Unify recurring allocation admission, custody and explanations

[adrianwebb]

Outcome

Unify recurring and manual workdays on canonical allocation admission, explicit custody and auditable explanations.

Work authority

• Work item / Issue: Implement the minimal AgentKernel, profile, and workday architecture platform#520
• Proposal / decision: N/A — operator-requested allocation acceptance repair, not a golden deliverable.
• Assignment / checkpoint: interrupted SDK workday b924a482-351e-4dc2-a84a-57156a6535ca
• Actor: Codex
• Human authority: @adrianwebb
• Agent / capacity provider: operator Codex task; dev2 managed acceptance
• Exact base ref: staging 17aec8c
• Exact head ref: 7e629cb

Contributor mode (select one):

• Human-authored
• Agent-assisted under human authority
• Agent-authored under human authority

Plan

Repair the observed acceptance failure through the existing runtime path. Local verification complete; merge after required Actions, then verify managed local recovery. No tags or releases.

Changes and commits

7e629cb: Migration 0034 retains schedules as canonical intents and drops retired tier/budget columns. Scheduled starts delegate to the existing preflight/start with stable occurrence IDs and existing receipts. Persist SDK supply/selection explanations in existing allocation metadata; retain replayable agent selectors.

Verification

Build and file policies passed. 39 focused tests passed, including native PostgreSQL schedule migration. Exact protected SDK staging artifact: 5bf0a7bc3e9090f0885abb915101d33fe5d28df8, Verify 35188738580 success. Local development migration/rebuild in progress; no full golden lifecycle accepted.

• I ran the narrowest relevant package verification and documented any checks that could not be run.

Risk and rollback

Database migration 0034 requires drained workdays and coordinated application/database rollback. No credential migration. Restore compatible application/database state together; never run the retired writer against migrated schedules. No purge or bootstrap reinstall.

Completion summary

Bounded repair verified locally. Integrated golden lifecycles remain unproven and are not claimed as complete by this PR.

AGPL committer authorization

Base-owned workflow retains provider-authenticated author authorization.

Submission checklist

• The change is bounded to the stated work item and target repository.
• Exact base and head refs are recorded and the branch is ready for review.
• Verification and compatibility evidence are recorded above.
• No plaintext secrets, credentials, machine state, or unrelated residue are included.
• Plan, status, commits, and completion summary form a complete durable record.
• Rollback or recovery steps are documented and executable.