browser/openspec/changes/synchronize-run-deployment-execution/specs/run-deployment-execution-receipts/spec.md

ADDED Requirements

Requirement: Frozen deployment execution

Platform SHALL send a typed, versioned deployment definition with every lifecycle job for a configured server, and Run SHALL reject a definition it cannot validate or execute for the requested lifecycle action.

Scenario: Start uses the leased revision

• WHEN Run receives a valid process.start job with deployment revision 7
• THEN it SHALL execute only the fields in that leased revision and SHALL not fetch a mutable replacement definition

Scenario: Incompatible Run is rejected

• WHEN a selected Run does not advertise deployment-execution support
• THEN Platform SHALL reject dispatch before assigning a lifecycle job

Requirement: Execution revision receipt

Run SHALL include a non-sensitive deployment execution receipt in each terminal deployment-aware lifecycle result, and Platform SHALL validate the receipt against the job's leased definition before projecting confirmation.

Scenario: Matching receipt is projected

• WHEN Run succeeds a start job and returns the job's deployment revision and action
• THEN Platform SHALL show that Run confirmed execution of that revision

Scenario: Mismatched receipt is rejected

• WHEN Run reports a deployment revision or lifecycle action different from the lease
• THEN Platform SHALL reject the terminal result and SHALL not mark the job successful

Requirement: Explicit deployment field clearing

Platform SHALL preserve a deployment value when an update omits it and SHALL clear an optional field only when the update explicitly names that field for clearing.

Scenario: Omitted shell remains unchanged

• WHEN an editor saves a deployment update without a shell value
• THEN Platform SHALL preserve the saved shell selection

Scenario: Optional command is cleared

• WHEN an editor submits stopCommand in its explicit clear list
• THEN Platform SHALL store no stop command for the next deployment revision