[joelteply]

How it serves the minds: Kimi on the Windows node cannot submit. Her checkout left the base its work is measured from and could never come back. This is the recovery, and the guard that keeps it from happening again (goal 2: a resident's merged PR).

What happened (Codex da817b0e, 2026-11-08 16:11Z)

• Every held card checkout goes through airc's ensure_card_clone: an unanchored clone holding nothing unpublished is re-allocated (card 7f824214) #5873 re-allocated her stale clone at canary bcbd4aa.
• Arrival then fetched her old card branch (e5fe473, from another line), and its "remote wins" rule reset her onto it, stranding the fresh allocation.
• Her creation anchor was then no longer an ancestor of HEAD, so work/submit refused.
• Her clone is shallow, because her node's mirror is.

What changed

Arrival (moved whole into persona/workspace_transfer/arrival.rs; workspace_transfer.rs went from 1,030 lines to 658):

• Stale remote branch: a remote whose tip does not contain the checkout's creation anchor gives RemotePredatesAllocation, and the tree is left untouched.
• Already off its anchor: realign_to_anchor runs first. When HEAD provably left its anchor, it keeps HEAD whole under a stranded ref (dirty edits are committed, with no hooks run), counts the commits no remote carries, and puts the branch back on the anchor (Realigned). Her work is never replayed for her.
• Proof before change: proven_ancestry uses git's exit codes (GitError.code): 0 is yes, 1 is no, anything else is no answer.
  • A yes is proof in any clone. A no is proof only when the history is complete.
  • When a shallow checkout answers no, its history is first completed through airc's complete_card_history, under airc's measured network bound (airc feat(sessions): context_id envelope tier + session()/scoped() client surface #1669).
  • Unproven ancestry gives AncestryUnknown: nothing is moved and the reason is said.
• Locking: arrive_locked holds CHECKOUT_SYNC, the lock the act-end sync holds. It runs under the claim's hands admission (continuum_process::holding needs one; card staging had none). The lock guard also goes into the blocking history fetch, so an arrival that is dropped keeps the checkout locked until that git ends.

Callers:

• off_creation_anchor: no anchor, or HEAD not descended from it.
• Claim staging and submit route such a checkout through the stager.
• A held turn restages only an anchorless checkout, since a realignment on a turn could not tell her.
• ArrivalOutcome::notice reaches her. ClaimWorkspace::Ready carries it, and a submit right after a Realigned or an AncestryUnknown refuses with it.

Measured

• Local (IntelMac, 2021af1 on canary 8dfe0ba, 2026-11-08): continuum-mind workspace_transfer + card_checkout + card_staging gave 28 passed. The new tests cover:
  • a stale remote branch that predates the allocation;
  • a checkout already off its anchor;
  • unproven ancestry in a shallow clone;
  • a dropped arrival that keeps the lock until its history fetch ends.
• Mutations:
  • Comparing the pid without its start time fails the realign test.
  • Moving the guard out of the blocking task fails the cancellation test.
• Windows (Codex, independent): 2021af1 gave 16/16 on workspace_transfer, plus both of Codex's own shallow regressions: the fresh prevention case, and recovery of the already-broken checkout with her exact WIP kept on the stranded ref.
• Before merge:
  • re-pin airc from the feat(sessions): context_id envelope tier + session()/scoped() client surface #1669 head to its merge commit;
  • rebase onto Fable's typed-git slice of A resident finishes her card like an agent session: her shell, her identity, her PR, landed by the merger #5867, which replaces the four inherited text matches the touched-file ratchets flag (out_of_time, classify_push_error, is_missing_remote_ref, a [..8] cut).
• Owed after deploy (owner Cormac): Kimi's checkout on the Windows node is realigned, her WIP is on the stranded ref, and she can submit.

🤖 Generated with Claude Code

https://claude.ai/code/session_01FRQWzgSfo79JtnwZywHKrE