[Phase2] Queue Hardening Patchset - SWFOC-Mod-Menu #52
Description
Objective
Harden queue mechanics while preserving SWFOC runtime safety contracts.
Scope
.github/workflows/agent-task-queue.yml.github/workflows/agent-label-sync.yml.github/ISSUE_TEMPLATE/agent_task.yml.github/agents/triage.agent.md
Required changes
- Add idempotency guard against duplicate queue events.
- Replace blanket error swallowing on label removal with explicit status checks.
- Add rollback path for partial queue mutations.
- Use update-first/create-on-404 label sync logic.
- Add push trigger for label-sync workflow changes.
- Normalize issue risk values to
risk:*labels. - Remove edit permissions from triage-only profile.
Acceptance criteria
- Queue comments remain single-instance per intake issue.
- Label state is consistent even when workflow errors occur.
- Label sync remains idempotent and deterministic.
- Risk taxonomy is consistent across labels and issue forms.
Verification
dotnet test tests/SwfocTrainer.Tests/SwfocTrainer.Tests.csproj -c Release --no-build --filter "FullyQualifiedName!~SwfocTrainer.Tests.Profiles.Live&FullyQualifiedName!~RuntimeAttachSmokeTests"- One controlled queue dry run on docs-only issue.