AgentOS provider-aware routing

Deterministic compatibility, separate from control eligibility.

Modeled fit uses server-owned capabilities. It is not provider performance, assignment, approval, verification, dispatch, or execution.

Inspect routing analysis

Deterministic recommendationNot assigned

Claude Code

secure payment webhook

Highest modeled fit: 95/100
Recommendation state: deterministic recommendation
Recommendation use: available for human review
Routing analysis: routing-analysis-secure-payment-webhook
Task / repository: controlled-task-secure-payment-webhook / repository-connection-preview-secure-payment-webhook
Provider contacted: false
Dispatch / execution: disabled / disabled
Repository contents: not fetched
Evaluated: 2026-07-31T00:00:00.000Z

Controlled Task · controlled-task-secure-payment-webhook

Secure a payment webhook

Review and harden payment webhook signature verification, replay protection, tests, and rollback evidence before merge.

Next controlled action All Tasks Capability Package Agent Connections Dispatch readiness Repository Connection Linked Work Record

Workspace repository boundary

Repository identity is recorded; GitHub access is not.

The task consumes a scenario-owned repository preview, deterministic path scope, and deterministic RepoBrain policy binding. Path strings were not fetched from GitHub and do not prove repository contents.

Inspect permission and trust model

GitHub · repository host

acme-payments/payment-webhook-service

Recorded preview

Secure Payment Webhook · paths are deterministic task scope, not fetched repository contents.

Workspace membership: Workspace Recorded
Adapter: github-repository-adapter · github-repository-adapter-v1
Installation: Installation Unverified
Installation ownership: Installation Ownership Unverified
Repository ownership: Repository Ownership Unverified
Permissions: modeled · unrequested · ungranted · unverified
Metadata / contents: not fetched / not fetched
PR / checks: deterministic previews · not fetched
Webhook: Webhook Not Configured
Revocation / kill switch: Not Revoked / Inactive
Read / write / execution: false / false / false

WorkspaceIdentityTrustWorkspace Recorded

GithubHostTrustHost Recorded

GithubAccountIdentityTrustAccount Unverified

InstallationIdentityTrustInstallation Unverified

InstallationOwnershipTrustInstallation Ownership Unverified

RepositoryIdentityTrustRepository Recorded

RepositoryOwnershipTrustRepository Ownership Unverified

PermissionTrustPermissions Unverified

MetadataTrustMetadata Not Fetched

ContentsTrustContents Not Fetched

WebhookTrustWebhook Not Configured

HealthTrustHealth Not Observed

AdapterVersionTrustAdapter Recorded

PolicyBindingTrustDeterministic Preview

ProductionReadinessProduction Not Ready

Inspect deterministic task paths (2)

app/api/payments/webhook.ts
tests/payment-webhook.test.ts

Permission model Trust boundary Controlled Task RepoBrain binding

Repository hostGitHub recognized

Workspace bindingrecorded preview

RepoBrain policydeterministic snapshot

Installation / ownershipunverified / unverified

Permissionsunrequested · ungranted · unverified

Metadata / contentsnot fetched / not fetched

Repository verificationnot run

Dispatchblocked

Observed facts

Task identity and bounded scope

These fields describe deterministic source data. They do not grant access or authority.

Fact

Requester and workspace

Requester: Platform engineering lead
Requester role: Requester
Workspace: ForgeLayer Guided Beta
Workspace source: demo

Fact

Repository and path scope

ForgeLayer repository ID: repository-identity-secure-payment-webhook
Repository: acme-payments/payment-webhook-service
Branch preview: demo/secure-payment-webhook
Source: Deterministic Demo Repository
Workspace record: Not Persisted
Live provider connection: no
Metadata validated: no
Tree metadata available: no
Source content accessed: no
Any permission active: no

app/api/payments/webhook.ts
tests/payment-webhook.test.ts

Open Repository Connection

Fact

Prompt and context

No linked PromptForge preset

Analysis state: not available
Raw prompt persisted: false

Inspect PromptForge context

Authoritative internal package

Task capability package and cost budget

The package is the strict intersection of platform, workspace, repository, task, policy, approval, verification, expiry, revocation, and budget controls. It grants no external authority.

Recommendation

Legacy profile recommendation · not canonical routing

GitHub Copilot

Matches detected work: test generation, code review. GitHub Copilot is strongest for small code edits and test generation.

Legacy supporting profiles

Generic Review Agent · 60% fit
Codex · 45% fit

Current provider-aware routing is evaluated separately in AgentOS.

Open canonical AgentOS routing

Restriction

Policy restriction and capability authority

Package ID: capability-package-secure-payment-webhook-v1
Version: task-capability-package-v1
Source: Deterministic Internal Authority Model
Lifecycle: Preview
Effective state: Globally Disabled
Workspace: ForgeLayer Guided Beta
Task: controlled-task-secure-payment-webhook
Repository: acme-payments/payment-webhook-service
Branch scope: demo/secure-payment-webhook
Policy snapshot: policy-snapshot-5cc8bbf1
Evaluated at: 2026-08-12T04:45:26.921Z
Expiry: 2030-07-29T09:00:00.000Z · Not Expired
Revocation: Not Revoked
Suspension: Not Suspended
Authority issued: false

Open focused capability view

Recommendation

Estimated demo-only budget

Budget ID: task-budget-secure_payment_webhook-v1
Status: Preview
Time limit: 40 minutes
Token ceiling: 14,000
Monetary ceiling: $2.00 USD estimate
Tool calls: 8
Command attempts: 4
Correction loops: 2
Cost data: Deterministic Estimate Demo Only
Metered / billed: false / false

Restriction

Repository and path authority

Repository tree knowledge: Incomplete Not Fetched

Allowed preview scopes

exact:app/api/payments/webhook.ts
exact:tests/payment-webhook.test.ts

Blocked scopes

directory:lib/auth
directory:config
glob:**/.env*
glob:**/secrets/**

Restriction

Tools, commands, network, and secrets

Allowed tools: Read-only PR diff inspection, RepoBrain policy preview
Blocked tools: secret reader, repository writer, shell executor
Allowed command categories: test, lint, typecheck, inspect
Blocked command categories: migration, deploy, package_install, destructive, arbitrary_shell
Network: Disabled
Secrets: None

Human

Prerequisites and denial

Current missing prerequisites

Trusted server identity is not enabled.
Production authentication and persistence are disabled.
Active trusted workspace membership is required.
A validated workspace-owned repository connection is required.
Evidence required: security_review_evidence.
Evidence required: rollback_plan.
Verification required: payment_webhook_security.
Verification required: auth_session_boundary.
Repository access, agent dispatch, execution, network, secrets, GitHub writes, pull requests, workflows, and automatic merge are globally disabled.

Capability requirement definitions

Policy Definition: Trusted owner authority role is required.

Exact denial reasons

read metadata is globally disabled.
Trusted server identity is not enabled.
Production authentication and persistence are disabled.
Active trusted workspace membership is required.
A validated workspace-owned repository connection is required.
Evidence required: security_review_evidence.
Evidence required: rollback_plan.
Verification required: payment_webhook_security.
Verification required: auth_session_boundary.
Repository access, agent dispatch, execution, network, secrets, GitHub writes, pull requests, workflows, and automatic merge are globally disabled.
The package is an internal preview and no active authority was issued.

Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

Provider connection prerequisites

Capability overlap is visible; provider selection and dispatch are not.

This task can inspect server-owned product capabilities without trusting caller claims or contacting a provider.

Fact

Required capability categories

Human-In-The-Loop
Test-Generation
Code-Review

Recommendation

Potential product matches

Codex · modeled overlap only · dispatch false
Claude Code · modeled overlap only · dispatch false
Cursor · modeled overlap only · dispatch false

No provider selection was performed.

Restriction

Connection blockers

Authenticated workspace identity is unavailable.
Provider ownership is unverified.
Provider authentication is unavailable.
Repository connection is unavailable.
Connection validation transport is disabled.
Dispatch and execution transports are disabled.

Inspect provider trust boundaries

Provider-neutral adapter preview

Legacy adapter compatibility and disabled future dispatch package

This historical profile compatibility record is not the canonical AgentOS routing result. It does not create an agent connection, grant repository access, send a request, or advance the Controlled Task.

Recommendation

Legacy profile and modeled adapter

GitHub Copilot

Recommended for this task. No adapter authority or dispatch issued.

Provider: GitHub Copilot
Adapter: github-copilot-agent-adapter
Status: Not Implemented
Connection source: Unavailable
Compatibility: Adapter Unavailable

Open Agent Connections

Restriction

Capability-bound dispatch preview

Future dispatch package preview — no request sent.

Capability package: capability-package-secure-payment-webhook-v1
Package state: Preview
Changed path count: 2
Request sent: false
Credentials included: false
Executable commands included: false
Remote task ID: none

Human

Prerequisites and global disables

Prerequisites

Trusted workspace identity
Authenticated active workspace membership
Production persistence and auditable connection ownership
Active task-scoped capability package
Connected repository with approved scope
Complete evidence and independent verification
Explicit human approval
Provider-specific adapter configuration

Global disables

Agent connections are globally disabled.
The selected provider adapter is disabled.
Agent dispatch is globally disabled.
Live agent execution is not available in the private beta.
Repository access has not been granted.

Generic future adapter policy definition: Keep dispatch disabled. Establish trusted workspace identity, persistence, connection ownership, active least-privilege capability authority, independent verification, and explicit human approval before a future adapter can be considered.

Fact

Expected output envelope

Provider reported: Provider-declared completion state; Provider-declared changed paths

ForgeLayer observed: Adapter receipt metadata; Task and capability identifiers

Independently verified: Tests, policy checks, and repository evidence from trusted systems

Raw provider output accepted: false

Fact

Expected evidence envelope

Provider reported: Provider-declared tool and model metadata

ForgeLayer observed: Safe timestamps and adapter lifecycle events

Independently verified: Independent test, review, and approval evidence

Provider claims equal verification: false

Controlled Task Dispatch v1

Dispatch readiness is evaluated; provider interaction remains disabled.

This authoritative preview consumes the existing policy, capability, repository, evidence, verification, approval, budget, workspace, and adapter records. Local task actions cannot alter it.

Recommendation

Canonical routing and dispatch preview

Globally Disabled

Canonical recommended provider: Claude Code
Routing analysis ID: routing-analysis-secure-payment-webhook
Modeled fit: 95/100
Recommendation state: Deterministic Recommendation
Recommendation use: Available For Human Review
Assignment: none
Provider contacted: false
Provider request: not sent
Dispatch state: disabled
Provider execution: disabled
Repository execution: disabled
Dispatch preview: dispatch-preview-db15b2cd
Legacy diagnostic profile: github_copilot · legacy deterministic profile
Legacy adapter diagnostic: github_copilot / github-copilot-agent-adapter
Legacy compatibility diagnostic: Adapter Unavailable
Attempt: 1 of 1

Restriction

Trusted prerequisite snapshots

Policy: policy-snapshot-5cc8bbf1 · Blocked Budget Exceeded
Capability: capability-package-secure-payment-webhook-v1 · Preview
Repository: Not Connected
Evidence: Incomplete
Verification: Simulated
Current authority: Blocked Platform
Budget: Preview

Human

Authorization and transport

Authorization: preview only · active false
Idempotency: dispatch-idempotency-b634238d
Transport: disabled
Provider request: not sent
Remote task: none
Cancellation: Not Requested
Execution: not started

Exact blockers

Repository verification has not run.
Execution transport is disabled.
Dispatch remains disabled.

Legacy dispatch prerequisite diagnostics are deterministic fixture inputs. Approval entries in that fixture do not override the current authority projection.

Current next controlled action: Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

Open focused Dispatch view

Policy restriction

Why ForgeLayer intervened

The explanation names the detected rule or risk, affected scope, verification, approver, missing evidence, blocked action, and required next step.

Policy sourcedemo:forgelayer-private-beta-policy:secure_payment_webhook

Policy version1.0.0-demo

ValidationValid

Policy decisionBlocked Budget Exceeded

Platform stateHard boundaries active

Repository stateDemo Only

Internal progressionBlocked

Snapshotpolicy-snapshot-5cc8bbf1

HIGH risk triggered 1 executable policy rules. The current authority projection reports 4 remaining evidence or verification requirements and an effective workflow state of Blocked Platform.

Policy match: HIGH risk · payments-protected-path
Affected scope: app/api/payments/webhook.ts
Required verification: payment_webhook_security; auth_session_boundary
Policy approver definition: owner
Approval requirement: Satisfied
Current missing evidence / verification: evidence: security_review_evidence; evidence: rollback_plan; verification: payment_webhook_security; verification: auth_session_boundary
Blocked action: automatic merge, command execution, github posting, repository write
Current next controlled action: Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

critical prioritypayments-protected-path

Protect payment and authentication changes

Policy Definition: structured requirements and remediation are shown below. Current workflow state comes from the approval evaluator.

Exact match: Task category: security_review; Protected path: app/api/payments/webhook.ts
Affected scope: app/api/payments/webhook.ts
Restrictions: Blocked capabilities: repository_write, command_execution, github_posting, automatic_merge; Permitted tools: Read-only PR diff inspection, RepoBrain policy preview; Prohibited tools: secret reader, repository writer; Prohibited command categories: deploy, database_write, secret_access; Permitted network state: disabled; Protected path handling: require_controls
Required evidence: security_review_evidence (missing), rollback_plan (missing)
Required verification: payment_webhook_security (missing), auth_session_boundary (missing)
Policy approval definitions: owner (definition; current: Satisfied)
Blocked action: automatic merge, command execution, github posting, repository write
Policy remediation definition: Policy Definition: satisfy the structured evidence and verification requirements above. Current action comes from the evaluator-owned instruction.

Policy Evaluation Restricted Capabilities Task Authority

Control lifecycle

Control to verification to record

01
Observed Fact · WorkspaceRequester
A deterministic private-beta requester frames the work.
CompletedOpen
02
Observed Fact · RepoBrainRepository scope
acme-payments/payment-webhook-service and 2 scoped paths are visible; access is not granted.
CompletedOpen
03
Observed Fact · PromptForgePrompt and context
No linked PromptForge preset; raw prompts are not persisted.
CompletedOpen
04
System Recommendation · AgentOSCanonical deterministic recommendation
AgentOS produced a deterministic Claude Code recommendation. Recommendation use: available for human review. Provider assignment: none. Provider contacted: false. Dispatch: disabled. Execution: disabled.
CompletedOpen
05
Policy Restriction · Agent GovernanceCapability package
An inactive capability package previews what future controls would need to bound.
CompletedOpen
06
Policy Restriction · Policy ControlPolicy gates
Protect payment and authentication paths: violated.
CompletedOpen
07
System Recommendation · Controlled TaskCost budget preview
Estimated demo-only time, token, and monetary ceilings; no usage or billing.
CompletedOpen
08
Simulated Or Missing Evidence · Controlled TaskOutput intake
A deterministic output-intake preview exists; no agent execution or repository action occurred.
SimulatedOpen
09
Observed Fact · Review RunsEvidence coverage
13 evidence labels and 3 missing items.
CompletedOpen
10
Simulated Or Missing Evidence · VerificationVerification
blocked; No production security scanner or repository test was executed.
CurrentOpen
11
Human Decision · ApprovalsHuman approval
Recorded browser-local approval request: pending. Historical/local event only; current authority is evaluated separately. Current effective authority: Blocked Platform.
Historical/local eventOpen
12
Observed Fact · Work RecordsWork Record
work-record-secure-payment-webhook is a deterministic non-persistent record. Current authority: Blocked Platform.
FutureOpen
13
Observed Fact · AI Work LedgerLedger
ledger-demo-payment-verification is a derived preview record.
FutureOpen
14
Future Execution · Controlled TaskOutcome
No execution, repository write, GitHub action, or merge outcome is produced.
FutureOpen

Simulated or missing evidence

Output, evidence, verification, and approval

Evidence

Output & Evidence intake

Demo Fixture

A deterministic output-intake preview exists; no agent execution or repository action occurred.

Provider output: Not received
Provider interaction: False
Demo fixture: Simulated
Execution: Not started
Verification: Not satisfied by intake
Provenance / trust: Deterministic Demo / Normalized Unverified
Redaction / quarantine: Not Required / Not Quarantined

app/api/payments/webhook.tsmodified · Inside Scope

tests/payment-webhook.test.tsmodified · Inside Scope

5374192946bc1fac15a91689e93521f424a1c0213990bdf325c808b93be0cb77

4 evidence requirements remain missing.

Open Evidence Intake

Execution occurred: false · Repository access granted: false

Evidence

Evidence coverage

Webhook test plan drafted
Protected payment path matched
Security review required
Payment-only deterministic Review Run scoped to the webhook implementation and its matching test evidence.
Changed path observed: app/api/payments/webhook.ts
Changed path observed: tests/payment-webhook.test.ts
Check conclusion: failure
Human review required: yes
Deterministic Preview: Payment webhook changes are scoped to the webhook implementation and its matching test. Repository verification has not run; the approval requirement is satisfied.

Missing requirements

evidence: security_review_evidence
evidence: rollback_plan
verification: payment_webhook_security
verification: auth_session_boundary

Policy requirement: Workspace-Owner. Current approval status: Satisfied.

Evidence

Simulated or missing evidence

blocked

The preview gate remains blocked for human security review.

No production security scanner or repository test was executed.

Task Verification

Restriction

Verification Plan

Independent verification incomplete

Plan: verification-plan-2458e6d26e940ec0
Policy requirements: 2
Internal controls: 7
Repository commands: not run
Transport: disabled
Human verification checks: 3 incomplete

Policy-owned requirements

payments-protected-path:verification:payment-webhook-security · unsatisfied
payments-protected-path:verification:auth-session-boundary · unsatisfied

Internal metadata checks do not prove repository code, tests, or security. Approval authority and repository verification remain separate. Current approval status is shown by the server-owned evaluator.

Open Verification Plan

Human

Human decision

Blocked Platform

Approval requirement satisfied. Repository verification has not run, and execution transport remains disabled.

Approval requirement: satisfied.

Policy requirement definition: The workflow has reached an explicit human gate and cannot advance on a system recommendation.

Required role: Workspace-Owner

Evaluated at: 2026-08-12T04:45:27.663Z. Historical local request state: Pending.

Task Approval

Record

Review, Work Record, Ledger, and outcome

All records remain deterministic or derived previews.

Fact

Review Run and MergeGuard

Payment-only deterministic Review Run scoped to the webhook implementation and its matching test evidence.

HIGH risk · Merge After Changes

Linked Review Run MergeGuard context

Fact

Work Record

work-record-secure-payment-webhook

Current authority: Blocked Platform

Approval requirement: Satisfied · persisted: false

Open Work Record

Fact

Ledger evidence

Payment webhook verification evidence

ledger-demo-payment-verification · persisted: false

Open Ledger

Future

Outcome

Blocked

Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

Future execution remains disabled. No completion is inferred.

Approval Authority foundation

Approval is bound to one exact work state.

Authority, approval, revocation, kill switches, verification, and execution transport remain separate control dimensions.

Open Approval Center

secure payment webhook

Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

blocked platform

Required authority: workspace owner
Principal: Demo workspace owner / demo authority
Exact object: controlled-task-secure-payment-webhook
Repository: repository-identity-secure-payment-webhook
Risk / budget: HIGH / task-budget-secure_payment_webhook-v1
Dispatch authorization: dispatch-authorization-preview-db15b2cd
Verification plan: verification-plan-2458e6d26e940ec0
Evaluated at: 2026-08-12T04:45:27.739Z
Grant expiry: 2030-07-11T09:00:00.000Z / not expired
Capability expiry: 2030-07-29T09:00:00.000Z / not expired
Current authority: blocked platform
Approval requirement: Satisfied
Historical grant state: granted
Revocation: not revoked
Kill switch: inactive
Verification: incomplete
Repository runners: not run / blocked platform
Execution transport: disabled

Approval requirement satisfied. Repository verification has not run, and execution transport remains disabled.

Immutable bindingsapproval-grant-integrity-a9cdee22ac5c873d5f817dc8policy-snapshot-5cc8bbf1capability-package-secure-payment-webhook-v1verification-plan-2458e6d26e940ec0

Reasoning trail (3)

The exact human approval requirement is satisfied.
Repository verification is incomplete.
Repository runners are not run and execution transport is disabled.

Grant conditions (3)

Repository verification remains separate.
Execution transport remains disabled.
Any immutable binding change requires reevaluation.

Append-only lifecycle (3)

approval authority requested · historical lifecycle event: Exact authority and immutable scope were requested.
approval granted · historical lifecycle event: A deterministic historical approval grant was recorded.
workflow progression blocked · historical lifecycle event: Workflow progression remains blocked; repository execution was not running.

Controlled Task Work Record Review Run Verification Plan

Browser-local task actions

Organize attention without changing authority

These actions cannot dispatch, grant access, alter policy, pass verification, infer approval, or create completion.

unacknowledged

No local controlled-task action has been applied.

Connected modules

Real routes and linked deterministic IDs

Repository ConnectionsRepository ConnectionsModule context PromptForgePrompt contextModule context AgentOS · canonical current routingCanonical recommendation: Claude Coderouting-analysis-secure-payment-webhook · claude_code · deterministic_recommendation · available_for_human_review · 2026-07-31T00:00:00.000Z · assignment none · dispatch disabled Agent GovernanceTask permissionsModule context Control FlowControl Flowworkflow_1ff2718c PoliciesPolicy contextpolicy_protected_payment_and_auth_paths Evidence IntakeOutput & Evidenceoutput-intake-ad49b550482bacea Review RunsReview Rundemo-task-payment-webhook MergeGuardMergeGuardModule context VerificationVerification Planverification-plan-2458e6d26e940ec0 ApprovalsApprovalapproval_workflow_payment_webhook Work RecordsWork Recordwork-record-secure-payment-webhook LedgerLedger evidenceledger-demo-payment-verification AnalyticsTask analyticsModule context

ForgeLayer

AgentOS provider-aware routing

Deterministic compatibility, separate from control eligibility.

Modeled fit uses server-owned capabilities. It is not provider performance, assignment, approval, verification, dispatch, or execution.

Inspect routing analysis

Deterministic recommendationNot assigned

Claude Code

secure payment webhook

Highest modeled fit: 95/100
Recommendation state: deterministic recommendation
Recommendation use: available for human review
Routing analysis: routing-analysis-secure-payment-webhook
Task / repository: controlled-task-secure-payment-webhook / repository-connection-preview-secure-payment-webhook
Provider contacted: false
Dispatch / execution: disabled / disabled
Repository contents: not fetched
Evaluated: 2026-07-31T00:00:00.000Z

Controlled Task · controlled-task-secure-payment-webhook

Secure a payment webhook

Review and harden payment webhook signature verification, replay protection, tests, and rollback evidence before merge.

Next controlled action All Tasks Capability Package Agent Connections Dispatch readiness Repository Connection Linked Work Record

Workspace repository boundary

Repository identity is recorded; GitHub access is not.

Inspect permission and trust model

GitHub · repository host

acme-payments/payment-webhook-service

Recorded preview

Secure Payment Webhook · paths are deterministic task scope, not fetched repository contents.

Workspace membership: Workspace Recorded
Adapter: github-repository-adapter · github-repository-adapter-v1
Installation: Installation Unverified
Installation ownership: Installation Ownership Unverified
Repository ownership: Repository Ownership Unverified
Permissions: modeled · unrequested · ungranted · unverified
Metadata / contents: not fetched / not fetched
PR / checks: deterministic previews · not fetched
Webhook: Webhook Not Configured
Revocation / kill switch: Not Revoked / Inactive
Read / write / execution: false / false / false

WorkspaceIdentityTrustWorkspace Recorded

GithubHostTrustHost Recorded

GithubAccountIdentityTrustAccount Unverified

InstallationIdentityTrustInstallation Unverified

InstallationOwnershipTrustInstallation Ownership Unverified

RepositoryIdentityTrustRepository Recorded

RepositoryOwnershipTrustRepository Ownership Unverified

PermissionTrustPermissions Unverified

MetadataTrustMetadata Not Fetched

ContentsTrustContents Not Fetched

WebhookTrustWebhook Not Configured

HealthTrustHealth Not Observed

AdapterVersionTrustAdapter Recorded

PolicyBindingTrustDeterministic Preview

ProductionReadinessProduction Not Ready

Inspect deterministic task paths (2)

app/api/payments/webhook.ts
tests/payment-webhook.test.ts

Permission model Trust boundary Controlled Task RepoBrain binding

Repository hostGitHub recognized

Workspace bindingrecorded preview

RepoBrain policydeterministic snapshot

Installation / ownershipunverified / unverified

Permissionsunrequested · ungranted · unverified

Metadata / contentsnot fetched / not fetched

Repository verificationnot run

Dispatchblocked

Observed facts

Task identity and bounded scope

These fields describe deterministic source data. They do not grant access or authority.

Fact

Requester and workspace

Requester: Platform engineering lead
Requester role: Requester
Workspace: ForgeLayer Guided Beta
Workspace source: demo

Fact

Repository and path scope

ForgeLayer repository ID: repository-identity-secure-payment-webhook
Repository: acme-payments/payment-webhook-service
Branch preview: demo/secure-payment-webhook
Source: Deterministic Demo Repository
Workspace record: Not Persisted
Live provider connection: no
Metadata validated: no
Tree metadata available: no
Source content accessed: no
Any permission active: no

app/api/payments/webhook.ts
tests/payment-webhook.test.ts

Open Repository Connection

Fact

Prompt and context

No linked PromptForge preset

Analysis state: not available
Raw prompt persisted: false

Inspect PromptForge context

Authoritative internal package

Task capability package and cost budget

The package is the strict intersection of platform, workspace, repository, task, policy, approval, verification, expiry, revocation, and budget controls. It grants no external authority.

Recommendation

Legacy profile recommendation · not canonical routing

GitHub Copilot

Matches detected work: test generation, code review. GitHub Copilot is strongest for small code edits and test generation.

Legacy supporting profiles

Generic Review Agent · 60% fit
Codex · 45% fit

Current provider-aware routing is evaluated separately in AgentOS.

Open canonical AgentOS routing

Restriction

Policy restriction and capability authority

Package ID: capability-package-secure-payment-webhook-v1
Version: task-capability-package-v1
Source: Deterministic Internal Authority Model
Lifecycle: Preview
Effective state: Globally Disabled
Workspace: ForgeLayer Guided Beta
Task: controlled-task-secure-payment-webhook
Repository: acme-payments/payment-webhook-service
Branch scope: demo/secure-payment-webhook
Policy snapshot: policy-snapshot-5cc8bbf1
Evaluated at: 2026-08-12T04:45:26.921Z
Expiry: 2030-07-29T09:00:00.000Z · Not Expired
Revocation: Not Revoked
Suspension: Not Suspended
Authority issued: false

Open focused capability view

Recommendation

Estimated demo-only budget

Budget ID: task-budget-secure_payment_webhook-v1
Status: Preview
Time limit: 40 minutes
Token ceiling: 14,000
Monetary ceiling: $2.00 USD estimate
Tool calls: 8
Command attempts: 4
Correction loops: 2
Cost data: Deterministic Estimate Demo Only
Metered / billed: false / false

Restriction

Repository and path authority

Repository tree knowledge: Incomplete Not Fetched

Allowed preview scopes

exact:app/api/payments/webhook.ts
exact:tests/payment-webhook.test.ts

Blocked scopes

directory:lib/auth
directory:config
glob:**/.env*
glob:**/secrets/**

Restriction

Tools, commands, network, and secrets

Allowed tools: Read-only PR diff inspection, RepoBrain policy preview
Blocked tools: secret reader, repository writer, shell executor
Allowed command categories: test, lint, typecheck, inspect
Blocked command categories: migration, deploy, package_install, destructive, arbitrary_shell
Network: Disabled
Secrets: None

Human

Prerequisites and denial

Current missing prerequisites

Trusted server identity is not enabled.
Production authentication and persistence are disabled.
Active trusted workspace membership is required.
A validated workspace-owned repository connection is required.
Evidence required: security_review_evidence.
Evidence required: rollback_plan.
Verification required: payment_webhook_security.
Verification required: auth_session_boundary.
Repository access, agent dispatch, execution, network, secrets, GitHub writes, pull requests, workflows, and automatic merge are globally disabled.

Capability requirement definitions

Policy Definition: Trusted owner authority role is required.

Exact denial reasons

read metadata is globally disabled.
Trusted server identity is not enabled.
Production authentication and persistence are disabled.
Active trusted workspace membership is required.
A validated workspace-owned repository connection is required.
Evidence required: security_review_evidence.
Evidence required: rollback_plan.
Verification required: payment_webhook_security.
Verification required: auth_session_boundary.
Repository access, agent dispatch, execution, network, secrets, GitHub writes, pull requests, workflows, and automatic merge are globally disabled.
The package is an internal preview and no active authority was issued.

Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

Provider connection prerequisites

Capability overlap is visible; provider selection and dispatch are not.

This task can inspect server-owned product capabilities without trusting caller claims or contacting a provider.

Fact

Required capability categories

Human-In-The-Loop
Test-Generation
Code-Review

Recommendation

Potential product matches

Codex · modeled overlap only · dispatch false
Claude Code · modeled overlap only · dispatch false
Cursor · modeled overlap only · dispatch false

No provider selection was performed.

Restriction

Connection blockers

Authenticated workspace identity is unavailable.
Provider ownership is unverified.
Provider authentication is unavailable.
Repository connection is unavailable.
Connection validation transport is disabled.
Dispatch and execution transports are disabled.

Inspect provider trust boundaries

Provider-neutral adapter preview

Legacy adapter compatibility and disabled future dispatch package

Recommendation

Legacy profile and modeled adapter

GitHub Copilot

Recommended for this task. No adapter authority or dispatch issued.

Provider: GitHub Copilot
Adapter: github-copilot-agent-adapter
Status: Not Implemented
Connection source: Unavailable
Compatibility: Adapter Unavailable

Open Agent Connections

Restriction

Capability-bound dispatch preview

Future dispatch package preview — no request sent.

Capability package: capability-package-secure-payment-webhook-v1
Package state: Preview
Changed path count: 2
Request sent: false
Credentials included: false
Executable commands included: false
Remote task ID: none

Human

Prerequisites and global disables

Prerequisites

Trusted workspace identity
Authenticated active workspace membership
Production persistence and auditable connection ownership
Active task-scoped capability package
Connected repository with approved scope
Complete evidence and independent verification
Explicit human approval
Provider-specific adapter configuration

Global disables

Agent connections are globally disabled.
The selected provider adapter is disabled.
Agent dispatch is globally disabled.
Live agent execution is not available in the private beta.
Repository access has not been granted.

Fact

Expected output envelope

Provider reported: Provider-declared completion state; Provider-declared changed paths

ForgeLayer observed: Adapter receipt metadata; Task and capability identifiers

Independently verified: Tests, policy checks, and repository evidence from trusted systems

Raw provider output accepted: false

Fact

Expected evidence envelope

Provider reported: Provider-declared tool and model metadata

ForgeLayer observed: Safe timestamps and adapter lifecycle events

Independently verified: Independent test, review, and approval evidence

Provider claims equal verification: false

Controlled Task Dispatch v1

Dispatch readiness is evaluated; provider interaction remains disabled.

This authoritative preview consumes the existing policy, capability, repository, evidence, verification, approval, budget, workspace, and adapter records. Local task actions cannot alter it.

Recommendation

Canonical routing and dispatch preview

Globally Disabled

Canonical recommended provider: Claude Code
Routing analysis ID: routing-analysis-secure-payment-webhook
Modeled fit: 95/100
Recommendation state: Deterministic Recommendation
Recommendation use: Available For Human Review
Assignment: none
Provider contacted: false
Provider request: not sent
Dispatch state: disabled
Provider execution: disabled
Repository execution: disabled
Dispatch preview: dispatch-preview-db15b2cd
Legacy diagnostic profile: github_copilot · legacy deterministic profile
Legacy adapter diagnostic: github_copilot / github-copilot-agent-adapter
Legacy compatibility diagnostic: Adapter Unavailable
Attempt: 1 of 1

Restriction

Trusted prerequisite snapshots

Policy: policy-snapshot-5cc8bbf1 · Blocked Budget Exceeded
Capability: capability-package-secure-payment-webhook-v1 · Preview
Repository: Not Connected
Evidence: Incomplete
Verification: Simulated
Current authority: Blocked Platform
Budget: Preview

Human

Authorization and transport

Authorization: preview only · active false
Idempotency: dispatch-idempotency-b634238d
Transport: disabled
Provider request: not sent
Remote task: none
Cancellation: Not Requested
Execution: not started

Exact blockers

Repository verification has not run.
Execution transport is disabled.
Dispatch remains disabled.

Legacy dispatch prerequisite diagnostics are deterministic fixture inputs. Approval entries in that fixture do not override the current authority projection.

Current next controlled action: Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

Open focused Dispatch view

Policy restriction

Why ForgeLayer intervened

The explanation names the detected rule or risk, affected scope, verification, approver, missing evidence, blocked action, and required next step.

Policy sourcedemo:forgelayer-private-beta-policy:secure_payment_webhook

Policy version1.0.0-demo

ValidationValid

Policy decisionBlocked Budget Exceeded

Platform stateHard boundaries active

Repository stateDemo Only

Internal progressionBlocked

Snapshotpolicy-snapshot-5cc8bbf1

HIGH risk triggered 1 executable policy rules. The current authority projection reports 4 remaining evidence or verification requirements and an effective workflow state of Blocked Platform.

Policy match: HIGH risk · payments-protected-path
Affected scope: app/api/payments/webhook.ts
Required verification: payment_webhook_security; auth_session_boundary
Policy approver definition: owner
Approval requirement: Satisfied
Current missing evidence / verification: evidence: security_review_evidence; evidence: rollback_plan; verification: payment_webhook_security; verification: auth_session_boundary
Blocked action: automatic merge, command execution, github posting, repository write
Current next controlled action: Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

critical prioritypayments-protected-path

Protect payment and authentication changes

Policy Definition: structured requirements and remediation are shown below. Current workflow state comes from the approval evaluator.

Exact match: Task category: security_review; Protected path: app/api/payments/webhook.ts
Affected scope: app/api/payments/webhook.ts
Restrictions: Blocked capabilities: repository_write, command_execution, github_posting, automatic_merge; Permitted tools: Read-only PR diff inspection, RepoBrain policy preview; Prohibited tools: secret reader, repository writer; Prohibited command categories: deploy, database_write, secret_access; Permitted network state: disabled; Protected path handling: require_controls
Required evidence: security_review_evidence (missing), rollback_plan (missing)
Required verification: payment_webhook_security (missing), auth_session_boundary (missing)
Policy approval definitions: owner (definition; current: Satisfied)
Blocked action: automatic merge, command execution, github posting, repository write
Policy remediation definition: Policy Definition: satisfy the structured evidence and verification requirements above. Current action comes from the evaluator-owned instruction.

Policy Evaluation Restricted Capabilities Task Authority

Control lifecycle

Control to verification to record

01
Observed Fact · WorkspaceRequester
A deterministic private-beta requester frames the work.
CompletedOpen
02
Observed Fact · RepoBrainRepository scope
acme-payments/payment-webhook-service and 2 scoped paths are visible; access is not granted.
CompletedOpen
03
Observed Fact · PromptForgePrompt and context
No linked PromptForge preset; raw prompts are not persisted.
CompletedOpen
04
System Recommendation · AgentOSCanonical deterministic recommendation
AgentOS produced a deterministic Claude Code recommendation. Recommendation use: available for human review. Provider assignment: none. Provider contacted: false. Dispatch: disabled. Execution: disabled.
CompletedOpen
05
Policy Restriction · Agent GovernanceCapability package
An inactive capability package previews what future controls would need to bound.
CompletedOpen
06
Policy Restriction · Policy ControlPolicy gates
Protect payment and authentication paths: violated.
CompletedOpen
07
System Recommendation · Controlled TaskCost budget preview
Estimated demo-only time, token, and monetary ceilings; no usage or billing.
CompletedOpen
08
Simulated Or Missing Evidence · Controlled TaskOutput intake
A deterministic output-intake preview exists; no agent execution or repository action occurred.
SimulatedOpen
09
Observed Fact · Review RunsEvidence coverage
13 evidence labels and 3 missing items.
CompletedOpen
10
Simulated Or Missing Evidence · VerificationVerification
blocked; No production security scanner or repository test was executed.
CurrentOpen
11
Human Decision · ApprovalsHuman approval
Recorded browser-local approval request: pending. Historical/local event only; current authority is evaluated separately. Current effective authority: Blocked Platform.
Historical/local eventOpen
12
Observed Fact · Work RecordsWork Record
work-record-secure-payment-webhook is a deterministic non-persistent record. Current authority: Blocked Platform.
FutureOpen
13
Observed Fact · AI Work LedgerLedger
ledger-demo-payment-verification is a derived preview record.
FutureOpen
14
Future Execution · Controlled TaskOutcome
No execution, repository write, GitHub action, or merge outcome is produced.
FutureOpen

Simulated or missing evidence

Output, evidence, verification, and approval

Evidence

Output & Evidence intake

Demo Fixture

A deterministic output-intake preview exists; no agent execution or repository action occurred.

Provider output: Not received
Provider interaction: False
Demo fixture: Simulated
Execution: Not started
Verification: Not satisfied by intake
Provenance / trust: Deterministic Demo / Normalized Unverified
Redaction / quarantine: Not Required / Not Quarantined

app/api/payments/webhook.tsmodified · Inside Scope

tests/payment-webhook.test.tsmodified · Inside Scope

5374192946bc1fac15a91689e93521f424a1c0213990bdf325c808b93be0cb77

4 evidence requirements remain missing.

Open Evidence Intake

Execution occurred: false · Repository access granted: false

Evidence

Evidence coverage

Webhook test plan drafted
Protected payment path matched
Security review required
Payment-only deterministic Review Run scoped to the webhook implementation and its matching test evidence.
Changed path observed: app/api/payments/webhook.ts
Changed path observed: tests/payment-webhook.test.ts
Check conclusion: failure
Human review required: yes
Deterministic Preview: Payment webhook changes are scoped to the webhook implementation and its matching test. Repository verification has not run; the approval requirement is satisfied.

Missing requirements

evidence: security_review_evidence
evidence: rollback_plan
verification: payment_webhook_security
verification: auth_session_boundary

Policy requirement: Workspace-Owner. Current approval status: Satisfied.

Evidence

Simulated or missing evidence

blocked

The preview gate remains blocked for human security review.

No production security scanner or repository test was executed.

Task Verification

Restriction

Verification Plan

Independent verification incomplete

Plan: verification-plan-2458e6d26e940ec0
Policy requirements: 2
Internal controls: 7
Repository commands: not run
Transport: disabled
Human verification checks: 3 incomplete

Policy-owned requirements

payments-protected-path:verification:payment-webhook-security · unsatisfied
payments-protected-path:verification:auth-session-boundary · unsatisfied

Open Verification Plan

Human

Human decision

Blocked Platform

Approval requirement satisfied. Repository verification has not run, and execution transport remains disabled.

Approval requirement: satisfied.

Policy requirement definition: The workflow has reached an explicit human gate and cannot advance on a system recommendation.

Required role: Workspace-Owner

Evaluated at: 2026-08-12T04:45:27.663Z. Historical local request state: Pending.

Task Approval

Record

Review, Work Record, Ledger, and outcome

All records remain deterministic or derived previews.

Fact

Review Run and MergeGuard

Payment-only deterministic Review Run scoped to the webhook implementation and its matching test evidence.

HIGH risk · Merge After Changes

Linked Review Run MergeGuard context

Fact

Work Record

work-record-secure-payment-webhook

Current authority: Blocked Platform

Approval requirement: Satisfied · persisted: false

Open Work Record

Fact

Ledger evidence

Payment webhook verification evidence

ledger-demo-payment-verification · persisted: false

Open Ledger

Future

Outcome

Blocked

Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

Future execution remains disabled. No completion is inferred.

Approval Authority foundation

Approval is bound to one exact work state.

Authority, approval, revocation, kill switches, verification, and execution transport remain separate control dimensions.

Open Approval Center

secure payment webhook

Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

blocked platform

Required authority: workspace owner
Principal: Demo workspace owner / demo authority
Exact object: controlled-task-secure-payment-webhook
Repository: repository-identity-secure-payment-webhook
Risk / budget: HIGH / task-budget-secure_payment_webhook-v1
Dispatch authorization: dispatch-authorization-preview-db15b2cd
Verification plan: verification-plan-2458e6d26e940ec0
Evaluated at: 2026-08-12T04:45:27.739Z
Grant expiry: 2030-07-11T09:00:00.000Z / not expired
Capability expiry: 2030-07-29T09:00:00.000Z / not expired
Current authority: blocked platform
Approval requirement: Satisfied
Historical grant state: granted
Revocation: not revoked
Kill switch: inactive
Verification: incomplete
Repository runners: not run / blocked platform
Execution transport: disabled

Approval requirement satisfied. Repository verification has not run, and execution transport remains disabled.

Immutable bindingsapproval-grant-integrity-a9cdee22ac5c873d5f817dc8policy-snapshot-5cc8bbf1capability-package-secure-payment-webhook-v1verification-plan-2458e6d26e940ec0

Reasoning trail (3)

The exact human approval requirement is satisfied.
Repository verification is incomplete.
Repository runners are not run and execution transport is disabled.

Grant conditions (3)

Repository verification remains separate.
Execution transport remains disabled.
Any immutable binding change requires reevaluation.

Append-only lifecycle (3)

approval authority requested · historical lifecycle event: Exact authority and immutable scope were requested.
approval granted · historical lifecycle event: A deterministic historical approval grant was recorded.
workflow progression blocked · historical lifecycle event: Workflow progression remains blocked; repository execution was not running.

Controlled Task Work Record Review Run Verification Plan

Browser-local task actions

Organize attention without changing authority

These actions cannot dispatch, grant access, alter policy, pass verification, infer approval, or create completion.

unacknowledged

No local controlled-task action has been applied.

Connected modules

Claude Code

Secure a payment webhook

Requester and workspace

Repository and path scope

Prompt and context

Legacy profile recommendation · not canonical routing

GitHub Copilot

Policy restriction and capability authority

Estimated demo-only budget

Repository and path authority

Tools, commands, network, and secrets

Prerequisites and denial

Required capability categories

Potential product matches

Connection blockers

Legacy profile and modeled adapter

GitHub Copilot

Capability-bound dispatch preview

Prerequisites and global disables

Expected output envelope

Expected evidence envelope

Canonical routing and dispatch preview

Trusted prerequisite snapshots

Authorization and transport

Exact blockers

Protect payment and authentication changes

Output & Evidence intake

Evidence coverage

Simulated or missing evidence

Verification Plan

Human decision

Review Run and MergeGuard

Work Record

Ledger evidence

Outcome

Organize attention without changing authority

Loading task control record

Claude Code

Secure a payment webhook

Requester and workspace

Repository and path scope

Prompt and context

Legacy profile recommendation · not canonical routing

GitHub Copilot

Policy restriction and capability authority

Estimated demo-only budget

Repository and path authority

Tools, commands, network, and secrets

Prerequisites and denial

Required capability categories

Potential product matches

Connection blockers

Legacy profile and modeled adapter

GitHub Copilot

Capability-bound dispatch preview

Prerequisites and global disables

Expected output envelope

Expected evidence envelope

Canonical routing and dispatch preview

Trusted prerequisite snapshots

Authorization and transport

Exact blockers

Protect payment and authentication changes

Output & Evidence intake

Evidence coverage

Simulated or missing evidence

Verification Plan

Human decision

Review Run and MergeGuard

Work Record

Ledger evidence

Outcome

Organize attention without changing authority