Preserve every settlement and ownership gate while exposing fixed reason codes for checkpoint mismatches and prior authority verification. Cover each diagnostic branch without logging evidence values.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Authorize exact user-owned viewer cleanup independently of the current task environment, with route and module regressions.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Preserve the full route regression suite in the stacked acceptance proof branch. Cleanup remains fenced by company, environment, current user, and exact owner generation.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Integrate the scoped production correction and existing config test from 2700054c6a. Full Claude and Codex execute regressions remain in the stacked acceptance PR.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Keep controller instruction reads while advertising the registered persistent execution path. Mount approved remote Claude skills into the isolated user configuration so user-only settings can discover them without enabling project settings.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Integrate the production route correction from 5af1eb0762; its full route regression suite remains in the stacked acceptance PR.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Delayed cleanup of an older lease must not replace the latest task authority for computer previews. Keep rejecting a non-live latest owner instead of searching older leases.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Restrict fresh Boat Codex setup to CLI and preserve unsupported existing ACP/default settings as explicit repair choices. Block saving or testing until CLI is selected; keep Claude and other environments unchanged.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Keep an exact inode receipt under the existing editor lock before writing temporary content. Recover only that recorded inode on the next operation and preserve replacements and unknown files.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Apply GNU timeout after SSH admission deducts queue time. Verify a delayed remote-shaped Python write is killed independently of local SSH termination.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Propagate the admitted operation deadline through readiness, claims, and SSH commands. Keep only a bounded transport-settlement hold, and expire a short file waiter without cancelling shared SSH initialization.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Dotta