mirror of
https://github.com/block/buzz.git
synced 2026-11-06 09:21:45 +00:00
Automatic restart flows (post-install adapter bounce, global-config change) derived eligibility purely from resolve_effective_agent_env + agent_readiness. An unavailable secret tier hydrates to an empty env that is indistinguishable from an intentionally-empty one, so those flows could stop a live/setup process and only discover the refusal at respawn (FailedAfterStop). Add effective_secrets_unavailable(record, personas) — ORs the three registry-derivable tiers (instance secrets_unavailable, definition, harness) — and thread it through both eligibility predicates and the under-lock recheck in each flow, refusing before any stop. Co-authored-by: Will Pfleger <pfleger.will@gmail.com> Signed-off-by: Will Pfleger <pfleger.will@gmail.com>