# Complete - m-iop-agent-cli-runtime/05_contract_boundary

## Completion Time

2026-07-29

## Summary

Restored the standalone `iop-agent` host contract boundary after three review loops; final verdict: PASS.

## Loop History

| Plan | Review | Verdict | Notes |
|------|--------|---------|-------|
| `plan_local_G07_0.log` | `code_review_cloud_G07_0.log` | FAIL | Removed duplicate shared-runtime ownership and added the missing client-neutral local-control contract. |
| `plan_cloud_G07_1.log` | `code_review_cloud_G07_1.log` | FAIL | The ownership repair over-pruned standalone host schemas required by the approved SDD. |
| `plan_cloud_G07_2.log` | `code_review_cloud_G07_2.log` | PASS | Restored all ten host-owned schema anchors with durable identity, revision, retention, typed failure, and no-silent-reset semantics. |

## Implementation and Cleanup

- Added the contract-first `RuntimeConfig`, `ProjectRegistration`, `SelectionPolicy`, `PreviewRequest`, `WorkspaceSnapshot`, `OverlayWorkspace`, `ChangeSet`, `IntegrationRecord`, `ProjectLogRecord`, and `IntegrationStatus` definitions.
- Preserved `iop.agent-runtime` as the sole owner of shared provider execution, manager lifecycle, admission, review, selection/failover, and integration algorithms.
- Preserved the existing same-user local-control, idempotency, replay, failure, and Flutter/Unity client-process boundary.
- Added every restored host schema to the `iop.agent-cli-runtime` contract-index reading condition.

## Final Verification

- `command -v go && readlink -f "$(command -v go)" && go version && go env GOROOT` - PASS; `/config/.local/bin/go` resolves to `/config/opt/go/bin/go`, Go is `go1.26.2 linux/arm64`, and `GOROOT` is `/config/opt/go`.
- Shared ownership assertion from `plan_cloud_G07_2.log` - PASS; the CLI index row contains no `packages/go/agenttask` or `packages/go/agentguard` source ownership and delegates shared behavior to `iop.agent-runtime`.
- Standalone host schema assertion from `plan_cloud_G07_2.log` - PASS; all ten required symbols exist in both the contract and its index row.
- Local-control regression assertion from `plan_cloud_G07_2.log` - PASS; schema, authorization, idempotency, replay, failure, S11, and S15 anchors remain present.
- `go test -count=1 ./packages/go/agenttask ./packages/go/agentguard` - PASS; both packages reported `ok`.
- `git diff --check` - PASS; no output.
- `git diff --no-index --check /dev/null agent-contract/inner/iop-agent-cli-runtime.md` - PASS for whitespace; the expected status `1` indicates only that the new file differs from `/dev/null`, with no whitespace diagnostics.

## Remaining Nits

- None.

## Follow-up Work

- None.
