prove-wg-unattended-fault-matrix — WorksGood live mirror

Metadata

Status	open
Agent identity	`02e879681e52e0a384106169be043416c4d946e850ab26b2269c57681b52a6e7`
Created	2026-08-06T08:00:17.554039506+00:00

Description

Objective

Independently prove the simplified WG control plane under adversarial unattended operation. Treat implementation tests as claims, not proof. Exercise the installed binary and real service with repeated quality-gated fan-out batches and deterministic fault injection at every transaction/process boundary. No operator graph edit, dependency removal, retry, heartbeat, process kill, or manual finalization is permitted during a run.

Fault matrix: dropped request and response, daemon crash/restart before and after durable commit, duplicate/reordered provider events, transient provider failure, misleading tool text, heartbeat helper failure, live PID/stale heartbeat, true PID loss and reuse, observer EOF, worktree retention, assignment and quality operations, completion review response loss, terminal races, and at least three successive qualifying threshold compactions.

Validation

Multiple clean-room installed-binary runs complete the entire batch with zero operator commands and identical terminal graph state.
Every injected fault has a bounded expected transition and exactly-once assertion; no test relies on sleeps as proof.
Three successive qualifying threshold compactions produce three continuations; duplicate events produce none extra.
No advisory observation can infer Done/Failed, and no durable operation is semantically lost because its response was lost.
wg ready, wg status, and wg why-blocked always report an actionable root state; silent zero-ready deadlock is impossible.
Final complexity scorecard confirms the simplified architecture and all superseded paths remain deleted.
Full Rust/plugin tests, installed build, and new grow-only fault-matrix smoke pass.

## Objective
Independently prove the simplified WG control plane under adversarial unattended operation. Treat implementation tests as claims, not proof. Exercise the installed binary and real service with repeated quality-gated fan-out batches and deterministic fault injection at every transaction/process boundary. No operator graph edit, dependency removal, retry, heartbeat, process kill, or manual finalization is permitted during a run.

## Validation
- [ ] Multiple clean-room installed-binary runs complete the entire batch with zero operator commands and identical terminal graph state.
- [ ] Every injected fault has a bounded expected transition and exactly-once assertion; no test relies on sleeps as proof.
- [ ] Three successive qualifying threshold compactions produce three continuations; duplicate events produce none extra.
- [ ] No advisory observation can infer Done/Failed, and no durable operation is semantically lost because its response was lost.
- [ ] `wg ready`, `wg status`, and `wg why-blocked` always report an actionable root state; silent zero-ready deadlock is impossible.
- [ ] Final complexity scorecard confirms the simplified architecture and all superseded paths remain deleted.
- [ ] Full Rust/plugin tests, installed build, and new grow-only fault-matrix smoke pass.

Depends on

Required by

open simplify-wg-control-plane

Log

2026-08-06T08:00:17.477884999+00:00 Task paused
2026-08-06T08:00:18.785362600+00:00 Reconciliation: stale-claim cleared (was Open, agent: 02e879681e52e0a384106169be043416c4d946e850ab26b2269c57681b52a6e7)
2026-08-06T08:00:51.093705118+00:00 Task published
2026-08-06T08:01:00.023592670+00:00 Lightweight assignment: agent=Careful Programmer (02e87968), exec_mode=full, context_scope=full, reason=The Careful Programmer is the only and closest fit for this correctness-critical WG-wide adversarial fault-matrix implementation and validation task.
2026-08-06T08:01:10.932391512+00:00 Publish generated a redundant assignment prerequisite despite explicit assignment; removed it before execution so legacy assignment-plumbing cannot block the course-correction graph.