[ML-69215] Fix matrix App auth and implicit Runtime Store cleanup

integrations/agentbricks/tests/e2e/README.md

@@ -116,6 +116,9 @@ Direct authoring does not call `agentbricks tools add`: it replaces `agent.toml`
 `fixtures/direct_agent.toml`. CLI authoring invokes four managed `agentbricks tools add ...` commands.
 Both paths then create the same user-owned, framework-native Python tool file with no Python entry
 in `agent.toml`. Every exact command and code-authoring step is captured in `commands.log`.
+Both paths explicitly select App identity for every managed binding, including the UC function,
+so deployed grant snapshots and invocations exercise the App service principal. The CLI's default
+user identity is covered separately by the request-user auth tests.
 
 The CLI path first verifies that an unavailable MCP service is rejected without changing
 `agent.toml`, then checks that removing the absent binding is harmless. The subsequent dev and
@@ -147,6 +150,10 @@ Lakebase roles, and UC resources are deleted after every run, passing or failing
 saved in `evidence.json`; App deletion is not considered complete until a follow-up read confirms
 absence. Pass `--keep-resources` to retain resources while debugging. The gated nightly test reports bounded dev/deploy log tails and
 captures App runtime logs for failed deployed cases.
+Runtime Store cleanup covers every matrix App, including direct authoring without memory/session
+bindings. It verifies the store's App owner and service principal before deletion and retains the
+App if ownership checks or bound-store, Runtime Store, or role deletion fail. Verified role targets
+remain in runner state and evidence for retries after the Runtime Store has been removed.
 
 ## Declarative user-auth scope matrix
 

integrations/agentbricks/tests/e2e/fixtures/direct_agent.toml

@@ -6,17 +6,20 @@ server = "agentbricks"
 
 [[tools]]
 id = "sandbox"
+auth = "app"
 source = { kind = "sandbox", service = "system.ai.sandbox" }
 policy = { downscope = [
   { resource = "volume:__UC_VOLUME__", permission = "read_only" },
 ] }
 
 [[tools]]
 id = "web_search"
+auth = "app"
 source = { kind = "mcp", service = "system.ai.web_search" }
 
 [[tools]]
 id = "agentbricks_uc_marker"
+auth = "app"
 source = { kind = "uc_function", function = "__UC_FUNCTION__" }
 
 [[tools]]