Implement actor identity profile registry

.agent-loop/LOOP_STATE.md

@@ -4,17 +4,16 @@
 
 - Active initiative: `WS-POL-001` - Submission Artifact Policy Foundation
 - Active planning chunk: `WS-POL-001-11` - Actor Identity And Profile Registry
-- Active implementation chunk: none
-- Branch: `codex/ws-pol-001-11-actor-identity-profile-contract`
-- Status: `WS-POL-001-10` merged through PR #72. `WS-POL-001-11` has contract,
-  internal review evidence, and PR trust bundle prepared for human review.
-  Implementation is inactive until the contract is approved and the user gives
-  an explicit implementation start signal.
+- Active implementation chunk: `WS-POL-001-11` - Actor Identity And Profile Registry
+- Branch: `codex/ws-pol-001-11-actor-profile-registry-impl`
+- Status: `WS-POL-001-10` merged through PR #72. `WS-POL-001-11`
+  implementation and CodeRabbit follow-up fixes are committed, deterministic
+  verification passed, required internal reviewer tracks completed with no
+  blocking findings, and evidence / trust bundle are prepared for human review.
 - Last merged implementation SHA: `cc78f2a`
 - Last merge commit: `1bbde47`
-- Current gate: human review of `WS-POL-001-11` contract
-- Next chunk: `WS-POL-001-11` is contract-only until human review approves the
-  implementation boundary
+- Current gate: PR #74 external review addressed; await final CI and human merge decision
+- Next chunk: inactive until `WS-POL-001-11` is reviewed and merged
 
 ## Operating Rule
 

.agent-loop/REVIEW_LOG.md

@@ -293,3 +293,40 @@ API drill.
 Evidence: `.agent-loop/initiatives/WS-POL-001-submission-artifact-policy-foundation/reviews/WS-POL-001-10-internal-review-evidence.md`
 
 External review response: `.agent-loop/initiatives/WS-POL-001-submission-artifact-policy-foundation/reviews/WS-POL-001-10-external-review-response.md`
+
+## WS-POL-001-11
+
+Status: implementation branch prepared for PR review on 2026-07-06.
+
+Branch: `codex/ws-pol-001-11-actor-profile-registry-impl`
+
+Reviewed implementation SHA: see the internal review evidence file for the
+exact reviewed code SHA.
+
+Required reviewer tracks:
+
+- senior engineering
+- QA/test
+- security/auth
+- product/ops
+- architecture
+- docs
+- reuse/dedup
+- test delta
+
+Result: PASS after fixes from internal review.
+
+Scope: local `ActorIdentity` and shared `ActorProfile` registry for verified
+Flow actors, destructive removal of obsolete worker/reviewer profile stores,
+explicit actor-registration dependency, worker profile activation through the
+canonical worker endpoint, claim eligibility requiring verified worker token
+role plus active worker profile, stale demo route cleanup, and Flow
+issuer-plus-subject identity compatibility wording.
+
+Evidence: `.agent-loop/initiatives/WS-POL-001-submission-artifact-policy-foundation/reviews/WS-POL-001-11-internal-review-evidence.md`
+
+External review response: `.agent-loop/initiatives/WS-POL-001-submission-artifact-policy-foundation/reviews/WS-POL-001-11-external-review-response.md`
+
+External review status: CodeRabbit comments triaged; valid findings fixed;
+legacy-profile backfill request rejected because it contradicts the
+no-backward-compatibility chunk decision.

.agent-loop/WORK_QUEUE.md

@@ -4,7 +4,7 @@
 
 | Chunk | Title | Risk | Status |
 |---|---|---:|---|
-| `WS-POL-001-11` | Actor Identity And Profile Registry Contract | L1 | Contract-only branch active; implementation waits for human review |
+| `WS-POL-001-11` | Actor Identity And Profile Registry | L1 | Implementation branch active; internal review passed; preparing PR evidence |
 
 ## Completed
 
@@ -26,11 +26,11 @@
 
 ## Proposed Next
 
-The next implementation chunk should create local Workstream actor identity and
-actor profile registries for verified Flow actors. It must not turn Workstream
-into the auth provider, and persisted profiles must not become permission
-authority. After that merge, rerun the Terminal Benchmark live API drill through
-real HTTP calls.
+After `WS-POL-001-11` is externally reviewed and merged, rerun the Terminal
+Benchmark live API drill through real HTTP calls using
+`POST /api/v1/workers/me/profile` for worker profile setup. The next product
+chunk should stay bounded to issues discovered by that drill or the approved
+WS-POL chunk map.
 
 ## Blocked
 

.agent-loop/initiatives/WS-POL-001-submission-artifact-policy-foundation/CHUNK_MAP.md

@@ -50,7 +50,7 @@ backend/app/modules/projects/**
 backend/tests/test_projects.py
 backend/tests/test_tasks.py
 backend/tests/test_checkers.py
-backend/scripts/week1_api_e2e.py
+backend/scripts/api_contract_e2e.py
 docs/architecture_data_model.md
 docs/decision_0011_submission_artifact_policy_drives_pre_submit.md
 docs/operations_project_operating_manual.md
@@ -166,7 +166,7 @@ backend/app/modules/checkers/**
 backend/tests/test_projects.py
 backend/tests/test_checkers.py
 backend/tests/test_tasks.py
-backend/scripts/week1_api_e2e.py
+backend/scripts/api_contract_e2e.py
 README.md
 docs/architecture_checker_framework.md
 docs/architecture_data_model.md
@@ -501,7 +501,6 @@ Allowed files:
 ```text
 examples/terminal_benchmark/**
 backend/app/adapters/project_agents/openai_agent_sdk.py
-backend/app/adapters/project_agents/local_fixture.py
 backend/app/interfaces/project_agents.py
 backend/app/modules/projects/models.py
 backend/app/modules/projects/schemas.py
@@ -512,7 +511,7 @@ backend/tests/test_checkers.py
 backend/tests/test_projects.py
 backend/tests/test_tasks.py
 backend/tests/test_alembic.py
-backend/scripts/week1_api_e2e.py
+backend/scripts/api_contract_e2e.py
 README.md
 docs/architecture_lockdown.md
 docs/architecture_data_model.md
@@ -537,7 +536,7 @@ Not allowed:
 backend/app/** except listed adapter/interface/project/task files
 backend/alembic/** except `backend/alembic/versions/0010_remove_legacy_project_guide_fields.py`
 backend/tests/** except `backend/tests/test_projects.py`, `backend/tests/test_tasks.py`, `backend/tests/test_checkers.py`, and `backend/tests/test_alembic.py`
-backend/scripts/** except `backend/scripts/week1_api_e2e.py`
+backend/scripts/** except `backend/scripts/api_contract_e2e.py`
 .github/workflows/**
 demos/**
 frontend/**
@@ -615,7 +614,7 @@ backend/alembic/versions/**
 backend/app/modules/tasks/**
 backend/tests/test_tasks.py
 backend/tests/test_alembic.py
-backend/scripts/week1_dry_run.py
+backend/scripts/api_contract_e2e.py
 backend/scripts/week2_api_e2e.py
 docs/architecture_data_model.md
 docs/operations_project_operating_manual.md
@@ -727,11 +726,11 @@ Acceptance criteria:
   fixture runtime.
 - Tests use explicit test-local fakes for deterministic project-agent behavior.
 - Terminal Benchmark example docs and script do not describe a removed runtime
-  selector or fallback.
+  selector, fixture runtime, or fallback.
 - README explains that automatic project setup needs OpenAI Agents SDK model and
   API-key settings.
-- Temporary Week 1 demo startup does not enable setup autostart without the
-  required OpenAI worker configuration.
+- Local API contract drills do not enable setup autostart without the required
+  OpenAI worker configuration.
 
 Verification:
 
@@ -801,10 +800,11 @@ Allowed files:
 
 ```text
 backend/alembic/versions/*_actor_identity_profile_registry.py
+.github/workflows/backend.yml
 backend/app/api/router.py
 backend/app/api/deps/auth.py
-backend/app/api/routes/demo.py
 backend/app/api/routes/auth.py
+backend/app/core/config.py
 backend/app/db/models.py
 backend/app/modules/actors/__init__.py
 backend/app/modules/actors/models.py
@@ -820,17 +820,23 @@ backend/tests/test_actors.py
 backend/tests/test_alembic.py
 backend/tests/test_auth.py
 backend/tests/test_tasks.py
-backend/scripts/week1_dry_run.py
-backend/scripts/week1_api_e2e.py
+backend/scripts/api_contract_e2e.py
 backend/scripts/week2_api_e2e.py
 examples/terminal_benchmark/terminal_benchmark_api_e2e.py
+README.md
 docs/architecture_data_model.md
+docs/architecture_brief/workstream_architecture_brief.md
 docs/architecture_lockdown.md
 docs/architecture_system_architecture.md
+docs/diagrams/workstream_v01_container.md
 docs/glossary.md
 docs/operations_roles_permissions.md
+docs/roadmap_day_by_day_execution_plan.md
+docs/roadmap_status.md
 docs/spec_chunk_2_auth_actor_boundary.md
 docs/spec_chunk_4_task_queue_assignment.md
+scripts/check_internal_review_evidence.py
+scripts/test_agent_gates.py
 .agent-loop/LOOP_STATE.md
 .agent-loop/WORK_QUEUE.md
 .agent-loop/REVIEW_LOG.md
@@ -854,11 +860,12 @@ Acceptance criteria:
 
 - `ActorIdentity` and `ActorProfile` models/tables exist with unique identity
   and profile constraints.
-- Existing worker/reviewer profile rows are backfilled into the shared profile
-  model and the separate profile tables, ORM models, and repository authority
-  paths stop owning profile state.
-- Seeded migration tests prove worker/reviewer profile backfill preserves
-  profile type, status, skill tags, scope, and table removal.
+- The separate worker/reviewer profile tables, ORM models, and repository
+  authority paths stop owning profile state. This build-phase migration does
+  not preserve obsolete experimental profile rows through a compatibility
+  backfill.
+- Migration tests prove the current schema exposes the shared profile authority
+  and old worker/reviewer profile tables are absent.
 - Flow token verification remains pure. Actor registration uses a separate
   actors service/repository boundary.
 - Route authorization remains token-derived.
@@ -871,13 +878,13 @@ Acceptance criteria:
   profile.
 - Stored profiles without matching token roles do not grant operator, worker,
   reviewer, or project-manager access.
-- Stale backend demo/script imports of old worker/reviewer profile models are
-  removed, rewired, or retired so the shared actor profile model is the only
-  profile authority.
-- Stale backend script/example calls to `/api/v1/demo/worker-profile` are
-  removed, rewired to `POST /api/v1/workers/me/profile`, or explicitly retired.
-- Verification includes a stale helper scan for old profile model imports and
-  the removed demo worker-profile endpoint.
+- Stale backend script imports of old worker/reviewer profile models are
+  removed or retired so the shared actor profile model is the only profile
+  authority.
+- Stale backend script/example calls to local demo profile endpoints are
+  removed; current drills use `POST /api/v1/workers/me/profile`.
+- Verification includes a stale helper scan for old profile model imports,
+  removed Week 1 entry points, and removed demo worker-profile endpoints.
 
 Required reviewers:
 

.agent-loop/initiatives/WS-POL-001-submission-artifact-policy-foundation/STATUS.md

@@ -5,14 +5,13 @@
 `WS-POL-001-01`, `WS-POL-001-02`, `WS-POL-001-03`, `WS-POL-001-04`,
 `WS-POL-001-05`, `WS-POL-001-06`, `WS-POL-001-07`, `WS-POL-001-08`,
 `WS-POL-001-09`, and `WS-POL-001-10` are merged to `main`. `WS-POL-001-11`
-contract evidence is ready for external review and human approval.
-Implementation remains inactive until human review approves the actor
-identity/profile implementation boundary and the user gives an explicit
-implementation start signal.
+implementation is committed on the active branch with deterministic
+verification and internal reviewer evidence complete. The current gate is PR
+review and human checkpoint.
 
 ## Active Chunk
 
-`WS-POL-001-11` contract review. Implementation is inactive.
+`WS-POL-001-11` implementation review.
 
 ## Chunk Status
 
@@ -28,13 +27,13 @@ implementation start signal.
 | `WS-POL-001-08` | Merged | `codex/ws-pol-001-08-celery-project-setup` | 69 | Makes guide/source capture enqueue Celery pre-submit setup automatically: sufficiency first, blocked stops, draft submission artifact policy next; removes remaining construction-state compatibility surfaces. |
 | `WS-POL-001-09` | Merged | `codex/ws-pol-001-09-openai-agent-sdk-only` | 71 | Removes the production `local_fixture` project setup runtime and old runtime selector; keeps deterministic test behavior in explicit test-local fakes only. |
 | `WS-POL-001-10` | Merged | `codex/ws-pol-001-10-pre-submit-hardening` | 72 | Hardens duplicate guide-version conflicts, guide-create source snapshots, active-guide checker summaries, worker self-profile onboarding, and failed pre-submit audit evidence. |
-| `WS-POL-001-11` | Internal review complete; implementation inactive | `codex/ws-pol-001-11-actor-identity-profile-contract` | 73 | Defines local Workstream actor identity and actor profile registries for verified Flow actors before the next live API drill. |
+| `WS-POL-001-11` | Implementation ready for PR review | `codex/ws-pol-001-11-actor-profile-registry-impl` | - | Implements local Workstream actor identity and actor profile registries for verified Flow actors before the next live API drill. |
 
 ## Blockers
 
 | Blocker | Owner | Next action |
 |---|---|---|
-| None | - | Human review decides whether to accept the contract before implementation starts. |
+| None | - | Open PR, wait for external review, and keep the next chunk inactive until human checkpoint. |
 
 ## Follow-Ups