DottaandPaperclip 17c9b1fd62 fix(workspaces): validate prospective child source trust ...

Pass server-owned creation context before the child is saved. Validate the
creator run, sponsor and parent ancestry against the immutable boundary,
then verify current parent and prospective child policies. Preserve exact
saved task identity for ordinary selection and writes.

Add real database and authenticated HTTP regressions, including omitted
client policy, and update the plan and paired workspace maps.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-10-12 18:27:03 -05:00

..

architecture

docs: Pi core production readiness evidence (5/5) (#14956)

2026-10-09 11:15:09 -05:00

assets

fix: make task recovery durable and preserve current requests (#13075)

2026-09-09 09:14:25 -05:00

benchmarks

fix(tool-gateway): bound MCP discovery memory and concurrency (#14864)

2026-10-02 07:45:27 -05:00

connections

Add managed Slack setup with an independent own-app path (#15679)

2026-10-12 15:34:02 -05:00

design

feat: add Browser Use Cloud connector and live task browsers (#14627)

2026-09-30 07:13:16 -05:00

experimental

Fix default isolation for projects without workspace configuration (#13636)

2026-09-18 14:49:45 -07:00

logs

Improve CLI API parity coverage (#6626)

2026-06-02 17:13:29 -07:00

plans

fix(workspaces): validate prospective child source trust

2026-10-12 18:27:03 -05:00

plugins

Use the agent lifecycle contract for plugin setup and status (#15391)

2026-10-09 11:15:24 -07:00

pr/5429

Add secrets provider vaults and remote import (#5429)

2026-05-09 18:22:17 -05:00

screenshots

feat(dot): complete onboarding and expand governed Runner capabilities (#15414)

2026-10-07 19:44:17 -05:00

spec

feat(adapters): confine local coding processes (#9504)

2026-07-14 11:01:19 -05:00

testing

feat: simplify agent onboarding and configuration (#13011)

2026-09-08 14:22:32 -05:00

acp-run-lifecycle.md

Preserve ACP bridge terminal evidence before disconnect (#15478)

2026-10-07 13:01:22 -07:00

adapter-model-audit-2026-09-22.md

feat(adapters): refresh current coding models and reasoning controls (#13829)

2026-09-22 16:56:00 -07:00

adapter-model-audit-2026-10-02.md

fix(codex): gate models on the Codex CLI floor before the ChatGPT backend rejects them (#15399)

2026-10-07 10:37:55 -07:00

AGENT-ARTIFACTS.md

feat(ui): upload files directly in task artifacts (#15964)

2026-10-12 08:11:31 -05:00

agent-commentary.md

feat: add internal agent complaints and suggestions (#15367)

2026-10-06 16:14:06 -05:00

agent-files.md

docs: Pi core production readiness evidence (5/5) (#14956)

2026-10-09 11:15:09 -05:00

AGENT-IDENTITY.md

feat(security): add read-only customer-success inspection APIs (#15405)

2026-10-06 21:38:15 -05:00

agent-instruction-revisions.md

feat(agents): persist agent files across tasks without revision history (#14420)

2026-09-29 08:25:56 -05:00

AGENT-LIFECYCLE.md

Stream OpenCode immediately, scope reasoning to turns, and deduplicate instructions (#15708)

2026-10-10 07:15:41 -05:00

agent-permission-defaults.md

fix(agents): grant configuration access by default (#15283)

2026-10-06 05:28:48 -05:00

agent-personas.md

feat(onboarding): ClipLab sleepy-to-wake hero and step hand-offs (#13629)

2026-09-19 08:30:14 -05:00

AGENTCOMPANIES_SPEC_INVENTORY.md

Add routine support to recurring task portability

2026-03-23 16:57:38 -05:00

ANNOUNCEMENTS.md

feat: add native in-app announcements with persistent dismissal (#13403)

2026-09-14 10:19:54 -05:00

CHANNELS.md

feat(cli): add 'paperclipai channels' to show release lanes and the current one (#11210)

2026-08-11 08:47:32 -07:00

CLI.md

feat(issues): keep follow-up parents and show the creation source (#15762)

2026-10-10 00:40:08 -07:00

CLIPHUB.md

refactor: rename packages to @paperclipai and CLI binary to paperclipai

2026-03-03 08:45:26 -06:00

cloud-build-readiness.md

fix(ci): cache native server integration builds in release verification (#15619)

2026-10-08 14:33:10 -07:00

cloud-ui-snippet.md

refactor(server): remove retired operator UI snippet injection (#13789)

2026-09-22 11:18:46 -07:00

composer-stop.md

refactor(heartbeat): extract prepared runtime execution (#15803)

2026-10-10 09:10:53 -05:00

connection-intents.md

refactor(storybook): organize folders and navigation by feature map (#16049)

2026-10-12 22:29:22 +00:00

CUSTOMER-SUCCESS-INSPECTION.md

feat(security): add read-only customer-success inspection APIs (#15405)

2026-10-06 21:38:15 -05:00

DATABASE.md

fix(workspaces): fence pending choices and sandbox source aliases

2026-10-12 17:52:08 -05:00

decision-models.md

feat: add company fast-response acknowledgements (#15748)

2026-10-10 13:09:17 -05:00

DEPLOYMENT-MODES.md

fix(auth): keep Cloud tenants on the Cloud sign-in flow (#14407)

2026-09-28 13:45:27 -05:00

DEVELOPING.md

Merge master to refresh trusted PR CI

2026-10-12 17:36:04 -05:00

DOCKER.md

fix(docker): skip the full-tree ownership walk on routine boots (#15992)

2026-10-12 10:22:43 -07:00

dot-runner-prototype.md

feat(runner): add experimental OpenAI Dot provider over MCP Events (#15402)

2026-10-07 19:11:50 -05:00

evals.md

test: qualify task workspace persistence across runner backends

2026-10-09 21:19:25 -05:00

execution-github-identity.md

fix(runner): keep warm sessions alive with managed GitHub access (#13815)

2026-09-22 13:07:13 -05:00

execution-semantics.md

fix(server): wait for workspace restore before shutdown lease release (#15857)

2026-10-11 09:30:59 -07:00

fast-responses.md

feat: add company fast-response acknowledgements (#15748)

2026-10-10 13:09:17 -05:00

GOAL.md

[codex] Refresh docs and agent skills (#4693)

2026-04-28 16:12:03 -05:00

grok-native-runner.md

docs: Pi core production readiness evidence (5/5) (#14956)

2026-10-09 11:15:09 -05:00

HERMES_GATEWAY_ONBOARDING.md

Explain refused local Hermes gateway connections (#15520)

2026-10-07 18:55:55 -07:00

HERMES_GATEWAY_SMOKE.md

[codex] Add built-in Hermes adapters (#8543)

2026-06-26 16:04:58 -05:00

html-artifact-previews.md

feat(ui): render HTML artifacts in a secure sandbox (#15447)

2026-10-07 09:01:05 -05:00

idle-sleep-safety.md

Permit idle sleep with consumed retries and passive worktrees (#15907)

2026-10-11 12:27:51 -07:00

INSTALLING.md

fix(adapters): prevent engine fallback and preserve usable runtime defaults (#13105)

2026-09-09 13:27:24 -05:00

ISSUE-PRIVACY.md

feat: enforce private task permissions across execution and data (#10633)

2026-10-07 07:06:40 -05:00

LOW-TRUST-PRESETS.md

fix(auth): allow scoped low-trust work and owner-chat instruction edits (#14870)

2026-10-01 15:42:40 -05:00

MCP-ACCESS-GOVERNANCE.md

fix: repair MCP validation and cancelled execution recovery (#14951)

2026-10-02 13:47:59 -05:00

MCP-DEMO-SCRIPT.md

feat(mcp) [split 8/8]: add e2e coverage and operator docs (#9563)

2026-07-14 15:48:57 -05:00

mcp-discovery-performance.md

fix(tool-gateway): bound MCP discovery memory and concurrency (#14864)

2026-10-02 07:45:27 -05:00

MCP-RUNTIME-OPERATIONS.md

fix(heartbeat): validate native MCP gateway ownership (#14914)

2026-10-02 08:22:33 -05:00

memory-landscape.md

chore: improve worktree tooling and security docs

2026-04-10 22:26:30 -05:00

native-workspace-finalization-recovery.md

fix(server): retain stopped ephemeral workspaces after failed copy-back (#15790)

2026-10-10 01:27:03 -07:00

observability.md

Merge origin/master and reconcile Slack and workspace migrations

2026-10-12 15:41:06 -05:00

openai-dot-runner.md

fix: clarify native tool use for external agents (#15734)

2026-10-09 16:20:38 -05:00

OPENCLAW_ONBOARDING.md

Introduce bind presets for deployment setup

2026-04-11 07:09:07 -05:00

preview-release-artifacts.md

ci: retire recurring public cloud image builds (#13827)

2026-09-23 19:35:19 -07:00

PRODUCT.md

feat: add personal primary agents (#15470)

2026-10-07 13:53:46 -05:00

project-repositories.md

fix: provision all project repositories for local and sandbox tasks (#13442)

2026-09-14 18:37:51 -05:00

public-mcp.md

feat(dot): add guided invitations and persistent agent connections (#15581)

2026-10-08 16:26:41 -05:00

PUBLISHING.md

fix: preserve README images in npm package (#13488)

2026-09-15 13:34:30 -05:00

README-draft.md

docs: add README, draft README, and adapter logo assets

2026-03-02 10:31:59 -06:00

RELEASE-AUTOMATION-SETUP.md

perf(ci): cache the Runner's release crate artifacts keyed by their inputs (#15932)

2026-10-12 11:25:31 -07:00

RELEASE-CHECKLIST.md

ci: retire recurring public cloud image builds (#13827)

2026-09-23 19:35:19 -07:00

RELEASE-NOTES-mcp-access-governance.md

feat(mcp) [split 8/8]: add e2e coverage and operator docs (#9563)

2026-07-14 15:48:57 -05:00

RELEASING.md

fix(release): retry verified canary tarball 404s (#15768)

2026-10-10 16:49:15 -07:00

run-log-events.md

fix(workspaces): fence pending choices and sandbox source aliases

2026-10-12 17:52:08 -05:00

runner-api-tools.md

fix(runner): restore task monitors and durable timed waits (#15446)

2026-10-07 08:41:24 -05:00

runner-created-skills.md

feat(skills): let agents update company skills safely (#15049)

2026-10-03 12:37:55 -05:00

SEARCH.md

fix: improve task search relevance with a PostgreSQL rubric (#13335)

2026-09-12 16:22:58 -05:00

SECRETS-AWS-PROVIDER.md

feat(secrets): add user-specific runtime secrets (#8825)

2026-07-05 05:58:20 -05:00

SPEC-implementation.md

Merge origin/master repository skills and regenerate task migration sequence

2026-10-12 11:39:40 -05:00

SPEC.md

Merge origin/master repository skills and regenerate task migration sequence

2026-10-12 11:39:40 -05:00

standard-image-contract.md

feat: attest standard production images at full source commits (#13797)

2026-09-22 07:33:30 -07:00

STORYBOOK-DEPLOYMENT.md

feat: add readable Storybook branch bookmarks (#13231)

2026-09-11 10:19:36 -05:00

TASK-WATCHDOG.md

fix(interactions): authorize resolvers consistently (#11376)

2026-08-16 13:46:50 -05:00

TASKS-mcp.md

Add product spec and MCP task interface docs

2026-02-16 19:07:30 -06:00

TASKS.md

Add task management data model spec

2026-02-16 14:25:00 -06:00

TELEMETRY_WORKFLOW.md

Add telemetry proposal extractor (#9544)

2026-07-13 23:47:27 -07:00

UNTRUSTED-PR-REVIEW.md

chore(docker): improve base image and organize docker files

2026-04-01 11:36:27 +00:00

workspace-restore-locks.md

fix(restore): retry sandbox copy-back before holding the task for repair (#15920)

2026-10-11 21:44:11 -07:00