AgentOS provider-aware routing

Deterministic compatibility, separate from control eligibility.

Modeled fit uses server-owned capabilities. It is not provider performance, assignment, approval, verification, dispatch, or execution.

Inspect routing analysis

Deterministic recommendationNot assigned

Claude Code

secure payment webhook

Highest modeled fit: 95/100
Recommendation state: deterministic recommendation
Recommendation use: available for human review
Routing analysis: routing-analysis-secure-payment-webhook
Task / repository: controlled-task-secure-payment-webhook / repository-connection-preview-secure-payment-webhook
Provider contacted: false
Dispatch / execution: disabled / disabled
Repository contents: not fetched
Evaluated: 2026-07-31T00:00:00.000Z

Recommendation use blockedNot assigned

Claude Code

harden risky prompt

Highest modeled fit: 93/100
Recommendation state: recommendation blocked
Recommendation use: blocked by revocation
Routing analysis: routing-analysis-harden-risky-prompt
Task / repository: controlled-task-harden-risky-prompt / repository-connection-preview-harden-risky-prompt
Provider contacted: false
Dispatch / execution: disabled / disabled
Repository contents: not fetched
Evaluated: 2026-07-31T00:00:00.000Z

Recommendation use blockedNot assigned

Cursor

investigate failing tests

Highest modeled fit: 95/100
Recommendation state: recommendation blocked
Recommendation use: blocked by kill switch
Routing analysis: routing-analysis-investigate-failing-tests
Task / repository: controlled-task-investigate-failing-tests / repository-connection-preview-investigate-failing-tests
Provider contacted: false
Dispatch / execution: disabled / disabled
Repository contents: not fetched
Evaluated: 2026-07-31T00:00:00.000Z

Private beta Verification Center

See what was checked, what passed, what failed, and what still needs human verification.

Bring tests, policy, security, prompt safety, evidence, and human checks into one traceable control surface without turning preview evidence into production proof.

Review verification Task Verification Evidence boundaries Policy Verification Capability Prerequisites Approval Center Agent Verification Requirements Review Runs Work Record Evidence Intake Handoff Verification gaps Readiness Verification Analytics Repository Connections

Deterministic previewLocal state onlyProduction telemetry: falseHuman verification may be required

Verification Runners v1

Policy-owned requirements become bounded verification plans.

ForgeLayer runs deterministic metadata consistency checks only. Repository test, lint, typecheck, build, and security runners remain blocked and not run.

Repository commandsNot run

Verification transportDisabled

Independent code verificationIncomplete

Internal checksMetadata controls only

controlled-task-secure-payment-webhook

verification-plan-2458e6d26e940ec0

Incomplete

Policy snapshot: policy-snapshot-5cc8bbf1
Capability package: capability-package-secure-payment-webhook-v1
Evidence intake: output-intake-ad49b550482bacea
Transport: disabled
Persisted: false
Approval authority: separate · evaluator-owned

Required verification

payments-protected-path:verification:payment-webhook-securitypayment_webhook_security · unsatisfied
payments-protected-path:verification:auth-session-boundaryauth_session_boundary · unsatisfied

Internal controls

internal_evidence_envelope_validationpassed_internal_control · production requirement false
internal_evidence_provenance_validationpassed_internal_control · production requirement false
internal_policy_snapshot_consistencypassed_internal_control · production requirement false
internal_capability_scope_consistencypassed_internal_control · production requirement false
internal_changed_file_scope_validationpassed_internal_control · production requirement false
internal_integrity_reference_consistencypassed_internal_control · production requirement false
internal_scenario_isolation_validationpassed_internal_control · production requirement false

Repository runners

unit_test_runnernot_run · blocked_platform
static_security_runnernot_run · blocked_platform

Next controlled action: Review internal-control results, then retain repository verification as an explicit unmet gate. Approval authority remains independently evaluator-owned.

Open Controlled Task Review intake handoff

GitHub · repository host

acme-payments/payment-webhook-service

Recorded preview

Secure Payment Webhook · paths are deterministic task scope, not fetched repository contents.

Workspace membership: Workspace Recorded
Adapter: github-repository-adapter · github-repository-adapter-v1
Installation: Installation Unverified
Installation ownership: Installation Ownership Unverified
Repository ownership: Repository Ownership Unverified
Permissions: modeled · unrequested · ungranted · unverified
Metadata / contents: not fetched / not fetched
PR / checks: deterministic previews · not fetched
Webhook: Webhook Not Configured
Revocation / kill switch: Not Revoked / Inactive
Read / write / execution: false / false / false

WorkspaceIdentityTrustWorkspace Recorded

GithubHostTrustHost Recorded

GithubAccountIdentityTrustAccount Unverified

InstallationIdentityTrustInstallation Unverified

InstallationOwnershipTrustInstallation Ownership Unverified

RepositoryIdentityTrustRepository Recorded

RepositoryOwnershipTrustRepository Ownership Unverified

PermissionTrustPermissions Unverified

MetadataTrustMetadata Not Fetched

ContentsTrustContents Not Fetched

WebhookTrustWebhook Not Configured

HealthTrustHealth Not Observed

AdapterVersionTrustAdapter Recorded

PolicyBindingTrustDeterministic Preview

ProductionReadinessProduction Not Ready

Inspect deterministic task paths (2)

app/api/payments/webhook.ts
tests/payment-webhook.test.ts

Permission model Trust boundary Controlled Task RepoBrain binding

Verification binds to this recorded repository preview. Repository runners remain not_run, availability remains blocked_platform, and execution returns verification_execution_transport_disabled.

controlled-task-harden-risky-prompt

verification-plan-d17b2a5528b4be7a

Incomplete

Policy snapshot: policy-snapshot-d8a299d8
Capability package: capability-package-harden-risky-prompt-v1
Evidence intake: output-intake-32625a0dc0f64f4f
Transport: disabled
Persisted: false
Approval authority: separate · evaluator-owned

Required verification

prompt-security-review:verification:prompt-injection-security-testsprompt_injection_security_tests · unsatisfied

Internal controls

internal_evidence_envelope_validationpassed_internal_control · production requirement false
internal_evidence_provenance_validationpassed_internal_control · production requirement false
internal_policy_snapshot_consistencypassed_internal_control · production requirement false
internal_capability_scope_consistencypassed_internal_control · production requirement false
internal_changed_file_scope_validationpassed_internal_control · production requirement false
internal_integrity_reference_consistencypassed_internal_control · production requirement false
internal_scenario_isolation_validationpassed_internal_control · production requirement false

Repository runners

prompt_security_runnernot_run · blocked_platform

Next controlled action: Review internal-control results, then retain repository verification as an explicit unmet gate. Approval authority remains independently evaluator-owned.

Open Controlled Task Review intake handoff

GitHub · repository host

acme-ai-support/refund-assistant-prompts

Recorded preview

Harden Risky Prompt · paths are deterministic task scope, not fetched repository contents.

Workspace membership: Workspace Recorded
Adapter: github-repository-adapter · github-repository-adapter-v1
Installation: Installation Unverified
Installation ownership: Installation Ownership Unverified
Repository ownership: Repository Ownership Unverified
Permissions: modeled · unrequested · ungranted · unverified
Metadata / contents: not fetched / not fetched
PR / checks: deterministic previews · not fetched
Webhook: Webhook Not Configured
Revocation / kill switch: Not Revoked / Inactive
Read / write / execution: false / false / false

WorkspaceIdentityTrustWorkspace Recorded

GithubHostTrustHost Recorded

GithubAccountIdentityTrustAccount Unverified

InstallationIdentityTrustInstallation Unverified

InstallationOwnershipTrustInstallation Ownership Unverified

RepositoryIdentityTrustRepository Recorded

RepositoryOwnershipTrustRepository Ownership Unverified

PermissionTrustPermissions Unverified

MetadataTrustMetadata Not Fetched

ContentsTrustContents Not Fetched

WebhookTrustWebhook Not Configured

HealthTrustHealth Not Observed

AdapterVersionTrustAdapter Recorded

PolicyBindingTrustDeterministic Preview

ProductionReadinessProduction Not Ready

Inspect deterministic task paths (2)

lib/prompts/refund-assistant.ts
prompts/refund-assistant-security.md

Permission model Trust boundary Controlled Task RepoBrain binding

controlled-task-investigate-failing-tests

verification-plan-b860ede3565b9a00

Incomplete

Policy snapshot: policy-snapshot-69ecde00
Capability package: capability-package-investigate-failing-tests-v1
Evidence intake: output-intake-ef19cdff8788f824
Transport: disabled
Persisted: false
Approval authority: separate · evaluator-owned

Required verification

failing-tests-evidence:verification:test-failure-reproducedtest_failure_reproduced · unsatisfied
failing-tests-evidence:verification:test-remediation-verifiedtest_remediation_verified · unsatisfied

Internal controls

internal_evidence_envelope_validationpassed_internal_control · production requirement false
internal_evidence_provenance_validationpassed_internal_control · production requirement false
internal_policy_snapshot_consistencypassed_internal_control · production requirement false
internal_capability_scope_consistencypassed_internal_control · production requirement false
internal_changed_file_scope_validationpassed_internal_control · production requirement false
internal_integrity_reference_consistencypassed_internal_control · production requirement false
internal_scenario_isolation_validationpassed_internal_control · production requirement false

Repository runners

unit_test_runnernot_run · blocked_platform
lint_runnernot_run · blocked_platform
typecheck_runnernot_run · blocked_platform

Next controlled action: Review internal-control results, then retain repository verification as an explicit unmet gate. Approval authority remains independently evaluator-owned.

Open Controlled Task Review intake handoff

GitHub · repository host

acme-checkout/checkout-ui

Recorded preview

Investigate Failing Tests · paths are deterministic task scope, not fetched repository contents.

Workspace membership: Workspace Recorded
Adapter: github-repository-adapter · github-repository-adapter-v1
Installation: Installation Unverified
Installation ownership: Installation Ownership Unverified
Repository ownership: Repository Ownership Unverified
Permissions: modeled · unrequested · ungranted · unverified
Metadata / contents: not fetched / not fetched
PR / checks: deterministic previews · not fetched
Webhook: Webhook Not Configured
Revocation / kill switch: Not Revoked / Active
Read / write / execution: false / false / false

WorkspaceIdentityTrustWorkspace Recorded

GithubHostTrustHost Recorded

GithubAccountIdentityTrustAccount Unverified

InstallationIdentityTrustInstallation Unverified

InstallationOwnershipTrustInstallation Ownership Unverified

RepositoryIdentityTrustRepository Recorded

RepositoryOwnershipTrustRepository Ownership Unverified

PermissionTrustPermissions Unverified

MetadataTrustMetadata Not Fetched

ContentsTrustContents Not Fetched

WebhookTrustWebhook Not Configured

HealthTrustHealth Not Observed

AdapterVersionTrustAdapter Recorded

PolicyBindingTrustDeterministic Preview

ProductionReadinessProduction Not Ready

Inspect deterministic task paths (3)

tests/checkout-confirmation.test.ts
app/checkout/confirmation.tsx
package.json

Permission model Trust boundary Controlled Task RepoBrain binding

Approval Authority foundation

Approval is bound to one exact work state.

Authority, approval, revocation, kill switches, verification, and execution transport remain separate control dimensions.

Open Approval Center

secure payment webhook

Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

blocked platform

Required authority: workspace owner
Principal: Demo workspace owner / demo authority
Exact object: controlled-task-secure-payment-webhook
Repository: repository-identity-secure-payment-webhook
Risk / budget: HIGH / task-budget-secure_payment_webhook-v1
Dispatch authorization: dispatch-authorization-preview-db15b2cd
Verification plan: verification-plan-2458e6d26e940ec0
Evaluated at: 2026-08-10T08:38:25.650Z
Grant expiry: 2030-07-11T09:00:00.000Z / not expired
Capability expiry: 2030-07-29T09:00:00.000Z / not expired
Current authority: blocked platform
Approval requirement: Satisfied
Historical grant state: granted
Revocation: not revoked
Kill switch: inactive
Verification: incomplete
Repository runners: not run / blocked platform
Execution transport: disabled

Approval requirement satisfied. Repository verification has not run, and execution transport remains disabled.

Controlled Task Work Record Review Run Verification Plan

harden risky prompt

Keep current authorization revoked. Current authorization is revoked. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

revocation active

Required authority: prompt security reviewer
Principal: Demo prompt-security reviewer / demo authority
Exact object: controlled-task-harden-risky-prompt
Repository: repository-identity-harden-risky-prompt
Risk / budget: HIGH / task-budget-harden_risky_prompt-v1
Dispatch authorization: dispatch-authorization-preview-ec038137
Verification plan: verification-plan-d17b2a5528b4be7a
Evaluated at: 2026-08-10T08:38:25.650Z
Grant expiry: 2030-07-11T09:00:00.000Z / not expired
Capability expiry: 2030-07-29T09:00:00.000Z / not expired
Current authority: revocation active
Approval requirement: approval revoked
Historical grant state: granted
Revocation: revoked
Kill switch: inactive
Verification: incomplete
Repository runners: not run / blocked platform
Execution transport: disabled

A historical approval exists, but current authorization is revoked.

Controlled Task Work Record Review Run Verification Plan

investigate failing tests

Keep workflow progression blocked by the active kill switch. An active kill switch blocks workflow progression. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

kill switch active

Required authority: engineering approver
Principal: Demo engineering approver / demo authority
Exact object: controlled-task-investigate-failing-tests
Repository: repository-identity-investigate-failing-tests
Risk / budget: MEDIUM / task-budget-investigate_failing_tests-v1
Dispatch authorization: dispatch-authorization-preview-683d375f
Verification plan: verification-plan-b860ede3565b9a00
Evaluated at: 2026-08-10T08:38:25.650Z
Grant expiry: 2030-07-11T09:00:00.000Z / not expired
Capability expiry: 2030-07-29T09:00:00.000Z / not expired
Current authority: kill switch active
Approval requirement: Satisfied
Historical grant state: granted
Revocation: not revoked
Kill switch: active
Verification: incomplete
Repository runners: not run / blocked platform
Execution transport: disabled

An approval exists, but workflow progression is blocked by an active kill switch.

Controlled Task Work Record Review Run Verification Plan

Verification queue

Evidence, checks, and remaining human verification

Every record identifies its evidence mode and limits. A local review action does not alter the underlying check result or trigger external work.

9 preview recordsNon-persistentNot production telemetry

9TotalDeterministic preview

2PassedDeterministic preview

1FailedDeterministic preview

2Needs reviewDeterministic preview

1MissingDeterministic preview

1SimulatedDeterministic preview

1Not runDeterministic preview

1BlockedDeterministic preview

8Human checksDeterministic preview

CategoryStateModulePriorityHuman check

Verification queue

Loading verification preview

Preparing deterministic records locally. No test, network, or repository action is occurring.