Verify independent SDK research and immediate governed graph order

[adrianwebb]

Outcome

Criterion111 in SDK401 requires independent research and immediate standing-profile engineering order. The existing selected product verifier counted exact authored pairs but ignored their public edges.

Work authority

• Work item / Issue: SDK401, source authority SDK376 and Agent368
• Proposal / decision: Explicit user-authorized acceptance implementation plan
• Assignment / checkpoint: Criterion111, independent research and standing profile order
• Actor: Codex through provider-authenticated adrianwebb
• Implementer: Codex through provider-authenticated adrianwebb
• Human authority: adrianwebb, explicit implementation authorization
• Agent / capacity provider: Codex in authorized local workspace
• Exact base ref: staging 869f83cbc77a733bc736e07bed9ca5a9d18a72ae
• Exact head ref: codex/sdk-standing-graph-order-401 afa83d398c1419bdea87ea7a85d67934dc917a24

Contributor mode (select one):

• Human-authored
• Agent-assisted under human authority
• Agent-authored under human authority

Plan

Strengthen existing owning proof and selected wiring without changing requirements.

Changes and commits

RED commit6c5a51f9 reproduces the ignored-edge defect (16 tests:15pass/1fail/0skip). Repair afa83d3 extends the existing product verifier through the public execution-edge schema: exactly six authored Actor→Reviewer pairs and four immediate approved-predecessor profile edges; Researcher remains independent. Missing/malformed/duplicate/removed edges, foreign owners or endpoints, substituted source identity/revision/digest/repository/commit/path, transitive/Actor bypass and work-item order substitutes fail closed. Unrelated edges and ordinary governance/event conditions remain retained.

The original native public SDK/HTTP isolated verifier now exercises all21 order denials alongside all20 existing graph-pair denials and all original proposal/transport/interruption/retry cases. Its original5s observation and15s case watchdogs and cleanup remain unchanged. One newly necessary unit verifier joins the existing component scene; the existing native and managed product IDs are reused.

SDK product source is unchanged: the reserved managed test-first defect remains untouched. No new runner, schema, runtime role policy or manufactured managed receipt. This candidate proves graph topology; independent original governed-profile dependency authority must converge in Agent before criterion111 can be completed.

Verification

Pinned Node24.12.0: focused unit/native17/17 passed,0failed/skipped/todo; strict TypeScript, file policies and diff checks passed. Fresh complete SDK+executing Reviewer suites and244 component steps are required in Actions. No local scene was launched or previous prerequisite receipt reused.

Risk and rollback

Stricter acceptance can expose actual graph drift previously hidden by counts. Retain observations and repair the earliest owner after focused RED. Ordinary revert preserves all history.

Completion summary

Criterion111 remains open pending governed-profile proof, exact Actions verification, ordinary delivery and actual installed-archive read-back. No managed SDK pass or launch readiness is claimed.

Submission checklist

• The change is bounded to the stated work item and target repository.
• Exact base and head refs are recorded and the branch is ready for review.
• Verification and compatibility evidence are recorded above.
• No plaintext secrets, credentials, machine state, or unrelated residue are included.
• Plan, status, commits, and completion summary form a complete durable record.
• Rollback or recovery steps are documented and executable.

Historical submission observation: run38148615671 rejected missing required template sections/authority labels/contributor mode. The body is corrected in place; the failure remains retained. No source or verification assertion was changed to resolve metadata.

Audited exact candidate

Required Verify38148615725 passed tested merge50bb5d9df396b289dfe9b4f7e9d7aa90f47cb1da/tree9fb7d273217275251236a863ef3c09cc60b7d420. Fresh579SDK+200executingReviewer(e60ad2581e7ff041f058af04bd810796fea748f9),0failed/skipped/todo, preceded244component steps. All244actual assertion receipts/37nativeGit source digests/shipped assets audited. ReportSHA8c062b1a85be528d057ff7fdf0f81f93fd5220c17a0ea2622ca1edad4f67d2df; CIarchive17d7ce44e5eb1552e5094ca1b478e572a1a3861b63de5d9d1200afd867595b6e. SceneZIP11705896830 SHA73ae3ecc6f43bca858a61e4c73fc9c8335d6069282123e3bed4c1d9913b24737; packageZIP11706590955 SHAe5d29c3aa299802531a32d5d8787ebd6c315111cd5669075cefe54b09f90283d.

Actual local SDKarchivea05c280ff308effb255080ae3c168e2210a4e6bdba31172ce28b7d0f2230dc61 installed with all6actual owner archives, production dependencies/scripts-disabled. Exact source/installed plan9e1d97874830569e4e02050fe2602ace32794c0b43a8e9b3e1629135422b83a0,48mapped/156uncovered/204selected/260deferred; expected uncovered-only exit1, all changed shipped assets matchGit. Installed tree264VY4 removed, all heads/archives unchanged through invocation. Agent5e5257 replacement verification still required. This is component/asset proof, not managed passing acceptance or SDK launch readiness.