feat: light-kanban-worker v0.1.5 candidate — non-overlapping runs, first-registration identity, evidence cleanup

- SKILL.md: same-agent runs must not overlap (must skip); atomic claim is
  not a same-agent concurrency lock; concurrency stays with the scheduler
  (max concurrent runs = 1); worker adds no lock process/heartbeat/lease;
  first registration requires ID + name + avatar (POST /api/avatars),
  existing identity reuse, missing identity never mutates tasks.
- openai.yaml default_prompt: first-run-capable one-shot form (ID/Name/Avatar).
- Tests: contract suite 100 assertions with the new scheduling/identity
  rules; adversarial fixtures overlap-allowed-variant and
  avatar-optional-first-registration; behavior scenarios G (same-agent
  concurrent wake, scheduler guard) and H (fresh identity without avatar)
  with recorded verification boundaries; package suites self-contained for
  installed copies.
- Docs: bilingual worker guides with First run / Scheduling callouts and
  first-run scheduler + one-shot prompts; README/CATALOG/INSTALLATION/
  CHANGELOG/MAINTENANCE synced to the v0.1.5 candidate framing.
- Evidence: v0.1.5 release evidence with pre-release gate
  (READY FOR RELEASE) and post-release verification split;
  review-loop agent-skill acceptance PASS (F-001/F-002/F-003/G-001
  repaired, independence: full).

Author: Light Cheng

CATALOG.md

@@ -13,16 +13,17 @@ Agent host.
 | --- | --- |
 | Collection | Personal Skills Collection |
 | Package count | 8 admitted first-party Skills |
-| Current state | Released v0.1.4; `light-kanban-worker` admitted with independent `review-loop agent-skill` `PASS` |
-| Stable release | [v0.1.4](https://github.com/LightDevCoder/skills/releases/tag/v0.1.4) |
+| Current state | v0.1.5 release candidate (`READY FOR RELEASE`, tag pending); `light-kanban-worker` admitted with independent `review-loop agent-skill` `PASS` |
+| Stable release | [v0.1.4](https://github.com/LightDevCoder/skills/releases/tag/v0.1.4) (v0.1.5 is the prepared candidate) |
 | Installation authority | [docs/INSTALLATION.md](docs/INSTALLATION.md) |
 | Discovery check | [tests/test_collection_discovery.py](tests/test_collection_discovery.py) |
-| Evidence | [v0.1.4 release evidence](docs/evidence/releases/v0.1.4/) |
+| Evidence | [v0.1.5 release evidence](docs/evidence/releases/v0.1.5/) |
 
 Stable `v0.1.1` contained the original five packages; v0.1.2 added `recap` and
 `language-learning` for seven admitted first-party Skills; v0.1.3 kept the
 same seven and migrated the test toolchain; v0.1.4 adds `light-kanban-worker`
-for eight admitted packages.
+for eight admitted packages; v0.1.5 adds the worker's non-overlapping-run and
+first-registration identity contract.
 
 No package in this table is an unmodified upstream copy. Direct upstream
 dependencies and modified third-party variants are documented separately.
@@ -61,8 +62,8 @@ dependencies and modified third-party variants are documented separately.
 - **Purpose:** Pick up and execute one Light-Kanban task per scheduled agent run, then return it for human confirmation; resumes owned in-progress work and review feedback before claiming new tasks.
 - **Invocation:** Model-invoked; manual entry point is supported.
 - **Package:** [skills/light-kanban-worker/](skills/light-kanban-worker/)
-- **Status:** Admitted first-party through the full admission path (`review-loop agent-skill` `PASS`); released in v0.1.4.
-- **Evidence:** Contract and behavior tests under [skills/light-kanban-worker/tests/](skills/light-kanban-worker/tests/), [user guide](docs/skills/light-kanban-worker.md), and [admission evidence](docs/evidence/admissions/light-kanban-worker/README.md).
+- **Status:** Admitted first-party through the full admission path (`review-loop agent-skill` `PASS`); released in v0.1.4; v0.1.5 adds the same-agent non-overlap rule and the first-registration identity requirement (second `review-loop agent-skill` `PASS`).
+- **Evidence:** Contract and behavior tests under [skills/light-kanban-worker/tests/](skills/light-kanban-worker/tests/), [user guide](docs/skills/light-kanban-worker.md), [admission evidence](docs/evidence/admissions/light-kanban-worker/README.md), and [v0.1.5 release evidence](docs/evidence/releases/v0.1.5/README.md).
 - **Installation path:** `skills/light-kanban-worker/` in a host-recognized Skills root.
 
 ### manuscript-ops

CATALOG.zh-CN.md

@@ -10,15 +10,16 @@
 | --- | --- |
 | 集合 | Personal Skills Collection |
 | 包数量 | 8 个已准入第一方 Skill |
-| 当前状态 | 已发布 v0.1.4；`light-kanban-worker` 经独立 `review-loop agent-skill` `PASS` 准入 |
-| 稳定版本 | [v0.1.4](https://github.com/LightDevCoder/skills/releases/tag/v0.1.4) |
+| 当前状态 | v0.1.5 release candidate（`READY FOR RELEASE`，tag 待发布）；`light-kanban-worker` 经独立 `review-loop agent-skill` `PASS` 准入 |
+| 稳定版本 | [v0.1.4](https://github.com/LightDevCoder/skills/releases/tag/v0.1.4)（v0.1.5 为已准备的 candidate） |
 | 安装权威 | [docs/INSTALLATION.zh-CN.md](docs/INSTALLATION.zh-CN.md) |
 | 发现检查 | [test_collection_discovery.py](tests/test_collection_discovery.py) |
-| 证据 | [v0.1.4 发布证据](docs/evidence/releases/v0.1.4/RELEASE_RECEIPT.zh-CN.md) |
+| 证据 | [v0.1.5 发布证据](docs/evidence/releases/v0.1.5/RELEASE_RECEIPT.zh-CN.md) |
 
 稳定 `v0.1.1` 包含原来的五个包；v0.1.2 加入 `recap` 与 `language-learning`，
 共七个已准入第一方 Skill；v0.1.3 保持同样的七个包并迁移了测试工具链；
-v0.1.4 加入 `light-kanban-worker`，共八个已准入包。
+v0.1.4 加入 `light-kanban-worker`，共八个已准入包；v0.1.5 增加 worker 的
+same-agent run 不得重叠与首次注册身份契约。
 
 ## 已准入 Skill
 
@@ -54,8 +55,8 @@ v0.1.4 加入 `light-kanban-worker`，共八个已准入包。
 - **作用：** 每次定时运行领取并执行一张 Light-Kanban 任务，交回人工验收；先继续自己持有的任务和 review feedback，再领取新任务。
 - **调用：** Model-invoked，支持手动入口。
 - **包：** [skills/light-kanban-worker/](skills/light-kanban-worker/)
-- **状态：** 通过完整准入路径（`review-loop agent-skill` `PASS`）准入；v0.1.4 中发布。
-- **证据：** [contract 与 behavior 测试](skills/light-kanban-worker/tests/)、[使用指南](docs/zh-CN/skills/light-kanban-worker.md)与[准入证据](docs/evidence/admissions/light-kanban-worker/README.zh-CN.md)。
+- **状态：** 通过完整准入路径（`review-loop agent-skill` `PASS`）准入；v0.1.4 中发布；v0.1.5 增加同 agent 不得重叠运行规则与首次注册身份要求（第二次 `review-loop agent-skill` `PASS`）。
+- **证据：** [contract 与 behavior 测试](skills/light-kanban-worker/tests/)、[使用指南](docs/zh-CN/skills/light-kanban-worker.md)、[准入证据](docs/evidence/admissions/light-kanban-worker/README.zh-CN.md)与 [v0.1.5 发布证据](docs/evidence/releases/v0.1.5/README.zh-CN.md)。
 - **安装路径：** host 认可的 Skills root 下的 `skills/light-kanban-worker/`。
 
 ### manuscript-ops

CHANGELOG.md

@@ -6,6 +6,60 @@ All notable changes are recorded here. A release entry must be tied to an
 actual version or tag and must not be created merely because a document was
 drafted.
 
+## Unreleased — v0.1.5 candidate
+
+### Changed
+
+- `light-kanban-worker` now explicitly forbids overlapping scheduled runs
+  with the same `LIGHT_KANBAN_AGENT_ID`: at most one invocation per agent id
+  may be active, a wake that fires while the previous run is still active
+  must skip, and different agent ids may still run concurrently. The atomic
+  claim boundary is documented accurately — atomic claim protects two
+  different workers claiming the same To Do task and is not a concurrency
+  lock for multiple invocations using the same agent identity; concurrency
+  control stays with the scheduler / agent runtime (`max concurrent runs =
+  1` or an equivalent skip-while-active setting), and the worker adds no
+  lock process, heartbeat, or lease service.
+- First registration now clearly requires ID + name + avatar. A local image
+  is uploaded through `POST /api/avatars` and the returned
+  `/api/avatars/...` path is used for the claim; an existing agent id reuses
+  the server's stored name/avatar, so later wakes do not repeat the avatar.
+  A new agent id without a name or avatar reports identity configuration
+  missing, claims nothing, and mutates nothing.
+- `agents/openai.yaml` default prompt updated to the first-run-capable
+  one-shot form (Agent ID / Name / Avatar) so a fresh board can register a
+  new agent identity.
+
+### Tests
+
+- Worker contract suite extended with the scheduling-boundary rules:
+  same-agent non-overlap, different-agent concurrency, atomic-claim
+  boundary, scheduler ownership of concurrency, no resident lock service,
+  first-registration identity, identity reuse, missing-identity
+  no-mutation, and the local avatar upload path.
+- New adversarial negative fixtures `overlap-allowed-variant.md` and
+  `avatar-optional-first-registration.md`; each violates exactly one rule
+  and must be rejected.
+- Behavior suite adds Scenario G (same-agent concurrent wake: the second run
+  must not start while run #1 is active, verified through a scheduler-guard
+  fixture — Light-Kanban itself provides no run lease) and Scenario H (fresh
+  identity without avatar: no claim, no mutation, clear configuration
+  failure; a legal avatar then makes registration and claim succeed).
+  Scenarios A–F remain unchanged and passing.
+- Release evidence workflow clarified: the receipt now separates the
+  pre-release gate (candidate tests, admission, catalog sync — `READY FOR
+  RELEASE`) from post-release verification (published tag identity, fresh
+  install, host discovery, release CI), so a published tag no longer shows
+  unexplained `PENDING` markers.
+
+### Evidence
+
+- `review-loop agent-skill` acceptance for the contract change:
+  [docs/evidence/releases/v0.1.5/AGENT_SKILL_REVIEW.md](docs/evidence/releases/v0.1.5/AGENT_SKILL_REVIEW.md).
+- Release evidence is recorded in
+  [docs/evidence/releases/v0.1.5/](docs/evidence/releases/v0.1.5/) once the
+  release gates pass.
+
 ## 0.1.4 — 2026-08-16
 
 ### Added

CHANGELOG.zh-CN.md

@@ -4,6 +4,51 @@
 
 所有变更都必须记录在实际版本/tag 对应的条目中，不能因为文档已起草就提前宣称 release。
 
+## Unreleased — v0.1.5 candidate
+
+### 变更
+
+- `light-kanban-worker` 现在明确禁止同一 `LIGHT_KANBAN_AGENT_ID` 的
+  scheduled run 重叠执行：同一 agent id 任意时刻至多一个 invocation 活跃，
+  上一 run 仍活跃时触发的唤醒必须 skip；不同 agent id 仍可并发。atomic
+  claim 边界被准确记录——它保护的是两个不同 worker 同时 claim 同一张 To Do，
+  并不是同一 agent identity 多个 invocation 的并发锁；并发控制属于
+  scheduler / agent runtime（`max concurrent runs = 1` 或等价的
+  skip-while-active 设置），worker 不新增 lock process、heartbeat 或 lease
+  service。
+- 首次注册现在明确要求 ID + name + avatar：本地图片通过
+  `POST /api/avatars` 上传并使用返回的 `/api/avatars/...` 路径 claim；已存在
+  的 agent id 复用服务器保存的 name/avatar，后续唤醒无需重复 avatar。全新
+  agent id 缺 name 或 avatar 时报 identity configuration missing，不 claim、
+  不改动任何任务。
+- `agents/openai.yaml` default prompt 更新为可完成首次注册的 one-shot
+  形式（Agent ID / Name / Avatar），全新看板也能注册新身份。
+
+### 测试
+
+- worker contract 套件新增调度边界规则：same-agent 不得重叠、不同 agent
+  并发允许、atomic claim 边界、scheduler 拥有并发控制、无常驻 lock
+  service、首次注册身份、身份复用、缺身份不得改动任务、本地 avatar
+  上传路径。
+- 新增对抗性 negative fixtures `overlap-allowed-variant.md` 与
+  `avatar-optional-first-registration.md`，各自只违反一条规则且必须被拒绝。
+- behavior 套件新增 Scenario G（同 agent 并发唤醒：run #1 活跃时第二个 run
+  不得开始处理，经 scheduler-guard fixture 验证——Light-Kanban 自身不提供
+  run lease）与 Scenario H（无 avatar 的新身份：不 claim、不改动、明确配置
+  失败；提供合法 avatar 后注册与 claim 成功）。Scenarios A–F 保持不变并继续
+  通过。
+- release evidence 工作流澄清：receipt 现在区分 pre-release gate（candidate
+  测试、准入、catalog 同步——`READY FOR RELEASE`）与 post-release
+  verification（已发布 tag 身份、fresh install、host discovery、release
+  CI），已发布 tag 中不再出现令人困惑的 `PENDING` 标记。
+
+### 证据
+
+- 契约变更的 `review-loop agent-skill` 验收：
+  [docs/evidence/releases/v0.1.5/AGENT_SKILL_REVIEW.zh-CN.md](docs/evidence/releases/v0.1.5/AGENT_SKILL_REVIEW.zh-CN.md)。
+- Release 证据在 release gate 通过后记录于
+  [docs/evidence/releases/v0.1.5/](docs/evidence/releases/v0.1.5/)。
+
 ## 0.1.4 — 2026-08-16
 
 ### 新增

README.md

@@ -10,13 +10,20 @@ explicit about its invocation boundary, and small enough to inspect before use.
 
 > **About:** Personal Skills Collection — Drive your creativity
 
-> **Release:** [v0.1.4](https://github.com/LightDevCoder/skills/releases/tag/v0.1.4)
-> is published from commit `a9cc8aa` (tag `v0.1.4`). The release record and fresh-install evidence
-> live in [docs/evidence/releases/v0.1.4/](docs/evidence/releases/v0.1.4/).
+> **Release:** [v0.1.5](https://github.com/LightDevCoder/skills/releases/tag/v0.1.5)
+> is the prepared release candidate — the pre-release gate is
+> `READY FOR RELEASE` and the `v0.1.5` tag is published only after the gate
+> passes. The release record and fresh-install evidence
+> live in [docs/evidence/releases/v0.1.5/](docs/evidence/releases/v0.1.5/);
+> post-release verification is recorded on main and linked from the GitHub
+> Release.
 >
 > `light-kanban-worker` was admitted through the full path with an independent
 > `review-loop agent-skill` `PASS`; see its
 > [admission evidence](docs/evidence/admissions/light-kanban-worker/README.md).
+> Its v0.1.5 scheduling-boundary and identity change carries a second
+> `review-loop agent-skill` `PASS`; see the
+> [v0.1.5 release evidence](docs/evidence/releases/v0.1.5/README.md).
 > Independent acceptance for the original five packages remains `BLOCKED`;
 > see the release receipts for the exact boundary.
 
@@ -38,7 +45,7 @@ Refresh the Agent host, then confirm that the package is visible in its Skill
 catalog. If the host exposes a filesystem, inspect the installed package's
 `SKILL.md` and `agents/openai.yaml`; discovery without the source checkout is
 the meaningful check. The exact CLI version, destination, and result are in
-[INSTALLATION_VERIFICATION.md](docs/evidence/releases/v0.1.2/INSTALLATION_VERIFICATION.md).
+[INSTALLATION_VERIFICATION.md](docs/evidence/releases/v0.1.5/INSTALLATION_VERIFICATION.md).
 
 The first useful entry point when the next move is unclear is `$ask-light`:
 
@@ -69,12 +76,15 @@ Use light-kanban-worker to process at most one Light-Kanban task.
 ```
 
 It resumes owned work and review feedback before claiming new tasks, then
-returns the result for human confirmation. See the
+returns the result for human confirmation. First registration needs the
+Agent ID, Name, and Avatar; later runs reuse the saved identity. Configure
+the scheduler so only one run of the same agent id can be active at a time
+(different agent ids may run concurrently). See the
 [`light-kanban-worker` guide](docs/skills/light-kanban-worker.md).
 
 ## External capabilities
 
-The published v0.1.4 collection contains eight first-party packages: the
+The v0.1.5 release candidate collection contains eight first-party packages: the
 v0.1.2 release's seven (v0.1.1's five plus `recap` and `language-learning`;
 v0.1.3 kept the same seven and migrated the test toolchain), plus
 `light-kanban-worker`.
@@ -149,7 +159,7 @@ and is never copied into this public collection.
 - [Review policy](docs/REVIEW_POLICY.md)
 - [Catalog](CATALOG.md)
 - [Changelog](CHANGELOG.md)
-- [Release receipt](docs/evidence/releases/v0.1.4/RELEASE_RECEIPT.md)
+- [Release receipt](docs/evidence/releases/v0.1.5/RELEASE_RECEIPT.md)
 - [recap admission evidence](docs/evidence/admissions/recap/README.md)
 - [language-learning admission evidence](docs/evidence/admissions/language-learning/README.md)
 - [light-kanban-worker admission evidence](docs/evidence/admissions/light-kanban-worker/README.md)

README.zh-CN.md

@@ -8,12 +8,16 @@
 
 > **简介：** Personal Skills Collection — Drive your creativity
 
-> **发布：** [v0.1.4](https://github.com/LightDevCoder/skills/releases/tag/v0.1.4)
-> 已从 commit `a9cc8aa`（tag `v0.1.4`）发布。发布记录和 fresh-install 证据见
-> [docs/evidence/releases/v0.1.4/](docs/evidence/releases/v0.1.4/)。
+> **发布：** [v0.1.5](https://github.com/LightDevCoder/skills/releases/tag/v0.1.5)
+> 是已准备好的 release candidate——pre-release gate 为 `READY FOR RELEASE`，
+> `v0.1.5` tag 在 gate 通过后才发布。发布记录和 fresh-install 证据见
+> [docs/evidence/releases/v0.1.5/](docs/evidence/releases/v0.1.5/)；
+> post-release verification 记录在 main，并从 GitHub Release 链接。
 >
 > `light-kanban-worker` 经完整路径准入，独立 `review-loop agent-skill`
 > 验收为 `PASS`；见[准入证据](docs/evidence/admissions/light-kanban-worker/README.zh-CN.md)。
+> 其 v0.1.5 调度边界与身份变更带有第二次 `review-loop agent-skill`
+> `PASS`；见 [v0.1.5 release 证据](docs/evidence/releases/v0.1.5/README.zh-CN.md)。
 > 原有五个包的独立 acceptance 仍为 `BLOCKED`；准确边界见发布收据。
 
 ## Quick Start
@@ -30,7 +34,7 @@ npx skills add LightDevCoder/skills --yes --copy --agent '*'
 npx skills add LightDevCoder/skills --skill review-loop --yes --copy --agent '*'
 ```
 
-刷新 Agent host，然后在其 Skill catalog 中确认发现结果。若 host 提供文件系统，检查已安装包的 `SKILL.md` 与 `agents/openai.yaml`；脱离 source checkout 后仍能发现，才是有意义的验证。CLI 版本、destination 和结果见 [INSTALLATION_VERIFICATION.zh-CN.md](docs/evidence/releases/v0.1.2/INSTALLATION_VERIFICATION.zh-CN.md)。
+刷新 Agent host，然后在其 Skill catalog 中确认发现结果。若 host 提供文件系统，检查已安装包的 `SKILL.md` 与 `agents/openai.yaml`；脱离 source checkout 后仍能发现，才是有意义的验证。CLI 版本、destination 和结果见 [INSTALLATION_VERIFICATION.zh-CN.md](docs/evidence/releases/v0.1.5/INSTALLATION_VERIFICATION.zh-CN.md)。
 
 第一次不知道下一步时，推荐显式调用 `$ask-light`：
 
@@ -55,11 +59,11 @@ $review-loop init     # 冻结已有验收标准的 baseline
 Use light-kanban-worker to process at most one Light-Kanban task.
 ```
 
-它先继续自己持有的任务和 review feedback，再领取新任务，并把结果交回人工验收。详见 [`light-kanban-worker` 指南](docs/zh-CN/skills/light-kanban-worker.md)。
+它先继续自己持有的任务和 review feedback，再领取新任务，并把结果交回人工验收。首次注册需要 Agent ID、Name 和 Avatar；之后的运行复用已保存的身份。请把 scheduler 配置为同一 agent id 同时最多只有一个 run 活跃（不同 agent id 可以并发）。详见 [`light-kanban-worker` 指南](docs/zh-CN/skills/light-kanban-worker.md)。
 
 ## 外部能力（External Capabilities）
 
-已发布的 v0.1.4 集合包含八个第一方包：v0.1.2 的七个包
+v0.1.5 release candidate 集合包含八个第一方包：v0.1.2 的七个包
 （v0.1.1 的五个包加 `recap` 与 `language-learning`；v0.1.3 保持同样的七个包
 并迁移了测试工具链），再加 `light-kanban-worker`。
 
@@ -112,7 +116,7 @@ Use light-kanban-worker to process at most one Light-Kanban task.
 - [审查策略](docs/REVIEW_POLICY.zh-CN.md)
 - [目录](CATALOG.zh-CN.md)
 - [变更记录](CHANGELOG.zh-CN.md)
-- [发布收据](docs/evidence/releases/v0.1.4/RELEASE_RECEIPT.zh-CN.md)
+- [发布收据](docs/evidence/releases/v0.1.5/RELEASE_RECEIPT.zh-CN.md)
 - [recap 准入证据](docs/evidence/admissions/recap/README.zh-CN.md)
 - [language-learning 准入证据](docs/evidence/admissions/language-learning/README.zh-CN.md)
 - [light-kanban-worker 准入证据](docs/evidence/admissions/light-kanban-worker/README.zh-CN.md)