Preserve merge identities and isolate tracker receipt reconciliation

.agents/pm/extensions/.managed-extensions.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "updated_at": "2026-09-11T08:16:37.534Z",
+  "updated_at": "2026-09-11T16:28:39.718Z",
   "entries": [
     {
       "name": "pm-changelog",

.agents/pm/history/pm-7zs0.jsonl

@@ -350,3 +350,5 @@
 {"hash_algorithm":"sha256","ts":"2026-09-11T08:20:43.403Z","author":"harness:codex","author_source":"detected","agent_harness":"codex","agent_model":"gpt-6-astra","agent_model_source":"probe","agent_instance":"dc55bb67f9d3b80275b0fdc8","agent_provenance":{"model":{"value":"gpt-6-astra","source":"probe"},"effort":{"value":"medium","source":"probe"},"role":null,"topic":null},"op":"comment_add","patch":[{"op":"add","path":"/metadata/comments/173","value":{"created_at":"2026-09-11T08:20:43.403Z","author":"harness:codex","text":"Release-health incident GH-1235: scheduled Auto Release 34574423326 cut immutable v2026.9.11 at 27da934b39bef54a7a6dc245cba2fa6da8e63ac3. Exact-tag Release 34576128355 passed all source gates and npm accepted the public provenance-signed artifact at 08:13:02 UTC, then reported asynchronous processing. Its published-package verifier exhausted its propagation budget at 08:17:55 with E404. Independent exact-version npm and installed-consumer probes reproduced unavailability. Reusing this standing all-status release-health lineage rather than creating a duplicate. Keep the reminder open; no second daily version or tag will be created. Recovery must preserve this tag and wait for actual public availability before retrying its release completion."}},{"op":"replace","path":"/metadata/updated_at","value":"2026-09-11T08:20:43.403Z"}],"before_hash":"e0382c4daf46f12cf9e1cc4cd53699cc0761cc6689cf3d151b8dd0c907ca7fdf","after_hash":"99bf83970b22d6f51c4235aeb766557368ab24c0a64d865558acc55ca8aee1c4","item_hash_version":3,"context":{"agent_provenance_outcomes":{"version":{"status":"unavailable","reason":"harness_unavailable","resolver":"ai_agent_version","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"e6f496a1d1164dd1f0448fa57ecc9127ab811a512992ab63d7d334f293c3887b"}
 {"hash_algorithm":"sha256","ts":"2026-09-11T08:21:34.148Z","author":"harness:codex","author_source":"detected","agent_harness":"codex","agent_model":"gpt-6-astra","agent_model_source":"probe","agent_instance":"dc55bb67f9d3b80275b0fdc8","agent_provenance":{"model":{"value":"gpt-6-astra","source":"probe"},"effort":{"value":"medium","source":"probe"},"role":null,"topic":null},"op":"comment_add","patch":[{"op":"add","path":"/metadata/comments/174","value":{"created_at":"2026-09-11T08:21:34.148Z","author":"harness:codex","text":"Authoritative npm UI evidence at 08:24 UTC: signed-in Chrome package Versions page lists 2026.9.11 as Validating, with the notice that automated review has not finished and the version remains unavailable until review completes. Public latest remains 2026.9.10. This distinguishes npm-side validation from credentials, package visibility, or product failure; no access/security settings or immutable package versions were changed. GH-1235 carries the canonical PM link and remains open until exact-version availability and release completion are proven."}},{"op":"replace","path":"/metadata/updated_at","value":"2026-09-11T08:21:34.148Z"}],"before_hash":"99bf83970b22d6f51c4235aeb766557368ab24c0a64d865558acc55ca8aee1c4","after_hash":"2ecfcb0db1a4edbed4ef2522ce2b1aa970a021d38bff0a711d01081e20a83018","item_hash_version":3,"context":{"agent_provenance_outcomes":{"version":{"status":"unavailable","reason":"harness_unavailable","resolver":"ai_agent_version","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"469f872d8182eab8a6968802a5603ec2524667029be79739299c30394c3a390a"}
 {"hash_algorithm":"sha256","ts":"2026-09-11T08:22:12.551Z","author":"harness:codex","author_source":"detected","agent_harness":"codex","agent_model":"gpt-6-astra","agent_model_source":"probe","agent_instance":"dc55bb67f9d3b80275b0fdc8","agent_provenance":{"model":{"value":"gpt-6-astra","source":"probe"},"effort":{"value":"medium","source":"probe"},"role":null,"topic":null},"op":"comment_add","patch":[{"op":"add","path":"/metadata/comments/175","value":{"created_at":"2026-09-11T08:22:12.551Z","author":"harness:codex","text":"Timestamp correction: the preceding npm UI observation was recorded at 08:21:34 UTC, as shown by its immutable created_at, not the mistakenly transcribed 08:24 UTC in the prose. The observed Validating status and availability conclusion are unchanged."}},{"op":"replace","path":"/metadata/updated_at","value":"2026-09-11T08:22:12.551Z"}],"before_hash":"2ecfcb0db1a4edbed4ef2522ce2b1aa970a021d38bff0a711d01081e20a83018","after_hash":"7cd4cf0be71ddcf27231970fe2d913ac103e047c070b0a026ac0d05fc0dee031","item_hash_version":3,"context":{"agent_provenance_outcomes":{"version":{"status":"unavailable","reason":"harness_unavailable","resolver":"ai_agent_version","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"63f694c649eb736dcbaa56956a85e3d32700b6b778b056b87bc64469c9814cd9"}
+{"hash_algorithm":"sha256","ts":"2026-09-11T13:12:20.337Z","author":"harness:codex","author_source":"detected","agent_harness":"codex","agent_model":"gpt-6-astra","agent_model_source":"probe","agent_instance":"a6a7d4206a444ccef3902a16","agent_provenance":{"model":{"value":"gpt-6-astra","source":"probe"},"effort":{"value":"medium","source":"probe"},"role":{"value":"implementer","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-1tns7o","claim:pm-qx95lz","lineage:pm-1tns7o","lineage:pm-33cw","lineage:pm-doxj"]},"topic":{"value":"workset:pm-1tns7o+pm-qx95lz","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-1tns7o","claim:pm-qx95lz","lineage:pm-1tns7o","lineage:pm-33cw","lineage:pm-doxj"]}},"op":"comment_add","patch":[{"op":"add","path":"/metadata/comments/176","value":{"created_at":"2026-09-11T13:12:20.337Z","author":"harness:codex","text":"Live release-health verification 2026-09-11: exact-tag Release run 34576128355 attempt 2 is successful at 27da934b39bef54a7a6dc245cba2fa6da8e63ac3 and GitHub release v2026.9.11 is published. GH-1235 is closed with canonical PM links and records npm automated-validation propagation recovery without a replacement tag. The scheduled attempt remains historically failed; the existing immutable artifact recovered successfully. This standing reminder remains open and unclaimed."}},{"op":"replace","path":"/metadata/updated_at","value":"2026-09-11T13:12:20.337Z"}],"before_hash":"7cd4cf0be71ddcf27231970fe2d913ac103e047c070b0a026ac0d05fc0dee031","after_hash":"97c6ca680ec4bf0f5f39c7669ce40a8413f88cf493ac2758ef861aa0053ed9a1","item_hash_version":3,"context":{"agent_provenance_outcomes":{"version":{"status":"unavailable","reason":"harness_unavailable","resolver":"ai_agent_version","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"9210ad7a96632979e88b49836f7e883d7c36936085819669a09b97db32099290"}
+{"hash_algorithm":"sha256","ts":"2026-09-11T14:44:10.851Z","author":"harness:codex","author_source":"detected","agent_harness":"codex","agent_model":"gpt-6-astra","agent_model_source":"probe","agent_instance":"a6a7d4206a444ccef3902a16","agent_provenance":{"model":{"value":"gpt-6-astra","source":"probe"},"effort":{"value":"medium","source":"probe"},"role":{"value":"implementer","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-1tns7o","claim:pm-qx95lz","lineage:pm-1tns7o","lineage:pm-33cw","lineage:pm-doxj"]},"topic":{"value":"workset:pm-1tns7o+pm-qx95lz","source":"inferred","confidence":"medium","rule_version":"v2","evidence":["claim:pm-1tns7o","claim:pm-qx95lz","lineage:pm-1tns7o","lineage:pm-33cw","lineage:pm-doxj"]}},"op":"comment_add","patch":[{"op":"add","path":"/metadata/comments/177","value":{"created_at":"2026-09-11T14:44:10.851Z","author":"harness:codex","text":"September 11 bounded closeout evidence for PR 1237: immutable 2026.9.11 Release workflow recovered successfully; published npm/Bun sessions passed. Required Sentry gate found zero recent blocking issues. The local installation had 198/198 command sessions since 13:00 UTC with matching backend finish events, verified by session identity; a broader multi-installation query is not evidence about this installation. Settled local SDK telemetry flush reported empty queue and the physical broker had zero ready/unacknowledged messages. Post-merge evidence remains separate; no second automatic publication was triggered."}},{"op":"replace","path":"/metadata/updated_at","value":"2026-09-11T14:44:10.851Z"}],"before_hash":"97c6ca680ec4bf0f5f39c7669ce40a8413f88cf493ac2758ef861aa0053ed9a1","after_hash":"5fbc42ffec66fb85adf11ffbd506a923d6ab50673bf32fc0b8c7b30134b6c6dc","item_hash_version":3,"context":{"agent_provenance_outcomes":{"version":{"status":"unavailable","reason":"harness_unavailable","resolver":"ai_agent_version","rule_version":"v1"}}},"event_class":"substantive","record_hash_version":1,"record_hash":"88ebd3de8ce73ac92f02aa77e8e8c650689cc7faa4e652120f0c91db6a9bd5f1"}