DottaandPaperclip
fc3b15537b
Route native call_api through existing agent REST permissions. Preserve admitted credentials across restarts, protect sensitive replies and private snapshots, and compare saved completion with provider history through the same redaction projection. Add permission, privacy and recovery regressions and update the access map and run-log guide. Co-Authored-By: Paperclip <noreply@paperclip.ing>
4.3 KiB
Delegation, dependencies, and signoff — agent access
Product map: Delegation, dependencies, and signoff.
Review date: 2026-10-12. Source commit: 58e16dbddfc9c8d0cf60867f9d9847f0feda055b.
Native REST transport reconciled in this change; see the
shared transport contract.
This is a source-reviewed baseline of representative operations and known gaps. Each capability needs operation-level review before its entire scope can be qualified. No live agent execution is claimed. Follow the map contract for format, permission checks, evidence and maintenance.
delegation
Review: baseline.
API: present — representative operation IDs:
POST /api/companies/{companyId}/issues.
Agent access: available — Native create_task/reassign_task; REST / CLI / MCP.
Policy: Task visibility/mutation, task-assignment and ownership policy; review audience independent; tree controls board-only.
Evidence: source-only —
implementation at the reviewed
commit above.
Verification: not-run — exercise a listed permitted operation with actual agent
credentials/run context; inspect its result and applicable persistence/attribution.
Assert the relevant denied actor, owner, company or mode from Policy. Review the
remaining operations before qualifying the whole capability.
Gaps: Parent/child and provenance paths exist; same-company assignment does not remove protected task/resource policy.
dependencies
Review: baseline.
API: present — representative operation IDs:
PATCH /api/issues/{id}.
Agent access: available — Native set_dependencies for the current task; agent REST
/ native call_api under mutation and checkout policy.
Policy: Task visibility/mutation, task-assignment and ownership policy; review audience independent; tree controls board-only.
Evidence: source-only —
implementation at the reviewed
commit above.
Verification: not-run — exercise a listed permitted operation with actual agent
credentials/run context; inspect its result and applicable persistence/attribution.
Assert the relevant denied actor, owner, company or mode from Policy. Review the
remaining operations before qualifying the whole capability.
Gaps: Dedicated set_dependencies is current-task scoped. Generic call_api
forwards blockedByIssueIds to the REST route and retains its ownership checks.
signoff
Review: baseline.
API: present — representative operation IDs:
PATCH /api/issues/{id}.POST /api/issues/{id}/interactions.
Agent access: partial — Native paperclip_finish/paperclip_block and assigned
resolve_review; legacy agent REST disposition.
Policy: Task visibility/mutation, task-assignment and ownership policy; review audience independent; tree controls board-only.
Evidence: source-only —
implementation at the reviewed
commit above.
Verification: not-run — exercise a listed permitted operation with actual agent
credentials/run context; inspect its result and applicable persistence/attribution.
Assert the relevant denied actor, owner, company or mode from Policy. Review the
remaining operations before qualifying the whole capability.
Gaps: Review policy determines final completion; formal board approval is a different boundary.
tree-control
Review: baseline.
API: present — representative operation IDs:
POST /api/issues/{id}/tree-control/preview.POST /api/issues/{id}/tree-holds.POST /api/issues/{id}/tree-holds/{holdId}/release.
Agent access: restricted — Board-only task-tree APIs.
Policy: Task visibility/mutation, task-assignment and ownership policy; review audience independent; tree controls board-only.
Evidence: source-only —
implementation at the reviewed
commit above.
Verification: not-run — assert the documented agent denial with an owned test fixture;
verify any listed agent request/result path separately. A delegated operation needs its
own policy and access review.
Gaps: Even reads/state/preview require board. There is no agent tree-control path just from company/task permissions.