Integrate the TaskPrincipal auto-recovery patch from the Agent Execution
Handoff 2026-09-08 onto the Baseline 1.1 mainline candidate.
Server-side execution principal recovery:
- TaskAdmissionStore.get_grant_by_id() / get_grant_by_task_id(): read-only
immutable grant lookup from durable admission grant/receipt state.
- TaskAdmissionPrincipalProvider: recover short-lived execution principal
from durable admission grant + Owner epoch + authoritative official Task;
only accepts CLAIMED/RUNNING tasks; re-verifies epoch/capability/task/job/
repository/branch/generation before every mutation; caller JSON cannot
supply principal; all miss-scopes fail closed.
- Bridge main() wires the admission runtime verifier back into
BridgeHandler.principal_verifier; trusted hosts may still inject.
- staging unit: AIOS_P0_TASK_PRINCIPAL_WRITES_ENABLED=true while
governed_writes_enabled still fail-closed on verifier readiness + legacy
writes=false.
- OpenAPI contract updated to server-side principal recovery.
- New negative tests + adjusted recovery tests.
Verified before applying: all 8 modified files matched manifest before_sha256
(LF-normalized), so applied after-state bytes directly (no 3-way merge needed).
Index blobs match manifest after_sha256 for all 9 files.
Targeted suite: 81 passed / 1 skipped (POSIX mode-bit, Linux env) on CPython 3.13.
Base: 6ffd7fe (Baseline 1.1 port); authoritative main 0136a534.