FN-9176: Route remaining run-audit emitters through bounded seam
Prevent audit sink failures and hangs from blocking engine lifecycle progress.
- Route hold release, goal diagnostics, overseer, mesh lease, credential rotation, and workflow boundary telemetry through emitBoundedRunAudit.
- Add hostile sink regression coverage and a source-level isolation ratchet for migrated emitters.
- Document the bounded audit contract, scoped exclusions, and release impact.
Files changed:
...n-9176-remaining-run-audit-emitter-isolation.md | 7 ++
AGENTS.md | 5 +
docs/run-audit.md | 2 +-
...on-executor-run-audit-emitter-isolation.test.ts | 8 ++
...un-audit-sink-health-boundary-heartbeat.test.ts | 116 +++++++++++++++++++++
.../__tests__/run-audit-sink-health-goals.test.ts | 71 +++++++++++++
.../run-audit-sink-health-hold-release.test.ts | 102 ++++++++++++++++++
.../run-audit-sink-health-overseer.test.ts | 71 +++++++++++++
.../run-audit-sink-health-runtime-leases.test.ts | 82 +++++++++++++++
.../engine/src/credential-instance-rotation.ts | 6 +-
packages/engine/src/execution/hold-release.ts | 32 +++---
packages/engine/src/goals/goal-anchoring-audit.ts | 9 +-
.../engine/src/goals/goal-injection-diagnostics.ts | 5 +-
.../src/overseer/overseer-advisor-service.ts | 11 +-
packages/engine/src/project-engine.ts | 10 +-
packages/engine/src/project/mesh-lease-manager.ts | 17 +--
packages/engine/src/runtimes/in-process-runtime.ts | 32 ++++--
.../engine/src/workflow-column-boundary-hooks.ts | 3 +-
18 files changed, 524 insertions(+), 65 deletions(-)
Fusion-Task-Id: FN-9176
Fusion-Task-Lineage: 5205deeb-57e8-424e-aba4-3aed6a66f85c
Co-authored-by: Fusion (runfusion.ai) <noreply@runfusion.ai>
6d51ae84c3