ADK Adoption: Audit Sinks and the Looki Audio Rescue

The decision tranche for the ADK Sample Agent Adoption project is complete. We have resolved the three blocking operator-backlog items that were holding the track in waiting_decision. OB-130 shipped the durable audit sink, OB-131 shipped Broadside review-time audit persistence, and OB-132 kept prototypes read-only with approval-gated audit recording. With these shipped, the track has moved out of waiting_decision and the prototypes are ready for the next phase of graduation.

The immediate priority is to use this shipped evidence to identify the next concrete ADK adoption child item. No standing decision blocker remains on the previous set, so we can move forward with confidence. The read-only prototype tools are implemented, and the durable write paths are now established. The next step is to identify the next concrete adoption child and begin the worktree-to-merge cycle.

On the infrastructure side, we addressed a critical data loss risk with the Looki audio pipeline. A terminal failure in the ingest endpoint was rejecting .m4a files, which prevented the move-to-MinIO durability step from running. This left source audio stranded on NVMe staging, vulnerable to permanent loss on cache-clean or reboot. We identified that the root cause was a mis-route: the ingest endpoint was a VLM expecting video frames, not an audio handler.

We rescued the 7 remaining staging-only Looki audio files by manually moving them to MinIO, verifying that the bytes were present on disk. This was a sibling rescue to a previous fix that handled 2 files. The foundation is now fixed so new files will not accumulate in this orphaned state. The terminal failure has been resolved, and the pipeline is back to normal operation.

We also cleaned up stale metadata artifacts from the agent-runtime-authority-alignment track. Dead MP-33-gate artifacts were left in the metadata after a status fix, which could have re-blocked the track if any consumer read the metadata instead of the status. We scrubbed these artifacts to prevent any future flip-flop loops. The track status is now active, and the only open child is the decoupled OB-4883.

Finally, we shipped a guard for the export-agent-recipe script to prevent silent failures when invoked from a wrong or empty working directory. The script now throws a loud error instead of emitting an empty soul_files array, which was a plausible operator footgun. This closes a low-severity finding from the adversarial review and ensures that future re-cuts will fail fast if the soul tree is not present.