ForgeLayer

AgentOS provider-aware routing

Deterministic compatibility, separate from control eligibility.

Modeled fit uses server-owned capabilities. It is not provider performance, assignment, approval, verification, dispatch, or execution.
Inspect routing analysis
Deterministic recommendationNot assigned

Claude Code

secure payment webhook

Highest modeled fit
95/100
Recommendation state
deterministic recommendation
Recommendation use
available for human review
Routing analysis
routing-analysis-secure-payment-webhook
Task / repository
controlled-task-secure-payment-webhook / repository-connection-preview-secure-payment-webhook
Provider contacted
false
Dispatch / execution
disabled / disabled
Repository contents
not fetched
Evaluated
2026-07-31T00:00:00.000Z

Routing lifecycle provenance

The Work Record preserves analysis events without claiming provider activity.

Current recommendation state stays separate from append-only deterministic preview events.
routing_analysis_requested

Server-owned routing analysis requested for the deterministic task.

persisted: false
routing_requirements_derived

Requirements derived from task, capability, policy, repository, evidence, and verification records.

persisted: false
routing_candidates_evaluated

Codex, Claude Code, and Cursor evaluated with transparent modeled-fit components.

persisted: false
routing_recommendation_recorded

Claude Code recorded as the highest modeled fit; no assignment was created.

persisted: false

Work Record detail · deterministic control record

Follow one AI software task from intake to its next human-controlled action.

This detail view connects existing demo evidence and module records. It does not create production history, execute work, or grant decision authority.

Back to Work RecordsOpen JourneyOpen Ledger

Approval Authority foundation

Approval is bound to one exact work state.

Authority, approval, revocation, kill switches, verification, and execution transport remain separate control dimensions.
Open Approval Center

secure payment webhook

Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

blocked platform
Required authority
workspace owner
Principal
Demo workspace owner / demo authority
Exact object
controlled-task-secure-payment-webhook
Repository
repository-identity-secure-payment-webhook
Risk / budget
HIGH / task-budget-secure_payment_webhook-v1
Dispatch authorization
dispatch-authorization-preview-db15b2cd
Verification plan
verification-plan-2458e6d26e940ec0
Evaluated at
2026-08-12T04:57:33.546Z
Grant expiry
2030-07-11T09:00:00.000Z / not expired
Capability expiry
2030-07-29T09:00:00.000Z / not expired
Current authority
blocked platform
Approval requirement
Satisfied
Historical grant state
granted
Revocation
not revoked
Kill switch
inactive
Verification
incomplete
Repository runners
not run / blocked platform
Execution transport
disabled

Approval requirement satisfied. Repository verification has not run, and execution transport remains disabled.

Immutable bindingsapproval-grant-integrity-a9cdee22ac5c873d5f817dc8policy-snapshot-5cc8bbf1capability-package-secure-payment-webhook-v1verification-plan-2458e6d26e940ec0
Reasoning trail (3)
  • The exact human approval requirement is satisfied.
  • Repository verification is incomplete.
  • Repository runners are not run and execution transport is disabled.
Grant conditions (3)
  • Repository verification remains separate.
  • Execution transport remains disabled.
  • Any immutable binding change requires reevaluation.
Append-only lifecycle (3)
  1. approval authority requested · historical lifecycle event: Exact authority and immutable scope were requested.
  2. approval granted · historical lifecycle event: A deterministic historical approval grant was recorded.
  3. workflow progression blocked · historical lifecycle event: Workflow progression remains blocked; repository execution was not running.
Controlled TaskWork RecordReview RunVerification Plan

Repository lifecycle projection

Current repository state and historical preview events remain separate.

This Work Record references the same scenario-owned repository connection as its task, Review Run, verification plan, and Ledger record. Events are deterministic, append-only previews and do not describe GitHub actions.
Repository Connections

GitHub · repository host

acme-payments/payment-webhook-service

Recorded preview

Secure Payment Webhook · paths are deterministic task scope, not fetched repository contents.

Workspace membership
Workspace Recorded
Adapter
github-repository-adapter · github-repository-adapter-v1
Installation
Installation Unverified
Installation ownership
Installation Ownership Unverified
Repository ownership
Repository Ownership Unverified
Permissions
modeled · unrequested · ungranted · unverified
Metadata / contents
not fetched / not fetched
PR / checks
deterministic previews · not fetched
Webhook
Webhook Not Configured
Revocation / kill switch
Not Revoked / Inactive
Read / write / execution
false / false / false
WorkspaceIdentityTrustWorkspace Recorded
GithubHostTrustHost Recorded
GithubAccountIdentityTrustAccount Unverified
InstallationIdentityTrustInstallation Unverified
InstallationOwnershipTrustInstallation Ownership Unverified
RepositoryIdentityTrustRepository Recorded
RepositoryOwnershipTrustRepository Ownership Unverified
PermissionTrustPermissions Unverified
MetadataTrustMetadata Not Fetched
ContentsTrustContents Not Fetched
WebhookTrustWebhook Not Configured
HealthTrustHealth Not Observed
AdapterVersionTrustAdapter Recorded
PolicyBindingTrustDeterministic Preview
ProductionReadinessProduction Not Ready
Inspect deterministic task paths (2)
  • app/api/payments/webhook.ts
  • tests/payment-webhook.test.ts
Permission modelTrust boundaryControlled TaskRepoBrain binding
repository_host_recognized

GitHub repository host recognized.

External GitHub operation: false · persisted: false
repository_connection_recorded

Deterministic repository preview recorded.

External GitHub operation: false · persisted: false
repository_workspace_membership_recorded

Workspace membership recorded.

External GitHub operation: false · persisted: false
github_installation_required

A future reviewed GitHub App installation is required.

External GitHub operation: false · persisted: false
github_installation_unverified

GitHub installation remains unverified.

External GitHub operation: false · persisted: false
github_installation_ownership_unverified

Installation ownership remains unverified.

External GitHub operation: false · persisted: false
repository_ownership_unverified

Repository ownership remains unverified.

External GitHub operation: false · persisted: false
repository_permissions_modeled

Permissions are modeled but unrequested and unverified.

External GitHub operation: false · persisted: false
repository_permissions_unverified

No repository permission was requested, granted, or verified.

External GitHub operation: false · persisted: false
repository_metadata_not_fetched

Repository metadata was not fetched.

External GitHub operation: false · persisted: false
repository_contents_not_fetched

Repository contents were not fetched.

External GitHub operation: false · persisted: false
repository_pull_requests_not_fetched

Pull requests were not fetched.

External GitHub operation: false · persisted: false
repository_checks_not_fetched

Checks and statuses were not fetched.

External GitHub operation: false · persisted: false
repository_webhook_not_configured

No GitHub webhook is configured for this preview.

External GitHub operation: false · persisted: false
repository_read_transport_disabled

GitHub repository read transport remains disabled.

External GitHub operation: false · persisted: false
repository_write_transport_disabled

GitHub repository write transport remains disabled.

External GitHub operation: false · persisted: false
repository_dispatch_blocked

Dispatch remains blocked.

External GitHub operation: false · persisted: false
repository_execution_blocked

Repository execution remains blocked.

External GitHub operation: false · persisted: false

work-record-secure-payment-webhook

Secure a payment webhook

Review and harden payment webhook signature verification, replay protection, tests, and rollback evidence before merge.

Deterministic Preview · Historical fixture state: Verification RequiredHIGH riskpersisted: false
Observed fact

13 linked evidence items; 3 current evidence or verification gaps.

System recommendation

merge_after_changes

Draft decision

Unacknowledged · browser local only.

Current authority

Blocked Platform · cannot be bypassed.

Future execution

Disabled · no agent, repository, GitHub, or merge action.

Lifecycle

Task intake to analytics

Status is deterministic preview context
  1. 01
    Task intakeControl Flow

    Review and harden payment webhook signature verification, replay protection, tests, and rollback evidence before merge.

  2. 02
    Prompt contextPromptForge

    No PromptForge context is linked to this record.

  3. 03
    Agent routingAgentOS

    GitHub Copilot recommended; no agent executed.

    CompletedOpen AgentOS
  4. 04
    Workflow planControl Flow

    workflow_1ff2718c remains a draft plan.

  5. 05
    Output intakeWork Records

    Simulated intake metadata only; no live output was received.

  6. 06
    Review RunReview Runs

    Secure payment webhook replay handling; simulated: true, persisted: false.

  7. 07
    MergeGuardMergeGuard

    HIGH risk with merge_after_changes guidance.

  8. 08
    VerificationVerification

    Verify the payment and auth security gate: blocked.

  9. 09
    Human approvalApprovals

    Approve the payment-webhook control flow: pending. Recorded browser-local request history; current authority is evaluated separately.

    Historical/local eventOpen Approvals
  10. 10
    Work Record completionWork Records

    Completion remains blocked by evidence, verification, or approval requirements.

  11. 11
    LedgerAI Work Ledger

    Payment webhook verification evidence; persisted: false.

  12. 12
    AnalyticsAnalytics

    Derived analytics destination only; no production telemetry.

Task and changed paths

Review and harden payment webhook signature verification, replay protection, tests, and rollback evidence before merge.

  • app/api/payments/webhook.ts
  • tests/payment-webhook.test.ts

Prompt context

No linked PromptForge preset

not available; persisted: false.

Legacy deterministic agent-profile routing

Historical profile: GitHub Copilot

Work types: test_generation, code_review

  • Matches detected work: test generation, code review.
  • GitHub Copilot is strongest for small code edits and test generation.

Current provider-aware routing is shown in the canonical AgentOS routing projection above.

Legacy profile adapter provenance

Recommended for this task. No adapter authority or dispatch issued.

Provider: GitHub Copilot · adapter: github-copilot-agent-adapter

Status: Not Implemented · source: Unavailable

Compatibility: Adapter Unavailable · dispatch issued: false · remote task ID: none

Future dispatch package preview — no request sent.

Open Agent Connections

Provider connection control events

These are deterministic workspace provider lifecycle events, not provider activity. Membership is recorded, but no authentication, provider request, external session, or output occurred.

  • Workspace Provider Product Recognized · deterministic_server_owned_workspace_projection · persisted: false
  • Workspace Provider Connection Recorded · deterministic_server_owned_workspace_projection · persisted: false
  • Workspace Provider Membership Recorded · deterministic_server_owned_workspace_projection · persisted: false
  • Workspace Provider Ownership Unverified · deterministic_server_owned_workspace_projection · persisted: false
  • Workspace Provider Authentication Unavailable · deterministic_server_owned_workspace_projection · persisted: false
  • Workspace Provider Health Not Observed · deterministic_server_owned_workspace_projection · persisted: false
  • Workspace Provider Output Not Received · deterministic_server_owned_workspace_projection · persisted: false
  • Workspace Provider Dispatch Blocked · deterministic_server_owned_workspace_projection · persisted: false
  • Workspace Provider Execution Blocked · deterministic_server_owned_workspace_projection · persisted: false
Inspect provider connection record

Controlled dispatch provenance

Preview: dispatch-preview-db15b2cd

Authorization: dispatch-authorization-preview-db15b2cd · active: false

Provider: github_copilot · adapter: github-copilot-agent-adapter · readiness: false

Transport: disabled · provider request: not sent · remote task: none · cancellation: not requested

26 exact blockers retained.

Inspect dispatch evaluation

Workflow and output intake

Workflow workflow_1ff2718c: draft.

A deterministic output-intake preview exists; no agent execution or repository action occurred.

Intake: output-intake-ad49b550482bacea · source: Deterministic Demo · trust: Normalized Unverified.

Provider output received: false · independently verified: false · persisted: false.

  • app/api/payments/webhook.ts · Inside Scope
  • tests/payment-webhook.test.ts · Inside Scope

Integrity reference: 5374192946bc1fac15a91689e93521f424a1c0213990bdf325c808b93be0cb77

Open Evidence Manifest

Review Run and MergeGuard

Payment-only deterministic Review Run scoped to the webhook implementation and its matching test evidence.

Recommendation: merge_after_changes. Policy approval requirements are definitions; current authority is shown by the evaluator above.

Verification evidence

State: Blocked · mode: Simulated.

  • Payment webhook changes are scoped to the webhook implementation and its matching test. Repository verification has not run; the approval requirement is satisfied.
  • Check conclusion: failure
  • Human review required: yes

Runner results and provenance

Plan verification-plan-2458e6d26e940ec0 · version verification-plan-v1 · persisted: false.

Internal metadata controls: 7. Repository commands run: 0. Independent verification: incomplete.

  • internal_evidence_envelope_validation · Passed Internal Control · System Control · production requirement false
  • internal_evidence_provenance_validation · Passed Internal Control · System Control · production requirement false
  • internal_policy_snapshot_consistency · Passed Internal Control · System Control · production requirement false
  • internal_capability_scope_consistency · Passed Internal Control · System Control · production requirement false
  • internal_changed_file_scope_validation · Passed Internal Control · System Control · production requirement false
  • internal_integrity_reference_consistency · Passed Internal Control · System Control · production requirement false
  • internal_scenario_isolation_validation · Passed Internal Control · System Control · production requirement false
  • unit_test_runner · not run · Blocked Platform
  • static_security_runner · not run · Blocked Platform

Human verification remains separate and required. An internal-control pass does not prove code correctness or security.

Open Runner Plan

Human approval

Current effective state: Blocked Platform.

Approval requirement satisfied. Repository verification has not run, and execution transport remains disabled.

  • Repository verification has not run.
  • Execution transport is disabled.
  • Dispatch remains disabled.

Approval requirement: satisfied.

Policy requirement definition: The workflow has reached an explicit human gate and cannot advance on a system recommendation.

Required role: Workspace-Owner · evaluated at: 2026-08-12T04:57:33.459Z.

Historical/local request state: Pending · expiry: Not Expired.

Current next controlled action

Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

Evidence and gaps

13 available · 3 current evidence or verification gaps.

  • Webhook replay-protection evidence
  • Webhook security boundary confirmation
  • Independent payment security verification result

Policy snapshot

policy-snapshot-5cc8bbf1 · version 1.0.0-demo

Matched rules: payments-protected-path

Current blockers: Repository verification has not run. Execution transport is disabled. Dispatch remains disabled..

Current next: Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

Decision: Blocked Budget Exceeded · persisted: false

Open Policy Event

Capability package snapshot

capability-package-secure-payment-webhook-v1 · version task-capability-package-v1

State: Preview · authority issued: false · persisted: false

Repository: acme-payments/payment-webhook-service · branch: demo/secure-payment-webhook

Paths: exact:app/api/payments/webhook.ts, exact:tests/payment-webhook.test.ts

Tools: Read-only PR diff inspection, RepoBrain policy preview · network: disabled · secrets: none

Budget: $2.00 USD / 14,000 tokens / 40 minutes, deterministic demo estimate only.

Evaluated at: 2026-08-12T04:57:33.896Z · expiry: Not Expired · revocation: Not Revoked

Open Capability Snapshot

Ledger and analytics

The payment webhook and its matching test are in scope; repository tests and security verification remain not run.

Ledger is derived and non-persistent; analytics remains preview-only.

Local-only Work Record actions

No local Work Record action has been applied.

Legacy preview completion eligible: no. Local actions cannot change verification evidence or current authority.

Connected control context

Real module destinations

Agent recommendationWorkflow planReview Run evidenceMergeGuard resultVerification evidenceRunner resultsHuman approvalPolicy contextCapability snapshotLedger recordAnalyticsJourneyWork Record detail
ForgeLayer - AI Software Teams. Controlled.