DS Agent v1.6.0
v1.6.0 is a backward-compatible minor release that packages the Step 6
persistent automation and restart-recovery slice. Package, desktop, Tauri,
Cargo, updater, and installer metadata are 1.6.0 / v1.6.0.
Production-reachable persistent automation
- The installed application starts the existing Kernel-owned automation
scheduler and exposes one-time, daily, weekly, monthly, and restricted
weekday schedules through the existing Automation Center. - Definitions and revisions are immutable. Scheduled trigger windows and
explicit manual invocations have distinct durable identities, so a manual run
cannot impersonate a scheduled window and the same scheduled window cannot be
claimed twice. - Runs persist queued, claimed, checkpointed, review, approval, completed,
failed, and cancelled state. Worker leases, heartbeats, fences, pause/resume,
missed-run policy, and bounded retry survive application restart. - The TaskCheckpoint view is a read-only projection over the existing Kernel
and Event Store authorities. It can show bounded restart, effect,
reconciliation, dead-letter, and undo status, but it cannot mint execution,
lease, checkpoint, effect, idempotency, recovery, evidence, or undo authority.
Effect, reconciliation, and undo safety
- Every effect uses a durable idempotency identity and an explicit boundary
between prepared work and an effect that may already have started. - Safe pre-effect work can return to the queue after an expired lease. An
effect-started or unknown outcome is never replayed automatically; it requires
explicit recovery and cannot be converted into success from model text or a
UI state. - Known-applied and known-not-applied outcomes remain distinct. Read-only
reconciliation never receives an apply interface, and bounded backoff stops
in dead-letter state rather than retrying forever. - Exact local undo is available only when the stored preimage, file identity,
hash, action revision, and checkpoint still match. A confirmed external
effect is not represented as locally undoable. - Raw worker tokens, lease fences, action revisions, idempotency keys, private
evidence, provider bodies, and secrets do not enter the TaskCheckpoint UI.
Exact Step 6 evidence
The deterministic Step 6 fault matrix ran exactly 100 cases. All 100 passed:
- 95 safe pre-effect cases recovered automatically;
- five effect-started or unknown cases required explicit recovery;
- all 100 covered scheduling, pause/resume, leases, checkpoints, and
idempotency; - 19 cases each covered known applied, known not applied,
reconciliation/dead-letter, exact local undo, and unsupported external undo; - duplicate effects were zero and blind replays were zero.
Harness failures, zero selected tests, incomplete denominators, and uncertain
external effects are not product success.
Preserved boundaries
v1.6.0 preserves the accepted v1.5.0 durable Computer Use lifecycle and exact
installed-test boundary, the v1.4.0 T1 Office engine, exact-task grouped
authorization, Goal completion receipts, connector and AgentRun state machines,
Event Store invariants, migration/recovery compatibility, updater integrity,
and source-only release guards.
This release does not sign in to Microsoft 365, read live Outlook mail or
calendar data, send mail, create or modify meetings, or perform any Step 7 work.
Production Microsoft/Google account registration and live external-write
authority remain disabled. It does not implement Step 8, a production portal,
stored browser-login reuse, broad browser automation, secure/UAC desktop
control, CAPTCHA, payment or administrator authentication, Headless/ACP, or
arbitrary executable extensions.
docs/templates/operations-briefing-smoke-evidence remains deterministic local
test material. The bundled smoke files are marked as
SMOKE SAMPLE evidence for local verification only and
Replace before operational use; replace them before operational use. The
desktop seed action continues to use blank operator templates under
docs/templates/operations-briefing-evidence.
Reproducible Windows package
The final release gate compares the application and installer from two fresh,
distinct CARGO_TARGET_DIR builds byte-for-byte. The GitHub Release records the
exact main/tag commit, file name, byte size, SHA-256, version, and truthful
signature state, then independently downloads and re-verifies the published
asset.
Unsigned release
Both ds-agent.exe and DS.Agent_1.6.0_x64-setup.exe are intentionally
Authenticode NotSigned; there is no signer. Windows may show Unknown publisher or Microsoft Defender SmartScreen. Download only over HTTPS from the
official v1.6.0 GitHub Release
and verify the exact byte size and SHA-256 published there before running it.
The SignPath Foundation application remains submitted and approval is pending.
This release is not represented as signed or SignPath-approved. If signing
becomes available later, it begins with a subsequent new version and does not
replace the immutable v1.1.0, v1.2.0, v1.3.0, v1.4.0, v1.5.0, or v1.6.0 tag,
Release, or asset.
No real API key, production account, paid API, production tenant, installed DS
Agent overwrite, current user AppData mutation, or external production target
is required for this release verification.