impl(aggregator): audit event integrity, identity and durable recovery #3322

Activity

1. dezren39

   added a parent issue on Nov 1, 2026

   • epic(dashboard): PM stack coherence - single-URL, fresh data, triage-able, hierarchical #1184
2. github-actions

   assigned

   dezren39

   on Nov 1, 2026
3. dezren39

   added

   kind/enhancement

   priority/normalOrdinary priority (the default)Ordinary priority (the default)

   effort/lLarge: multi-day or open-ended; expect staged check-insLarge: multi-day or open-ended; expect staged check-ins

   status/needs-triageNot yet triaged; needs a first lookNot yet triaged; needs a first look

   app/pm-stackpm-stack (Pad/Grist) in developing-today/codepm-stack (Pad/Grist) in developing-today/code

   meta/enrichedIntake review done: acceptance criteria, links, and normalized labels addedIntake review done: acceptance criteria, links, and normalized labels added

   on Nov 1, 2026
4. dezren39 commented on Nov 1, 2026

   

   dezren39

   on Nov 1, 2026

   MemberAuthor

   More actions

   Intake review

   Related: #1261 (parent design), epic #1184, #1739 (stream), #1253 (identity), #2072 (session attribution), #1258 (storage/backup decisions). Notes: the largest of the three aggregator children (effort/l) because audit-grade integrity + backup/restore evidence is the expensive part; acceptance already in the body. Risk: inventing a competing storage/backup path instead of consuming #1258's decisions — the body forbids it; hold that line in review.

   — Fleet monitor intake pass (protocol §5), 2026-11-01. Still live at review time: no merged PR or commit found that resolves this item (checked against the issue's own evidence and recency).
5. dezren39

   added

   queue/queuedHas a queued task in the Supabase agent queueHas a queued task in the Supabase agent queue

   source/creatorFiled by the new-issue-creator jobFiled by the new-issue-creator job

   task/triageQueue packet kind: verify, reproduce, and route this itemQueue packet kind: verify, reproduce, and route this item

   on Nov 3, 2026
6. developing-today commented on Nov 3, 2026

   

   developing-todayBot

   on Nov 3, 2026 – with developing.today

   Contributor

   More actions

   agent-note:v1
   state: triaged (coverage pass)
   Coverage pass 2026-11-03: reviewed in the fleet-wide per-issue pass (drift / overlap / already-handled / stale / blockers / ordering). Verdict: still live; queued in repo-health-code-pilot as triage at priority 40 (priority/normal). If this is already handled at current main, the triage closes it with evidence; if it needs splitting, the triage files the split.
   Found via: coverage pass 2026-11-03
7. dezren39

   removed

   status/needs-triageNot yet triaged; needs a first lookNot yet triaged; needs a first look

   queue/queuedHas a queued task in the Supabase agent queueHas a queued task in the Supabase agent queue

   on Nov 3, 2026
8. 30 remaining items

   Load more
9. dezren39

   removed

   queue/parkedQueue task is parked (waiting on CI, time, or an event)Queue task is parked (waiting on CI, time, or an event)

   on Nov 3, 2026
10. dezren39 commented on Nov 3, 2026

    

    dezren39

    on Nov 3, 2026

    MemberAuthor

    More actions

    🤖 Agent note · picked up

    • Agent: queue worker (repo-worker-code), lane K (code-k)
    • Session / ID: task 8696
    • Found via: queue claim
    • Task: Resuming task 8696 for issue impl(aggregator): audit event integrity, identity and durable recovery #3322: the Codex re-review of PR feat(aggregator): audit event v2 — integrity + durable retry (#3322 slice A) #5137 head 621f790 landed at 2026-11-03T22:32:34Z with 4 new P2 findings (verify stored hashes before retention pruning; reject empty hashes in persisted v2 records; serialize outbox removal with failed-append queuing; reject duplicate caller-supplied event IDs). Per the Codex gate these block merge; fixing them on the laptop worktree now.
    • Expectation: fixes pushed, each finding replied on its thread, re-review requested, then merge when clean or park awaiting re-review
    • Links: PR feat(aggregator): audit event v2 — integrity + durable retry (#3322 slice A) #5137, branch queue/8696-3322-audit-event-v2
11. dezren39

    added a commit that references this issue on Nov 3, 2026

    fix(aggregator): disposition Codex round-2 findings on audit event v2 (…

    ...

    378ec8f
12. dezren39

    added

    queue/parkedQueue task is parked (waiting on CI, time, or an event)Queue task is parked (waiting on CI, time, or an event)

    status/parkedDeliberately paused with a recorded resume conditionDeliberately paused with a recorded resume condition

    and removed

    status/in-progressQueue worker lifecycle stateQueue worker lifecycle state

    queue/claimedQueue worker lifecycle stateQueue worker lifecycle state

    on Nov 3, 2026
13. dezren39 commented on Nov 3, 2026

    

    dezren39

    on Nov 3, 2026

    MemberAuthor

    More actions

    🤖 Agent note · parked

    • Agent: queue worker (repo-worker-code), lane K (code-k)
    • Session / ID: task 8696
    • Found via: queue claim
    • Task: Parked task 8696 for issue impl(aggregator): audit event integrity, identity and durable recovery #3322 awaiting Codex re-review of PR feat(aggregator): audit event v2 — integrity + durable retry (#3322 slice A) #5137 at head 378ec8f. All 4 round-2 Codex P2 findings fixed this shift (verify-before-prune, empty-hash v2 rejection, serialized record lifecycle, idempotent caller-id replay), each replied on its thread, re-review requested. Tests: events+orchestration 62 pass; full aggregator suite 1424 pass on re-run (one unidentified flaky failure in the first full run did not reproduce in two subsequent full runs).
    • Expectation: on resume, read the Codex review fresh — merge PR feat(aggregator): audit event v2 — integrity + durable retry (#3322 slice A) #5137 if clean, otherwise disposition the new round
    • Links: PR feat(aggregator): audit event v2 — integrity + durable retry (#3322 slice A) #5137, branch queue/8696-3322-audit-event-v2, head 378ec8f
14. dezren39

    added a commit that references this issue on Nov 3, 2026

    Merge pull request #5137 from developing-today/queue/8696-3322-audit-…

    ...

    540ed01
15. dezren39 commented on Nov 3, 2026

    

    dezren39

    on Nov 3, 2026

    MemberAuthor

    More actions

    🤖 Agent note · done

    • Agent: queue worker (repo-worker-code), lane code-d
    • Session / ID: task 8696
    • Found via: queue claim (resume from park)
    • Task: Slice A of issue impl(aggregator): source coverage and gap-aware activity ingestion #3321's sibling issue impl(aggregator): audit event integrity, identity and durable recovery #3322 — PR feat(aggregator): audit event v2 — integrity + durable retry (#3322 slice A) #5137 MERGED (merge commit 540ed01, 2026-11-03T23:26Z). Codex re-review of head 378ec8f landed clean ("Didn't find any major issues", 23:03Z); all round-1/round-2 findings were fixed and dispositioned on-thread by the prior session. Prior-session test evidence: events+orchestration 62 pass, full aggregator suite 1424 pass. Issue impl(aggregator): audit event integrity, identity and durable recovery #3322 stays OPEN: slice B remains blocked on issue design(pm-stack): durability & host independence — stack state in backed-up durable storage, stack survives the laptop being off #1258 (user/escalated) and was explicitly out of scope for task 8696.
16. dezren39

    removed

    status/parkedDeliberately paused with a recorded resume conditionDeliberately paused with a recorded resume condition

    queue/parkedQueue task is parked (waiting on CI, time, or an event)Queue task is parked (waiting on CI, time, or an event)

    work/assignedQueue worker lifecycle stateQueue worker lifecycle state

    on Nov 3, 2026
17. dezren39

    added 2 commits that reference this issue on Nov 4, 2026

    test(aggregator): re-pin failed-append test to the #3322 v2 stable-id…

    ...

    4b12bed

    feat(aggregator): activity ingestion — watchdog/Kaneo stream writers,…

    ...

    f5c8993