Milestones
List view
Deliver the smallest coherent merchant workflow demo: generic workflow/process configuration, NyxID-backed Google Workspace service bindings, Telegram channel binding through existing relay surfaces, publish/readiness, end-user Telegram invocation, and a repeatable demo verification path.
Overdue by 2 day(s)•Due by September 18, 2026•0/8 issues closed通用增强：会话级类型化上下文附件、workflow 内联确定性计算、ContentArtifact 元数据查询与置顶语义、UserMemory 类别级保留策略。目标是把「上下文如何进入模型」与「确定性事实如何进入结果」都收进 typed、版本化、可校验的通道，替代 prompt 拼接与外部微服务绕行。
No due date•0/7 issues closedWorkflow runs spend the overwhelming majority of wall clock in the projection hot path rather than in business work. Issues #3473-#3482 carry the verified code-level mechanisms; this description carries the agreed execution order and the constraints that apply across them. === PRODUCTION OBSERVATION (correlational; motivation only, not attribution) === Two mainnet runs on 2026-08-17, aevatar-console-backend, 4 vCPU single replica: - fin_budget_variance_monitor_optimized run:20b1053060064eef8f1d06dd8e39a5f5 - 35 steps, 0 LLM tokens, 1123.8 s. Pure-CPU assign/switch steps cost 4 s (index 0) to 35 s (index 28+). - hr_onboarding_email_approval run:fe3972496a6b481fa920b1356ca453e3 - different scope, draft origin, 89 steps, 56.6 KB total step payload, 5145.3 s, FAILED. foreach child completion spacing degraded 9.55 s -> 40.71 s within the run. Real HTTP work was 68 x ~0.52 s = ~35 s (0.69%). Per-scope dispatch timing (EnvelopeAttempted -> WatermarkAdvanced), 290 s log window: workflow-execution-materialization median 10.499 s / p90 11.700 s (n=27); every other scope 0.024-0.083 s median (studio.workflow-board 0.083, workflow-delivery 0.063, workflow-execution-session 0.062, projection-scope-status 0.032, workflow-binding 0.024). Within one 10.5 s window the logged Elasticsearch writes occupy ~250 ms and the remaining ~10.2 s produces no log output at all. Measured amplification for that workload: ~65 durable commits and ~15.2 Elasticsearch document writes per business event, of which 48.9 commits and 12.2 ES writes come from the projection-scope-status mirror. These are workload measurements. They justify priority. They do NOT attribute the interval to any specific operation - that is what #3480 then #3473's EXPLAIN/PROFILE exist to establish. === EXECUTION ORDER === Gate 0 - #3480@c62986d23 COMPLETE. Provider-local Neo4j write telemetry AND per-materializer timing, so graph construction is separable from Bolt execution. Nothing downstream lands on inference. Record elapsedMs, projectionKind, stateVersion, nodeCount, edgeCount. Cardinality rule: projectionKind may be a metric tag; stateVersion, scope, ownerId and node/edge ids are log fields only, never metric tags. Gate 1 - #3473@7f9160d3b COMPLETE. Disposable Neo4j 5.26 PROFILE confirmed the owner scans and old-edge row multiplication. Named idempotent RANGE indexes on (scope, projectionOwnerId), the single-row deletion barrier, legacy-schema resolution, fail-closed schema validation, integration coverage, and the 10x unrelated-owner benchmark are landed. Gate 2 - #3474@688d00c73 COMPLETE. Exact durable source/target relay evidence now provides the steady-state fast path with zero runtime/kind/ensure calls. Cold start still synchronously confirms exact relay readiness; actor-owned generation rejects stale bindings; explicit release waits for authoritative relay removal and invalidates the fast path across instances. Recovery preserves the same unconfirmed event identity. Then: #3476 -> #3475 -> #3482 -> #3481 -> #3477 -> #3479, each subject to its own constraint. Held: #3478 - no semantic change until a correlated HTTP / completion / timeout timeline for the same callId+executionId exists. === CONSTRAINTS === #3476 - reducing shadow-status amplification must preserve durable watermark, health and recovery semantics. #3475 - the report must keep live version freshness; only the graph may become incremental or throttled, and only under an explicit freshness contract. #3482 - remove only definitively redundant copies; preserve old-state recovery and ${stepId} / switch / assign dataflow compatibility. #3481 - define typed author-directed release for authoritative current state; do not replace full state_root snapshots or absorb derived report retention. #3477 - do NOT treat this as a tokenization problem. Protobuf map fields are already mapped enabled:false by the provider's augmented mapping, so request_parameters_map and timeline data_map are stored in _source but never analyzed. Scope is _source volume and full-document read-modify-write. === NON-GOALS (do not implement) === State deltas replacing the full CommittedStateEventPublished.state_root. Terminal-only report materialization. Changing switch output semantics. === EVERY PR === Behavior tests, a performance baseline, and before/after metrics.
No due date•9/10 issues closedTracks backend workflow activity, recovery, lineage, usage, and related NyxID follow-up issues.
No due date•7/8 issues closedGoal: implement the complete support-contract gist revision f45febb057a7182dab2495d4c739d2bb8d7026f5 and the exact target-state UC1a-UC4 journeys, beyond Milestone 40 Core. origin/feature/integrate is the sole Aevatar implementation, delivery, deployment, and acceptance branch. Completion requires Wave 1-4 Class-A artifacts, honest disposition of every remaining CLI leaf, NyxID frontend/facade parity, exact journey fixtures, authenticated production canaries, committed-state and provider verification, cleanup, and a zero-unowned-gap conformance report. Milestone 40 remains the immutable completed Core baseline and is not reopened.
No due date•3/16 issues closed恢复并验收 code_execute 与 codex_exec 两个独立能力。前提：aevatar 与 chrono-sandbox pr-8（owner 所提）可改；NyxID 只读且无需改（#1337 已 merge，配置更新自校验）；仅 OpenSandbox 本体（#2786）在控制面外。保留两工具/两种业务语义；凭据按 #3328 六步顺序迁移到 delegation-only 下游（所有可复用凭据终止于 NyxID，chrono 只收短期 delegation），每步向后兼容、独立可回滚；结果契约按能力分离，失败信封与结构诊断一致。含 #3284 修复与 #2898 真实 canary；不含 #2699、#2978、#2881/#2899。
No due date•1/10 issues closedUpgrade Aevatar MCP client and connector surfaces to the MCP 2026-07-28 stateless protocol through the official C# SDK 2.x, preserve down-level interoperability, document the contract, and complete production deployment verification.
No due date•5/7 issues closed对底层做一轮系统性优化:恢复语义(resume/终态可达)、投递保证诚实化、committed 事实发布可观察性、入站有界化、记忆边界与投影观测面。系列编号 [Runtime Hardening][1..12],1-5 为高优先级;1/3/4/12 触碰同一条 chat turn 主链,须统筹设计。
No due date•12/12 issues closedCross-cutting Aevatar platform contracts for trustworthy Team work: explicit audit lifecycle and terminal evidence, durable approval continuation for external actions, first-class WorkOrder intent, revisioned result artifacts with provenance and citations, and extensible Team detail views. The milestone establishes authoritative identities, recoverable coordination, verifiable outcomes, and consistent application extension points without making external telemetry or service protocols the platform source of truth.
No due date•6/15 issues closedAevatar/NyxID contract, direct OpenSandbox integration, public verification sample, and private-account end-to-end proof for umbrella issue #2779. External runner-image and operations deliverables are tracked as separate sub-issues outside this milestone.
No due date•4/4 issues closed定时任务凭证收敛 + Agent Key 加密驻库（epic #2404 / ADR-0037 修订版）。目标：>5min 定时任务不再因 300s broker token 过期失败；raw agent key 唯一静置点为 AES-256-GCM 加密 vault；撤销基建为发布门槛。
No due date•24/25 issues closedOne typed audit model, three capture planes (boundary / tool-execution / committed-fact), one append-only trail, one scoped query surface. Decomposes #2589. Epic: #2592.
No due date•8/8 issues closedMake the agent system prompt a small, stable, auditable kernel while pushing frequently-changing capability content into a host-extensible, force-injected overlay sourced from the skill platform. Context-engineering layering (kernel / forced overlay / on-demand / runtime / conversation) plus the governance that makes curator-driven extension dependable (provenance, staged rollout, eval gate). Proposal: https://github.com/aevatarAI/aevatar/discussions/2364
No due date•14/14 issues closedTracks workflow-related issues and PRs from the week of 2026-06-29 (including closed). Carries over unfinished work from Week of 2026-06-22 (#28): draft-run vs member-invoke contract clarity, scoped draft create/read/poll, external-gated resource-change loop & external system request definition (epics), published-service auto-registration as NyxID downstream (epic), Studio workflow-debug / artifacts / connectors UI, Platform navigation & overview, and member-binding readiness.
Overdue by 2 month(s)•Due by July 3, 2026•7/17 issues closedLock the inbound channel relay -> agent reply path (NyxID relay -> ConversationGAgent self-continuation -> AgentRunGAgent -> streamed reply -> outbound) against silent regression. Per-seam unit coverage is already strong; this milestone adds (a) an anti-removal contract guard pinning the load-bearing tests + two incident vectors, and (b) behavior tests closing the specific audited gaps. Each child is independently verifiable.
No due date•6/6 issues closedTracks workflow-related issues and PRs from the week of 2026-06-22 (including closed). Carries over unfinished work from Week of 2026-06-08 (#22) and Week of 2026-06-15 (#26): draft-run vs member-invoke contract clarity, scoped draft create/read/poll, external-gated resource-change loop (epic), Studio workflow-debug / artifacts / connectors UI, Platform navigation & overview, member-binding readiness, and workflow file handling.
Overdue by 2 month(s)•Due by June 26, 2026•7/7 issues closedEnforce asymmetric, ownership-based tool forwarding at the OpenAI-compatible ingress (/v1/chat/completions, /v1/responses, /v1/messages): aevatar-owned tools execute server-side and stay invisible to the client; only client-declared tools are forwarded. Fixes #2269 and hardens the agent-as-model tool boundary (collision + discovery-flicker + completion-level leak).
No due date•5/5 issues closedTracks issues and PRs from the week of 2026-06-15 (including closed). Scope (TBD — to be refined): Studio UI & workflow member binding, Platform navigation/overview, schedule lifecycle unification, voice credential brokering, and architecture refactors.
Overdue by 3 month(s)•Due by June 19, 2026•49/49 issues closedImplements ADR-0034 (docs/adr/0034-workflow-saga-compensation-protocol.md): an opt-in, orchestrated compensation-based saga owned by WorkflowRunGAgent. Closes the '幂等键 ✅ 重试 ✅ 补偿 ❌' gap (ADR-0002) and realizes the saga protocol deferred by ADR-0017 §Q5 and ADR-0006 §2-B. Forward-only behavior is preserved byte-for-byte for workflows that declare no compensation. Ordered series (each maps to an ADR-0034 cutover step): 1. #2096 contract — compensation declaration + completed-step ledger + events (blocks 2–5) 2. #2097 orchestration — reverse-order compensation phase (depends on #2096) 3. #2098 idempotency keys for tool_call / connector_call (depends on #2096) 4. #2099 dead-letter terminal + saga-status read model (depends on #2097) 5. #2100 guards, integration tests & canon docs (depends on #2097, #2099)
Overdue by 3 month(s)•Due by June 21, 2026•14/14 issues closed目标：外部音频流实时进入 aevatar，LLM 实时处理并以语音回复（model 限定 OpenAI Realtime GA，直连 endpoint+ApiKey）。 架构基线（已由历史 issue 裁定，本 milestone 内不再反复）： - text/voice 共享 IRealtimeSession<TInbound,TOutboundFrame>（#1748, PR #1755 first-slice 已合并） - 控制/转录平面：VoiceRealtimeFrame 走 projection-backed 统一链，与 text/AGUI 同构 - 媒体平面红线：raw PCM 不进 actor inbox / EventEnvelope / projection / committed event store（#179→#701→#1748 三轮裁定，proto descriptor test 强制）；媒体走 IVoiceVolatileMediaStreamPort 直达 transport/provider - Provider：OpenAI Realtime GA shape（PR #1008）+ endpoint-only 直连（PR #1610） 范围（2026-06-10 扩展，并入原 Phase 2）： - 内核：#1939 media egress 闭合 → #1940 route 接通 → #1941 e2e - 大脑承接：#1943 图像入链（input_image，低频路径不踩 PCM 红线）、#1944 外部事件唤醒活跃会话、#1945 persona 参数化（agent 配置 + route policy） 完成判据（终态验收）：voice-presence（退化为 LAN transport/转码网关）可将 upstream 从直连 OpenAI 切换为 aevatar /ws/voice（NyxID bearer 鉴权），AI 大脑——LLM 对话、tools（经 nyxid_proxy 控 HA/Frigate/Go2）、persona、记忆、事件反应——全部由 aevatar 承接。 历史脉络参考：#176/#179（EventModule 落地）→ #560/#701（流统一抽象演进）→ #776/#1527（lease 契约）→ #808/#1321（fail-closed）→ #809（GA 迁移）→ #1748（统一终局）。CLI 入口：aevatarAI/aevatar-cli#12。
Overdue by 3 month(s)•Due by June 19, 2026•19/19 issues closedTracks workflow-related issues created during the week of 2026-06-08, including closed issues. Scope includes workflow run recovery, draft-run/member contracts, Lark interaction protocol, scheduling, hardening, studio UI, invocation readmodel cleanup, and workflow file handling.
Overdue by 3 month(s)•Due by June 14, 2026•51/51 issues closedWave 1 — Projection Cooperation Primitives. 把 PR #413 修了三处的 "prime-before-dispatch + version 双闸" 模式抽成共享原语 (`IProjectedActorClient<TEvent>` + `ReflectionToken`)，配 CI guard 强制所有 actor + projection 协作走原语。 Goal: 任何 `actor.HandleEventAsync` 调用都包在新原语里；CI guard 拦未走原语的新代码；现有 4 处 hand-coded prime + version-gate 迁移完毕。 Future waves (per-turn runtime state, outbound dispatcher generalization) tracked separately when they kick off.
No due date•24/25 issues closed- No due date•1/2 issues closed