fix(agent): persist no-write learning receipts

apps/api/tests/test_knowledge_repository_read_model.py

@@ -12,6 +12,7 @@ from src.repositories.knowledge_repository import (
     _ASSET_TAXONOMY_KEYS,
     KnowledgeDBRepository,
     _enum_text,
+    _knowledge_enum_db_label,
 )
 
 
@@ -263,3 +264,12 @@ def test_enum_text_helper_casts_status_to_lowercase_text() -> None:
 
     assert "lower(cast(knowledge_entries.status as varchar))" in compiled
     assert "archived" in compiled
+
+
+def test_knowledge_enum_db_labels_match_deployed_postgresql_contract() -> None:
+    assert _knowledge_enum_db_label(EntryType.INCIDENT_CASE) == "INCIDENT_CASE"
+    assert _knowledge_enum_db_label(EntryType.ANTI_PATTERN) == "ANTI_PATTERN"
+    assert _knowledge_enum_db_label(EntrySource.AI_EXTRACTED) == "AI_EXTRACTED"
+    assert _knowledge_enum_db_label(EntrySource.HUMAN) == "HUMAN"
+    assert _knowledge_enum_db_label(EntryStatus.DRAFT) == "DRAFT"
+    assert _knowledge_enum_db_label(EntryStatus.PUBLISHED) == "published"

apps/api/tests/test_signal_worker_ansible_executor_binding.py

@@ -264,6 +264,10 @@ def test_cd_prunes_and_verifies_api_executor_boundary_in_production() -> None:
     assert "read_workload_db_identity awoooi-api api 1 8" in workflow
     assert "read_workload_db_identity awoooi-worker worker 1 5" in workflow
     assert "awoooi-ansible-executor-broker broker 1 2" in workflow
+    assert "read_workload_db_identity_once" in workflow
+    assert 'while [ "$attempt" -le 3 ]' in workflow
+    assert "workload_db_identity_exec_retry=$attempt/3" in workflow
+    assert "workload_db_identity_exec_exhausted=3" in workflow
     assert "AWOOOI_DB_REPRESENTATIVE_PROBE_COUNT" in workflow
     assert "AWOOOI_DB_REQUIRED_CONNECTION_BUDGET" in workflow
     assert "api_http_concurrency_probe_passed" in workflow