Keep local explicit recovery in the durable execution ledger without importing remote-only provisioning grants. Recheck its captured predecessor and config under serialized execution, preserving uncertain and post-spawn fences. Bind Start and Restart to their selected community across asynchronous preflight, and preserve the native owner snapshot. Split local preflight without changing agent configuration model rules.
Signed-off-by: Logan Johnson <loganj@squareup.com>
Signed-off-by: Logan Johnson <loganj@squareup.com>
(cherry picked from commit c0ce9204d3e400dd936b62d649e32748fe464ad7)
Signed-off-by: Logan Johnson <loganj@squareup.com>
Close admission and join session, prompt, MCP and shell owners before acknowledging supported shutdown. Retain actual child exit evidence and lifetime uncertainty across initialization, respawn, cancellation and forced teardown. Install ACP shutdown ownership before startup and sign a local completion proof bound to the existing agent, community and launcher nonce.
Native exact Stop requires verified proof plus successful retained-root/group teardown before recording Stopped. Unsupported, missing, forced or uncertain evidence stays replacement-blocking. The guarantee covers trusted Unix ACP/agent/dev-MCP shell process-group work, not detached daemons or external jobs. Legacy Desktop Stop UI and remote Start/Move integration remain separate.
Validated package tests and all-feature clippy, workspace fmt, native default-feature clippy and execution/owner tests, native fmt, current binaries, real selected/peer process-chain teardown, whitespace and differential size gates. Native validation uses a source-only externalBin override, not packaging parity.
Signed-off-by: Logan Johnson <loganj@squareup.com>
Keep Start off by default. Admit owner-private encrypted command and receipt transport, fence immutable retries, and expose provisioned destination selection. Exercise two isolated native executors through spawn, signed receipt, live run label, and source restart; no physical-host or real-model certification.
Signed-off-by: Logan Johnson <loganj@squareup.com>
Preserve the reconciled Multiverse candidate: owner-private encrypted host history and run presence, exact signed execution commands/receipts, durable generation-fenced journal, and disabled native execution seams. Preserve derived-channel h matching in shared SQL query/count for mixed host filters, with isolated database regression.
Remote command admission/receiver, Start UI and Move are not enabled. Root-only teardown remains insufficient for replacement. Move semantics are approved: selected-run stop-confirm, fresh same-agent destination session, no automatic workspace/file transfer.
Core/DB/pubsub/ACP suites and explicit history integrations pass; the unchanged mesh demo echo test still times out (504 vs 200) in the full relay suite and isolated retry. This is a source checkpoint, not a packaged or deployment-ready feature.
Signed-off-by: Logan Johnson <loganj@squareup.com>
