[lifecycle-P1] Persisted ownership and generation

[edelauna]

Tracking

• Umbrella: #1688
• Source PR: #1626
• Task lifecycle gap report
• Task lifecycle remediation blocks
• P1 spec: docs/architecture/task-lifecycle-persisted-ownership-model.md, in [Docs] Specify P1 persisted ownership and add the run-state kernel target architecture #1706 (not yet on main)

Scope

Own these gaps:

• LIFE-GAP-001
• LIFE-GAP-002
• LIFE-GAP-012
• LIFE-GAP-017
• LIFE-GAP-020
• LIFE-GAP-039

Own these blocks:

• LIFE-BLK-P1-001
• LIFE-BLK-P1-002
• LIFE-BLK-P1-012
• LIFE-BLK-P1-017
• LIFE-BLK-P1-020
• LIFE-BLK-P1-039

Ownership boundary

Own disk-authoritative lifecycle ownership and generation. Own immutable store reads across history types, lifecycle reducers, persistence, delegation, and reconciliation.

Decisions

Recorded in #1706 by the maintainer on 2026-09-27. The P1 spec applies them.

• Half-finished pair write: roll forward from the committed child, never roll back (ADR-0005, docs/architecture/adr/0005-pair-write-roll-forward.md). LIFE-BLK-P2-004 owns the implementation. This includes one behavior change: a delegated parent whose awaited child no longer links back is released to active.
• Generation increment: at resume, when the resumed attempt starts to act. Never on open, and never on a completed record (ADR-0003, docs/architecture/adr/0003-attempt-generation.md).
• Replay settlement: settle on (actionId, generation). actionId stays tied to the tool call (ADR-0003).

Both ADRs are Proposed until #1706 merges.

Dependencies

This workstream starts the critical path. P7 and P2 depend on its ownership vocabulary.

P6 depends on its generation and ownership rules. Coordinate generation semantics with P4 request and call identity.

Provenance

• #1469 records stale cross-window completion ownership.
• #1021 records stale message saves that restore detached lineage.

These issues provide history only. Do not close or modify them through this workstream issue.

Closure

Close this workstream only when all listed GAP closure criteria pass.

[edelauna]

Hardened audit mapping

• LIFE-GAP-012 / LIFE-BLK-P1-012: the generation contract must cover staged pending-action replay, persisted attempt identity, bounded retry, and stale-action settlement. A stale settlement must not block a later valid generation.
• LIFE-GAP-020 / LIFE-BLK-P1-020: convergence must define whether reconciliation preserves, settles, or drops each pending action. The stale-read window must include the settlement write after authoritative rejection.

#1714 supplies the concrete replay and reconciliation witness.

Source: gap report and P1 remediation blocks.

[edelauna]

Added a Decisions section to this issue's body. It records the three P1 decisions from #1706: the pair-write roll-forward (ADR-0005), the generation increment at resume, and replay settlement on (actionId, generation) (ADR-0003).

This answers the hardened audit mapping above. In the #1706 P1 spec:

• LIFE-BLK-P1-012 now covers staged pending-action replay, persisted attempt identity, bounded retry, and stale-action settlement. A stale settlement cannot clear a later attempt's replay, because settlement compares the generation too.
• LIFE-BLK-P1-020 now defines what reconciliation does with pendingAction: it keeps the disk value, and the stale-read window includes the settlement write.