Repository navigation
Container image
ghcr.io/tadmstr/task-queue-mcp:v0.16.0@sha256:58bbba4212915df46821900a3d06c9b96664016bc95501813b16ef50dac5fc94
Build provenance is attested and was verified in the publishing run.
Added
pre_audittask type: a build's fixer task (audit-fixer-2026-11 p2). A build agent queues it to itself, and task-dispatcher v1.6.0 launches a fresh session of that agent onfixer-handoffs/<build_name>/r<audit_round>-h<handoff_seq>.md.submit_taskrefuses apre_auditunless source == target (afterbind_actor), the target is a build agent (developer,sysadmin,fleet),build_name,audit_round(1-20) andhandoff_seq(0-2) are all set, there is nooriginating_task_id, andrequires_approvalis false. A same-uid process that reads another agent's token is not stopped by this; agent isolation is the fix.handoff_seq: a new optionalsubmit_taskfield, an integer 0-2, required forpre_auditand refused on every other type. It is stored on the task and carried in lifecycle event metadata.audit_roundis now accepted onpre_auditas well asauditandticket_audit.