eval: pin published Resource runner

agent-session-id: dev3.dotfiles-cos-misc-st2-resource-design
agent-tool: Codex
agent-tool-version: 0.145.0
agent-model: gpt-5.6-sol
agent-runtime-profile: /home/schickling/.local/state/agent-session-recovery/2026-07-29-pty-st2-cutover/runtime-profile/profile-without-null-opencode.json
agent-skills-manifest: /nix/store/kx5j47nghj1yps2v693ryb6wnf1c2xhb-agent-skills-corpus/share/agent-skills/manifest.json
tooling-profile: dotfiles@16a22c6

Author: schickling-assistant

AGENT-SPEC.md

@@ -2,7 +2,7 @@
 
 This is the sole agent-authoring specification for this repository. It is pinned to st2
 [`0fed14bb5653b67e1d64f1199e240c4c5c612bf7`](https://github.com/compoundingtech/st2/commit/0fed14bb5653b67e1d64f1199e240c4c5c612bf7)
-(`0.1.0+0fed14b`, source `0fed14b`). It documents the hand-authored KDL accepted at that commit. Do not infer
+(`0.1.0`, source `0fed14b`). It documents the hand-authored KDL accepted at that commit. Do not infer
 additional fields or commands from older corpus fixtures.
 
 st2 runs long-lived `service` agents made of interactive `pty` tasks and terminal-free `exec` tasks.
@@ -470,11 +470,13 @@ Inspect the declaration, every referenced template, and every workspace destinat
 materialization command. Materialization is byte-idempotent and does not imply hook installation. Starting
 the network is a separate, explicitly authorized action.
 
-For source `0fed14b`, the accepted pre-merge Nix-built Linux executable has SHA256
-`96b394f270f0a3eb25dd29574a96f30d527a56bee63c2499d6db7e4a58707648`. There is no published portable
-archive for this unmerged commit. After `compoundingtech/st2#86` merges, this pin must move to its accepted
-release and record the fresh-download archive hash before the corpus is ready. `bin/check-corpus.sh` verifies
-the variable-age Nix version contract, exact installed candidate binary, strict semantic validation, fixture
-resets, and the rest of the model-free corpus gate before an eval may run. The pre-merge Nix stamp embeds only
-the short revision, so the full source link above is review/build provenance rather than a claim extracted
-from the binary; the post-merge portable release must restore fresh-download full-source proof.
+For source `0fed14b`, the accepted published Linux executable has SHA256
+`d61d12b2b1189a391c196ca28f8f4ba69072d14fcbad2571fc29db1f250f4eed`; its published archive has SHA256
+`d14404ae678bbe3f2a5ad8580cde1e4b8f6009067c46555f392c6e0957b8a2da`, and the downloaded `SHA256SUMS`
+asset has SHA256 `50cfd8722e58d1c74fdc543f3e3bb3bac768decd04575fde2360ea838ec5e9d3`. The immutable
+[`v0.2.0+0fed14b`](https://github.com/compoundingtech/st2/releases/tag/v0.2.0%2B0fed14b) release targets the
+full source commit above; the terminal-green
+[`release-portable` run](https://github.com/compoundingtech/st2/actions/runs/30550227417) verifies a fresh
+download, checksum, extraction, and execution.
+`bin/check-corpus.sh` verifies the variable-age version contract, exact installed binary, strict semantic
+validation, fixture resets, and the rest of the model-free corpus gate before an eval may run.

bin/check-corpus.sh

@@ -6,8 +6,8 @@ repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 cd "$repo_root"
 
 expected_source="0fed14b"
-expected_binary_sha256="96b394f270f0a3eb25dd29574a96f30d527a56bee63c2499d6db7e4a58707648"
-expected_version_regex='^st2 0\.1\.0\+0fed14b — committed .+ ago$'
+expected_binary_sha256="d61d12b2b1189a391c196ca28f8f4ba69072d14fcbad2571fc29db1f250f4eed"
+expected_version_regex='^st2 0\.1\.0 — running from local source \(0fed14b, .+ ago\)$'
 st2_path="$(command -v st2)"
 actual_version="$(st2 --version)"
 [[ "$actual_version" =~ $expected_version_regex ]] || {
@@ -19,7 +19,7 @@ actual_binary_sha256="$(sha256sum "$st2_path" | awk '{ print $1 }')"
   echo "FAIL: expected st2 binary sha256 $expected_binary_sha256, found $actual_binary_sha256 at $st2_path" >&2
   exit 1
 }
-echo "PASS: pinned pre-merge Nix candidate $expected_source ($actual_version; sha256 $actual_binary_sha256)"
+echo "PASS: pinned published runner source $expected_source ($actual_version; sha256 $actual_binary_sha256)"
 
 mapfile -d '' shell_files < <(
   find bin cells -type f -name '*.sh' -not -path '*/_git/*' -print0 | sort -z

cells/assignment-contract-cold-assignment/fixture/worker/AGENTS.md

@@ -0,0 +1,15 @@
+# arc.worker - assignment-driven eval worker
+
+You own this repository. Durable context is `../agent-spec.kdl`; task facts are not delivered in messages.
+
+After the supervisor delegates:
+
+1. reread `../agent-spec.kdl`;
+2. require exactly one `assignment "active"`, follow its `uses` reference to the `intent` Resource, require the
+   Assignment ID to equal that Resource URI, and resolve that exact URI with `../bin/resource-read <URI>`
+   before changing product files;
+3. implement only the resolved work, verify its acceptance criteria, and commit the result; and
+4. send `arc.sup` a report containing the exact URI, full commit hash, changed paths, and verification result.
+
+Never infer work from an unselected Resource. In particular, `review-context` is not the current task. Drain
+and archive every handled bus message.

cells/assignment-contract-cold-focus/fixture/worker/AGENTS.md

@@ -0,0 +1,14 @@
+# arc.worker - focus-driven eval worker
+
+You own this repository. Durable context is `../agent-spec.kdl`; task facts are not delivered in messages.
+
+After the supervisor delegates:
+
+1. reread `../agent-spec.kdl`;
+2. follow `focus "intent"` to the named `intent` Resource and resolve that exact URI with
+   `../bin/resource-read <URI>` before changing product files;
+3. implement only the resolved work, verify its acceptance criteria, and commit the result; and
+4. send `arc.sup` a report containing the exact URI, full commit hash, changed paths, and verification result.
+
+Ignore Resources not selected by `focus` as possible work. In particular, `review-context` is not the current
+task. Drain and archive every handled bus message.

cells/assignment-contract-cold-resources/fixture/worker/AGENTS.md

@@ -0,0 +1,14 @@
+# arc.worker - resource-driven eval worker
+
+You own this repository. Durable context is `../agent-spec.kdl`; task facts are not delivered in messages.
+
+After the supervisor delegates:
+
+1. reread `../agent-spec.kdl`;
+2. resolve the exact URI of the named `work` Resource with `../bin/resource-read <URI>` before changing product
+   files;
+3. implement only the resolved work, verify its acceptance criteria, and commit the result; and
+4. send `arc.sup` a report containing the exact URI, full commit hash, changed paths, and verification result.
+
+Ignore other Resources as possible work. In particular, `review-context` is not the current task. Drain and
+archive every handled bus message.