pi-harness-runtime 0.10.13 → 0.10.15

package/IMPLEMENTATION/RFC-0090/AI_BRIEF.md

@@ -1,2 +0,0 @@
-# AI Brief
-Implement disaster recovery.

package/IMPLEMENTATION/RFC-0090/FILES.md

@@ -1,2 +0,0 @@
-packages/<module>/src/
-packages/<module>/test/

package/IMPLEMENTATION/RFC-0090/TASKS.md

@@ -1,4 +0,0 @@
-1. Define types
-2. Implement core logic
-3. Add tests
-4. Integrate runtime events

package/IMPLEMENTATION/RFC-0090/TESTS.md

@@ -1,3 +0,0 @@
-- Happy path
-- Invalid input
-- Deterministic output

package/IMPLEMENTATION/RFC-0091/ACCEPTANCE_CRITERIA.md

@@ -1,2 +0,0 @@
-- Tests pass
-- API documented

package/IMPLEMENTATION/RFC-0091/AI_BRIEF.md

@@ -1,2 +0,0 @@
-# AI Brief
-Implement autonomous architecture review.

package/IMPLEMENTATION/RFC-0091/FILES.md

@@ -1,2 +0,0 @@
-packages/<module>/src/
-packages/<module>/test/

package/IMPLEMENTATION/RFC-0091/TASKS.md

@@ -1,4 +0,0 @@
-1. Define types
-2. Implement core logic
-3. Add tests
-4. Integrate runtime events

package/IMPLEMENTATION/RFC-0091/TESTS.md

@@ -1,3 +0,0 @@
-- Happy path
-- Invalid input
-- Deterministic output

package/IMPLEMENTATION/RFC-0092/ACCEPTANCE_CRITERIA.md

@@ -1,2 +0,0 @@
-- Tests pass
-- API documented

package/IMPLEMENTATION/RFC-0092/AI_BRIEF.md

@@ -1,20 +0,0 @@
-# AI Brief — Autonomous Refactor (RFC-0092)
-
-**Status:** ✅ Done (Day 4, commit `c252195`)
-
-## Implemented
-
-- `packages/autonomous-refactor/`
-- `detectRefactorings()` — detects magic literals, long functions, nested conditionals, unused variables
-- `createPlan()` — creates refactor plan with priority ordering
-- `filterByRisk()`, `groupByFile()`, `groupByType()` — analysis utilities
-- `assessRisk()`, `calculatePriority()` — risk assessment
-
-## Key Fixes
-
-- Long function detection: use -1 sentinel for funcStart to handle functions starting at line 0
-- Avoid regex false-positives: `const x = 0;` matches `const\s+(\w+)\s*=` — only set funcStart once per function
-
-## Tests
-
-- 19 tests: pattern detection, plan creation, grouping utilities

package/IMPLEMENTATION/RFC-0092/FILES.md

@@ -1,2 +0,0 @@
-packages/<module>/src/
-packages/<module>/test/

package/IMPLEMENTATION/RFC-0092/TASKS.md

@@ -1,4 +0,0 @@
-1. Define types
-2. Implement core logic
-3. Add tests
-4. Integrate runtime events

package/IMPLEMENTATION/RFC-0092/TESTS.md

@@ -1,3 +0,0 @@
-- Happy path
-- Invalid input
-- Deterministic output

package/IMPLEMENTATION/RFC-0093/ACCEPTANCE_CRITERIA.md

@@ -1,2 +0,0 @@
-- Tests pass
-- API documented

package/IMPLEMENTATION/RFC-0093/AI_BRIEF.md

@@ -1,22 +0,0 @@
-# AI Brief — Health Monitor (RFC-0093)
-
-**Status:** ✅ Done (Day 4, commit `c252195`)
-
-## Implemented
-
-- `packages/health-monitor/`
-- `determineStatus()` — healthy/degraded/unhealthy based on response time + error rate
-- `createReport()` — full health report with component breakdown + uptime
-- `aggregateHealth()` — worst-status aggregation
-- `determineRecoveryAction()` — restart/retry/alert based on config
-- `runHealthCheck()` — async health check with timeout support
-- `calculateUptime()` — uptime percentage estimation
-
-## Key Fixes
-
-- Removed stale stub files: collector.ts, evaluator.ts from subagent attempt
-- Only clean src files in dist: monitor.ts, types.ts, index.ts
-
-## Tests
-
-- 28 tests: status determination, recovery actions, health checks, uptime calculation

package/IMPLEMENTATION/RFC-0093/FILES.md

@@ -1,2 +0,0 @@
-packages/<module>/src/
-packages/<module>/test/

package/IMPLEMENTATION/RFC-0093/TASKS.md

@@ -1,4 +0,0 @@
-1. Define types
-2. Implement core logic
-3. Add tests
-4. Integrate runtime events

package/IMPLEMENTATION/RFC-0093/TESTS.md

@@ -1,3 +0,0 @@
-- Happy path
-- Invalid input
-- Deterministic output

package/IMPLEMENTATION/RFC-0094/ACCEPTANCE_CRITERIA.md

@@ -1,2 +0,0 @@
-- Tests pass
-- API documented

package/IMPLEMENTATION/RFC-0094/AI_BRIEF.md

@@ -1,2 +0,0 @@
-# AI Brief
-Implement autonomous performance tuning.

package/IMPLEMENTATION/RFC-0094/FILES.md

@@ -1,2 +0,0 @@
-packages/<module>/src/
-packages/<module>/test/

package/IMPLEMENTATION/RFC-0094/TASKS.md

@@ -1,4 +0,0 @@
-1. Define types
-2. Implement core logic
-3. Add tests
-4. Integrate runtime events

package/IMPLEMENTATION/RFC-0094/TESTS.md

@@ -1,3 +0,0 @@
-- Happy path
-- Invalid input
-- Deterministic output

package/IMPLEMENTATION/RFC-0095/ACCEPTANCE_CRITERIA.md

@@ -1,2 +0,0 @@
-- Tests pass
-- API documented

package/IMPLEMENTATION/RFC-0095/AI_BRIEF.md

@@ -1,2 +0,0 @@
-# AI Brief
-Implement autonomous security review.

package/IMPLEMENTATION/RFC-0095/FILES.md

@@ -1,2 +0,0 @@
-packages/<module>/src/
-packages/<module>/test/

package/IMPLEMENTATION/RFC-0095/TASKS.md

@@ -1,4 +0,0 @@
-1. Define types
-2. Implement core logic
-3. Add tests
-4. Integrate runtime events

package/IMPLEMENTATION/RFC-0095/TESTS.md

@@ -1,3 +0,0 @@
-- Happy path
-- Invalid input
-- Deterministic output

package/IMPLEMENTATION/RFC-0096/ACCEPTANCE_CRITERIA.md

@@ -1,2 +0,0 @@
-- Tests pass
-- API documented

package/IMPLEMENTATION/RFC-0096/AI_BRIEF.md

@@ -1,2 +0,0 @@
-# AI Brief
-Implement autonomous cost optimization.

package/IMPLEMENTATION/RFC-0096/FILES.md

@@ -1,2 +0,0 @@
-packages/<module>/src/
-packages/<module>/test/

package/IMPLEMENTATION/RFC-0096/TASKS.md

@@ -1,4 +0,0 @@
-1. Define types
-2. Implement core logic
-3. Add tests
-4. Integrate runtime events

package/IMPLEMENTATION/RFC-0096/TESTS.md

@@ -1,3 +0,0 @@
-- Happy path
-- Invalid input
-- Deterministic output

package/IMPLEMENTATION/RFC-0097/ACCEPTANCE_CRITERIA.md

@@ -1,2 +0,0 @@
-- Tests pass
-- API documented

package/IMPLEMENTATION/RFC-0097/AI_BRIEF.md

@@ -1,2 +0,0 @@
-# AI Brief
-Implement autonomous documentation.

package/IMPLEMENTATION/RFC-0097/FILES.md

@@ -1,2 +0,0 @@
-packages/<module>/src/
-packages/<module>/test/

package/IMPLEMENTATION/RFC-0097/TASKS.md

@@ -1,4 +0,0 @@
-1. Define types
-2. Implement core logic
-3. Add tests
-4. Integrate runtime events

package/IMPLEMENTATION/RFC-0097/TESTS.md

@@ -1,3 +0,0 @@
-- Happy path
-- Invalid input
-- Deterministic output

package/IMPLEMENTATION/RFC-0098/ACCEPTANCE_CRITERIA.md

@@ -1,2 +0,0 @@
-- Tests pass
-- API documented

package/IMPLEMENTATION/RFC-0098/AI_BRIEF.md

@@ -1,2 +0,0 @@
-# AI Brief
-Implement autonomous knowledge management.

package/IMPLEMENTATION/RFC-0098/FILES.md

@@ -1,2 +0,0 @@
-packages/<module>/src/
-packages/<module>/test/

package/IMPLEMENTATION/RFC-0098/TASKS.md

@@ -1,4 +0,0 @@
-1. Define types
-2. Implement core logic
-3. Add tests
-4. Integrate runtime events

package/IMPLEMENTATION/RFC-0098/TESTS.md

@@ -1,3 +0,0 @@
-- Happy path
-- Invalid input
-- Deterministic output

package/IMPLEMENTATION/RFC-0099/ACCEPTANCE_CRITERIA.md

@@ -1,2 +0,0 @@
-- Tests pass
-- API documented

package/IMPLEMENTATION/RFC-0099/AI_BRIEF.md

@@ -1,2 +0,0 @@
-# AI Brief
-Implement runtime evolution engine.

package/IMPLEMENTATION/RFC-0099/FILES.md

@@ -1,2 +0,0 @@
-packages/<module>/src/
-packages/<module>/test/

package/IMPLEMENTATION/RFC-0099/TASKS.md

@@ -1,4 +0,0 @@
-1. Define types
-2. Implement core logic
-3. Add tests
-4. Integrate runtime events

package/IMPLEMENTATION/RFC-0099/TESTS.md

@@ -1,3 +0,0 @@
-- Happy path
-- Invalid input
-- Deterministic output

package/IMPLEMENTATION/RFC-0100/ACCEPTANCE_CRITERIA.md

@@ -1,2 +0,0 @@
-- Tests pass
-- API documented

package/IMPLEMENTATION/RFC-0100/AI_BRIEF.md

@@ -1,2 +0,0 @@
-# AI Brief
-Implement self developing runtime.

package/IMPLEMENTATION/RFC-0100/FILES.md

@@ -1,2 +0,0 @@
-packages/<module>/src/
-packages/<module>/test/

package/IMPLEMENTATION/RFC-0100/TASKS.md

@@ -1,4 +0,0 @@
-1. Define types
-2. Implement core logic
-3. Add tests
-4. Integrate runtime events

package/IMPLEMENTATION/RFC-0100/TESTS.md

@@ -1,3 +0,0 @@
-- Happy path
-- Invalid input
-- Deterministic output

package/IMPLEMENTATION/RFC-0101/ACCEPTANCE_CRITERIA.md

@@ -1,74 +0,0 @@
-# Acceptance Criteria — RFC-0101
-
-## Implementation
-
-- Implementation follows the RFC.
-- State is durable and runtime-owned.
-- Human is not required as message bus.
-- Failures produce explicit records.
-- Tests cover happy path and failure path.
-
-## Functional
-
-- A task can be submitted during a chat session and complete after the session closes.
-- A scheduled task fires its cron / timer schedule with no active session.
-- Two workers cannot claim the same task concurrently.
-- A killed worker is replaced by another worker resuming from the last checkpoint within `leaseTTL + grace`.
-- Privilege broker refuses any capability not in `config/privileges.yaml`.
-- Privilege broker refuses any `argv` mismatch on a registered capability.
-- `human_approval_required` tasks block at `waiting_approval` and resume on `approved`.
-- `forbidden` capabilities fail the task immediately with a clear reason.
-- Quota exhaustion transitions the task to `waiting_quota` and resumes on reset.
-- Notifications comply with RFC-0022 rules — no secrets, no tokens, no full source.
-
-## Operational
-
-- The runtime runs under `systemd`, `launchd`, or Docker with restart policy verified.
-- Heartbeats are written to `worker-registry.json` every 30 seconds.
-- The reaper script releases expired leases correctly under a chaos test.
-- The audit log accumulates one entry per broker call and rotates daily.
-
-## Recovery
-
-- Worker killed mid-task -> recovered within `leaseTTL + grace` from the last checkpoint.
-- Host reboot -> worker restarts and in-flight tasks recover automatically.
-- Filesystem full -> worker pauses new claims without corrupting checkpoints.
-- Notification channel outage -> events buffer; flush on reconnect; no event loss after the outage clears.
-
-## Integration
-
-- Successful tasks with deliverables promote an OKF pattern bundle.
-- Failed tasks after retries promote an OKF lesson bundle readable by the Master Planner.
-- The Master Planner references pattern and lesson bundles during decomposition.
-
-## Security
-
-- No capability is a wildcard, a shell, or arbitrary `argv`.
-- The agent cannot mutate `privileges.yaml` at runtime.
-- The audit log cannot be rewritten by the worker — filesystem permissions enforced.
-- All approval requests are signed via the operator's SSH key fingerprint.
-
-## Performance / Cost
-
-- Worker steady-state CPU < 1 % on idle.
-- Heartbeat write rate < 1 KB / 30 s.
-- Inbox append throughput ≥ 1 000 tasks / s on local SSD.
-
-## Sanitization
-
-- No client company names appear in the implementation files.
-- No real IPs, hostnames, domains (other than the approved `bunchee.online`, `moo-ai.online`, `moocoding.com`).
-- No API keys, tokens, passwords, or secrets.
-- All placeholder names follow the convention `your_app`, `your-app.service`, `your-project`, `/opt/your_app`.
-
-## Documentation
-
-- `packages/autonomous-runtime/README.md` covers install, supervisor selection, and lifecycle.
-- `packages/privilege-broker/README.md` covers capability registration.
-- `packages/scheduler-adapter/README.md` covers each adapter's install + test path.
-- Root `README.md` references RFC-0101 and lists the new packages.
-- Bundled skill `harness-runtime/SKILL.md` documents the `/runtime` command surface.
-
-## Done When
-
-All of the above are demonstrated and recorded in `test/reports/RFC-0101-<date>.md`.

package/IMPLEMENTATION/RFC-0101/AI_BRIEF.md

@@ -1,80 +0,0 @@
-# AI Brief — Autonomous Operations Runtime (RFC-0101)
-
-## Status
-
-🟡 Proposed — awaiting implementation kickoff
-
-## Goal
-
-Implement the Autonomous Operations Runtime subsystem of `pi-harness-runtime` so that:
-
-- Queued work runs without an active `pi` session.
-- The runtime survives worker crashes, host reboots, quota exhaustion, and SSH / browser disconnect.
-- Privileged operations are gated by a capability-based broker, never by raw `sudo`.
-- Recovery, lease, and approval semantics are durable and observable.
-
-## Implemented (when done)
-
-- `packages/autonomous-runtime/` — Task Inbox, Lease, Worker, Recovery, Supervisor templates.
-- `packages/privilege-broker/` — capability registry + executor + audit log.
-- `packages/scheduler-adapter/` — `systemd` / `launchd` / `cron` / internal.
-- `config/privileges.yaml` — versioned capability registry (closed enum).
-- `units/systemd/pi-runtime.service`, `units/launchd/*.plist`, `units/cron/*.cron.example`.
-- OKF promotion rules in `packages/okf-kb/` (reuses existing engine).
-
-## Features
-
-- Structured durable Task Inbox (`tasks.jsonl` + `claimed/` + `completed/` + `failed/` + `dead-letter/`).
-- Single-execution guarantee via Task Lease (TTL 5 min, heartbeat 30 s, grace 30 s).
-- Capability-based privilege broker with append-only audit log.
-- Approval classes (`automatic_read_only`, `automatic_reversible`, `human_approval_required`, `forbidden`).
-- Scheduler abstraction compiling to `systemd`, `launchd`, `cron`, or internal timer.
-- Notification fan-out extended with autonomous-ops events (`task.recovered`, `audit.privileged_called`, etc.).
-- Recovery from worker crash, host reboot, quota exhaustion, task timeout.
-- OKF lesson / pattern promotion rules.
-
-## Non-Goals
-
-- Multi-host distributed lease coordination (deferred to future RFC).
-- Multi-tenant isolation (deferred to future RFC).
-- Replacing RFC-0015 (Job State Machine) or RFC-0011 (Shared Blackboard).
-
-## Integration Points
-
-| Existing | Reused As |
-|---|---|
-| RFC-0001 Loop Runtime | Inner execution loop |
-| RFC-0003 Quota Manager | `waiting_quota` transitions |
-| RFC-0006 Checkpoint Manager | Task-level checkpoint storage |
-| RFC-0011 Shared Blackboard | Operator-visible progress events |
-| RFC-0017 Master Planner | Task generation |
-| RFC-0018 Repair Engine | Failure -> repair task generation |
-| RFC-0022 Notification Center | Channel adapters |
-| RFC-0028 Policy Engine | Approval class resolution |
-
-## Constraints
-
-- **Public repository.** Sanitize client / server / product names. Use generic placeholders: `your_app`, `your-app.service`, `your-project`, `/opt/your_app`.
-- **No wide-open `NOPASSWD`.** Sudoers is not acceptable as a privilege mechanism.
-- **No `shell.root` capability.** The capability registry is closed and versioned.
-- **Local-first.** No mandatory cloud dependency.
-- **Recoverable.** Every transition is checkpointed; every lease has a TTL.
-
-## Tests
-
-Subagent-implemented:
-
-- Unit: inbox append/read, lease atomic claim, heartbeat extension, broker execution, policy class resolution.
-- Integration: parallel-worker claim races, lease reaper recovery, broker denial paths, scheduler materialisation for each adapter.
-- Failure-mode: killed worker, full disk, quota reset, expired approval, repeated failures -> dead letter.
-- Security: capability enumeration refuses unknown names; argv-tampering rejected; audit log rotation works.
-
-## Risks
-
-- **Risk:** OS-specific supervisor templates break on non-target platforms. *Mitigation:* Adapter abstraction + matrix tests per adapter.
-- **Risk:** Audit log grows unbounded. *Mitigation:* Daily rotation via `logrotate` + monthly archive.
-- **Risk:** Operator forgets to wire scheduler adapter. *Mitigation:* Installer detects host OS and writes the correct unit; warns if multiple supervisors detected.
-
-## Definition of Done
-
-RFC-0101 implementation is considered done when all 25 acceptance criteria in the RFC are demonstrably met (manual or automated test) and the README + skill docs reference the new packages.

package/IMPLEMENTATION/RFC-0101/FILES.md

@@ -1,82 +0,0 @@
-# Suggested Files — RFC-0101
-
-```text
-packages/
-+-- autonomous-runtime/
-|   +-- src/
-|   |   +-- inbox.ts
-|   |   +-- lease.ts
-|   |   +-- recovery.ts
-|   |   +-- worker.ts
-|   |   +-- supervisor.ts          # unit installation (systemd/launchd/cron)
-|   |   +-- types.ts
-|   +-- scripts/
-|   |   +-- reap-leases.ts         # standalone reaper for cron / external trigger
-|   +-- units/                     # supervisor drop-ins
-|   |   +-- systemd/
-|   |   |   +-- pi-runtime.service
-|   |   |   +-- pi-runtime.timer.example
-|   |   +-- launchd/
-|   |   |   +-- ai.moocoding.runtime.plist
-|   |   +-- cron/
-|   |       +-- pi-runtime.cron.example
-|   +-- test/
-|   |   +-- inbox.test.ts
-|   |   +-- lease.test.ts
-|   |   +-- worker.test.ts
-|   |   +-- recovery.test.ts
-|   +-- package.json
-|   +-- tsconfig.json
-|   +-- README.md
-|
-+-- privilege-broker/
-|   +-- src/
-|   |   +-- registry.ts            # loads config/privileges.yaml
-|   |   +-- executor.ts            # execve wrapper
-|   |   +-- audit.ts               # append-only audit log writer
-|   +-- config/
-|   |   +-- privileges.yaml        # versioned, reviewed capability registry
-|   +-- logrotate.d/
-|   |   +-- pi-runtime-audit       # daily rotation
-|   +-- test/
-|   |   +-- registry.test.ts
-|   |   +-- executor.test.ts
-|   |   +-- audit.test.ts
-|   +-- package.json
-|   +-- tsconfig.json
-|   +-- README.md
-|
-+-- scheduler-adapter/
-|   +-- src/
-|   |   +-- interface.ts           # SchedulerAdapter contract
-|   |   +-- systemd.ts             # compiles ScheduledTask to .service/.timer
-|   |   +-- launchd.ts             # compiles to .plist
-|   |   +-- cron.ts                # writes crontab fragments
-|   |   +-- internal.ts            # in-process timer (dev/test only)
-|   +-- test/
-|   |   +-- systemd.test.ts
-|   |   +-- launchd.test.ts
-|   |   +-- cron.test.ts
-|   |   +-- internal.test.ts
-|   +-- package.json
-|   +-- tsconfig.json
-|   +-- README.md
-|
-+-- okf-kb/                        # OKF lesson / pattern promotion (extends existing)
-|   +-- (existing — append promote-pattern.ts + promote-lesson.ts)
-|
-+-- config/
-    +-- privileges.yaml            # initial capability registry
-```
-
-## Files Modified (out-of-tree)
-
-```text
-skills/harness-runtime/SKILL.md    # add /runtime command, link RFC-0101
-README.md                          # reference RFC-0101 + new packages
-MANIFEST.json                      # include autonomous-runtime, privilege-broker, scheduler-adapter
-```
-
-## Files NOT Modified
-
-- RFC-0001, RFC-0003, RFC-0006, RFC-0011, RFC-0015, RFC-0017, RFC-0018, RFC-0022, RFC-0028 — referenced as integration points only.

package/IMPLEMENTATION/RFC-0101/TASKS.md

@@ -1,92 +0,0 @@
-# Tasks — RFC-0101 Autonomous Operations Runtime
-
-> Track per-package work. Sub-tasks may reference each other.
-
-## Phase 1 — Foundations
-
-- [x] Read RFC-0101 and confirm scope.
-- [x] Define `TaskRecord`, `TaskLease`, `TaskEvent`, `CapabilityName`, `ApprovalClass`, `TaskStatus` types in `packages/autonomous-runtime/src/types.ts`.
-- [x] Define JSON schemas for inbox and lease files (as JSDoc comments in types.ts).
-- [x] Implement `TaskInbox.append`, `TaskInbox.list`, `TaskInbox.transition` against `tasks.jsonl`.
-- [x] Implement atomic claim via `open(O_EXCL) + rename` to `claimed/<task>.lease.json`.
-  - **Fix applied:** `rename(2)` atomically overwrites — switched to `open(O_CREAT|O_EXCL)` + `rename` so second worker gets `EEXIST`.
-  - **Tests:** 23/23 pass including race condition test.
-
-## Phase 2 — Lease and Worker
-
-- [ ] Implement `Lease.claim(taskId, workerId)` — atomic, single-execution.
-- [ ] Implement `Lease.heartbeat(leaseId)` — extends `expiresAt`.
-- [ ] Implement `Lease.reap()` — releases expired leases back to `queued`.
-- [ ] Implement `Worker.loop()` — claim -> execute -> checkpoint -> finalize.
-- [ ] Implement `Worker.recoverOnStartup()` — reaps orphan leases.
-- [ ] Implement `Worker.emitHeartbeat()` — every 30 s.
-- [ ] Add `worker-registry.json` rotation.
-
-## Phase 3 — Privilege Broker
-
-- [ ] Load `config/privileges.yaml` at worker startup; reject unknown capabilities.
-- [ ] Implement `Broker.request(capabilityName, args)` — resolves to registered `argv`.
-- [ ] Implement `Broker.execute(grant)` — uses `execve` (no shell) with service account.
-- [ ] Implement `Broker.deny(unknown)` — explicit failure with reason.
-- [ ] Append every call to `audit.log` with `{ts, workerId, taskId, capability, argv, exitCode}`.
-- [ ] Add `logrotate` config for `audit.log`.
-
-## Phase 4 — Policy + Approval
-
-- [ ] Resolve `approvalClass(capability)` via RFC-0028 lookup.
-- [ ] Implement `Approval.request(capability, rationale)` — write approval request.
-- [ ] Implement `Approval.decide(id, decision, signedBy)` — updates request, audits.
-- [ ] Implement `Approval.timeout()` — sweep expired approvals, fail tasks.
-- [ ] Implement `Approval.notify()` via RFC-0022 channel adapters.
-
-## Phase 5 — Scheduler Adapter
-
-- [ ] Implement `SchedulerAdapter.interface.ts` — common API.
-- [ ] Implement `systemd` adapter — write `.service` + `.timer` units from templates.
-- [ ] Implement `launchd` adapter — write `plist` with `StartCalendarInterval`.
-- [ ] Implement `cron` adapter — write crontab fragment.
-- [ ] Implement `internal` adapter — for dev/test only, marks not-for-production.
-- [ ] Make install-time selection idempotent — re-running install does not duplicate units.
-
-## Phase 6 — Recovery
-
-- [ ] Wire `worker-crash -> reaper -> resume from last checkpoint`.
-- [ ] Wire `host-reboot -> supervisor restart -> worker startup recovery`.
-- [ ] Wire `quota-exhausted -> waiting_quota -> resume on reset`.
-- [ ] Wire `task-timeout -> checkpoint preserved -> reaped and resumed`.
-- [ ] Wire `filesystem-full -> worker paused claims -> operator alert`.
-
-## Phase 7 — OKF Integration
-
-- [ ] Implement `OKF.promotePattern(task)` — only on `TaskResult.kind === "deliverable"`.
-- [ ] Implement `OKF.promoteLesson(task)` — only on classified failure.
-- [ ] Wire planner (RFC-0017) to read lesson / pattern bundles during decomposition.
-- [ ] Document OKF promotion rules in `packages/okf-kb/`.
-
-## Phase 8 — Tests
-
-- [ ] Unit: inbox append/read, lease claim/heartbeat/reap.
-- [ ] Unit: broker lookup, argv resolution, denial paths.
-- [ ] Unit: policy class resolution per capability.
-- [ ] Integration: parallel worker claim race.
-- [ ] Integration: lease reaper recovery.
-- [ ] Integration: broker denial paths.
-- [ ] Integration: scheduler materialisation for each adapter.
-- [ ] Failure-mode: killed worker, full disk, quota reset, expired approval, repeated failures.
-- [ ] Security: argv tampering rejected; audit log rotation works; broker refuses unknown names.
-
-## Phase 9 — Documentation
-
-- [ ] Write `packages/autonomous-runtime/README.md`.
-- [ ] Write `packages/privilege-broker/README.md` (incl. how to add a new capability).
-- [ ] Write `packages/scheduler-adapter/README.md` (per-adapter install guide).
-- [ ] Update root `README.md` with reference to RFC-0101.
-- [ ] Update bundled `skills/harness-runtime/SKILL.md` with `/runtime` slash-command doc.
-
-## Phase 10 — Acceptance
-
-- [ ] All 25 acceptance criteria from RFC-0101 §20 demonstrated.
-- [ ] Skill registry exposes `autonomous-runtime` skill on agent startup.
-- [ ] Systemd unit survives `systemctl restart` chaos test.
-- [ ] Audit log present after one broker call; rotated after 24 h.
-- [ ] OKF pattern bundle produced by at least one happy-path task.