Expose retained runs through service API

workplans/GUIDE-BOARD-WP-0006-service-artifact-access-and-durable-run-index.md

@@ -4,12 +4,12 @@ type: workplan
 title: "Service Artifact Access And Durable Run Index"
 repo: guide-board
 domain: markitect
-status: active
+status: completed
 owner: codex
 planning_priority: medium
 planning_order: 6
 created: "2026-05-15"
-updated: "2026-05-15"
+updated: "2026-05-16"
 state_hub_workstream_id: "ba008283-1631-467b-868e-1052c3870ab9"
 ---
 
@@ -40,7 +40,7 @@ existing run artifacts.
 
 ```task
 id: GUIDE-BOARD-WP-0006-T001
-status: todo
+status: done
 priority: high
 state_hub_task_id: "4d392fc5-6a1c-46f7-9cbf-6c02bbd744c6"
 ```
@@ -54,11 +54,22 @@ Acceptance:
   directory layout.
 - Document the operational tradeoff and failure modes.
 
+Decision:
+
+- Keep the durable index as retained run summaries and helper scans.
+- Do not add a separate service index file for the baseline.
+
+Progress:
+
+- Documented reconstruction from `retention-summary.json` files.
+- Kept compatibility with older runs that lack newer assessment package or
+  submission manifest files.
+
 ## D6.2 - Service Run History And Artifact Endpoints
 
 ```task
 id: GUIDE-BOARD-WP-0006-T002
-status: todo
+status: done
 priority: high
 state_hub_task_id: "8f209920-6b14-4d6f-bfa1-8f1d03bcdbf1"
 ```
@@ -71,11 +82,21 @@ Acceptance:
 - Avoid serving arbitrary filesystem paths outside configured run directories.
 - Add tests for successful retrieval and path-safety failures.
 
+Progress:
+
+- Added `GET /retained-runs`.
+- Added `GET /retained-runs/latest`.
+- Added `GET /retained-runs/{run_id}/reports`.
+- Added `GET /retained-runs/{run_id}/artifact-manifest`.
+- Added path containment checks for report refs and artifact manifest paths.
+- Added service tests for retained history retrieval after a fresh service
+  process and unsafe artifact path rejection.
+
 ## D6.3 - Restart Recovery And Compatibility
 
 ```task
 id: GUIDE-BOARD-WP-0006-T003
-status: todo
+status: done
 priority: medium
 state_hub_task_id: "0857e7d8-3d23-4426-b7fa-73362d7041a0"
 ```
@@ -89,11 +110,19 @@ Acceptance:
   files.
 - Update service durability documentation with examples.
 
+Progress:
+
+- Preserved `/runs` as in-memory job history.
+- Exposed durable run results through retained-run endpoints after restart.
+- Returned a compatibility marker when an older retained run lacks an
+  assessment package artifact manifest.
+- Updated service durability and local API docs.
+
 ## D6.4 - Container And Service Acceptance Tests
 
 ```task
 id: GUIDE-BOARD-WP-0006-T004
-status: todo
+status: done
 priority: medium
 state_hub_task_id: "900a70fa-65ff-4815-9c0c-31f0da4019f0"
 ```
@@ -106,6 +135,13 @@ Acceptance:
 - Document service endpoint usage in local and container modes.
 - Keep tests dependency-light.
 
+Progress:
+
+- Added dependency-light service tests for durable run lookup, report paths, and
+  artifact manifest retrieval.
+- Updated container smoke artifact expectations for current run outputs.
+- Documented retained-run endpoint usage in local and container modes.
+
 ## Definition Of Done
 
 - The local service can expose retained runs and artifacts after restart.