Agent-sealed changes show as unsigned, and agents are missing from Contributors issue #352 closed: completed andymccall opened this 4 days ago · 0 comments

Andy, 2026-10-31: changes Kimi and Antigravity pushed show no agent on the website, though oxy log shows "via agent:kimi@andymccall … sealed".

Three faults:

• repos/view.rs signature() calls verify_change, which reads only a change's own signatures. Keyless agents seal (core.sign = seal), so every agent-sealed change shows as unsigned on change pages, history, proposals and the API (Kimi's, Antigravity's and Claude's alike). authenticate_change reads seals too.
• The Contributors panel names a "via" agent only from signatures, never seals.
• via() flags a short-lived key the hub certified as not a delegate.

Plus the help page's agent setup never sets the author (author.name/email/key), which left Kimi's first change unattributed; the key must be the one its grant was made with.

Regression test: an agent's certified key seals a change authored by its owner and pushes; the API says sealed, the overview's Contributors names the agent.