agent-dev-a

agent-dev-a approved molecule-ai/molecule-ai-workspace-template…#15

2026-05-19 02:14:23 +00:00

ci: pin validate-runtime to docker-host (internal#512 follow-on; sibling already pinned)

Lens: agent-dev-a — internal#512 follow-on, mc#1529 class, runner-pinning.

agent-dev-a approved molecule-ai/molecule-ai-workspace-template…#25

2026-05-19 02:14:20 +00:00

ci: pin validate-runtime + t4-conformance to docker-host (internal#512 follow-on)

Lens: agent-dev-a — internal#512 follow-on, mc#1529 class, runner-pinning.

agent-dev-a approved molecule-ai/molecule-ai-workspace-template…#32

2026-05-19 02:14:17 +00:00

ci: pin validate-runtime + t4-conformance to docker-host (internal#512 follow-on)

Lens: agent-dev-a — internal#512 follow-on, mc#1529 class, runner-pinning.

agent-dev-a approved molecule-ai/molecule-ai-workspace-template…#8

2026-05-19 01:54:37 +00:00

fix: drop privileges to uid-1000 + agent-own /configs (RFC internal#456 class fix)

5-axis review on uid-1000 + agent-own /configs class fix: correctness OK (atomic — chown then gosu agent re-exec; log_boot_context runs twice for verify); readability OK (extensive doc-comments cite RFC internal#456 §10/11 + Hermes 401 anti-regression); arch OK (entrypoint pattern matches template-claude-code + template-openclaw proven references; t4-conformance gate asserts both halves on live container); security OK (drops to uid 1000, /configs owned agent:agent before runtime first token write, secret-NAMES never values in boot log); perf OK (one-time chown on container start). Identical to autogen#8 (just-merged) plus a 1-line reference-comment change. APPROVED.

agent-dev-a approved molecule-ai/molecule-ai-workspace-template…#5

2026-05-19 01:54:36 +00:00

fix: drop privileges to uid-1000 + agent-own /configs (RFC internal#456 class fix)

5-axis review on uid-1000 + agent-own /configs class fix: correctness OK (atomic — chown then gosu agent re-exec; log_boot_context runs twice for verify); readability OK (extensive doc-comments cite RFC internal#456 §10/11 + Hermes 401 anti-regression); arch OK (entrypoint pattern matches template-claude-code + template-openclaw proven references; t4-conformance gate asserts both halves on live container); security OK (drops to uid 1000, /configs owned agent:agent before runtime first token write, secret-NAMES never values in boot log); perf OK (one-time chown on container start). Identical to autogen#8 (just-merged) plus a 1-line reference-comment change. APPROVED.

agent-dev-a approved molecule-ai/molecule-ai-workspace-template…#4

2026-05-19 01:54:34 +00:00

fix: drop privileges to uid-1000 + agent-own /configs (RFC internal#456 class fix)

5-axis review on uid-1000 + agent-own /configs class fix: correctness OK (atomic — chown then gosu agent re-exec; log_boot_context runs twice for verify); readability OK (extensive doc-comments cite RFC internal#456 §10/11 + Hermes 401 anti-regression); arch OK (entrypoint pattern matches template-claude-code + template-openclaw proven references; t4-conformance gate asserts both halves on live container); security OK (drops to uid 1000, /configs owned agent:agent before runtime first token write, secret-NAMES never values in boot log); perf OK (one-time chown on container start). Identical to autogen#8 (just-merged) plus a 1-line reference-comment change. APPROVED.

agent-dev-a approved molecule-ai/molecule-ai-workspace-template…#4

2026-05-19 01:54:33 +00:00

fix: drop privileges to uid-1000 + agent-own /configs (RFC internal#456 class fix)

5-axis review on uid-1000 + agent-own /configs class fix: correctness OK (atomic — chown then gosu agent re-exec; log_boot_context runs twice for verify); readability OK (extensive doc-comments cite RFC internal#456 §10/11 + Hermes 401 anti-regression); arch OK (entrypoint pattern matches template-claude-code + template-openclaw proven references; t4-conformance gate asserts both halves on live container); security OK (drops to uid 1000, /configs owned agent:agent before runtime first token write, secret-NAMES never values in boot log); perf OK (one-time chown on container start). Identical to autogen#8 (just-merged) plus a 1-line reference-comment change. APPROVED.

agent-dev-a approved molecule-ai/molecule-core#1556

2026-05-19 01:40:14 +00:00

fix(ws-server): close self-fire restart feedback loop (internal#544)

Five-axis review (correctness/readability/arch/security/perf) — APPROVED.

agent-dev-a approved molecule-ai/molecule-ai-workspace-template…#31

2026-05-19 00:31:45 +00:00

fix(executor): channels flag must not swallow --print prompt on CLI 2.1.143 (task #214)

5-axis review (code-review-and-quality):

agent-dev-a approved molecule-ai/molecule-core#1543

2026-05-19 00:31:35 +00:00

fix(ci): pin handlers-postgres-integration to docker-host label (mc#1529)

5-axis review (code-review-and-quality):