agent;
+
+  -- An ACTIVE default board and an ARCHIVED (inactive) board.
+  insert into agent_board.boards(slug, name, created_by_agent_id, visibility, status)
+  values ('aj-active-' || s, 'AJ Active', v_owner_agent, 'private', 'active')
+  returning id into v_board_active;
+  insert into agent_board.boards(slug, name, created_by_agent_id, visibility, status)
+  values ('aj-inactive-' || s, 'AJ Inactive', v_owner_agent, 'private', 'archived')
+  returning id into v_board_inactive;
+
+  -- P1: default board = ACTIVE board -> provision H1 (should auto-join).
+  insert into agent_board.identity_providers
+    (issuer, audience, supported, policy_approved, allowed_agent_kinds, default_board_id)
+  values (v_iss1, 'message-board', true, true, '{human}', v_board_active);
+  select e.agent_id into v_h1 from agent_board.enroll_federated_human(
+    v_iss1, 'message-board', v_sub1,
+    jsonb_build_object('sub', v_sub1, 'email_verified', false), 'H1') e;
+
+  -- P2: default board NULL -> provision H2 (no auto-join).
+  insert into agent_board.identity_providers
+    (issuer, audience, supported, policy_approved, allowed_agent_kinds, default_board_id)
+  values (v_iss2, 'message-board', true, true, '{human}', null);
+  select e.agent_id into v_h2 from agent_board.enroll_federated_human(
+    v_iss2, 'message-board', 'aj-user2-' || s,
+    jsonb_build_object('sub', 'aj-user2-' || s, 'email_verified', false), 'H2') e;
+
+  -- P3: default board = INACTIVE board -> provision H3 (no auto-join; provision still succeeds).
+  insert into agent_board.identity_providers
+    (issuer, audience, supported, policy_approved, allowed_agent_kinds, default_board_id)
+  values (v_iss3, 'message-board', true, true, '{human}', v_board_inactive);
+  select e.agent_id into v_h3 from agent_board.enroll_federated_human(
+    v_iss3, 'message-board', 'aj-user3-' || s,
+    jsonb_build_object('sub', 'aj-user3-' || s, 'email_verified', false), 'H3') e;
+
+  -- Idempotent re-provision of H1 (same issuer/sub) -> must NOT add a second membership.
+  perform e.agent_id from agent_board.enroll_federated_human(
+    v_iss1, 'message-board', v_sub1,
+    jsonb_build_object('sub', v_sub1, 'email_verified', false), 'H1') e;
+
+  insert into _aj values (v_board_active, v_board_inactive, v_h1, v_h2, v_h3, v_iss1, v_sub1);
+end
+$$;
+
+-- H1 auto-joined the ACTIVE default board ------------------------------------------------
+-- 5
+select is(
+  (select count(*)::int from agent_board.board_memberships m, _aj
+    where m.board_id = _aj.board_active and m.agent_id = _aj.agent_h1),
+  1, 'H1 has exactly one membership on the active default board (idempotent after re-provision)');
+-- 6
+select is(
+  (select m.role from agent_board.board_memberships m, _aj
+    where m.board_id = _aj.board_active and m.agent_id = _aj.agent_h1),
+  'member', 'auto-join role is baseline member (never owner/admin)');
+-- 7
+select is(
+  (select m.membership_state from agent_board.board_memberships m, _aj
+    where m.board_id = _aj.board_active and m.agent_id = _aj.agent_h1),
+  'joined', 'auto-join membership_state is joined');
+-- 8
+select is(
+  (select m.created_by_agent_id from agent_board.board_memberships m, _aj
+    where m.board_id = _aj.board_active and m.agent_id = _aj.agent_h1),
+  (select agent_h1 from _aj), 'auto-join created_by is the fed-human itself (self-join)');
+-- 9
+select is(
+  (select m.metadata->>'source' from agent_board.board_memberships m, _aj
+    where m.board_id = _aj.board_active and m.agent_id = _aj.agent_h1),
+  'fedsession-autojoin', 'auto-join membership tagged source=fedsession-autojoin');
+-- 10
+select is(
+  (select count(distinct m.id)::int from agent_board.board_memberships m, _aj
+    where m.board_id = _aj.board_active and m.agent_id = _aj.agent_h1),
+  1, 'no duplicate membership rows after re-provision (idempotent)');
+
+-- NULL default board -> no auto-join -----------------------------------------------------
+-- 11
+select is(
+  (select count(*)::int from agent_board.board_memberships m, _aj
+    where m.agent_id = _aj.agent_h2),
+  0, 'H2 (provider default_board_id NULL) got NO auto-join membership');
+
+-- INACTIVE default board -> non-fatal skip -----------------------------------------------
+-- 12
+select ok((select agent_h3 is not null from _aj),
+  'H3 provisioned successfully even though its designated default board is inactive');
+-- 13
+select is(
+  (select count(*)::int from agent_board.board_memberships m, _aj
+    where m.board_id = _aj.board_inactive and m.agent_id = _aj.agent_h3),
+  0, 'inactive default board yields NO auto-join (non-fatal skip)');
+
+-- Left-respect: a human who LEFT the board is NOT re-joined on re-provision ---------------
+update agent_board.board_memberships m
+   set membership_state = 'left', left_at = now()
+  from _aj
+ where m.board_id = _aj.board_active and m.agent_id = _aj.agent_h1;
+
+do $$
+declare r record;
+begin
+  select iss1, sub1 into r from _aj;
+  perform e.agent_id from agent_board.enroll_federated_human(
+    r.iss1, 'message-board', r.sub1,
+    jsonb_build_object('sub', r.sub1, 'email_verified', false), 'H1') e;
+end
+$$;
+
+-- 14
+select is(
+  (select count(*)::int from agent_board.board_memberships m, _aj
+    where m.board_id = _aj.board_active and m.agent_id = _aj.agent_h1
+      and m.membership_state = 'joined'),
+  0, 'a fed-human who LEFT the default board is NOT re-joined on re-provision (first-time-only)');
+
+select * from finish();
+rollback;