Agent ReceiptsWave 1 governed shell
WorkspaceAweb / command-private
Every governed action leaves contract-linked proof.
Receipts are the operator-facing evidence layer for Mission Contracts. They bind authority, capability, policy decision, approval evidence, redaction, cost, result, failure, recovery, and hash-chain continuity.
Private routeThis shell inherits authenticated page-route posture and is not exposed as a public marketing surface.
Bounded authorityRunner registration and connector mutation stay blocked; signed Mission approval issuing, sandbox eval summaries, cost visibility, and operator sandbox interrupts are live.
Manual API gatePublished /api/v2/os9 fleets, runners, approvals, and mission contracts use route-level auth and explicit OpenAPI registration; broader OS9 APIs remain closed.