Close the exact run for stop-and-retain and default stopping paths, retain failed explicit cleanup fences, and settle Stop requests arriving during or after warm retention. Prevent stale warm returns from overwriting a released or rebound lease.
Co-authored-by: Codex <noreply@openai.com>
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Bind the new layout policy into provider-pack identity and verify it on controller and guest while preserving legacy immutable packs and approved image root aliases.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Port reviewed core 3223e57b74. Keep the staging mocked route suite and place the real-database selection regressions in its existing computer-route-selection suite.
Co-authored-by: Codex <noreply@openai.com>
Port the final four cases from 7634c65d22, including their original prerequisite fixture. The staging executor already has the matching production identity branch. No production or migration change.
Co-authored-by: Codex <noreply@openai.com>
Keep candidate config, credential bindings, computer attachment and activation in one transaction so a rejected key preserves committed authority. Honor configured worktree bases and attach exact existing branches without creating, resetting or replacing dirty work.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
(cherry picked from commit c9ae885fd9)
Keep requested branch attachment separate from ownership established by realization, and round-trip the optional intent through the shared request contract.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
(cherry picked from commit ab1e8acc68)
Preserve every settlement and ownership gate while exposing fixed reason codes for checkpoint mismatches and prior authority verification. Cover each diagnostic branch without logging evidence values.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Authorize exact user-owned viewer cleanup independently of the current task environment, with route and module regressions.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
