randomayzer/agents/codex/inbox/TASK-2026-10-19-r3-vk-safety.md

1.1 KiB

Task

Base SHA: 6382cb8e04 Scope: R3 from stage-one manifest, per coordinator follow-up: safe handling for VK unknown/unsupported manager listing, private-profile reposts, pagination limits, execute limits; preserve participants and communicate capability/failure status in UI and participant state; add mock-provider regression tests; add tools/vk-smoke.(ts|sh) covering automatable A-H checks with truthful PASS/FAIL and manual browser-consent steps. Do not change: existing tests; Randomizer, AuditProof, deterministic proof format, snapshot hashing, HMAC algorithm; package files; auth/profile files; R2/R4/R5 and coordinator-owned files; no real credentials; no commit/push. Definition of Done: failed or unknown VK behavior cannot silently produce a complete participant list or exclude participants without an explicit status; tests cover each requested failure; smoke tool does not print secrets or claim unperformed checks pass; document UNVERIFIED VK contract claims. Required verification: add/run new R3 regression tests; tsc, relevant test/lint/build gates as practical; all commands and outcomes in report.