Evidence record / paperclip

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-24-paperclip-stable-gives-agents-durable-lifecycle-state-and-signing-identities

Stable gives agents durable lifecycle state and signing identities. Hiring, approval, preparation, verification, pause and termination now share a durable lifecycle owner. Approved hires must finish required setup and harness verification before work; stop/cleanup evidence gates completion, with persisted retries and visible pending phases. Plugins can consume and acknowledge ordered resource journal events, including a seeded baseline. Separately, new agents receive Ed25519 identities; existing agents receive them on their next managed run rather than through blanket backfill. Private keys are encrypted using the instance secrets master key and delivered to supported managed processes as multiline PEM environment values. A wrong wrapping key fails rather than silently replacing the identity. HTTP/gateway/API-hosted adapters do not receive that injection. Keys do not replace request authentication or supply a rotation/import UI.

Channel: tagged-release. Half: capability. Date: 2026-10-24.

Operator consequence: On v2026.1023.0, inspect lifecycle phase and required plugin completion before treating an agent as ready or deleted; a legacy status label alone no longer explains the pending work. Durable retry state can remove manual reconstruction after restart. Preserve master-key custody and teach custom launchers not to log private keys. Persistent identity can replace bespoke per-run signing setup, but recipients must decide trust and revocation, and the host remains trusted with the key. A public key proves neither that an output was signed nor that its contents are correct.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-paperclip-stable-gives-agents-durable-lifecycle-state-and-signing-identities

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact