Verify exact authored SDK Actor and generated Reviewer graph pairs

[adrianwebb]

Outcome

Reject counted Actor/Reviewer pairs that do not represent the exact six authored SDK proposal work items. The existing SDK live verifier reads the public graph independently, checks each pair's authored/generated authority and exact proposal source, then confirms graph read-back stays unchanged.

Work authority

• Work item / Issue: SDK401, original SDK376; owning Agent368/API515
• Proposal / decision: User-authorized strict capacity-provider and agent-execution acceptance implementation plan, SDK lane
• Assignment / checkpoint: Existing partial criterion170 6d6749cd8c2676c6c50c009b55025ec3b951589db602440f63b76ba021159f20; unchecked semantic completion
• Actor: Codex through provider-authenticated adrianwebb
• Human authority: adrianwebb, explicit implementation authorization
• Agent / capacity provider: Codex in the authorized local workspace
• Exact base ref: staging d2d56a6e59d1cdc036341b246c9f6fdf68cd5274
• Exact head ref: codex/sdk-authored-graph-pairs-401 4a0e40be821bed57c44c623ebf21b4ac70ba4e4c

Contributor mode (select one):

• Human-authored
• Agent-assisted under human authority
• Agent-authored under human authority

Plan

Strengthen the original SDK verifier and native public SDK case; keep all selected/deferred identities and original deadlines. Integrator will add the SDK product reference to existing170 after adequate native producer proof and exact delivery. No SDK src change; the non-enumerable retired-field product defect remains reserved for genuine managed Tester→Reviewer→Engineer. No new authority, graph model, runner, production dispatch or role configuration.

Changes and commits

• e6feccd RED: Original product gate accepts an unrelated Reviewer work item despite six counted pairs. Exact valid baseline passes; mutation is retained unchanged;15tests/14passed/1failed/0pending. Committed before repair.
• 4a0e40b repair: Match every original authored work item to one Actor and one generated Reviewer, exact kind/class/workspace/review limit/team/project/source revision/digest/commit/path/repository; require12 unique node identities. Preserve unrelated workday nodes and original raw content/fixed-draft validation. Read complete public graph through original CLI boundary and compare unchanged read-back.
• Unit covers20 malformed/substituted graph observations, unchanged retry, denied input preservation and unrelated resources retained. Existing native public SDK/isolated worker case gains real graph HTTP reads, concurrent exact requests, all20 corruptions plus403/503/malformedJSON/interruption and exact retry;27 explicit graph requests in the added sequence. Existing native negative cases remain intact.
• Native upstream graph values are controlled, not a genuine managed/producer receipt. Owning API producer proof remains separate. Original five-second per observation and15-second native case bounds unchanged; worker/listener/disposable fixture cleanup retained.
• One necessary unit verifier/component selection added; original native and live verifier identities reused. Component and integrated scenes remain separate.
• Retained intermediate failures: first repair reordered source mismatch diagnostics; moved graph check after original content authority validation. First native fixture failed at exact1MiB proposal boundary because its graph retained the ordinary digest; fixture now uses the same exact boundary bytes. Assertions/limits were preserved.

Verification

Pinned Node24.12.0. Original commands:
node node_modules/vitest/vitest.mjs run --config ./vitest.contracts.config.ts plus exact owning unit/native files and JSON reports: final16/16, zero failed/pending. Broader operator acceptance plus actual packed-archive contracts26/26. Strict node node_modules/typescript/bin/tsc --noEmit and npm run check:file-lengths pass. No local scene or managed campaign launched. Reports and failed observations retained in existing native verification cache; Actions artifacts remain verification authority.

Required Verify38141158408 passed on exact tested mergea8a0ce0708a0ac8a0011cca20386bdfd1c8ece9b, base d2d56a6/source4a0e40be821bed57c44c623ebf21b4ac70ba4e4c/tree5ecf38bfeb8ab2bbf5ffb1ebf3c5af2b48b4db4d. Fresh complete suites578SDK+200executingReviewer(e60ad2581e7ff041f058af04bd810796fea748f9), zero failed/skipped/todo, preceded243componentsteps. All243 independent assertion receipts/37 owning source file digests/selected archive bytes audited against exact tested Git. ReportSHA64426a5d420a65ef10200f62f5ce8933025c4b653f8b1a505a56b819a2b3ae8c; CIarchiveSHA9e39698134efeaf5f6cb5cd8d953ab89202f1bfbdc27488d37bd701e0b497ec5. Sceneartifact11702604683 ZIP2325574226377b92f61baa040ee9f456ce46a4e0fe615777081f526897a79d99; packageartifact11703585328 ZIP09ae9b38cf3f9bc30f18664a1f3f218f8fde692c1b974fabb1da8cabd7f865ba.

Actual six-owner exact archives installed production-only/scripts-disabled. SDK archiveSHAe09dd55a0c9aa70c89e938b3b7e8ad58983c7cce8a51a27591330d884873525c. All six held candidates/cleanliness/archive digests and selected assets matched; source/installed strict plan bytes identical SHA64276f10148ddc227c699c068a64fed346f212a330a056e28a90a04c401423b8,47mapped/157uncovered/204selected/260deferred. Original stale previous-SHA script failure is retained: new unit registry entry was the sole plan change; final immutable audit passed without repeating installation. New Agent412 binding candidate also installed successfully (SHA5aee1bc93ca782bc7dc81d30bd8afbe8b9ac8869d3402470e026326dac068561). Both dependency trees and all owned subprocesses were cleaned. Ordinary staging read-back remains required. These are component/installed plan proofs, not native six-pair producer or managed receipts; earlier prerequisites cannot satisfy a future invocation.

Risk and rollback

Incomplete/mismatched public graph now fails the existing SDK verifier even if proposal and release receipts agree. Ordinary revert of repair restores prior verifier; preserve RED/history and failed observations. No product/API/database schema change or deadline relaxation.

Completion summary

This strengthens original partial170; it is not one of the177 originally unbound checklist rows and is not yet completed. Checklist18completed/159open. Agent411 delivered criterion169 wiring (formal47mapped/157uncovered), but API533 native prerequisites and final combined read-back still block169 completion. No current governed campaign authority, launch readiness or managed pass is claimed.

Submission checklist

• The change is bounded to the stated work item and target repository.
• Exact base and head refs are recorded and the branch is ready for review.
• Verification and compatibility evidence are recorded above.
• No plaintext secrets, credentials, machine state, or unrelated residue are included.
• Plan, status, commits, and completion summary form a complete durable record.
• Rollback or recovery steps are documented and executable.