Retain provider availability history through the existing complete public audit

[adrianwebb]

Outcome

Availability publication now retains original committed transitions in the existing capacity audit history, including runtime expiry. Public audit pagination returns complete raw records. Losing or stale refresh claims cannot mutate offers, lanes or seed grants.

Work authority

• Work item / Issue: Complete accounting transition observations for strict Agent acceptance #553 continuation of SDK exploratory source custody and canonical workday closeout repair #515; Agent Keep addressed communication within its parent workday allocation #368; Continue strict acceptance binding delivery — 109 complete / 68 open sdk#424 current contract and Continue strict acceptance bindings: exact remaining checklist and installed delivery sdk#408 checklist.
• Proposal / decision: Human-approved strict capacity-provider and agent-execution implementation plan; acceptance digest dfb012f90cbfcbf293d520008c752c1ef6f3617c2720e66717c07c8a187b89b3.
• Assignment / checkpoint: Criterion163 owning provider-transition completeness; dependent Agent monitoring and installed proof remain required.
• Actor: Codex implementation agent.
• Human authority: Adrian / @adrianwebb; continue implementation, preserve services and use native CI.
• Agent / capacity provider: Codex; no managed provider invocation claimed.
• Exact base ref: staging9c340d0c6bcf9bb7ad823cc78878097d4e896072.
• Exact head ref: codex/provider-availability-audit-history-163 fdcbe12; tree14e6cd544c5ae14dacc41bb6611ec3e18c715588.

Contributor mode:

• Human-authored
• Agent-assisted under human authority
• Agent-authored under human authority

Plan

Run fresh2132API+200held executingReviewer assertions before941component steps on the exact candidate. Preserve complete native PostgreSQL and all-language TreeDX prerequisites. Independently audit source, report, actual archive, current automated checks and exact ordinary staging read-back. No prior, filtered, skipped, empty, partial or historical receipt supplies this invocation.

Changes and commits

Reuse capacity_audit_events and recordOnce; session rows remain supply authority and audit rows retain original observations. Open, refresh, implicit replacement, actual idle closure and runtime expiry publish exact provider/membership/session/sequence/status, source clocks, measured supply, safe health/eligibility/build/offer data and configuration digests. Private adapter observations remain excluded. Missing, ambiguous or altered observation writes fail the coupled transaction. Expiry uses its actual closedAt and cannot precede original expiresAt; concurrent maintenance reports only rows actually expired and cannot duplicate observations.

The original public audit query shares one SQL paging implementation with its existing repository. Preserve raw response shape and descending clock/ID order; use limit+one and exact cursor continuation. Authorization and malformed-cursor denial remain before reads.

Refresh validates and locks its exact provider/member/team/session/open sequence before any coupled projection or seed-grant write. The original offer upsert also uses its existing availability guard. Retain context-overflow disposition and original offer bytes on stale/foreign/terminal claims and exact replay.

Strengthen the existing native availability case: independent pools compare public histories with SQL; competing refresh and expiry, stale/terminal replay, suppressed/interrupted/altered audit writes, malformed source/terminal clocks, complete rollback, scoped seed-grant preservation and unrelated live supply are checked under the original30second watchdog. All935checked-parent component steps remain byte-for-byte in their original order; append six owning unit cases, reusing the original native verifier.

Fourteen files total. Existing early native prerequisite command additionally runs the two original availability files before the complete suite; all other workflow steps, pins, environments and deadlines remain intact. No package, lock, migration, new public resource, Workday fan-out, SDK product fix or alternate authority.

Retained test-first lineage:

• Initial missing-history c046caf and native1792926a39196ef375f29a76a96e0e9ff9c2de72; corrected existing-public-audit boundary a484d53/cb53c12e94c386c548c0a0afac68f7d2988e3436 before808b4e12e03930d5bd345a042f0d72fb955a15c0.
• Calendar50dbb047e0eeea968600ee7b80523e9f598a1d11/native0e765332442c9b7f57c11c4caf6c0e05db8eadc9 beforeb9906916288fdffc736fb598dd2cbf77e8067153. Source catalog truncation guard rejected an assembly before invocation;4f255335d54d3c5fa1b68296517fa5c9d65048dd rebuilt from full held Git bytes.
• Integration686061dacb7810ac93dcb4fb612334c9b2f19dc1 retains checked API561 and regression-first source parents.
• Closeout fixture2f1d78269e65c7537c733522724b5933aebf1bc2/76ad92ec2a8695ff052850e5dbd1ab7b86fdf42f retain original migration DDL, exact deterministic audit identity and unchanged replay.
• Fault SQL1dfc15e998b57b179e4c6ccb344233ea5bf772c7 gives1failed/2passed before named-delimiter repaircfad9ddaade0ed5898d6b72a15fbfc8874794d70. Selection000fe68f96deaa9ff0d498329824c6ee886c45f6, early native command2288d30d909745d419908345e367cb715f0a8ff6 and typed modes e02db3e remain ancestors.
• Runtime expiryd7e82b2bb5f6e5e88c125cc92ebf86c776b4076c gives1failed/3passed, native5008687ee61c7c617765c93bfc52155ce0d432e5 before1c1d46febdb7a2587499c17430134a18a26b3a84. Early-clock841b281a13e2cd8df398cfe007d7559b2ed3ea85 gives1failed/3passed before59d0f45386536542c508cf996fba02a5a22452f0.
• Offer claimd02a6d5e86aaf7e71a24caa70acfbccd1b029b4c gives1failed/4passed before1d5d831b687dc7617e31c57c9f95f7d705d69462. Whole-claimf8bf86416a9a7e0aeabdd5fca6094d110dfb14aa gives1failed/5passed beforec3024fc4075a87e97b45ffd9a4d86a8d47c7cc56. Finalfdcbe12df635e289ec85346db896036f352ecebc preserves the generic test reader contract.
• All local strict typing/setup failures and focused failed observations remain retained in Complete accounting transition observations for strict Agent acceptance #553/Actions and ordinary source ancestry; no checks or assertions were disabled.

Verification

Current sourcefdcbe12d:55assertions/7whole files PASS. Strict production/evidence TypeScript, original file-length and architecture policies PASS. Fixture/index cleanup confirmed; primaryd79c48c79b3ae17a73a576a6c5461b9506e81027 and services/dependencies unchanged.

Historical native failures supply no passing prerequisites:

-39004432888/job117313880096:137passed/1failed early prerequisite, missing original closeout audit table; zero scenes.
-39005878568/job117318144732:2127passed/1failed across406files, invalid original fault SQL delimiters; zero scenes.
-39008449904/job117325632162:143passed/1failed across32early native files, losing refresh changed execution_capability_offers.last_seen_at; zero scenes. Full failed log486362characters retained; native TreeDX/signer/container cleanup succeeded.

Native 39009778325, job117329644739, PASSED on exact tested merge18c53846a4c85dc143511449b0a213f57196a74a: all2132API+200heldReviewer assertions passed freshly before941component steps/941independent receipts. Independent audit verified214source hashes, all10selected shipped assets and compiled availability/accounting helpers. Actual archiveSHA2561469153a030e8904807038fb69ca2385705a78149225aaa8c07676b8793a6fef; report8497cd6318a5d03dcf1411ca811e1aeae5a9c590dda02cfe10e13305dd21bb42. All native PostgreSQL supplements, original all-language TreeDX prerequisites, signer/TreeDX/container cleanup passed. Four original artifact ZIPs retained with GitHub SHA256 digests. Current automated metadata checks and ordinary staging read-back remain required. Focused PGlite grammar checks are additional regressions, never a substitute for native PostgreSQL concurrency or complete prerequisites. No managed governance/model/usage/teardown or SDK golden outcome is claimed.

Risk and rollback

Each actual availability transition adds one observation to existing audit storage. Truthful paging exposes additional authorized records. Invalid history fails the coupled transaction; expiry now participates in the configured transaction authority. Revert via an ordinary checked staging PR and coordinate dependent archive custody. No service interruption, permission expansion, storage reinitialization, release, tag, main promotion or deployment.

Completion summary

Owning regressions, bounded repairs, fresh complete native prerequisites,941components and independent archive audit passed on the exact candidate. Ordinary checked staging delivery and dependent Agent/installed monitoring remain required. 163OPEN; zero new binding credit.

Submission checklist

• The change is bounded to the stated work item and target repository.
• Exact base and head refs are recorded and the branch is ready for review.
• Verification and compatibility evidence are recorded above.
• No plaintext secrets, credentials, machine state, or unrelated residue are included.
• Plan, status, commits, and completion summary form a complete durable record.
• Rollback or recovery steps are documented and executable.