mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-08 00:54:38 +02:00
Per Greptile review: viewers keep the read-only visibility actions (agent:read, company_scope:read, issue:read, project:read) but are denied runtime:manage and secrets:read with deny_missing_grant, matching the tasks:assign viewer carve-out in the same board block. Adds the missing issue:mutate deny_unsupported_action assertion and a viewer-role coverage test. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>