Approval planeWave 1 governed shell
WorkspaceAweb / command-private

Risk, review, and blockers stay visible before any live controls exist.

This shell exposes approval pressure honestly. It does not fake action buttons, optimistic mutations, or hidden operator exceptions.

Private route

This shell inherits authenticated page-route posture and is not exposed as a public marketing surface.

Bounded authority

Runner registration and connector mutation stay blocked; signed Mission approval issuing, sandbox eval summaries, cost visibility, and operator sandbox interrupts are live.

Manual API gate

Published /api/v2/os9 fleets, runners, approvals, and mission contracts use route-level auth and explicit OpenAPI registration; broader OS9 APIs remain closed.

Approval objects3

3 curated, 0 live.

Live blockers0

Durable Maestro runs currently stopped on approval gates.

Pending2

Waiting review instead of slipping into silent wideners.

Approved1

Approved scope still stays bounded to read-only outcomes here.

Token issuer1

Session UI and v2 API clients issue signed Mission approval evidence.

Mission approval issuer

OS9 can now issue signed, contract-scoped approval tokens after validating the Mission Contract, gate, capability scope, and live blocked Maestro run context.

API surface

Tokens are authority evidence for Maestro runs; broader write controls remain blocked unless they bind back to a Mission Contract and receipt trail.

OS9 API widening

Keep /api/v2/os9 publication bounded to read-only fleets, runners, and mission contracts

pending
curated
Risk classadmin
ActorPlatform Security
RequestedMay 23, 03:08 PM UTC
ExpiresMay 24, 03:08 PM UTC
Approval token issuing is published, but broader mutation-capable controls remain intentionally unpublished.

Current action: Use signed Mission approval tokens only

Runner scope widening

Admit BYOC write-capable connector reach for Platform Control

pending
curated
Risk classwrite
ActorOperator Review
RequestedMay 23, 02:16 PM UTC
ExpiresMay 23, 08:16 PM UTC
Connector attestation still shows degraded posture.

Current action: Wait for clean attestation

Process Mirror export review

Expose read-only mission mirror summaries inside the private shell

approved
curated
Risk classread
ActorProduct Forge
RequestedMay 23, 11:02 AM UTC
ExpiresNo automatic expiry
Approved only for redacted summaries, not raw transcripts.

Current action: Render as summary cards only