Expose only an opaque rotation identifier and bind setup links to the generation they requested. Preserve the baseline on run retries and validate the projection through real authentication.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Expose the credential-entry response separately from human-only secret generation and verify the typed contract through OpenAPI and real agent authentication.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Return a saved setup handoff for delegated agents and reject plaintext signing-secret generation at the service boundary. Verify key/JWT handoffs preserve credential refs and human sessions can still rotate.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Project profiles can affect any company agent running work in that project. Check the existing configuration authority for all affected agents on bind, unbind, and retained profile edits, alongside project visibility.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Use the shared connection authority for device-login management while preserving the responsible user as immutable owner. Keep refreshed continuation context available at dispatch. Add bearer-authenticated saved-session reads, cancellation, and owner isolation coverage.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Limit and deduplicate management selectors before lookups, hide foreign resources, and reuse captured run identity only for request-local capability reads. Re-resolve resources at commit-time checks and enforce proposed provider scope. Preserve rate-limit admission during the final test dispatch check.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Authorize nested finish targets and saved profile access. Carry authenticated task context through delegated test policy, persistence, execution, and human approval after a yielded run. Recheck current user, agent, task, and action policy before dispatch. Qualify the paths with actual authentication and an isolated PostgreSQL database.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Keep host command template administration board-only. Retain viewer restrictions, remove a duplicate fixture user, isolate harness verification, and bind the updated prompt to a new Copilot identity. Move saved setup UI and product documentation into the companion PR to keep reviews below 100 files.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
