## 1. Queue State And Atomic Admission

- [x] 1.1 Add idempotent PostgreSQL schema support for observed and scan-covered remote timestamps, updated-target cycle counts, and eligibility indexing.
- [x] 1.2 Implement atomic discovery observation and bounded promotion for changed completed targets while preserving all non-eligible lifecycle authority.
- [x] 1.3 Snapshot the observed remote timestamp only when a legacy or slot-first target claim commits.

## 2. Discovery And Runner Integration

- [x] 2.1 Preserve GitHub `pushed_at`, GitLab `last_activity_at`, and HuggingFace `lastModified` through target preparation.
- [x] 2.2 Make HuggingFace discovery newest-modified and disable identity-only page stopping when updated rescans are enabled.
- [x] 2.3 Wire source-specific enablement, per-cycle caps, and cooldowns without changing DockerHub or enabling refresh-while-backlogged discovery.

## 3. Observability

- [x] 3.1 Persist and log `queued_updated_count` separately from new-target admission.
- [x] 3.2 Add updated-target admission to dashboard source-cycle summaries.

## 4. Verification And Rollout

- [x] 4.1 Add focused discovery and runner tests for timestamp preservation, invalid timestamps, known-page behavior, and DockerHub isolation.
- [x] 4.2 Add PostgreSQL integration tests for legacy baselines, changed and unchanged targets, cooldown and cap enforcement, concurrent fencing, claim snapshots, and mid-scan updates.
- [x] 4.3 Run focused and full regression suites with bytecode writes disabled and run strict OpenSpec validation.
- [x] 4.4 Restart the authority-managed runtime and verify PostgreSQL, pipeline, source, queue, and recorder health.
- [x] 4.5 Observe a one-per-cycle production canary and compare changed-target admission, completion, findings, and worker occupancy before increasing any cap.