Advance the task CAS revision when accepting a pending workspace choice so superseded retries cannot replace newer intent. Preserve active run roots. Validate physical source trust before copying, admission and publication, including retained readers and standard runs without a saved policy. Defer isolation proof until all checks pass. Disable configured and builtin host provisioning for low-trust sandbox worktree creation, reuse and rebuild. Recognize primary separate Git storage without probing unrelated company history, and document workspace run-log measurements and policy semantics. Co-Authored-By: Paperclip <noreply@paperclip.ing>
Paperclip agent access map
This map accompanies the feature map. It records APIs, agent entry points, permission boundaries and verification for the same capability IDs. The shared contract defines the format and maintenance rules.
Initial inventory: 35 areas and 171 sub-features, source-reviewed on 2026-10-12
at f981fa3cc10cb8663a87dec60345fbff46d54d0a. All entries are baseline and source-only; none
claims complete operation enumeration or freshly verified agent access. Existing
API paths, native gaps, actor restrictions and local/operator exceptions are
recorded separately. These statuses do not represent a live pass rate.
Areas
Using an entry
Read its Policy and Gaps before selecting an agent path. Native fallback, legacy
REST/CLI, stdio MCP and a personal assistant connection can have different
authority and availability. Use a real admitted production binding; a scenario
declaration is not an installed tool. A restricted entry records current
enforcement and leaves any unresolved delegation decision visible.
For API catalog disagreements, follow the route/service authorization and record
discovery drift. For not-applicable, retain the concrete exception and local
path. Split shared business operations from client-only presentation.
Use maintain-verification-skill to reconcile changed source and both maps.
Use verify-paperclip and existing API/runner/MCP fixtures to collect the
permitted-agent and denial evidence; report blocked/not-run coverage honestly.
Run node scripts/check-maps.mjs after editing. The structural check does not
certify permissions, API catalog coverage, tool admission or live behavior.