Add federation worker and canonical handoffs

internal/continuity/continuity_test.go

@@ -6,6 +6,7 @@ import (
 	"os"
 	"os/exec"
 	"path/filepath"
+	"strings"
 	"testing"
 
 	"orchestra/internal/store"
@@ -27,7 +28,7 @@ func TestHandoffCASAndPickup(t *testing.T) {
 	head := runOut(t, root, "rev-parse", "HEAD")
 	task := sha256.Sum256([]byte("original"))
 	s, _ := store.Open(t.TempDir())
-	h := Handoff{Meta: Meta{ID: "h1", Reason: "manual"}, Anchor: Anchor{GitSHA: head, Branch: "main"}, Goal: "ship", DoneWhen: []string{"tests pass"}, Action: "test", Command: "go test ./...", LastResult: Result{AtSHA: head}}
+	h := Handoff{Meta: Meta{ID: "h1", Reason: "manual"}, Anchor: Anchor{GitSHA: head, Branch: "main"}, Action: "run the focused tests", Command: "go test ./..."}
 	ref, e := Save(h, s)
 	if e != nil {
 		t.Fatal(e)
@@ -55,6 +56,26 @@ func TestDecodeRejectsUnknownKnowledgeFields(t *testing.T) {
 	}
 }
 
+func TestHandoffRejectsFabricatedOrProseAuthoredFields(t *testing.T) {
+	base := Handoff{Meta: Meta{ID: "h", Reason: "manual"}, Anchor: Anchor{GitSHA: strings.Repeat("a", 40), Branch: "main"}, Action: "run the focused tests"}
+	if err := base.Validate(); err != nil {
+		t.Fatal(err)
+	}
+	badAction := base
+	badAction.Action = "Continue the task from the handoff"
+	if err := badAction.Validate(); err == nil {
+		t.Fatal("expected circular action rejection")
+	}
+	badProse := base
+	badProse.Remaining = []string{"short\n# markdown heading"}
+	if err := badProse.Validate(); err == nil {
+		t.Fatal("expected prose-in-list rejection")
+	}
+	if _, err := Decode([]byte(`{"meta":{"id":"h","reason":"manual","rotation_index":0},"anchor":{"git_sha":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","branch":"main"},"goal":"fabricated","action":"run tests"}`)); err == nil {
+		t.Fatal("expected goal rejection")
+	}
+}
+
 func TestScratchCommitProtectsTask(t *testing.T) {
 	root := t.TempDir()
 	run := func(a ...string) {