AgentSquad Identity Evidence

This page records release evidence for ADR-0011. It separates completed canary proof from the running 24-hour acceptance gate.

Immutable runtime binding

Assembly commit: 1bc2802f98a0d5199d4a42317d9db4f2f205f434
Backend commit: decf77bbaffad1c95e741663dc60c4e9cf70e622
Contract commit: 59575c4d662bc690279964babed9793d2ec413c8
Deployed image digest: sha256:2675050e539ec909c265291c6d0e3e6af7228fdfad436d860159d80c297792a0
Studio run: 774a7a6b-b9c7-4f61-a789-691d0b70d472
Evidence workflow: 31384984580

OCI images were built by the Kubernetes BuildKit release plane and promoted by immutable digest. No host-local image build contributes to this evidence.

Signed canary checkpoint

Artifact agentsquad-identity-canary-31384984580-1 contains canary-checkpoint.json, its Sigstore bundle, the live deployment record, and the runtime release manifest. Observation ran from 2026-08-10T11:48:43Z through 2026-08-10T12:06:45Z for 1,081 seconds.

Verified claims:

one canonical Daytona sandbox and zero legacy forks;
eight persistent profiles and peak four active provider processes;
graceful and crash codex-cli to claude-code-cli takeover;
zero dual-writer events and zero provider-projection mismatches;
roster delivery to all eight profiles and zero lifecycle-noise forwarding;
unauthorized MCP access returns HTTP 403;
zero credential material in the resume baseline.

Checkpoint claims digest is sha256:dd8a03db1728c37127278c31a08d4e1f75aa30ecb4acae10c6c5625ae2c26c63. Independent cosign verify-blob verification returned Verified OK for certificate identity https://github.com/yamonco/fractalops-assembly/.github/workflows/agentsquad-identity-evidence.yml@refs/heads/main and issuer https://token.actions.githubusercontent.com.

24-hour acceptance gate

The workflow continues from the same runner state and observation file; it does not restart after the canary. Final acceptance requires at least 86,400 seconds, continuous one-sandbox and four-process-cap observations, stable profile identity fields, zero dual writers, zero leaked credential material, reaped terminal leases, Contract validation, verified final Sigstore bundles, cleanup, and uploaded immutable evidence.

Status on 2026-08-10T12:17:37Z: 70 persisted samples, one canonical sandbox, zero legacy sandboxes, peak four active processes, one current process, and zero credential material. This is progress evidence only. ADR-0011 remains partial until the final signed artifact passes independent verification.