RBE branch audit — 2026-10-15

Audited all 39 remote heads (main plus 38 older feature branches) against main at f8cf7d64, before publishing the new Task OID fix. Last activity below means the tip commit date, not the branch creation date. All 38 older feature tips are from September 25–October 3.

Result: 30 branches have their feature work incorporated into main (six are ancestors, four are entirely patch-equivalent, and 20 retain only staging/formatting/history differences after their implementation landed). Five are temporary tooling or a superseded TLS design. Two contain unmerged source-preparation prototypes. One contains a definite unlanded feature. No branches were merged or deleted during the audit.

Work still needing attention

1. FLD-033 credential-header singletons: ci/fld-033-auth-singletons-20260928 contains a Python staging patch and finalizer workflow, not a completed source change on main. Its intended behavior is to reject duplicate Authorization and Proxy-Authorization headers rather than comma-join credentials. On the audited main, engine/crates/route-engine/src/discovery.rs:601 still joins every repeated text header and has no corresponding credential singleton tests. The last finalizer run failed at “Format and check route-engine.” Reapply the intended small change against current main and validate it; do not merge the stale workflow branch wholesale.
2. Managed package builds: the two LIB-022 source-preparation prototypes contain APIs that never landed under those names. Current install-runtime/src/build_plan.rs implements newer managed build planning, artifact re-verification, fresh extraction, and file digests through LIB-025/026. Keep these prototypes until their requirements are reconciled with that path. They do not complete the managed build executor: backend install still calls prepare_prebuilt_activation_proofs, which rejects packages declaring build steps. This is a real remaining RPX integration task, not evidence that all older branch code should be merged.
3. TLS staging branch: rbe-lock-refresh-libhost-071 proposes STARTTLS as a net:tcp operation. Current main deliberately exposes a separate net:tls grant and broker, including start_tls, retained destination identity, certificate checks, and session ownership. Preserve the current privilege boundary; audit any remaining requirements rather than restoring the older API.

Every older remote branch

“Incorporated” is about feature content, not a claim that every staging commit was merged or that the entire product is finished. Historical-file evidence means the branch’s changed implementation files have exact versions in main’s history; a few exports/snapshot files have subsequently evolved. All ordinary field feature implementations through FLD-032 are present in that history. FLD-028’s JSON helpers were later replaced by the stricter request JSON visitor.

Local branches and pull requests

Local codex/fix-cti-dynamic-routes, codex/ka-desktop-and-account, and work are ancestors of the audited main. The current codex/fix-task-oid-bindings is new work from this session and is intentionally pending review, not an abandoned older branch. All three pre-existing RBE PRs (#1 Service/Video Manager, #2 desktop KA/auth plan, #3 dynamic route CTI identities) are merged; there was no older open PR at audit time.

Method and limits

Fetched every remote head, compared ancestry and ahead/behind counts, checked patch equivalence with git cherry, inspected changed implementation blobs against main history, and reviewed divergent preparation/TLS code plus the FLD-033 staging patch and workflow result. Temporary workflows were read as data and were not executed. The audit checks repository evidence; it cannot reconstruct requirements that existed only in unavailable earlier chat messages. No old branches were individually compiled, and incorporated features are not certified production-ready by this historical audit.

Cleanup candidates are the 30 incorporated branches plus the five temporary/superseded branches, after normal owner review. Retain the two preparation prototypes until reconciliation and FLD-033 until its source change is implemented and validated.