truf-server/openspec/changes/rescan-updated-core-targets/tasks.md

1. Queue State And Atomic Admission

• 1.1 Add idempotent PostgreSQL schema support for observed and scan-covered remote timestamps, updated-target cycle counts, and eligibility indexing.
• 1.2 Implement atomic discovery observation and bounded promotion for changed completed targets while preserving all non-eligible lifecycle authority.
• 1.3 Snapshot the observed remote timestamp only when a legacy or slot-first target claim commits.

2. Discovery And Runner Integration

• 2.1 Preserve GitHub pushed_at, GitLab last_activity_at, and HuggingFace lastModified through target preparation.
• 2.2 Make HuggingFace discovery newest-modified and disable identity-only page stopping when updated rescans are enabled.
• 2.3 Wire source-specific enablement, per-cycle caps, and cooldowns without changing DockerHub or enabling refresh-while-backlogged discovery.

3. Observability

• 3.1 Persist and log queued_updated_count separately from new-target admission.
• 3.2 Add updated-target admission to dashboard source-cycle summaries.

4. Verification And Rollout

• 4.1 Add focused discovery and runner tests for timestamp preservation, invalid timestamps, known-page behavior, and DockerHub isolation.
• 4.2 Add PostgreSQL integration tests for legacy baselines, changed and unchanged targets, cooldown and cap enforcement, concurrent fencing, claim snapshots, and mid-scan updates.
• 4.3 Run focused and full regression suites with bytecode writes disabled and run strict OpenSpec validation.
• 4.4 Restart the authority-managed runtime and verify PostgreSQL, pipeline, source, queue, and recorder health.
• 4.5 Observe a one-per-cycle production canary and compare changed-target admission, completion, findings, and worker occupancy before increasing any cap.