Repository navigation
Prove automatic fallback never moves a retained conversation (C2c2e E1) - #269
Merged
Merged
Conversation
…tained-context exclusion (C2c2e1) Candidate activation in the executor now consumes a typed ColdOwnershipV1 proof (no dispatcher retains the node's conversation) instead of relying on an absent dispatcher branch. Automatic fallback never silently moves a retained provider conversation to a different agent; the existing bound-dispatcher refusal is unchanged. Tests drive the executor dispatcher seam with a real warm SessionManager context shared across nodes and invocations: frozen authority refuses before checkout with the binding, session and generation unchanged and no successor preparation, polling or accounting for each declared cause; ordinary retained execution stays usable; a client envelope context ID that names a live retained conversation still takes the cold chain and leaves it untouched. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017izEynabPeSUBT573AtvaZ
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Lane G C2c2e sub-slice E1 (order E2→E3→E4→E1→E5→E6): automatic fallback never silently moves a retained provider conversation to a different agent. Owner narrowed the rule on 2026-11-01 (not "permanent"): same-agent model switching on a warm session (#266) and operator/workflow-initiated cross-provider handoff with a transcript (#267) remain allowed in principle as separate features.
executor.rs:ColdOwnershipV1typed marker required byrun_local_chain, minted only when no dispatcher is present; the existing dispatcher refusal (BindUnsupportedwhen a dispatcher meets frozen authority) is what enforces exclusion. Comment-level change apart from the marker plumbing.Verification
a2a-bridge,bridge-workflow,-D warnings) clean;fallback_workflow163/163;bridge-workflow260/260;uncapped_order_and_wire_controlbyte-identical to base.🤖 Generated with Claude Code
https://claude.ai/code/session_017izEynabPeSUBT573AtvaZ