aios/.agent/tasks/codex/TASK-CODEX-APPLY-VERIFY-AIOS-ORCHESTRATOR-GATEWAY-V1.md

Codex task: apply and verify AIOS Orchestrator Gateway v1

Contract: cbe33ecab8e9794ba5f318bea43aeaf447a56fbc

Use the strongest actually available Codex model for the initial security review. If unavailable or timed out, record TIMEOUT/NOT_EXECUTED and let OpenClaw run the deterministic test path. Do not count a timeout as PASS.

Apply

1. Create a new clean append-only branch and isolated worktree.
2. Validate the delivery tarball and SHA256SUMS.
3. Run the external scripts/apply_gateway_patch.sh with SOURCE_DIR and WORKTREE; do not alter unrelated paths.
4. Review all added code, especially:
   • exact contract and optimistic state-version checks;
   • event/decision idempotency;
   • SQLite leases and retry behavior;
   • Workspace Agent 202 asynchronous callback flow;
   • Responses background creation and polling;
   • file-inbox and Git-ref polling;
   • traversal/symlink protections;
   • OpenClaw lifecycle synchronization;
   • systemd sandbox;
   • install and rollback transactions.

Tests

Run from the final source tree:

• Python compile for all gateway and helper files;
• unit tests;
• JSON schema/config parsing;
• Bash syntax;
• systemd-analyze verify;
• event duplicate and payload-conflict tests;
• stale state-version rejection;
• lease/double-claim test;
• Workspace trigger failure and Responses fallback;
• response queued/in-progress/completed polling;
• file-inbox recovery after HTTP failure;
• Git-ref initial baseline and subsequent-change event;
• task start/end and project summary synchronization;
• dispatch traversal and symlink rejection;
• retry/backoff/dead-letter;
• install dry-run;
• rollback test in an isolated fixture;
• git diff --check;
• full repository tests;
• final Gitleaks.

Commit and review

1. Create an append-only implementation commit.
2. Push without force.
3. Confirm WORKTREE_OID == BARE_OID == GITEA_OID.
4. Create an independent RESULT-only branch and exact-one result commit.
5. Record the source bundle SHA-256, implementation OID, RESULT OID, tests, Gitleaks, systemd validation and remaining external configuration blockers.

Forbidden

No reset, amend, rebase, force push, direct main push, controller mutation, secret disclosure, fabricated test result, production deployment or B3 evidence fabrication.

Success:

GATEWAY_CODE_REVIEW=PASS IMPLEMENTATION=<oid> RESULT=<oid> OID_MATCH=YES