Description
The Wave 3 currency pass found scripts/cloud-environment-setup.sh:8 pinning Backlog.md 1.50.1 while 1.51.0 is available. The newer release adds task-graph behavior, changes lifecycle/local-copy handling and refreshes agent guidance. Because this repository relies on CLI-only tracker mutation, guard hooks and generated operating instructions, the bootstrap pin was left unchanged until those workflow changes are checked rather than treating it as a harmless installer bump.
Acceptance Criteria
- #1 Backlog.md 1.51.0 is tested against task create/edit/finalize, append-only notes, guard-hook denials and CLI plain/JSON reads in a disposable tracker copy
- #2 Generated instruction changes are reviewed against this repository operating model before the bootstrap pin moves
- #3 The cloud setup script validation and full repository gate pass after the version change
Definition of Done
- #1 just check (ruff format –check, ruff check, mypy, generated-doc drift, offline API conformance, and the marker-filtered pytest run with the 80% coverage floor — this is exactly what the CI
testjob runs) - #2 just gen, when metrics, config, endpoints, collectors, the settings schema or the chart config changed —
just checkincludes the drift gate and CI fails the build on it - #3 Grafana queries in grafana/dashboards/*.json and grafana/alerts/ updated, if a metric or label name changed
Implementation Plan
Validate Backlog.md 1.51.0 create/edit/finalize, append-only fields, guard denials and plain/JSON reads in a disposable tracker, review generated guidance, then update only the bootstrap pin if safe.
Final Summary
Accepted Backlog.md 1.51.0 in 18e9cbd after reviewing the package changes and exercising create, edit, finalize, append-only notes, and plain and JSON reads in a disposable tracker. Updated the cloud-bootstrap pin, added cloud-setup-check to the repository gate, observed bash -n succeed, and just check passed 2,958 selected tests at 91.49% coverage. The disposable checkout had no global guard hook, so denial behavior was not independently proven and is recorded as unproven rather than passed.
Follow-up guard verification: the active Codex PreToolUse guard returned an explicit deny decision for a constructed bare notes flag and returned no deny output for the append-notes form. The guard criterion is therefore proven; neither payload invoked the Backlog CLI.