OpenProgram implementation status and handoff

Snapshot: 2026-08-13. Integrated candidate: codex/implementation-integration-20260812@33dd7d2c.

This page separates reviewed integration evidence from mainline publication. 33dd7d2c is the single integrated candidate reviewed here; it is not in origin/main unless a row says so.

Status definitions

Review-passed branch: implementation exists at the exact commit and independent scoped reviews reported zero remaining findings.
Review-passed integrated candidate: the implementation is present in the single combined head, its scoped specification and quality reviews passed, and fresh whole-branch review reported zero remaining findings.
Merged to main: reviewed head has been merged into origin/main and passes the combined regression gate.
Partial: earlier tasks are review-passed, but the tracked plan still has required implementation or evidence tasks.
Candidate only: code or reports exist, but there is no single accepted integration head with final review evidence.

Current feature status

Area	Status	Authoritative branch / commit	Evidence and remaining work
Record/replay reliability	Merged to main	`origin/main` `1d6f52ec..c846beb6`	The nine reliability changes are on `origin/main`. They form part of the integration base for subsequent branches.
MCP server	Merged to main	`codex/mcp-server-20260812@0cd698de` merge `2b99f893`	Tasks 1–9 completed; final spec and quality reviews reported zero remaining findings. Full regression at the merge head: 3157 passed.
Provider initialization lifecycle	Merged to main	`codex/provider-runtime-design-20260812@f76ed3d6` merge `3c31c99d`	Provider initialization lifecycle with record/replay activation-failure handling that installs a blocked provider instead of crashing the runtime.
Session index consistency	Merged to main	`codex/session-index-20260812` merge `d37c8590`	Session index writes are locked; `updated_at` invariant is preserved across concurrent readers and writers.
DAG persistence observability	Merged to main	`codex/dag-observability-20260812` merged this round	Persistence failures in `openprogram/agentic_programming/function.py` now emit a warning log instead of being silently swallowed. Focused test suite: 6 passed.
Websocket command lifecycle	Merged to main	`84fe7da9..e831d0f0` on `origin/main`	The websocket lifecycle series (definition through finalized evidence) is on `origin/main`.
Runtime URL / SSRF protection	Review-passed branch	`codex/commitments-heartbeat-20260811@1d93bbe5` remote matches local	Tasks 1–10 and the final whole-branch review passed. Final evidence included security 812, affected 2932, runtime checker 0, docs links 0. The branch must be integrated without conflating it with unrelated work carried by the same branch.
JSON Schema structured output	Partial: Tasks 1–5 complete	`codex/json-schema-completion-20260812@86ca66d5` remote matches local	Capability negotiation, provider mappings, stream lifecycle, CLI/Web entrypoints, and replay v2 passed review. Session-title migration and final evidence/matrix work remain.
Credential-file hardening	Review-passed integrated candidate	`codex/implementation-integration-20260812@33dd7d2c`	Tasks 1–5 are integrated: private inventory and atomic publication, inventory-driven doctor/repair, omit/replace/delete secret editing, truthful deletion with cache invalidation, and staged restore with validated journaling, rollback, and recovery. Scoped specification and quality reviews passed with zero remaining findings; fresh whole-branch review also passed with zero findings. OS keychain integration remains explicitly out of scope.
Agent resource governance	Review-passed integrated candidate	`codex/implementation-integration-20260812@33dd7d2c`	Tasks 1–6 are integrated: durable fair dispatch and recovery, immutable budget attribution and credential-free preflight, provider reservation/start/settlement accounting, runtime and bounded-operation enforcement, and one canonical `TaskResourceView` across model tools, Web, CLI, and TUI. Scoped specification and quality reviews passed with zero remaining findings; fresh whole-branch review also passed with zero findings. The existing implemented matrix cell remains unchanged.
Commitments and heartbeat	Review-passed integrated candidate	`codex/implementation-integration-20260812@33dd7d2c`	The commitment lifecycle, deterministic heartbeat, owner projections, and design evidence are integrated together with the reviewed concurrent claim and cancellation repairs. The notification state machine preserves the `due` then `overdue:7` progression, reminder delivery no longer holds the workspace write lock across retries, and each concurrent notification step is claimed once before send. Scoped specification and quality reviews passed with zero remaining findings; fresh whole-branch review also passed with zero findings. Delivery remains at-least-once by design.

Implementation packages still required

1. JSON Schema structured output: Tasks 6–7

Replace title text parsing in openprogram/agent/dispatcher/titles.py with Runtime.exec(..., response_format=TITLE_SCHEMA). Preserve Unicode trim, the 80-code-point storage limit, and the existing placeholder on typed failure.
Update docs/reference/design/runtime/session/name.md and tests/unit/test_dispatcher_compaction_title.py.
After the title tests pass, update the structured-output HTML, Runtime API pages, session-title page, and feature matrix. The matrix may become complete only after Tasks 1–6 and fresh spec/quality reviews pass.
Source plan: docs/superpowers/plans/2026-08-12-json-schema-structured-output-completion.md on the JSON branch.

2. Smaller uncompleted hardening work

credential_process: argv is executed without shell interpolation, the timeout is configurable with a 60-second default, and successful results are cached. Helper stderr now passes through the diagnostics redactor before it reaches a failure message or a log, so a helper that echoes the credential it was fetching cannot leak it.
commit-push-pr: a dry run performs the local, reversible steps and prints the push and PR it would have taken without contacting the remote. git_push_argv and gh_pr_create_argv raise RemoteWriteNotAuthorized unless git.allow_remote_write is on or the caller passes allowed=True, so an unauthorized remote write fails before git or gh runs.
Retain the existing discussion backlog in TODO improvements: provider metadata corruption visibility, packaged Web/docs resources, typed frontend state migration, and the remaining oversized Python modules.

Integration and release order

Keep the accepted candidate exact. Treat 33dd7d2c as the reviewed integration input; later tracked implementation, test, or dependency changes require applicable scoped re-review and a fresh combined gate.
Finish the remaining JSON plan separately. Preserve its independent implementation and review evidence until it has a complete gate.
Publish only after an exact release decision. Reconcile the candidate against the selected mainline, rerun the documented release gate, and record the resulting merge commit rather than treating this documentation commit as implementation evidence.

Current combined-gate evidence

Fresh full Python suite at 33dd7d2c: 5265 passed, 10 skipped, 2 deselected, 1 xfailed, 44 warnings.
Fresh whole-branch review across the five tracked dimensions: PASS, zero findings. The commitments, resource-governance, and credential-hardening scoped specification and quality reviews are each PASS with zero remaining findings.
Documentation build: 490 pages; link checker: 0 broken. CLI tests: 134 passed, 2 skipped; CLI typecheck passed. Web contract checks, tsc, and next build --no-lint passed.
The whole Web npm lint command still fails on files unchanged from origin/main; the same failure was reproduced there, so this page does not claim that the whole Web lint gate passed.
Mechanical feature-matrix result remains 160 features, 84.5 score, 67 gaps, 6 OpenProgram-only. Changed Python Ruff and py_compile, locked dependency checks, and git diff --check passed on the reviewed candidate.

This is a reviewed integration snapshot, not a release declaration. 33dd7d2c is the implementation evidence; later documentation commits do not replace it.