Integrate client checker and bounded notification source

.github/workflows/debt-ratchet-cache.yml

@@ -9,6 +9,18 @@ on:
 
 permissions:
   contents: read
+  pull-requests: read
+
+# GitHub's actor supplies only Git object attribution, never merge permission.
+# Process-scoped configuration reaches merge/commit-tree without changing any checkout.
+env:
+  GIT_AUTHOR_NAME: ${{ github.actor }}
+  GIT_AUTHOR_EMAIL: ${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com
+  GIT_COMMITTER_NAME: ${{ github.actor }}
+  GIT_COMMITTER_EMAIL: ${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com
+  GIT_CONFIG_COUNT: "1"
+  GIT_CONFIG_KEY_0: commit.gpgsign
+  GIT_CONFIG_VALUE_0: "false"
 
 concurrency:
   group: debt-ratchet-cache
@@ -33,12 +45,20 @@ jobs:
         with:
           python-version-file: pyproject.toml
 
-      - name: Install agent-comms
+      - name: Bootstrap only Core and locked checker dependencies
         run: |
           python -m pip install packaging
           python -m pip install "$(python -I src/agent_comms/installer/declared_uv.py pyproject.toml)"
-          uv sync --locked --all-extras
-          echo "$GITHUB_WORKSPACE/.venv/bin" >> "$GITHUB_PATH"
+          UV_PROJECT_ENVIRONMENT="$RUNNER_TEMP/checker-venv" uv sync --locked --all-extras
+          echo "$RUNNER_TEMP/checker-venv/bin" >> "$GITHUB_PATH"
+
+      - name: Resolve main's actual merged source tuple once
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: PYTHONPATH=src python -m agent_comms.integration --resolve-ci-inputs "$RUNNER_TEMP/paired-sources"
+
+      - name: Build the one common checker environment
+        run: PYTHONPATH=src:tools python tools/checker_stack.py --ci-inputs "$RUNNER_TEMP/paired-sources"
 
       - uses: actions/cache/restore@v4
         with:
@@ -50,7 +70,12 @@ jobs:
       - name: Measure main against its parent
         run: |
           PYTHONPATH=src:tools python tools/debt_ratchet.py \
-            --root ${{ matrix.kind }} --base HEAD^1 --head HEAD || true
+            --root ${{ matrix.kind }} --base HEAD^1 --head HEAD --ci-inputs "$RUNNER_TEMP/paired-sources" || true
+
+      - name: The same sources are still current before saving cache
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: PYTHONPATH=src python -m agent_comms.integration --revalidate-ci-inputs "$RUNNER_TEMP/paired-sources"
 
       - uses: actions/cache/save@v4
         with:

.github/workflows/debt-ratchet.yml

@@ -10,6 +10,17 @@ on:
 permissions:
   contents: read
 
+# Materialization merges and tree proofs create Git objects; every child inherits this
+# process-only identity/signing policy. No global or shared repository config is written.
+env:
+  GIT_AUTHOR_NAME: ${{ github.actor }}
+  GIT_AUTHOR_EMAIL: ${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com
+  GIT_COMMITTER_NAME: ${{ github.actor }}
+  GIT_COMMITTER_EMAIL: ${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com
+  GIT_CONFIG_COUNT: "1"
+  GIT_CONFIG_KEY_0: commit.gpgsign
+  GIT_CONFIG_VALUE_0: "false"
+
 # A superseded push to a pull request stops its old run; queue groups never share a group.
 # The draft state is part of the key: a draft run skips every job but the ratchets, so one that
 # starts in the same second as ready_for_review must not cancel the ready run (#3164 and #3154 lost
@@ -65,8 +76,18 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version-file: pyproject.toml
-      - name: Install agent-comms and test dependencies
-        run: python -m pip install -e src/agent_comms/skills/refactor-audit -e '.[dev]'
+      - name: Bootstrap only Core and locked checker dependencies
+        run: |
+          python -m pip install packaging
+          python -m pip install "$(python -I src/agent_comms/installer/declared_uv.py pyproject.toml)"
+          UV_PROJECT_ENVIRONMENT="$RUNNER_TEMP/checker-venv" uv sync --locked --all-extras
+          echo "$RUNNER_TEMP/checker-venv/bin" >> "$GITHUB_PATH"
+      - name: Resolve the actual tested source tuple once
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: PYTHONPATH=src python -m agent_comms.integration --resolve-ci-inputs "$RUNNER_TEMP/paired-sources"
+      - name: Build the one common checker environment
+        run: PYTHONPATH=src:tools python tools/checker_stack.py --ci-inputs "$RUNNER_TEMP/paired-sources"
       - name: Compile production and tools
         run: python -m compileall -q src tools
       - name: Import every Core and hook module
@@ -90,7 +111,11 @@ jobs:
       - name: Stack clients import only names Core has; the outgoing wire matches the base
         env:
           BASE: ${{ needs.base.outputs.base }}
-        run: python tools/module_layers.py --check --base "$BASE" --report "$GITHUB_STEP_SUMMARY"
+        run: PYTHONPATH=src:tools python tools/module_layers.py --check --base "$BASE" --ci-inputs "$RUNNER_TEMP/paired-sources" --report "$GITHUB_STEP_SUMMARY"
+      - name: The same sources are still current before success
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: PYTHONPATH=src python -m agent_comms.integration --revalidate-ci-inputs "$RUNNER_TEMP/paired-sources"
 
   native-scripts:
     name: native-scripts
@@ -162,26 +187,28 @@ jobs:
     name: review-verdict
     needs: ready
     runs-on: ubuntu-latest
-    timeout-minutes: 2
+    timeout-minutes: 5
     permissions:
+      contents: read
       statuses: read
       pull-requests: read
     env:
       GH_TOKEN: ${{ github.token }}
-      QUEUE_REF: ${{ github.event.merge_group.head_ref }}
     steps:
-      # A pull request is pushed before its verdict exists; the queue's group
-      # is where the commander's verdict on the head must already be success.
-      - name: The commander's verdict on the queued head is success
-        if: github.event_name == 'merge_group'
-        shell: bash
-        run: |
-          [[ $QUEUE_REF =~ /pr-([0-9]+)- ]]
-          head=$(gh api "repos/$GITHUB_REPOSITORY/pulls/${BASH_REMATCH[1]}" --jq .head.sha)
-          verdict=$(gh api "repos/$GITHUB_REPOSITORY/commits/$head/status" \
-            --jq '[.statuses[] | select(.context == "agent-comms/review")][0].state // "none"')
-          echo "PR #${BASH_REMATCH[1]} head $head: agent-comms/review=$verdict"
-          [[ $verdict == success ]]
+      - uses: actions/checkout@v4
+        with:
+          submodules: recursive
+          fetch-depth: 0
+      - uses: actions/setup-python@v5
+        with:
+          python-version-file: pyproject.toml
+      - name: Install the native source-input reader
+        run: python -m pip install -e src/agent_comms/skills/refactor-audit -e .
+      # The PR check proves a separate combined carrier and exact reviewed members.
+      # The queue additionally requires the root's explicit promotion at this head.
+      # A hand gh auto-merge request cannot turn source acceptance into that permission.
+      - name: Only the captured combined carrier may merge
+        run: PYTHONPATH=src python -m agent_comms.integration --check-merge-inputs "$RUNNER_TEMP/merge-inputs"
 
   ratchet:
     name: debt-${{ matrix.kind }}
@@ -205,14 +232,20 @@ jobs:
         with:
           python-version-file: pyproject.toml
 
-      - name: Install agent-comms
+      - name: Bootstrap only Core and locked checker dependencies
         run: |
           python -m pip install packaging
           python -m pip install "$(python -I src/agent_comms/installer/declared_uv.py pyproject.toml)"
-          uv lock --project stack --upgrade
-          UV_PROJECT_ENVIRONMENT="$GITHUB_WORKSPACE/.venv" uv sync --project stack --locked
-          uv pip install --python "$GITHUB_WORKSPACE/.venv/bin/python" -e '.[dev]'
-          echo "$GITHUB_WORKSPACE/.venv/bin" >> "$GITHUB_PATH"
+          UV_PROJECT_ENVIRONMENT="$RUNNER_TEMP/checker-venv" uv sync --locked --all-extras
+          echo "$RUNNER_TEMP/checker-venv/bin" >> "$GITHUB_PATH"
+
+      - name: Resolve the actual tested source tuple once
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: PYTHONPATH=src python -m agent_comms.integration --resolve-ci-inputs "$RUNNER_TEMP/paired-sources"
+
+      - name: Build the one common checker environment
+        run: PYTHONPATH=src:tools python tools/checker_stack.py --ci-inputs "$RUNNER_TEMP/paired-sources"
 
       # Saved by debt-ratchet-cache.yml on main; entries are keyed by content, so any
       # older main's cache only misses where the code differs.
@@ -229,10 +262,15 @@ jobs:
           set -o pipefail
           ratchet_status=0
           PYTHONPATH=src:tools python tools/debt_ratchet.py \
-            --root ${{ matrix.kind }} --base "$BASE" --head HEAD 2>ratchet-findings.txt | tee ratchet.txt || ratchet_status=$?
+            --root ${{ matrix.kind }} --base "$BASE" --head HEAD --ci-inputs "$RUNNER_TEMP/paired-sources" 2>ratchet-findings.txt | tee ratchet.txt || ratchet_status=$?
           cat ratchet-findings.txt >&2
           exit "$ratchet_status"
 
+      - name: The same sources are still current before success
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: PYTHONPATH=src python -m agent_comms.integration --revalidate-ci-inputs "$RUNNER_TEMP/paired-sources"
+
       # Hosted annotations stop at ten per step, so a unit never saw a long list (88 findings
       # on the bus batch, 2026-10-21). The whole list goes on the pull request, one comment per
       # kind, replaced on every run.

pyproject.toml

@@ -42,6 +42,7 @@ dev = [
     "ruff==0.16.0",
     "mypy==2.3.0",
     "uv==0.13.1",
+    "tomli-w==1.2.0",
     "nominal-refactor-advisor @ git+https://github.com/OpenHCSDev/NominalRefactorAdvisor@main",
 ]
 

src/agent_comms/acp_extension.py

@@ -12,7 +12,7 @@
 
 from abc import abstractmethod
 from dataclasses import dataclass, field, replace
-from typing import TYPE_CHECKING, Annotated, Callable, ClassVar
+from typing import TYPE_CHECKING, Annotated, Callable, ClassVar, Self
 
 
 from .acp_failure import (
@@ -52,8 +52,10 @@
 from .reported_turn import ReportedTurn, ReportedTurnState
 from .routing import MessageRoute, NoMessageRoute
 from .thread_identity import ClaimScoped, ThreadIncarnation
-from .tool_result import DeclaredReply
-from .transcripts import NativeCommittedPrefix, TranscriptCursor, TranscriptPage, TranscriptReadIdentity
+from .tool_result import ToolResult
+from .transcripts import (
+    NativeCommittedPrefix, TranscriptCursor, TranscriptPage, TranscriptRead, TranscriptReadIdentity,
+)
 from .turn_context import ContextManifest
 from .turn_lease import TurnState
 from .working_memory_labels import ModelLabel
@@ -138,7 +140,7 @@ def of(cls, *updates: AgentCommsUpdate) -> UpdateMetadata:
 
 
 @dataclass(frozen=True)
-class GoalSnapshotReply(DeclaredReply, GoalSnapshot):
+class GoalSnapshotReply(ToolResult, GoalSnapshot):
     """A goal request's reply: the owner's goal snapshot and its turn state."""
 
     execution: Annotated[GoalExecution, WireName("goalExecution")]
@@ -698,13 +700,13 @@ class TranscriptDraftUpdate(AgentCommsUpdate):
 
 
 @dataclass(frozen=True)
-class TranscriptSnapshotUpdate(AgentCommsUpdate):
+class TranscriptSnapshotUpdate(AgentCommsUpdate, ToolResult):
     page: TranscriptPage
     identity: TranscriptReadIdentity
     draft: DraftRow | None = None
 
     @classmethod
-    def from_read(cls, read):
+    def from_read(cls, read: TranscriptRead) -> Self:
         page, draft = read.read_snapshot()
         return cls(page, read.identity, draft.external_row())
 

src/agent_comms/agent_backend.py

@@ -41,6 +41,7 @@
 
     from .agent_events import AgentEvent
     from .launch_runtime import LaunchRuntime
+    from .native_input_proof import NativeContextProof
     from .owned_turn import TurnDelivery
     from .threads import Thread
     from .transcript_sources import TranscriptSource
@@ -308,6 +309,15 @@ def original(self, native_id: InputId, text: str) -> bool: ...
     def following(self, public_id: InputId, native_id: InputId, text: str) -> bool: ...
 
 
+    async def original_context_committed(self, sent_text: str, context: NativeContextProof) -> None:
+        """An unowned input has no durable ordinary disposition to acknowledge."""
+
+    async def following_context_committed(
+        self, public_id: InputId, sent_text: str, context: NativeContextProof,
+    ) -> None:
+        """An unowned following input has no durable ordinary disposition."""
+
+
 class NoInputStartListener(InputStartListener):
     started_events = ()
 

src/agent_comms/assignment_states.py

@@ -26,7 +26,7 @@
 from .wake_policy import BoundedTriageWake, Engagement, FullWake, PassiveWake, WakePolicy
 
 if TYPE_CHECKING:
-    from collections.abc import Iterable, Sequence
+    from collections.abc import Iterable
     from typing import Self
 
     from .agent_activity import RecipientActivity
@@ -141,13 +141,6 @@ def require_completion(self) -> Engagement:
         raise IdentityConflict("wake assignment is not completed")
 
     notification_state: ClassVar[type[ContextualProgress]] = ContextualProgress
-    records_conversation_response: ClassVar[bool] = False
-
-    def recorded_response(
-        self, original: Delivered, replies: Sequence[Delivered], recipient_lookup: ThreadLookup
-    ) -> Delivered | None:
-        return None
-
     def notification(
         self,
         recipient: FrozenRecipient,
@@ -525,20 +518,6 @@ class DeliveredAssignment(
     """
 
     decision: PendingDecision
-    records_conversation_response = True
-
-    def recorded_response(
-        self, original: Delivered, replies: Sequence[Delivered], recipient_lookup: ThreadLookup
-    ) -> Delivered | None:
-        return next(
-            (
-                reply.message
-                for reply in replies
-                if reply.sender_lookup == recipient_lookup
-            ),
-            None,
-        )
-
     def notification(
         self,
         recipient: FrozenRecipient,

src/agent_comms/attempt_recovery.py

@@ -44,7 +44,7 @@
 
 from .coordination_database import CoordinationStore
 from .native_input_record import FullNativeExecution, TriageNativeExecution
-from .native_pi import NativeContextProof
+from .native_input_proof import NativeContextProof
 from .native_prompt_binding import (
     expected_prompt_bindings,
     expected_prompt_matches_journal,