{ "$schema": "./coding-agent-remote-control-capability-map.schema.json", "schema_version": "2.0.0", "observed_at": "2026-08-16T15:58:02Z", "evidence_policy": { "rule": "Only official documentation, tagged first-party source, installed CLI help/version evidence, existing first-party research reports, and checked-in Pairling source may support a claim. Unknown stays unknown. Planned or concurrent work is not current Pairling support.", "direct_sources_required": true, "missing_evidence_is_unsupported": true, "machine_readable_values": [ true, false, "qualified" ], "machine_readable_qualification": "qualified means a structured surface exists but is partial, unstable, local-process-only, or lacks a complete public contract", "support_values": [ "supported", "partial", "missing", "not_applicable" ], "safety_rule": "Provider output is untrusted. Permission grants, destructive changes, autonomy increases, scope expansion, executable integration changes, credentials, publication, and cloud delegation require an authenticated Pairling confirmation bound to provider, session, request, exact arguments, and fresh capability generation. Bypass modes and undocumented protocols are never exposed." }, "evidence_sources": [ { "source_id": "pairling-registry", "uri": "mac/companiond/providers/registry-data.json", "kind": "checked_in_source" }, { "source_id": "pairling-recognized", "uri": "mac/companiond/providers/external.py", "kind": "checked_in_source" }, { "source_id": "pairling-claude", "uri": "mac/companiond/providers/claude.py", "kind": "checked_in_source" }, { "source_id": "pairling-codex", "uri": "mac/companiond/providers/codex.py", "kind": "checked_in_source" }, { "source_id": "pairling-daemon", "uri": "mac/companiond/pairlingd.py", "kind": "checked_in_source" }, { "source_id": "acp-v1", "uri": "https://agentclientprotocol.com/protocol/v1/schema", "kind": "official_protocol" }, { "source_id": "acp-v2-draft", "uri": "https://github.com/agentclientprotocol/agent-client-protocol/tree/f2d6f889bf6ca68294547f30b335325735a9d99f/schema/v2", "kind": "draft_protocol" }, { "source_id": "codex-release", "uri": "https://github.com/openai/codex/releases/tag/rust-v0.147.0", "kind": "official_release" }, { "source_id": "codex-app-server", "uri": "https://developers.openai.com/codex/app-server", "kind": "official_docs" }, { "source_id": "codex-cli", "uri": "https://developers.openai.com/codex/cli/reference", "kind": "official_docs" }, { "source_id": "codex-config", "uri": "https://developers.openai.com/codex/config-reference", "kind": "official_docs" }, { "source_id": "codex-remote", "uri": "https://developers.openai.com/codex/remote-connections", "kind": "official_docs" }, { "source_id": "codex-thread-src", "uri": "https://github.com/openai/codex/blob/be6e8eac029b183056b7e4402879f15d2c85f61b/codex-rs/app-server-protocol/src/protocol/v2/thread.rs", "kind": "tagged_source" }, { "source_id": "codex-turn-src", "uri": "https://github.com/openai/codex/blob/be6e8eac029b183056b7e4402879f15d2c85f61b/codex-rs/app-server-protocol/src/protocol/v2/turn.rs", "kind": "tagged_source" }, { "source_id": "codex-item-src", "uri": "https://github.com/openai/codex/blob/be6e8eac029b183056b7e4402879f15d2c85f61b/codex-rs/app-server-protocol/src/protocol/v2/item.rs", "kind": "tagged_source" }, { "source_id": "codex-auth-src", "uri": "https://github.com/openai/codex/blob/be6e8eac029b183056b7e4402879f15d2c85f61b/codex-rs/app-server-transport/src/transport/auth.rs", "kind": "tagged_source" }, { "source_id": "codex-rc-src", "uri": "https://github.com/openai/codex/blob/be6e8eac029b183056b7e4402879f15d2c85f61b/codex-rs/app-server-protocol/src/protocol/v2/remote_control.rs", "kind": "tagged_source" }, { "source_id": "claude-remote", "uri": "https://code.claude.com/docs/en/remote-control", "kind": "official_docs" }, { "source_id": "claude-sdk", "uri": "https://code.claude.com/docs/en/agent-sdk/overview", "kind": "official_docs" }, { "source_id": "claude-stream", "uri": "https://code.claude.com/docs/en/agent-sdk/streaming-vs-single-mode", "kind": "official_docs" }, { "source_id": "claude-permissions", "uri": "https://code.claude.com/docs/en/permissions", "kind": "official_docs" }, { "source_id": "claude-hooks", "uri": "https://code.claude.com/docs/en/hooks", "kind": "official_docs" }, { "source_id": "claude-mcp", "uri": "https://code.claude.com/docs/en/mcp", "kind": "official_docs" }, { "source_id": "claude-package", "uri": "https://www.npmjs.com/package/@anthropic-ai/claude-agent-sdk/v/0.3.220", "kind": "official_package" }, { "source_id": "omp-release", "uri": "https://github.com/can1357/oh-my-pi/tree/v17.2.8", "kind": "official_release" }, { "source_id": "omp-acp", "uri": "https://github.com/can1357/oh-my-pi/blob/v17.2.8/packages/coding-agent/src/modes/acp/acp-agent.ts", "kind": "tagged_source" }, { "source_id": "omp-rpc", "uri": "https://github.com/can1357/oh-my-pi/blob/v17.2.8/packages/coding-agent/docs/rpc.md", "kind": "tagged_source" }, { "source_id": "omp-approval", "uri": "https://github.com/can1357/oh-my-pi/blob/v17.2.8/packages/coding-agent/docs/approval-mode.md", "kind": "tagged_source" }, { "source_id": "omp-mcp", "uri": "https://github.com/can1357/oh-my-pi/blob/v17.2.8/packages/coding-agent/docs/mcp-protocol-transports.md", "kind": "tagged_source" }, { "source_id": "opencode-release", "uri": "https://github.com/anomalyco/opencode/releases/tag/v1.18.10", "kind": "official_release" }, { "source_id": "opencode-server", "uri": "https://opencode.ai/docs/server/", "kind": "official_docs" }, { "source_id": "opencode-sdk", "uri": "https://opencode.ai/docs/sdk/", "kind": "official_docs" }, { "source_id": "opencode-acp", "uri": "https://opencode.ai/docs/acp/", "kind": "official_docs" }, { "source_id": "opencode-permissions", "uri": "https://opencode.ai/docs/permissions/", "kind": "official_docs" }, { "source_id": "opencode-acp-src", "uri": "https://github.com/anomalyco/opencode/blob/v1.18.10/packages/opencode/src/acp/service.ts", "kind": "tagged_source" }, { "source_id": "hermes-root", "uri": "https://github.com/NousResearch/hermes-agent/tree/937222f4ec80e6991e934e0b140b60e0030c55fd", "kind": "tagged_source" }, { "source_id": "hermes-integration", "uri": "https://github.com/NousResearch/hermes-agent/blob/937222f4ec80e6991e934e0b140b60e0030c55fd/website/docs/developer-guide/programmatic-integration.md", "kind": "tagged_source" }, { "source_id": "hermes-acp", "uri": "https://github.com/NousResearch/hermes-agent/blob/937222f4ec80e6991e934e0b140b60e0030c55fd/acp_adapter/server.py", "kind": "tagged_source" }, { "source_id": "hermes-security", "uri": "https://github.com/NousResearch/hermes-agent/blob/937222f4ec80e6991e934e0b140b60e0030c55fd/website/docs/user-guide/security.md", "kind": "tagged_source" }, { "source_id": "gemini-release", "uri": "https://github.com/google-gemini/gemini-cli/tree/v0.53.1", "kind": "official_release" }, { "source_id": "gemini-acp", "uri": "https://github.com/google-gemini/gemini-cli/tree/v0.53.1/packages/cli/src/acp", "kind": "tagged_source" }, { "source_id": "gemini-headless", "uri": "https://geminicli.com/docs/cli/headless/", "kind": "official_docs" }, { "source_id": "gemini-sessions", "uri": "https://geminicli.com/docs/cli/session-management/", "kind": "official_docs" }, { "source_id": "gemini-policy", "uri": "https://geminicli.com/docs/reference/policy-engine/", "kind": "official_docs" }, { "source_id": "gemini-tools", "uri": "https://geminicli.com/docs/reference/tools/", "kind": "official_docs" }, { "source_id": "gemini-mcp", "uri": "https://geminicli.com/docs/tools/mcp-server/", "kind": "official_docs" }, { "source_id": "gemini-checkpoints", "uri": "https://geminicli.com/docs/cli/checkpointing/", "kind": "official_docs" }, { "source_id": "gemini-migration", "uri": "https://developers.googleblog.com/an-important-update-transitioning-gemini-cli-to-antigravity-cli/", "kind": "official_notice" }, { "source_id": "grok-cli", "uri": "https://docs.x.ai/build/cli/reference", "kind": "official_docs" }, { "source_id": "grok-headless", "uri": "https://docs.x.ai/build/cli/headless-scripting", "kind": "official_docs" }, { "source_id": "grok-permissions", "uri": "https://docs.x.ai/build/features/permissions", "kind": "official_docs" }, { "source_id": "grok-acp", "uri": "https://github.com/xai-org/grok-build/blob/780d1388ff103ff0db0d8c14de65af6225b4860/crates/codegen/xai-grok-shell/src/agent/mvp_agent/acp_agent.rs", "kind": "tagged_source" }, { "source_id": "grok-queue", "uri": "https://github.com/xai-org/grok-build/blob/780d1388ff103ff0db0d8c14de65af6225b4860/crates/codegen/xai-grok-shell/src/agent/ext_parsers.rs", "kind": "tagged_source" }, { "source_id": "grok-output", "uri": "https://github.com/xai-org/grok-build/blob/780d1388ff103ff0db0d8c14de65af6225b4860/crates/codegen/xai-grok-pager/src/headless/reducer/acp.rs", "kind": "tagged_source" }, { "source_id": "kimi-root", "uri": "https://github.com/MoonshotAI/kimi-code/tree/6b56c11697771fe596099b38bafae539820309a4", "kind": "tagged_source" }, { "source_id": "kimi-docs", "uri": "https://moonshotai.github.io/kimi-code/", "kind": "official_docs" }, { "source_id": "kimi-acp", "uri": "https://moonshotai.github.io/kimi-code/en/reference/kimi-acp.html", "kind": "official_docs" }, { "source_id": "kimi-web", "uri": "https://moonshotai.github.io/kimi-code/en/reference/kimi-command.html#kimi-web", "kind": "official_docs" }, { "source_id": "kimi-snapshot", "uri": "https://github.com/MoonshotAI/kimi-code/blob/6b56c11697771fe596099b38bafae539820309a4/packages/kap-server/src/protocol/rest-snapshot.ts", "kind": "tagged_source" }, { "source_id": "kimi-prompts", "uri": "https://github.com/MoonshotAI/kimi-code/blob/6b56c11697771fe596099b38bafae539820309a4/packages/kap-server/src/routes/prompts.ts#L270-L307", "kind": "tagged_source" }, { "source_id": "copilot-release", "uri": "https://github.com/github/copilot-cli/releases/tag/v1.0.78", "kind": "official_release" }, { "source_id": "copilot-acp", "uri": "https://docs.github.com/en/copilot/reference/copilot-cli-reference/acp-server", "kind": "official_docs" }, { "source_id": "copilot-cli", "uri": "https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-command-reference", "kind": "official_docs" }, { "source_id": "copilot-events", "uri": "https://docs.github.com/en/copilot/how-tos/copilot-sdk/features/streaming-events", "kind": "official_docs" }, { "source_id": "copilot-steering", "uri": "https://docs.github.com/en/copilot/how-tos/copilot-sdk/features/steering-and-queueing", "kind": "official_docs" }, { "source_id": "copilot-remote", "uri": "https://docs.github.com/en/copilot/how-tos/copilot-cli/use-copilot-cli/steer-remotely", "kind": "official_docs" }, { "source_id": "qwen-release", "uri": "https://github.com/QwenLM/qwen-code/releases/tag/v0.21.4", "kind": "official_release" }, { "source_id": "qwen-headless", "uri": "https://qwenlm.github.io/qwen-code-docs/en/users/features/headless/", "kind": "official_docs" }, { "source_id": "qwen-approval", "uri": "https://qwenlm.github.io/qwen-code-docs/en/users/features/approval-mode/", "kind": "official_docs" }, { "source_id": "qwen-checkpoint", "uri": "https://qwenlm.github.io/qwen-code-docs/en/users/features/checkpointing/", "kind": "official_docs" }, { "source_id": "cline-release", "uri": "https://github.com/cline/cline/releases/tag/cli-v3.0.49", "kind": "official_release" }, { "source_id": "cline-cli", "uri": "https://docs.cline.bot/cli/cli-reference", "kind": "official_docs" }, { "source_id": "cline-hub", "uri": "https://docs.cline.bot/sdk/architecture/hub-spoke", "kind": "official_docs" }, { "source_id": "cline-connectors", "uri": "https://docs.cline.bot/cli/connectors", "kind": "official_docs" }, { "source_id": "aider-release", "uri": "https://github.com/Aider-AI/aider/releases/tag/v0.86.0", "kind": "official_release" }, { "source_id": "aider-commands", "uri": "https://aider.chat/docs/usage/commands.html", "kind": "official_docs" }, { "source_id": "goose-acp", "uri": "https://goose-docs.ai/docs/guides/acp-clients/", "kind": "official_docs" }, { "source_id": "goose-cli", "uri": "https://goose-docs.ai/docs/guides/goose-cli-commands/", "kind": "official_docs" }, { "source_id": "openhands-server", "uri": "https://docs.openhands.dev/sdk/arch/agent-server", "kind": "official_docs" }, { "source_id": "amp-sdk", "uri": "https://ampcode.com/manual/sdk/typescript", "kind": "official_docs" }, { "source_id": "antigravity-headless", "uri": "https://antigravity.google/docs/cli/headless", "kind": "official_docs" }, { "source_id": "antigravity-cli", "uri": "https://github.com/google-antigravity/antigravity-cli/tree/21f650e7bb852f58562425ddd0c7d203c80e3d0e", "kind": "tagged_source" }, { "source_id": "antigravity-sdk", "uri": "https://github.com/google-antigravity/antigravity-sdk-python/tree/v0.1.9", "kind": "tagged_source" }, { "source_id": "droid-release", "uri": "https://docs.factory.ai/changelog/release-notes", "kind": "official_docs" }, { "source_id": "droid-exec", "uri": "https://docs.factory.ai/droid-exec/overview", "kind": "official_docs" }, { "source_id": "droid-cli", "uri": "https://docs.factory.ai/droid-cli/cli-reference", "kind": "official_docs" }, { "source_id": "droid-client-src", "uri": "https://github.com/Factory-AI/droid-sdk-typescript/blob/c35b42b12a043f9f10053e854ff0d9306d2d60e9/src/protocol/client.ts", "kind": "tagged_source" }, { "source_id": "droid-transport-src", "uri": "https://github.com/Factory-AI/droid-sdk-typescript/blob/c35b42b12a043f9f10053e854ff0d9306d2d60e9/src/transport.ts", "kind": "tagged_source" }, { "source_id": "droid-constants-src", "uri": "https://github.com/Factory-AI/droid-sdk-typescript/blob/c35b42b12a043f9f10053e854ff0d9306d2d60e9/src/protocol/constants.ts", "kind": "tagged_source" }, { "source_id": "roo-install", "uri": "https://docs.roocode.com/getting-started/installing", "kind": "official_docs" }, { "source_id": "pairling-operations", "uri": "mac/companiond/providers/operations.py", "kind": "checked_in_source" }, { "source_id": "pairling-codex-control", "uri": "mac/companiond/providers/codex_app_server.py", "kind": "checked_in_source" }, { "source_id": "pairling-codex-control-tests", "uri": "mac/tests/test_codex_app_server_driver.py", "kind": "checked_in_source" }, { "source_id": "pairling-claude-sdk-control", "uri": "mac/companiond/providers/claude_agent_sdk.py", "kind": "checked_in_source" }, { "source_id": "pairling-claude-sdk-tests", "uri": "mac/tests/test_claude_agent_sdk_driver.py", "kind": "checked_in_source" }, { "source_id": "pairling-acp-control", "uri": "mac/companiond/providers/acp.py", "kind": "checked_in_source" }, { "source_id": "pairling-acp-profiles", "uri": "mac/companiond/providers/acp_profiles.py", "kind": "checked_in_source" }, { "source_id": "pairling-acp-tests", "uri": "mac/tests/test_acp_provider_protocol.py", "kind": "checked_in_source" }, { "source_id": "pairling-acp-profile-tests", "uri": "mac/tests/test_acp_provider_profiles.py", "kind": "checked_in_source" }, { "source_id": "pairling-opencode-control", "uri": "mac/companiond/providers/opencode.py", "kind": "checked_in_source" }, { "source_id": "pairling-opencode-tests", "uri": "mac/tests/test_opencode_native_driver.py", "kind": "checked_in_source" }, { "source_id": "pairling-hermes-control", "uri": "mac/companiond/providers/hermes_runs.py", "kind": "checked_in_source" }, { "source_id": "pairling-hermes-tests", "uri": "mac/tests/test_hermes_runs_control_driver.py", "kind": "checked_in_source" }, { "source_id": "pairling-copilot-control", "uri": "mac/companiond/providers/copilot.py", "kind": "checked_in_source" }, { "source_id": "pairling-copilot-sidecar", "uri": "mac/companiond/providers/copilot_sdk_sidecar.mjs", "kind": "checked_in_source" }, { "source_id": "pairling-copilot-packages", "uri": "npm/provider-sdks/package-lock.json", "kind": "checked_in_source" }, { "source_id": "pairling-copilot-install-tests", "uri": "mac/tests/test_pairling_install_contract.py", "kind": "checked_in_source" }, { "source_id": "pairling-copilot-tests", "uri": "mac/tests/test_copilot_sdk_driver.py", "kind": "checked_in_source" }, { "source_id": "pairling-qwen-control", "uri": "mac/companiond/providers/qwen.py", "kind": "checked_in_source" }, { "source_id": "pairling-qwen-tests", "uri": "mac/tests/test_qwen_sdk_driver_contract.py", "kind": "checked_in_source" }, { "source_id": "pairling-openhands-control", "uri": "mac/companiond/providers/openhands.py", "kind": "checked_in_source" }, { "source_id": "pairling-openhands-tests", "uri": "mac/tests/test_openhands_control_driver.py", "kind": "checked_in_source" }, { "source_id": "pairling-droid-control", "uri": "mac/companiond/providers/droid_jsonrpc.py", "kind": "checked_in_source" }, { "source_id": "pairling-droid-tests", "uri": "mac/tests/test_factory_droid_control_driver.py", "kind": "checked_in_source" } ], "providers": [ { "provider_id": "aider", "display_name": "Aider", "implementation_eligibility": { "status": "terminal_floor", "reason": "No official structured session protocol or server was found. Only a narrow owned PTY or plain process is honest." }, "source_refs": [ "aider-release", "aider-commands" ] }, { "provider_id": "amp", "display_name": "Sourcegraph Amp CLI and SDK", "implementation_eligibility": { "status": "research_candidate", "reason": "Serious SDK and remote surface but prerelease and no established safe default approval or remote-terminal contract." }, "source_refs": [ "amp-sdk" ] }, { "provider_id": "antigravity", "display_name": "Google Antigravity CLI", "implementation_eligibility": { "status": "map_only", "reason": "The installed CLI accepts user prompts only through -p/--prompt process argv. Pairling has no reviewed stdin or authenticated IPC transport, so managed launch and prompt control are excluded. The alpha SDK owns a private loopback harness and cannot control an existing TUI." }, "source_refs": [ "antigravity-headless", "antigravity-cli", "antigravity-sdk", "gemini-migration", "pairling-registry", "pairling-recognized" ] }, { "provider_id": "claude_code", "display_name": "Anthropic Claude Code", "implementation_eligibility": { "status": "implementation_candidate", "reason": "Pairling already implements deep Claude sessions, transcripts, hooks, permissions and terminal control. Agent SDK is the typed local path; cloud Remote Control internals stay private." }, "source_refs": [ "claude-remote", "claude-sdk", "claude-stream", "claude-permissions", "claude-hooks", "claude-mcp", "claude-package", "pairling-claude", "pairling-daemon" ] }, { "provider_id": "cline_cli", "display_name": "Cline CLI", "implementation_eligibility": { "status": "implementation_candidate", "reason": "Structured CLI/ACP and detachable hub are serious. Prompt defaults auto-approve and hub auth was not established, so local ACP/SDK only initially." }, "source_refs": [ "cline-release", "cline-cli", "cline-hub", "cline-connectors", "acp-v1" ] }, { "provider_id": "codex", "display_name": "OpenAI Codex CLI", "implementation_eligibility": { "status": "implementation_candidate", "reason": "Pairling already has deep Codex transcript and PTY support. The public app-server is the preferred typed expansion, with experimental method and transport gates preserved." }, "source_refs": [ "codex-release", "codex-app-server", "codex-cli", "codex-config", "codex-remote", "codex-thread-src", "codex-turn-src", "codex-item-src", "codex-auth-src", "codex-rc-src", "pairling-codex", "pairling-daemon" ] }, { "provider_id": "droid", "display_name": "Factory Droid", "implementation_eligibility": { "status": "implementation_candidate", "reason": "The pinned first-party SDK exposes a serious typed JSON-RPC session, control, catalog and callback surface. Pairling must gate on the exact CLI, SDK protocol and API versions and preserve provider-specific settings and callbacks." }, "source_refs": [ "droid-release", "droid-exec", "droid-cli", "droid-client-src", "droid-transport-src", "droid-constants-src" ] }, { "provider_id": "gemini_cli", "display_name": "Google Gemini CLI", "implementation_eligibility": { "status": "implementation_candidate", "reason": "ACP is the safest typed baseline and headless JSON suits bounded jobs. Access must be checked because unpaid consumer service ended 2026-06-18 while enterprise and paid paths remain." }, "source_refs": [ "gemini-release", "gemini-acp", "gemini-headless", "gemini-sessions", "gemini-policy", "gemini-tools", "gemini-mcp", "gemini-checkpoints", "gemini-migration", "acp-v1", "pairling-registry", "pairling-recognized" ] }, { "provider_id": "github_copilot_cli", "display_name": "GitHub Copilot CLI", "implementation_eligibility": { "status": "implementation_candidate", "reason": "GA SDK is the preferred stable typed surface. ACP is a negotiated fallback; public TCP, unrestricted approvals and private cloud internals are excluded." }, "source_refs": [ "copilot-release", "copilot-acp", "copilot-cli", "copilot-events", "copilot-steering", "copilot-remote" ] }, { "provider_id": "goose", "display_name": "Block Goose", "implementation_eligibility": { "status": "research_candidate", "reason": "Experimental ACP is preferred. Serve is usable only with secret and origin controls; exact schemas and defaults need a dedicated implementation pass." }, "source_refs": [ "goose-acp", "goose-cli", "acp-v1" ] }, { "provider_id": "grok_build", "display_name": "xAI Grok Build", "implementation_eligibility": { "status": "implementation_candidate", "reason": "ACP baseline plus x.ai queue, interject, plan and usage overlays. Beta and unstable extensions require negotiation and default-deny unknown x.ai methods." }, "source_refs": [ "grok-cli", "grok-headless", "grok-permissions", "grok-acp", "grok-queue", "grok-output", "acp-v1", "pairling-registry", "pairling-recognized" ] }, { "provider_id": "hermes_agent", "display_name": "Nous Research Hermes Agent", "implementation_eligibility": { "status": "implementation_candidate", "reason": "Durable sessions, approval-gated Runs/SSE, ACP and rich TUI overlays are serious. Unversioned TUI and non-interchangeable auth boundaries require separate drivers." }, "source_refs": [ "hermes-root", "hermes-integration", "hermes-acp", "hermes-security", "acp-v1", "pairling-registry", "pairling-recognized" ] }, { "provider_id": "kimi_code", "display_name": "Moonshot AI Kimi Code CLI", "implementation_eligibility": { "status": "implementation_candidate", "reason": "ACP baseline and public web command expose snapshots, queue/steer, approvals, tasks, files and usage. Private pre-1.0 packages, no TLS and inert fields require pinning and loopback." }, "source_refs": [ "kimi-root", "kimi-docs", "kimi-acp", "kimi-web", "kimi-snapshot", "kimi-prompts" ] }, { "provider_id": "omp", "display_name": "Oh My Pi", "implementation_eligibility": { "status": "implementation_candidate", "reason": "ACP supplies the standard baseline and RPC v2 preserves unique steering, queue, paging and subagent power. Both require a Pairling safety kernel because headless defaults can reset to yolo." }, "source_refs": [ "omp-release", "omp-acp", "omp-rpc", "omp-approval", "omp-mcp", "acp-v1" ] }, { "provider_id": "opencode", "display_name": "OpenCode", "implementation_eligibility": { "status": "implementation_candidate", "reason": "HTTP/SSE and SDK are broad, but installed/latest skew, absent default auth, experimental endpoints and direct shell routes require strict negotiation and deny rules." }, "source_refs": [ "opencode-release", "opencode-server", "opencode-sdk", "opencode-acp", "opencode-permissions", "opencode-acp-src", "pairling-registry", "pairling-recognized" ] }, { "provider_id": "openhands", "display_name": "OpenHands CLI and Agent Server", "implementation_eligibility": { "status": "implementation_candidate", "reason": "Authenticated Agent Server is a serious machine plane. Only the server path qualifies because headless and NeverConfirm defaults bypass review." }, "source_refs": [ "openhands-server" ] }, { "provider_id": "qwen_code", "display_name": "Qwen Code", "implementation_eligibility": { "status": "implementation_candidate", "reason": "SDK and ACP provide structured lifecycle, input, interrupt, model, effort, permission, context and usage. Streaming input is unfinished and unsafe modes are excluded." }, "source_refs": [ "qwen-release", "qwen-headless", "qwen-approval", "qwen-checkpoint", "acp-v1" ] }, { "provider_id": "roo_code", "display_name": "Roo Code", "implementation_eligibility": { "status": "map_only", "reason": "Official evidence established editor installation, not an independent serious CLI or supported remote session protocol." }, "source_refs": [ "roo-install" ] } ], "implementations": [ { "implementation_id": "aider.implementation.observed", "provider_id": "aider", "identity_status": "source_pinned", "provider_version": "0.86.0", "provider_channel": "interactive PTY", "observed_versions": [ "0.86.0", "main commit 5dc9490 observed" ], "observed_channels": [ "interactive PTY", "plain one-shot" ], "transport_ids": [ "aider.transport.1.interactive_pty", "aider.transport.2.plain_one_shot" ], "release_membership": null }, { "implementation_id": "amp.implementation.observed", "provider_id": "amp", "identity_status": "observed", "provider_version": "CLI 0.0.178547753-g51f676", "provider_channel": "TypeScript AsyncIterable stream-json", "observed_versions": [ "CLI 0.0.178547753-g51f676", "SDK 0.1.0-20260729105907-g72d5ca3" ], "observed_channels": [ "TypeScript AsyncIterable stream-json", "remote runners", "threads", "multiplayer", "CLI" ], "transport_ids": [ "amp.transport.1.typescript_asynciterable_stream_json", "amp.transport.2.remote_runners", "amp.transport.3.threads", "amp.transport.4.multiplayer", "amp.transport.5.cli" ], "release_membership": null }, { "implementation_id": "antigravity.implementation.observed", "provider_id": "antigravity", "identity_status": "source_pinned", "provider_version": "CLI 1.1.9+ commit 21f650e7bb852f58562425ddd0c7d203c80e3d0e", "provider_channel": "headless JSON", "observed_versions": [ "CLI 1.1.9+ commit 21f650e7bb852f58562425ddd0c7d203c80e3d0e", "alpha SDK 0.1.9" ], "observed_channels": [ "headless JSON", "stream-json NDJSON", "alpha SDK private harness", "TUI" ], "transport_ids": [ "antigravity.transport.1.headless_json", "antigravity.transport.2.stream_json_ndjson", "antigravity.transport.3.alpha_sdk_private_harness", "antigravity.transport.4.tui" ], "release_membership": null }, { "implementation_id": "claude_code.implementation.reviewed", "provider_id": "claude_code", "identity_status": "release_pinned", "provider_version": "2.1.220", "provider_channel": "agent-sdk", "observed_versions": [ "Claude Code CLI 2.1.220", "@anthropic-ai/claude-agent-sdk 0.3.220" ], "observed_channels": [ "Agent SDK structured subprocess", "CLI stream-json", "hooks", "Research Preview Remote Control", "interactive PTY" ], "transport_ids": [ "claude_code.transport.1.agent_sdk_structured_subprocess", "claude_code.transport.2.cli_stream_json", "claude_code.transport.3.hooks", "claude_code.transport.4.research_preview_remote_control", "claude_code.transport.5.interactive_pty" ], "release_membership": { "runtime_provider_id": "claude", "provider_version": "2.1.220", "provider_channel": "agent-sdk", "launch_config_digest": "sha256:7e851b3da005a51db0ffef96911311dacb5478f6a1338582d77c71a6bb129606", "physical_device_required": false } }, { "implementation_id": "cline_cli.implementation.reviewed", "provider_id": "cline_cli", "identity_status": "release_pinned", "provider_version": "3.0.49", "provider_channel": "stable", "observed_versions": [ "CLI 3.0.49" ], "observed_channels": [ "JSONL", "ACP stdio", "loopback WebSocket hub", "SDK hub/remote", "connectors" ], "transport_ids": [ "cline_cli.transport.1.jsonl", "cline_cli.transport.2.acp_stdio", "cline_cli.transport.3.loopback_websocket_hub", "cline_cli.transport.4.sdk_hub_remote", "cline_cli.transport.5.connectors" ], "release_membership": { "runtime_provider_id": "cline_cli", "provider_version": "3.0.49", "provider_channel": "stable", "launch_config_digest": "sha256:3485cbb8bbbf86fc61a7f1d43e962d271f19a8a4205f788c64d75d6cf612191a", "physical_device_required": false } }, { "implementation_id": "codex.implementation.reviewed", "provider_id": "codex", "identity_status": "release_pinned", "provider_version": "0.147.0", "provider_channel": "app-server-stdio", "observed_versions": [ "installed @openai/codex 0.147.0", "tag rust-v0.147.0", "commit be6e8eac029b183056b7e4402879f15d2c85f61b" ], "observed_channels": [ "app-server JSON-RPC v2 over stdio", "experimental authenticated WebSocket", "codex exec --json JSONL", "official Remote Control", "interactive PTY" ], "transport_ids": [ "codex.transport.1.app_server_json_rpc_v2_over_stdio", "codex.transport.2.experimental_authenticated_websocket", "codex.transport.3.codex_exec_json_jsonl", "codex.transport.4.official_remote_control", "codex.transport.5.interactive_pty" ], "release_membership": { "runtime_provider_id": "codex", "provider_version": "0.147.0", "provider_channel": "app-server-stdio", "launch_config_digest": "sha256:d42873de2a459ad6c36640c3358576f24230f263185f5571edd8024417b502c3", "physical_device_required": false } }, { "implementation_id": "droid.implementation.reviewed", "provider_id": "droid", "identity_status": "release_pinned", "provider_version": "0.185.0", "provider_channel": "stable", "observed_versions": [ "CLI 0.185.0 released 2026-07-30", "SDK package 0.6.0", "protocol 1.143.0", "API 1.0.0", "JSON-RPC 2.0", "SDK source commit c35b42b12a043f9f10053e854ff0d9306d2d60e9" ], "observed_channels": [ "official SDK JSON-RPC transport", "droid exec", "interactive CLI" ], "transport_ids": [ "droid.transport.1.official_sdk_json_rpc_transport", "droid.transport.2.droid_exec", "droid.transport.3.interactive_cli" ], "release_membership": { "runtime_provider_id": "droid", "provider_version": "0.185.0", "provider_channel": "stable", "launch_config_digest": "sha256:af85da078c81f84cb1da88e82357130cdf1604b5a0648d811b3f91264fd4b782", "physical_device_required": false } }, { "implementation_id": "gemini_cli.implementation.reviewed", "provider_id": "gemini_cli", "identity_status": "release_pinned", "provider_version": "0.53.1", "provider_channel": "stable", "observed_versions": [ "installed 0.53.0", "official v0.53.1 commit 19a68016bdc9cd4177a155846dd51f282c3c1c59", "ACP SDK 0.16.1", "MCP SDK 1.23.0" ], "observed_channels": [ "ACP stdio", "headless JSON/stream-json", "TUI", "hooks", "local files" ], "transport_ids": [ "gemini_cli.transport.1.acp_stdio", "gemini_cli.transport.2.headless_json_stream_json", "gemini_cli.transport.3.tui", "gemini_cli.transport.4.hooks", "gemini_cli.transport.5.local_files" ], "release_membership": { "runtime_provider_id": "gemini_cli", "provider_version": "0.53.1", "provider_channel": "stable", "launch_config_digest": "sha256:2a13d565f12a54cf6cebd0a2c336fdae63e0f6580867eed15b5c477f9f7dbb10", "physical_device_required": false } }, { "implementation_id": "github_copilot_cli.implementation.reviewed", "provider_id": "github_copilot_cli", "identity_status": "release_pinned", "provider_version": "1.0.78", "provider_channel": "stable", "observed_versions": [ "stable CLI release 1.0.78", "packaged official CLI/package 1.0.78", "packaged official SDK 1.0.8 protocol v3", "SDK prerelease 1.0.9-preview.2 commit 5e09c685731163b1631891470ed3411bc99957d0" ], "observed_channels": [ "GA Copilot SDK JSON-RPC", "ACP stdio/TCP Public Preview", "noninteractive process", "GitHub Remote Control", "TUI" ], "transport_ids": [ "github_copilot_cli.transport.1.ga_copilot_sdk_json_rpc", "github_copilot_cli.transport.2.acp_stdio_tcp_public_preview", "github_copilot_cli.transport.3.noninteractive_process", "github_copilot_cli.transport.4.github_remote_control", "github_copilot_cli.transport.5.tui" ], "release_membership": { "runtime_provider_id": "copilot", "provider_version": "1.0.78", "provider_channel": "stable", "launch_config_digest": "sha256:ee23cdb8f7afdf7d7ea51e480762d76d7dc9c4fa6b9239ba666bd4cc5749c133", "physical_device_required": false } }, { "implementation_id": "goose.implementation.observed", "provider_id": "goose", "identity_status": "observed", "provider_version": "1.45.0", "provider_channel": "experimental ACP stdio", "observed_versions": [ "1.45.0" ], "observed_channels": [ "experimental ACP stdio", "authenticated serve HTTP/WebSocket", "session JSON/export", "CLI" ], "transport_ids": [ "goose.transport.1.experimental_acp_stdio", "goose.transport.2.authenticated_serve_http_websocket", "goose.transport.3.session_json_export", "goose.transport.4.cli" ], "release_membership": null }, { "implementation_id": "grok_build.implementation.reviewed", "provider_id": "grok_build", "identity_status": "release_pinned", "provider_version": "grok 0.2.118 (1e1687c1cf6a) [stable]", "provider_channel": "stable", "observed_versions": [ "installed 0.2.118 commit 1e1687c1cf6a", "official 0.2.118 commit 780d1388ff103ff0db0d8c14de65af6225b4860", "ACP dependency 0.10.4" ], "observed_channels": [ "ACP stdio agent mode", "headless streaming JSON", "loopback serve with secret", "TUI" ], "transport_ids": [ "grok_build.transport.1.acp_stdio_agent_mode", "grok_build.transport.2.headless_streaming_json", "grok_build.transport.3.loopback_serve_with_secret", "grok_build.transport.4.tui" ], "release_membership": { "runtime_provider_id": "grok_build", "provider_version": "grok 0.2.118 (1e1687c1cf6a) [stable]", "provider_channel": "stable", "launch_config_digest": "sha256:1206e54467db122bc5dfd09c961704b824b775e7d3c8f2fefe3f06bad3950fd6", "physical_device_required": false } }, { "implementation_id": "hermes_agent.implementation.reviewed", "provider_id": "hermes_agent", "identity_status": "release_pinned", "provider_version": "0.19.0", "provider_channel": "upstream-937222f4", "observed_versions": [ "Hermes Agent 0.19.0", "commit 937222f4ec80e6991e934e0b140b60e0030c55fd", "agent-client-protocol 0.9.0 protocol v1" ], "observed_channels": [ "REST and Runs/SSE", "TUI WebSocket JSON-RPC", "ACP stdio", "Hermes MCP server", "CLI" ], "transport_ids": [ "hermes_agent.transport.1.rest_and_runs_sse", "hermes_agent.transport.2.tui_websocket_json_rpc", "hermes_agent.transport.3.acp_stdio", "hermes_agent.transport.4.hermes_mcp_server", "hermes_agent.transport.5.cli" ], "release_membership": { "runtime_provider_id": "hermes_agent", "provider_version": "0.19.0", "provider_channel": "upstream-937222f4", "launch_config_digest": "sha256:9640041b241f7227608a134943ba301f2a6de3c70471993bf9be85f30fde34e7", "physical_device_required": false } }, { "implementation_id": "kimi_code.implementation.reviewed", "provider_id": "kimi_code", "identity_status": "release_pinned", "provider_version": "0.31.1", "provider_channel": "stable", "observed_versions": [ "0.31.1 commit 6b56c11697771fe596099b38bafae539820309a4", "kap-server 0.2.0 private", "ACP adapter 0.3.6 private", "ACP SDK 0.23.0" ], "observed_channels": [ "ACP stdio", "kimi web REST/WebSocket/OpenAPI/AsyncAPI", "headless stream-json", "TUI" ], "transport_ids": [ "kimi_code.transport.1.acp_stdio", "kimi_code.transport.2.kimi_web_rest_websocket_openapi_asyncapi", "kimi_code.transport.3.headless_stream_json", "kimi_code.transport.4.tui" ], "release_membership": { "runtime_provider_id": "kimi_code", "provider_version": "0.31.1", "provider_channel": "stable", "launch_config_digest": "sha256:61039cf84884f6237f1719170f83a352f341b24e9ebc428e4fafd188df216de9", "physical_device_required": false } }, { "implementation_id": "omp.implementation.reviewed", "provider_id": "omp", "identity_status": "release_pinned", "provider_version": "semver:*", "provider_channel": "stable", "observed_versions": [ "OMP 17.2.8", "commit 5af71dc9cf132538e072806424f71f43f734d9ae", "patched ACP SDK 1.2.1", "RPC helper 0.1.0 Alpha" ], "observed_channels": [ "ACP stdio", "RPC v2 JSONL stdio", "single-shot JSON mode", "interactive PTY", "collaboration links" ], "transport_ids": [ "omp.transport.1.acp_stdio", "omp.transport.2.rpc_v2_jsonl_stdio", "omp.transport.3.single_shot_json_mode", "omp.transport.4.interactive_pty", "omp.transport.5.collaboration_links" ], "release_membership": { "runtime_provider_id": "omp", "provider_version": "semver:*", "provider_channel": "stable", "launch_config_digest": "sha256:1b32e1bf8d928a0ca734441254a328133d7c144d05eca46f547daaf7e148d496", "physical_device_required": true } }, { "implementation_id": "opencode.implementation.reviewed", "provider_id": "opencode", "identity_status": "release_pinned", "provider_version": "1.15.10", "provider_channel": "stable", "observed_versions": [ "upstream 1.18.10 commit 7902e04c3a67f7c69726bc955efb46e29214c797", "installed 1.15.10" ], "observed_channels": [ "HTTP/REST", "SSE", "official SDK", "ACP stdio", "run JSON", "TUI" ], "transport_ids": [ "opencode.transport.1.http_rest", "opencode.transport.2.sse", "opencode.transport.3.official_sdk", "opencode.transport.4.acp_stdio", "opencode.transport.5.run_json", "opencode.transport.6.tui" ], "release_membership": { "runtime_provider_id": "opencode", "provider_version": "1.15.10", "provider_channel": "stable", "launch_config_digest": "sha256:c2fd9b6a3067f04ac359d82735f284dc045c5686d18f9f404857b7718746fb33", "physical_device_required": false } }, { "implementation_id": "openhands.implementation.reviewed", "provider_id": "openhands", "identity_status": "release_pinned", "provider_version": "1.40.0", "provider_channel": "stable", "observed_versions": [ "CLI 1.8.0", "Agent Server 1.40.0" ], "observed_channels": [ "Agent Server REST/OpenAPI", "authenticated WebSocket", "CLI/headless" ], "transport_ids": [ "openhands.transport.1.agent_server_rest_openapi", "openhands.transport.2.authenticated_websocket", "openhands.transport.3.cli_headless" ], "release_membership": { "runtime_provider_id": "openhands", "provider_version": "1.40.0", "provider_channel": "stable", "launch_config_digest": "sha256:5fa5cb727a97b3947b9dc32b4c84519afa1220148a539fa484bca071ee395ddf", "physical_device_required": false } }, { "implementation_id": "qwen_code.implementation.reviewed", "provider_id": "qwen_code", "identity_status": "release_pinned", "provider_version": "0.21.4", "provider_channel": "stable", "observed_versions": [ "0.21.4 tag f670c3d112f1adb46482047eb4bf7" ], "observed_channels": [ "TypeScript SDK JSONL", "headless JSON/stream-json", "ACP stdio", "TUI" ], "transport_ids": [ "qwen_code.transport.1.typescript_sdk_jsonl", "qwen_code.transport.2.headless_json_stream_json", "qwen_code.transport.3.acp_stdio", "qwen_code.transport.4.tui" ], "release_membership": { "runtime_provider_id": "qwen_code", "provider_version": "0.21.4", "provider_channel": "stable", "launch_config_digest": "sha256:c573c212c507c51f62c068ecb4b9f85e3aaa16aa26ba312104c39601c1fcefcd", "physical_device_required": false } }, { "implementation_id": "roo_code.implementation.observed", "provider_id": "roo_code", "identity_status": "observed", "provider_version": "IDE extension deployment observed; no verified independent CLI version", "provider_channel": "IDE extension", "observed_versions": [ "IDE extension deployment observed; no verified independent CLI version" ], "observed_channels": [ "IDE extension" ], "transport_ids": [ "roo_code.transport.1.ide_extension" ], "release_membership": null } ], "transports": [ { "transport_id": "aider.transport.1.interactive_pty", "provider_id": "aider", "description": "interactive PTY", "kind": "pty" }, { "transport_id": "aider.transport.2.plain_one_shot", "provider_id": "aider", "description": "plain one-shot", "kind": "unknown" }, { "transport_id": "amp.transport.1.typescript_asynciterable_stream_json", "provider_id": "amp", "description": "TypeScript AsyncIterable stream-json", "kind": "unknown" }, { "transport_id": "amp.transport.2.remote_runners", "provider_id": "amp", "description": "remote runners", "kind": "cloud_service" }, { "transport_id": "amp.transport.3.threads", "provider_id": "amp", "description": "threads", "kind": "unknown" }, { "transport_id": "amp.transport.4.multiplayer", "provider_id": "amp", "description": "multiplayer", "kind": "unknown" }, { "transport_id": "amp.transport.5.cli", "provider_id": "amp", "description": "CLI", "kind": "cli_process" }, { "transport_id": "antigravity.transport.1.headless_json", "provider_id": "antigravity", "description": "headless JSON", "kind": "cli_process" }, { "transport_id": "antigravity.transport.2.stream_json_ndjson", "provider_id": "antigravity", "description": "stream-json NDJSON", "kind": "unknown" }, { "transport_id": "antigravity.transport.3.alpha_sdk_private_harness", "provider_id": "antigravity", "description": "alpha SDK private harness", "kind": "sdk_subprocess" }, { "transport_id": "antigravity.transport.4.tui", "provider_id": "antigravity", "description": "TUI", "kind": "pty" }, { "transport_id": "claude_code.transport.1.agent_sdk_structured_subprocess", "provider_id": "claude_code", "description": "Agent SDK structured subprocess", "kind": "sdk_subprocess" }, { "transport_id": "claude_code.transport.2.cli_stream_json", "provider_id": "claude_code", "description": "CLI stream-json", "kind": "cli_process" }, { "transport_id": "claude_code.transport.3.hooks", "provider_id": "claude_code", "description": "hooks", "kind": "unknown" }, { "transport_id": "claude_code.transport.4.research_preview_remote_control", "provider_id": "claude_code", "description": "Research Preview Remote Control", "kind": "cloud_service" }, { "transport_id": "claude_code.transport.5.interactive_pty", "provider_id": "claude_code", "description": "interactive PTY", "kind": "pty" }, { "transport_id": "cline_cli.transport.1.jsonl", "provider_id": "cline_cli", "description": "JSONL", "kind": "cli_process" }, { "transport_id": "cline_cli.transport.2.acp_stdio", "provider_id": "cline_cli", "description": "ACP stdio", "kind": "acp_stdio" }, { "transport_id": "cline_cli.transport.3.loopback_websocket_hub", "provider_id": "cline_cli", "description": "loopback WebSocket hub", "kind": "websocket_loopback" }, { "transport_id": "cline_cli.transport.4.sdk_hub_remote", "provider_id": "cline_cli", "description": "SDK hub/remote", "kind": "cloud_service" }, { "transport_id": "cline_cli.transport.5.connectors", "provider_id": "cline_cli", "description": "connectors", "kind": "unknown" }, { "transport_id": "codex.transport.1.app_server_json_rpc_v2_over_stdio", "provider_id": "codex", "description": "app-server JSON-RPC v2 over stdio", "kind": "jsonrpc_stdio" }, { "transport_id": "codex.transport.2.experimental_authenticated_websocket", "provider_id": "codex", "description": "experimental authenticated WebSocket", "kind": "cloud_service" }, { "transport_id": "codex.transport.3.codex_exec_json_jsonl", "provider_id": "codex", "description": "codex exec --json JSONL", "kind": "cli_process" }, { "transport_id": "codex.transport.4.official_remote_control", "provider_id": "codex", "description": "official Remote Control", "kind": "cloud_service" }, { "transport_id": "codex.transport.5.interactive_pty", "provider_id": "codex", "description": "interactive PTY", "kind": "pty" }, { "transport_id": "droid.transport.1.official_sdk_json_rpc_transport", "provider_id": "droid", "description": "official SDK JSON-RPC transport", "kind": "sdk_subprocess" }, { "transport_id": "droid.transport.2.droid_exec", "provider_id": "droid", "description": "droid exec", "kind": "cli_process" }, { "transport_id": "droid.transport.3.interactive_cli", "provider_id": "droid", "description": "interactive CLI", "kind": "pty" }, { "transport_id": "gemini_cli.transport.1.acp_stdio", "provider_id": "gemini_cli", "description": "ACP stdio", "kind": "acp_stdio" }, { "transport_id": "gemini_cli.transport.2.headless_json_stream_json", "provider_id": "gemini_cli", "description": "headless JSON/stream-json", "kind": "cli_process" }, { "transport_id": "gemini_cli.transport.3.tui", "provider_id": "gemini_cli", "description": "TUI", "kind": "pty" }, { "transport_id": "gemini_cli.transport.4.hooks", "provider_id": "gemini_cli", "description": "hooks", "kind": "unknown" }, { "transport_id": "gemini_cli.transport.5.local_files", "provider_id": "gemini_cli", "description": "local files", "kind": "unknown" }, { "transport_id": "github_copilot_cli.transport.1.ga_copilot_sdk_json_rpc", "provider_id": "github_copilot_cli", "description": "GA Copilot SDK JSON-RPC", "kind": "sdk_subprocess" }, { "transport_id": "github_copilot_cli.transport.2.acp_stdio_tcp_public_preview", "provider_id": "github_copilot_cli", "description": "ACP stdio/TCP Public Preview", "kind": "acp_stdio" }, { "transport_id": "github_copilot_cli.transport.3.noninteractive_process", "provider_id": "github_copilot_cli", "description": "noninteractive process", "kind": "pty" }, { "transport_id": "github_copilot_cli.transport.4.github_remote_control", "provider_id": "github_copilot_cli", "description": "GitHub Remote Control", "kind": "cloud_service" }, { "transport_id": "github_copilot_cli.transport.5.tui", "provider_id": "github_copilot_cli", "description": "TUI", "kind": "pty" }, { "transport_id": "goose.transport.1.experimental_acp_stdio", "provider_id": "goose", "description": "experimental ACP stdio", "kind": "acp_stdio" }, { "transport_id": "goose.transport.2.authenticated_serve_http_websocket", "provider_id": "goose", "description": "authenticated serve HTTP/WebSocket", "kind": "cloud_service" }, { "transport_id": "goose.transport.3.session_json_export", "provider_id": "goose", "description": "session JSON/export", "kind": "unknown" }, { "transport_id": "goose.transport.4.cli", "provider_id": "goose", "description": "CLI", "kind": "cli_process" }, { "transport_id": "grok_build.transport.1.acp_stdio_agent_mode", "provider_id": "grok_build", "description": "ACP stdio agent mode", "kind": "acp_stdio" }, { "transport_id": "grok_build.transport.2.headless_streaming_json", "provider_id": "grok_build", "description": "headless streaming JSON", "kind": "cli_process" }, { "transport_id": "grok_build.transport.3.loopback_serve_with_secret", "provider_id": "grok_build", "description": "loopback serve with secret", "kind": "http_loopback" }, { "transport_id": "grok_build.transport.4.tui", "provider_id": "grok_build", "description": "TUI", "kind": "pty" }, { "transport_id": "hermes_agent.transport.1.rest_and_runs_sse", "provider_id": "hermes_agent", "description": "REST and Runs/SSE", "kind": "http_loopback" }, { "transport_id": "hermes_agent.transport.2.tui_websocket_json_rpc", "provider_id": "hermes_agent", "description": "TUI WebSocket JSON-RPC", "kind": "websocket_loopback" }, { "transport_id": "hermes_agent.transport.3.acp_stdio", "provider_id": "hermes_agent", "description": "ACP stdio", "kind": "acp_stdio" }, { "transport_id": "hermes_agent.transport.4.hermes_mcp_server", "provider_id": "hermes_agent", "description": "Hermes MCP server", "kind": "http_loopback" }, { "transport_id": "hermes_agent.transport.5.cli", "provider_id": "hermes_agent", "description": "CLI", "kind": "cli_process" }, { "transport_id": "kimi_code.transport.1.acp_stdio", "provider_id": "kimi_code", "description": "ACP stdio", "kind": "acp_stdio" }, { "transport_id": "kimi_code.transport.2.kimi_web_rest_websocket_openapi_asyncapi", "provider_id": "kimi_code", "description": "kimi web REST/WebSocket/OpenAPI/AsyncAPI", "kind": "cloud_service" }, { "transport_id": "kimi_code.transport.3.headless_stream_json", "provider_id": "kimi_code", "description": "headless stream-json", "kind": "cli_process" }, { "transport_id": "kimi_code.transport.4.tui", "provider_id": "kimi_code", "description": "TUI", "kind": "pty" }, { "transport_id": "omp.transport.1.acp_stdio", "provider_id": "omp", "description": "ACP stdio", "kind": "acp_stdio" }, { "transport_id": "omp.transport.2.rpc_v2_jsonl_stdio", "provider_id": "omp", "description": "RPC v2 JSONL stdio", "kind": "cli_process" }, { "transport_id": "omp.transport.3.single_shot_json_mode", "provider_id": "omp", "description": "single-shot JSON mode", "kind": "unknown" }, { "transport_id": "omp.transport.4.interactive_pty", "provider_id": "omp", "description": "interactive PTY", "kind": "pty" }, { "transport_id": "omp.transport.5.collaboration_links", "provider_id": "omp", "description": "collaboration links", "kind": "unknown" }, { "transport_id": "opencode.transport.1.http_rest", "provider_id": "opencode", "description": "HTTP/REST", "kind": "http_loopback" }, { "transport_id": "opencode.transport.2.sse", "provider_id": "opencode", "description": "SSE", "kind": "http_loopback" }, { "transport_id": "opencode.transport.3.official_sdk", "provider_id": "opencode", "description": "official SDK", "kind": "sdk_subprocess" }, { "transport_id": "opencode.transport.4.acp_stdio", "provider_id": "opencode", "description": "ACP stdio", "kind": "acp_stdio" }, { "transport_id": "opencode.transport.5.run_json", "provider_id": "opencode", "description": "run JSON", "kind": "unknown" }, { "transport_id": "opencode.transport.6.tui", "provider_id": "opencode", "description": "TUI", "kind": "pty" }, { "transport_id": "openhands.transport.1.agent_server_rest_openapi", "provider_id": "openhands", "description": "Agent Server REST/OpenAPI", "kind": "http_loopback" }, { "transport_id": "openhands.transport.2.authenticated_websocket", "provider_id": "openhands", "description": "authenticated WebSocket", "kind": "cloud_service" }, { "transport_id": "openhands.transport.3.cli_headless", "provider_id": "openhands", "description": "CLI/headless", "kind": "cli_process" }, { "transport_id": "qwen_code.transport.1.typescript_sdk_jsonl", "provider_id": "qwen_code", "description": "TypeScript SDK JSONL", "kind": "sdk_subprocess" }, { "transport_id": "qwen_code.transport.2.headless_json_stream_json", "provider_id": "qwen_code", "description": "headless JSON/stream-json", "kind": "cli_process" }, { "transport_id": "qwen_code.transport.3.acp_stdio", "provider_id": "qwen_code", "description": "ACP stdio", "kind": "acp_stdio" }, { "transport_id": "qwen_code.transport.4.tui", "provider_id": "qwen_code", "description": "TUI", "kind": "pty" }, { "transport_id": "roo_code.transport.1.ide_extension", "provider_id": "roo_code", "description": "IDE extension", "kind": "editor_extension" } ], "capabilities": [ { "capability_id": "aider.commands_model_git", "provider_id": "aider", "implementation_ids": [ "aider.implementation.observed" ], "plane": "control", "behavior": "Manage files/map; ask, architect, code, model and reasoning modes; diff, undo, repo map and history through human slash commands.", "exact_exposure": [ "/add|drop|read-only|map", "/architect|ask|code|model|reasoning-effort", "/diff|undo", "repo map|history" ], "lifecycle": "before_turn", "machine_readable": false, "maturity": "public", "version_constraints": "0.86.0.", "remote_safety": "confirmation", "required_pairling_addition": "Terminal macros only with confirmation and receipt; do not claim typed state.", "shared_semantics": "terminal.provider_commands", "provider_overlay": true, "source_refs": [ "aider-commands" ] }, { "capability_id": "aider.terminal_session", "provider_id": "aider", "implementation_ids": [ "aider.implementation.observed" ], "plane": "control", "behavior": "Start one-shot or interactive, send terminal input and Ctrl-C while retaining a partial answer.", "exact_exposure": [ "aider [files]", "interactive prompt", "one-shot", "Ctrl-C retains partial" ], "lifecycle": "during_turn", "machine_readable": false, "maturity": "public", "version_constraints": "0.86.0; no structured protocol.", "remote_safety": "required_local_only", "required_pairling_addition": "Owned local PTY floor with process identity, text/key/interrupt receipts; no semantic scraping.", "shared_semantics": "terminal.floor", "provider_overlay": true, "source_refs": [ "aider-commands" ] }, { "capability_id": "aider.unattended", "provider_id": "aider", "implementation_ids": [ "aider.implementation.observed" ], "plane": "control", "behavior": "Unattended approval and auto-commit mutate without a per-action gate.", "exact_exposure": [ "--yes-always", "auto-commit" ], "lifecycle": "before_turn", "machine_readable": false, "maturity": "unsafe", "version_constraints": "0.86.0.", "remote_safety": "do_not_expose", "required_pairling_addition": "Deny in every Pairling launch profile.", "shared_semantics": "approval.bypass", "provider_overlay": true, "source_refs": [ "aider-commands" ] }, { "capability_id": "amp.remote_runners_multiplayer", "provider_id": "amp", "implementation_ids": [ "amp.implementation.observed" ], "plane": "control", "behavior": "Remote runners, threads and multiplayer include remote terminal power whose auth and approval boundary was not established.", "exact_exposure": [ "remote runners", "threads", "multiplayer", "remote terminal" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "experimental", "version_constraints": "Prerelease; evidence gap.", "remote_safety": "do_not_expose", "required_pairling_addition": "Map only until official auth, tenant, permission, cancel and terminal scoping; never expose raw terminal.", "shared_semantics": "provider.remote_runner", "provider_overlay": true, "source_refs": [ "amp-sdk" ] }, { "capability_id": "amp.sdk_threads_events", "provider_id": "amp", "implementation_ids": [ "amp.implementation.observed" ], "plane": "receive", "behavior": "Run SDK prompts with AsyncIterable stream-json threads, messages, tools and results.", "exact_exposure": [ "TypeScript SDK", "AsyncIterable", "stream-json", "threads|messages|tool events|result" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "experimental", "version_constraints": "Prerelease SDK and CLI.", "remote_safety": "safe", "required_pairling_addition": "Research schemas and approvals first; use an owned sidecar with redaction and bounds if admitted.", "shared_semantics": "session.lifecycle_events", "provider_overlay": true, "source_refs": [ "amp-sdk" ] }, { "capability_id": "antigravity.alpha_sdk", "provider_id": "antigravity", "implementation_ids": [ "antigravity.implementation.observed" ], "plane": "control", "behavior": "Typed async sessions, steps and chunks, cancel, continuation, tools, MCP, policies, triggers and attachments over a private owned loopback harness; no existing-TUI control.", "exact_exposure": [ "google-antigravity 0.1.9", "typed session|steps|chunks", "ChatResponse.cancel", "continuation IDs", "tools|MCP|policies|triggers|attachments", "private loopback WebSocket" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "experimental", "version_constraints": "Alpha 0.1.9; private wire.", "remote_safety": "do_not_expose", "required_pairling_addition": "Map only; no reverse engineering until a public transport exists.", "shared_semantics": "provider.private_sdk", "provider_overlay": true, "source_refs": [ "antigravity-sdk" ] }, { "capability_id": "antigravity.headless_job", "provider_id": "antigravity", "implementation_ids": [ "antigravity.implementation.observed" ], "plane": "receive", "behavior": "Produce final JSON or init, step_update and result NDJSON for a one-shot prompt supplied through -p/--prompt process argv, with schema, resume, model, effort, agent, mode, sandbox, permissions and timeout; cancel the owned child.", "exact_exposure": [ "agy -p|--prompt --output-format json|stream-json", "--json-schema", "-c|--conversation", "--model|--effort|--agent|--mode|--sandbox|--permissions|--print-timeout", "cancel child" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "public", "version_constraints": "CLI >=1.1.9; one-shot only.", "remote_safety": "do_not_expose", "required_pairling_addition": "Require a reviewed non-argv transport, such as stdin or authenticated IPC, that keeps prompts and attachment-derived text out of process argv before any managed launch or control support.", "shared_semantics": "headless.job", "provider_overlay": true, "source_refs": [ "antigravity-headless", "antigravity-cli", "pairling-recognized" ] }, { "capability_id": "antigravity.tui_exclusions", "provider_id": "antigravity", "implementation_ids": [ "antigravity.implementation.observed" ], "plane": "control", "behavior": "TUI-only auth, approval, sessions, fork, rewind, artifacts, usage and tasks exist; bypass, secrets, installs, add-dir, cache edits and scraping are excluded.", "exact_exposure": [ "TUI auth|permission|diff|sessions|fork|rewind|artifacts|usage|tasks", "--dangerously-skip-permissions", "sandbox bypass", "plugin|MCP install", "--add-dir", "cache edits", "TUI scraping" ], "lifecycle": "provider_wide", "machine_readable": false, "maturity": "unsafe", "version_constraints": "CLI >=1.1.9.", "remote_safety": "do_not_expose", "required_pairling_addition": "None; local TUI only.", "shared_semantics": "terminal.unsupported_semantics", "provider_overlay": true, "source_refs": [ "antigravity-cli" ] }, { "capability_id": "claude.auth_remote_control", "provider_id": "claude_code", "implementation_ids": [ "claude_code.implementation.reviewed" ], "plane": "control", "behavior": "Read account state, authenticate locally, and start, name or resume Research Preview Remote Control sessions. Full OAuth subscriptions only; no public SDK, webhook or wire.", "exact_exposure": [ "/login", "/logout", "claude auth", "claude setup-token", "accountInfo", "--remote-control", "--rc", "/remote-control", "/rc", "--remote-control-session-name-prefix", "--spawn same-dir|worktree|session", "--capacity", "--continue", "--session-id" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "experimental", "version_constraints": "Remote Control Research Preview; resume flags 2.1.200+; no API keys, cloud providers or gateway.", "remote_safety": "confirmation", "required_pairling_addition": "Retain status-only auth unless a public reviewed contract exists; keep browser/token flows and private Remote Control transport local.", "shared_semantics": "provider.auth_remote_pairing", "provider_overlay": true, "source_refs": [ "claude-remote", "claude-sdk", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "capability_id": "claude.events_hooks_usage", "provider_id": "claude_code", "implementation_ids": [ "claude_code.implementation.reviewed" ], "plane": "receive", "behavior": "Receive SDK, JSON and stream-json messages, partial output, result cost/usage/denials/session ID, account/MCP/context diagnostics and 32 documented hook events across command, HTTP, MCP-tool, prompt and agent hooks.", "exact_exposure": [ "--output-format json|stream-json", "--include-partial", "Query AsyncGenerator", "result cost|usage|denials|session_id", "HOOK_EVENTS", "command|http|mcp_tool|prompt|agent hook", "/status", "/doctor", "/usage", "/cost", "/context" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "public", "version_constraints": "2.1.220/0.3.220; structured usage method experimental.", "remote_safety": "safe", "required_pairling_addition": "Add redacted usage/cost and complete documented event normalization with bounds; keep command hooks local-only.", "shared_semantics": "event.lifecycle_usage", "provider_overlay": true, "source_refs": [ "claude-hooks", "claude-sdk", "pairling-daemon", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "capability_id": "claude.integrations_agents_commands", "provider_id": "claude_code", "implementation_ids": [ "claude_code.implementation.reviewed" ], "plane": "control", "behavior": "Inspect or mutate MCP, plugins, commands, skills and agents; spawn or stop tasks. claude mcp serve is a tool server, not a complete session protocol.", "exact_exposure": [ "claude mcp add|get|list|remove|login|logout|add-json|reset", "SDK MCP status|reconnect|toggle|setMcpServers", "claude mcp serve", "claude plugin install|uninstall|enable|disable|update|list|validate|prune", "reloadPlugins", "reloadSkills", "supportedCommands", "supportedAgents", "/agents", "/tasks", "/background", "stopTask" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "public", "version_constraints": "2.1.220/0.3.220; catalogs dynamic.", "remote_safety": "confirmation", "required_pairling_addition": "Add MCP reload only with a fresh server catalog; retain read-only catalogs and require exact confirmation for reconnect/enable changes and task control.", "shared_semantics": "provider.integration_catalog", "provider_overlay": true, "source_refs": [ "claude-mcp", "claude-sdk", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "capability_id": "claude.model_context_checkpoint", "provider_id": "claude_code", "implementation_ids": [ "claude_code.implementation.reviewed" ], "plane": "control", "behavior": "Select model, fallback, effort, thinking and fast; inspect context; compact, clear, manage memory, dry-run or apply rewind and inspect diffs/files.", "exact_exposure": [ "--model", "--fallback-model", "--effort", "--thinking", "--thinking-display", "/model", "/effort", "/fast", "setModel", "getContextUsage", "/context", "/compact", "/clear", "/memory", "rewindFiles(dryRun)", "/rewind", "/diff", "SDK readFile(base64)" ], "lifecycle": "before_turn", "machine_readable": "qualified", "maturity": "version_specific", "version_constraints": "2.1.220/0.3.220; setMaxThinkingTokens deprecated; several controls terminal-only.", "remote_safety": "confirmation", "required_pairling_addition": "Add negotiated reasoning/effort choices and bounded checkpoint/context detail; confirm clear, memory writes and rewind application.", "shared_semantics": "session.model_context", "provider_overlay": true, "source_refs": [ "claude-sdk", "claude-package", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "capability_id": "claude.prompt_interrupt_permissions", "provider_id": "claude_code", "implementation_ids": [ "claude_code.implementation.reviewed" ], "plane": "control", "behavior": "Stream prompt input, interrupt or stop tasks, configure allow/ask/deny rules and permission mode, and answer canUseTool or PermissionRequest hooks. SDK cannot attach to an arbitrary existing TUI.", "exact_exposure": [ "query({prompt:AsyncIterable})", "Query.streamInput", "Query.interrupt", "stopTask", "permissions.allow|ask|deny|additionalDirectories|defaultMode|disableBypassPermissionsMode", "--allowedTools", "--disallowedTools", "--permission-mode", "/permissions", "canUseTool", "setPermissionMode", "PermissionRequest", "PermissionDenied" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "public", "version_constraints": "2.1.220/0.3.220; stopTask receipt capability-negotiated.", "remote_safety": "confirmation", "required_pairling_addition": "Retain the four typed operations; add reviewed rule-state and stop semantics without allowing bypassPermissions, dangerously-skip-permissions or unattended persistent grants.", "shared_semantics": "turn.approval_control", "provider_overlay": true, "source_refs": [ "claude-stream", "claude-permissions", "claude-hooks", "pairling-daemon", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "capability_id": "claude.release_auth_status", "provider_id": "claude_code", "implementation_ids": [ "claude_code.implementation.reviewed" ], "plane": "read", "behavior": "Read redacted Claude account state without exposing authentication, tokens or Research Preview Remote Control transport.", "exact_exposure": [ "accountInfo" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "version_specific", "version_constraints": "Claude Code 2.1.220 with @anthropic-ai/claude-agent-sdk 0.3.220.", "remote_safety": "safe", "required_pairling_addition": "", "shared_semantics": "release.auth_status", "provider_overlay": true, "source_refs": [ "claude-remote", "claude-sdk", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "capability_id": "claude.release_integration_catalog", "provider_id": "claude_code", "implementation_ids": [ "claude_code.implementation.reviewed" ], "plane": "control", "behavior": "Read reviewed command, agent and MCP catalogs and apply only correlated MCP reconnect or enabled-state changes.", "exact_exposure": [ "supportedCommands", "supportedAgents", "SDK MCP status|reconnect|toggle" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "version_specific", "version_constraints": "Claude Code 2.1.220 with @anthropic-ai/claude-agent-sdk 0.3.220.", "remote_safety": "confirmation", "required_pairling_addition": "", "shared_semantics": "release.integration_catalog", "provider_overlay": true, "source_refs": [ "claude-mcp", "claude-sdk", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "capability_id": "claude.release_model_context_checkpoint", "provider_id": "claude_code", "implementation_ids": [ "claude_code.implementation.reviewed" ], "plane": "control", "behavior": "Read bounded context and use reviewed model, compact and rewind controls for the exact owned Claude Agent SDK session.", "exact_exposure": [ "setModel", "getContextUsage", "/compact", "rewindFiles(dryRun)", "/rewind" ], "lifecycle": "before_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "Claude Code 2.1.220 with @anthropic-ai/claude-agent-sdk 0.3.220.", "remote_safety": "confirmation", "required_pairling_addition": "", "shared_semantics": "release.model_context_checkpoint", "provider_overlay": true, "source_refs": [ "claude-sdk", "claude-package", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "capability_id": "claude.session_history_lifecycle", "provider_id": "claude_code", "implementation_ids": [ "claude_code.implementation.reviewed" ], "plane": "read", "behavior": "List and inspect sessions, messages and subagents; resume, continue, rename, tag, fork, clear and delete through CLI or SDK SessionStore.", "exact_exposure": [ "--resume", "--continue", "listSessions", "getSessionInfo", "getSessionMessages", "listSubagents", "getSubagentMessages", "hook transcript_path", "/rename", "/fork", "/clear", "SDK rename|tag|fork|delete" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "version_specific", "version_constraints": "CLI 2.1.220; SDK 0.3.220; SessionStore alpha.", "remote_safety": "safe", "required_pairling_addition": "Retain bounded history; add exact owned resume/fork targets and confirmed rename/tag/clear/delete only after SDK capability and correlation proof.", "shared_semantics": "session.lifecycle", "provider_overlay": true, "source_refs": [ "claude-sdk", "pairling-claude", "pairling-daemon", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "capability_id": "cline.connectors_schedules", "provider_id": "cline_cli", "implementation_ids": [ "cline_cli.implementation.reviewed" ], "plane": "control", "behavior": "Telegram, Slack, Discord, Google Chat, WhatsApp and Linear connectors and scheduled agents can execute host tasks; unrestricted defaults are unsafe.", "exact_exposure": [ "Telegram|Slack|Discord|Google Chat|WhatsApp|Linear", "allowed-user-id", "hooks", "scheduled agents" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "unsafe", "version_constraints": "3.0.49; connector-specific.", "remote_safety": "do_not_expose", "required_pairling_addition": "Map only pending signed webhooks, explicit identity allowlists and a separate threat model.", "shared_semantics": "provider.external_connector", "provider_overlay": true, "source_refs": [ "cline-connectors" ] }, { "capability_id": "cline.hub_workers", "provider_id": "cline_cli", "implementation_ids": [ "cline_cli.implementation.reviewed" ], "plane": "control", "behavior": "Persistent local hub, detachable workers and multi-client SDK sessions. The cited architecture does not establish authentication.", "exact_exposure": [ "cline hub", "127.0.0.1:25463", "WebSocket hub", "SDK hub|remote", "detached workers", "multi-client" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "public", "version_constraints": "3.0.49; auth unknown.", "remote_safety": "required_local_only", "required_pairling_addition": "Map only until first-party auth and ownership are verified; loopback owned process only.", "shared_semantics": "provider.local_hub", "provider_overlay": true, "source_refs": [ "cline-hub" ] }, { "capability_id": "cline.json_acp_session", "provider_id": "cline_cli", "implementation_ids": [ "cline_cli.implementation.reviewed" ], "plane": "control", "behavior": "Run JSONL or ACP sessions with structured messages, tools, permissions, usage and lifecycle.", "exact_exposure": [ "cline --json", "cline --acp", "ACP initialize|new|load|prompt|cancel|update|request_permission" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "public", "version_constraints": "3.0.49; negotiate ACP.", "remote_safety": "confirmation", "required_pairling_addition": "Add exact owned resume targets and separately attested redacted usage; keep hub WebSocket/connectors and auto-approve behavior unavailable.", "shared_semantics": "acp.session", "provider_overlay": true, "source_refs": [ "cline-cli", "cline-release", "acp-v1", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "codex.approval_policy", "provider_id": "codex", "implementation_ids": [ "codex.implementation.reviewed" ], "plane": "control", "behavior": "Discover/configure approval and sandbox policy and answer command, file, permissions, user-input, MCP elicitation, dynamic-tool and guardian-review requests with request-scoped decisions.", "exact_exposure": [ "AskForApproval untrusted|on-request|never", "sandbox readOnly|workspaceWrite|dangerFullAccess|externalSandbox", "item/commandExecution/requestApproval", "item/fileChange/requestApproval", "item/permissions/requestApproval", "item/tool/requestUserInput", "mcpServer/elicitation/request", "item/tool/call", "thread/approveGuardianDeniedAction", "permissionProfile/list", "configRequirements/read", "serverRequest/resolved" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "experimental", "version_constraints": "0.147.0; granular policy and some requests require experimentalApi.", "remote_safety": "confirmation", "required_pairling_addition": "Add discovery-first safe policy state plus exact schemas for each remaining request kind; keep bypass and danger-full-access modes excluded.", "shared_semantics": "approval.decision", "provider_overlay": true, "source_refs": [ "codex-item-src", "codex-thread-src", "pairling-daemon", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "capability_id": "codex.auth_transport_remote_control", "provider_id": "codex", "implementation_ids": [ "codex.implementation.reviewed" ], "plane": "control", "behavior": "Read account state, start/cancel login, logout, refresh trusted-host tokens, authenticate experimental WebSocket, and manage official Remote Control pairing/clients. The relay wire is not public.", "exact_exposure": [ "account/read", "account/login/start", "account/login/cancel", "account/logout", "account/chatgptAuthTokens/refresh", "capability-token", "signed-bearer-token", "remoteControl/enable|disable|status/read", "remoteControl/pairing/start|status", "remoteControl/client/list|revoke" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "experimental", "version_constraints": "0.147.0; WebSocket and Remote Control RPCs experimental; official relay undocumented.", "remote_safety": "confirmation", "required_pairling_addition": "Retain redacted status only unless separately reviewed; keep credentials and undocumented relay behavior local and never reverse engineer the relay.", "shared_semantics": "provider.auth_remote_pairing", "provider_overlay": true, "source_refs": [ "codex-auth-src", "codex-rc-src", "codex-remote", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "capability_id": "codex.external_import_cloud_mcp_server", "provider_id": "codex", "implementation_ids": [ "codex.implementation.reviewed" ], "plane": "control", "behavior": "Detect and import external agent configuration/history, expose the separate two-tool Codex MCP server, and operate experimental cloud task exec/list/status/diff/apply. These provider-only powers are not part of the app-server common session surface.", "exact_exposure": [ "externalAgentConfig/detect|import|import/recordHistory|import/readHistories", "codex mcp-server", "MCP tools codex|codex-reply", "codex cloud exec|list|status|diff|apply" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "experimental", "version_constraints": "0.147.0; external import is local and potentially sensitive; cloud commands experimental; mcp-server is not a full session protocol.", "remote_safety": "confirmation", "required_pairling_addition": "Keep external import and cloud execution provider-overlay only with exact previews and confirmation. Treat codex mcp-server as a narrow tool server, not a replacement for app-server, and do not expose cloud apply this release.", "shared_semantics": null, "provider_overlay": true, "source_refs": [ "codex-cli", "codex-app-server" ] }, { "capability_id": "codex.files_exec_events_usage", "provider_id": "codex", "implementation_ids": [ "codex.implementation.reviewed" ], "plane": "receive", "behavior": "Read/watch scoped files, search, receive file patches/terminal deltas/lifecycle/item events and usage, and consume reduced exec JSONL. Generic FS mutation, unsandboxed shell/process/raw events and feedback upload are excluded.", "exact_exposure": [ "fs/readFile|getMetadata|readDirectory|watch|unwatch", "fs/changed", "fuzzyFileSearch", "turn/diff/updated", "item/fileChange/patchUpdated", "command/exec|write|resize|terminate", "fs/writeFile|createDirectory|remove|copy", "thread/shellCommand", "process/spawn|writeStdin|resizePty|kill", "thread|turn|item notifications", "account/rateLimits/read", "account/usage/read", "tokenUsage", "codex exec --json", "experimentalRawEvents", "feedback/upload" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "experimental", "version_constraints": "0.147.0; app-server experimental; process/raw events require experimentalApi.", "remote_safety": "required_local_only", "required_pairling_addition": "Add root-scoped file, patch and reduced-exec reads with bounds and redaction; continue denying generic FS mutation, unsandboxed execution, raw events and feedback upload.", "shared_semantics": "event.artifact_usage", "provider_overlay": true, "source_refs": [ "codex-item-src", "codex-turn-src", "pairling-codex", "pairling-daemon", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "capability_id": "codex.models_config_integrations", "provider_id": "codex", "implementation_ids": [ "codex.implementation.reviewed" ], "plane": "control", "behavior": "Discover/select model, provider, tier, effort, summary, personality and collaboration mode; read/write config; inspect skills/hooks/MCP/apps/plugins/dynamic tools. Plugin and marketplace mutation remains under development.", "exact_exposure": [ "model/list", "modelProvider/capabilities/read", "collaborationMode/list", "thread/settings/update", "config/read", "config/value/write", "config/batchWrite", "experimentalFeature/list|enablement/set", "skills/list", "hooks/list", "mcpServerStatus/list", "mcpServer/resource/read", "config/mcpServer/reload", "mcpServer/tool/call", "mcpServer/oauth/login", "dynamic tool specs", "app/list|read|installed", "plugin/list|read|installed|install|uninstall", "marketplace/add|remove|upgrade" ], "lifecycle": "before_turn", "machine_readable": true, "maturity": "experimental", "version_constraints": "0.147.0; collaboration/dynamic tools experimental; plugin RPCs documented as under development.", "remote_safety": "confirmation", "required_pairling_addition": "Add negotiated model/reasoning choices, bounded command catalogs and MCP reload; keep config writes and plugin/marketplace mutation out of the shared surface.", "shared_semantics": "provider.model_integration_catalog", "provider_overlay": true, "source_refs": [ "codex-config", "codex-app-server", "codex-item-src", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "capability_id": "codex.release_auth_status", "provider_id": "codex", "implementation_ids": [ "codex.implementation.reviewed" ], "plane": "read", "behavior": "Read redacted Codex account status without exposing login, logout, credentials, trusted-host tokens or Remote Control pairing.", "exact_exposure": [ "account/read" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "version_specific", "version_constraints": "0.147.0 app-server-stdio reviewed driver only.", "remote_safety": "safe", "required_pairling_addition": "", "shared_semantics": "release.auth_status", "provider_overlay": true, "source_refs": [ "codex-auth-src", "codex-rc-src", "codex-remote", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "capability_id": "codex.release_lifecycle_usage_diagnostics", "provider_id": "codex", "implementation_ids": [ "codex.implementation.reviewed" ], "plane": "control", "behavior": "Terminate an owned Codex thread and read redacted usage and driver diagnostics through the exact reviewed app-server driver.", "exact_exposure": [ "thread/archive", "account/rateLimits/read", "account/usage/read", "reviewed lifecycle/item diagnostics" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "0.147.0 app-server-stdio reviewed driver only.", "remote_safety": "confirmation", "required_pairling_addition": "", "shared_semantics": "release.lifecycle_usage_diagnostics", "provider_overlay": true, "source_refs": [ "codex-item-src", "codex-turn-src", "pairling-codex", "pairling-daemon", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "capability_id": "codex.session.lifecycle_discovery", "provider_id": "codex", "implementation_ids": [ "codex.implementation.reviewed" ], "plane": "read", "behavior": "Initialize; start, resume, fork, list, read, search and page threads; set names/goals/metadata; archive, restore, delete and subscribe to status. Search/page methods and several fields require experimentalApi.", "exact_exposure": [ "initialize", "initialized", "thread/start", "thread/resume", "thread/fork", "thread/list", "thread/read", "thread/search", "thread/turns/list", "thread/items/list", "thread/name/set", "thread/goal/set|get|clear", "thread/metadata/update", "thread/archive", "thread/unarchive", "thread/delete", "thread/unsubscribe", "thread/status/changed" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "experimental", "version_constraints": "0.147.0; app-server and WebSocket experimental; some fields/methods require initialize.capabilities.experimentalApi=true.", "remote_safety": "safe", "required_pairling_addition": "Retain resume/fork; add bounded search/page/status exposure and confirmed metadata, archive/restore/delete controls before treating the full lifecycle row as supported.", "shared_semantics": "session.lifecycle", "provider_overlay": true, "source_refs": [ "codex-app-server", "codex-thread-src", "pairling-codex", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "capability_id": "codex.subagents_plan_review_context", "provider_id": "codex", "implementation_ids": [ "codex.implementation.reviewed" ], "plane": "read", "behavior": "Observe collab/subagent activity without direct spawn control; stream plans; start reviews; compact context and fork at a turn. Memory reset is experimental; inject_items and rollback are unsafe.", "exact_exposure": [ "collabAgentToolCall", "subAgentActivity", "turn/plan/updated", "item/plan/delta", "review/start", "thread/compact/start", "contextCompaction", "thread/fork{lastTurnId}", "thread/memoryMode/set", "memory/reset", "thread/inject_items", "thread/rollback" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "experimental", "version_constraints": "0.147.0; memory requires experimentalApi; rollback deprecated; plan delta semantics experimental.", "remote_safety": "safe", "required_pairling_addition": "Add typed plan observation/control and preserve observation-only subagents; keep inject_items and rollback excluded.", "shared_semantics": "agent.progress_context", "provider_overlay": true, "source_refs": [ "codex-item-src", "codex-thread-src", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "capability_id": "codex.turn.input_steer_interrupt", "provider_id": "codex", "implementation_ids": [ "codex.implementation.reviewed" ], "plane": "steer", "behavior": "Start a turn with typed text/image/audio/skill/mention input, steer only the expected active turn, and interrupt. Experimental realtime voice is recorded but excluded.", "exact_exposure": [ "turn/start", "turn/steer{threadId,input,expectedTurnId}", "turn/interrupt", "thread/realtime/start|appendAudio|appendText|appendSpeech|stop|listVoices" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "experimental", "version_constraints": "0.147.0; realtime requires experimentalApi and has no accepted remote contract.", "remote_safety": "safe", "required_pairling_addition": "Add reviewed attachment and typed rich-input handling with exact turn identity; keep experimental realtime voice excluded.", "shared_semantics": "turn.input_control", "provider_overlay": false, "source_refs": [ "codex-turn-src", "pairling-daemon", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "capability_id": "copilot.acp_remote_auth_cloud", "provider_id": "github_copilot_cli", "implementation_ids": [ "github_copilot_cli.implementation.reviewed" ], "plane": "control", "behavior": "Use preview ACP stdio/TCP, GitHub Remote Control and account/auth; invoke negotiated commands. Cloud delegation, gist, update and private internals are excluded.", "exact_exposure": [ "--acp|--stdio|--port", "available_commands_update", "/remote", "GitHub Remote Control", "auth/account", "issue|PR context", "delegate-to-cloud PR", "share-gist" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "experimental", "version_constraints": "ACP Public Preview; Remote account/policy gated.", "remote_safety": "confirmation", "required_pairling_addition": "Add status-only auth or negotiated ACP only after separate review; keep public TCP, tokens, gist, cloud delegation, self-update and private wire behavior unavailable.", "shared_semantics": "provider.auth_remote_pairing", "provider_overlay": true, "source_refs": [ "copilot-acp", "copilot-remote", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "capability_id": "copilot.events_usage_attachments", "provider_id": "github_copilot_cli", "implementation_ids": [ "github_copilot_cli.implementation.reviewed" ], "plane": "receive", "behavior": "Receive typed message, reasoning, model, tool, subagent, hook, permission, MCP, command, file, handoff, usage and context events; attach file, directory, selection or blob; inspect logs, diagnostics and OTel.", "exact_exposure": [ "SessionEvent union", "assistant intent|reasoning|stream|message|usage", "model-call|tool", "permission requested|completed", "MCP OAuth|tool|server", "command queue|availability", "file|handoff|truncation|rewind|shutdown|context|usage|compaction", "file|directory|selection|blob", "logs|diagnose|OTel" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "public", "version_constraints": "SDK 1.0.8 with CLI/package 1.0.78; no stable CLI JSONL schema.", "remote_safety": "safe", "required_pairling_addition": "Add bounded typed event and attachment exposure with redaction; keep exporter secrets and full-content telemetry unavailable.", "shared_semantics": "event.lifecycle_usage", "provider_overlay": true, "source_refs": [ "copilot-events", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "capability_id": "copilot.models_integrations_context", "provider_id": "github_copilot_cli", "implementation_ids": [ "github_copilot_cli.implementation.reviewed" ], "plane": "control", "behavior": "Set model/reasoning; configure MCP, tools, hooks, agents and skills; observe subagents, tasks, plan, context and compaction; use Chronicle, memory, rewind, schedules, fleet or autopilot.", "exact_exposure": [ "setModel(reasoningEffort)", "MCP status/events", "custom tools|hooks|agents|skills|instructions", "subagent|task|plan|context|usage|compaction events", "Chronicle", "Memory", "undo|snapshot rewind", "/every|/after", "fleet|autopilot" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "version_specific", "version_constraints": "SDK 1.0.8 with CLI/package 1.0.78; Memory preview; rewind/search/sandbox experimental; models dynamic.", "remote_safety": "confirmation", "required_pairling_addition": "Add bounded read-only catalogs and context controls first; confirm compact/rewind/schedules and keep fleet/autopilot/install mutation unavailable.", "shared_semantics": "provider.model_integration_context", "provider_overlay": true, "source_refs": [ "copilot-events", "copilot-cli", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "capability_id": "copilot.permissions_handlers", "provider_id": "github_copilot_cli", "implementation_ids": [ "github_copilot_cli.implementation.reviewed" ], "plane": "control", "behavior": "Apply tool/path/URL allow/deny and answer shell, write, MCP, read, URL, custom-tool, memory or hook permissions once, always, deny or abort; handle user input, elicitation, exit-plan and auto-mode.", "exact_exposure": [ "permission shell|write|mcp|read|url|custom-tool|memory|hook", "approve-once|approve-always|deny|abort", "ToolInvocation sessionId|toolCallId|toolName|arguments", "user-input|elicitation|exit-plan|auto-mode handler" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "public", "version_constraints": "SDK 1.0.8 with CLI/package 1.0.78; deny wins; availability filters differ from approvals.", "remote_safety": "confirmation", "required_pairling_addition": "Add exact safe policy choices and structured input/exit-plan handling; never infer permissions or allow yolo, allow-all or approveAll.", "shared_semantics": "approval.decision", "provider_overlay": true, "source_refs": [ "copilot-cli", "copilot-events", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "capability_id": "copilot.prompt_queue_abort", "provider_id": "github_copilot_cli", "implementation_ids": [ "github_copilot_cli.implementation.reviewed" ], "plane": "steer", "behavior": "Send prompts, enqueue or immediately steer, inspect/remove/clear queue, abort and receive remote-steerable, idle, error, title or schedule events.", "exact_exposure": [ "Session.send", "enqueue", "immediate", "pending queue read|remove|clear", "Session.abort", "remote-steerable|idle|error|title|schedule" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "public", "version_constraints": "SDK 1.0.8 with CLI/package 1.0.78; staff TUI queue is not relied upon.", "remote_safety": "confirmation", "required_pairling_addition": "Add bounded queue reads and exact queue-item mutation plus complete normalized events; keep every mutation session/generation bound.", "shared_semantics": "turn.rich_steering", "provider_overlay": true, "source_refs": [ "copilot-steering", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "capability_id": "copilot.sdk_session_lifecycle", "provider_id": "github_copilot_cli", "implementation_ids": [ "github_copilot_cli.implementation.reviewed" ], "plane": "read", "behavior": "Create, resume, list, delete, foreground, background, start or stop sessions; inspect state, version, auth, models, capabilities, messages and lifecycle.", "exact_exposure": [ "client create|resume|list|delete sessions", "foreground|background", "start|stop|getState|ping|getVersion|getAuthStatus|listModels", "getMessages|disconnect", "created|deleted|updated|foreground|background" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "public", "version_constraints": "SDK 1.0.8 protocol v3; CLI 1.0.78.", "remote_safety": "safe", "required_pairling_addition": "Retain exact resume; add bounded lifecycle discovery and confirmed delete/background/stop before the broad SDK lifecycle row is supported.", "shared_semantics": "session.lifecycle", "provider_overlay": true, "source_refs": [ "copilot-events", "copilot-cli", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-install-tests", "pairling-copilot-tests" ] }, { "capability_id": "droid.notifications_permissions_questions", "provider_id": "droid", "implementation_ids": [ "droid.implementation.reviewed" ], "plane": "receive", "behavior": "Receive typed session notifications and reverse callbacks for permission decisions and ask-user questions. Callback responses must remain correlated to the exact session and request; arbitrary callback or method dispatch is excluded.", "exact_exposure": [ "droid.session_notification", "droid.request_permission", "droid.ask_user" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "public", "version_constraints": "Runtime protocol 1.143.0 from the reviewed CLI 0.185.0 wire contract.", "remote_safety": "confirmation", "required_pairling_addition": "Retain exact session, capability-generation, request, question, and offered-option binding; continue failing closed on unknown callback kinds and concurrent questionnaires.", "shared_semantics": "event.approval_question", "provider_overlay": true, "source_refs": [ "droid-client-src", "droid-transport-src", "pairling-operations", "pairling-droid-control", "pairling-droid-tests" ] }, { "capability_id": "droid.session_lifecycle_input", "provider_id": "droid", "implementation_ids": [ "droid.implementation.reviewed" ], "plane": "control", "behavior": "Initialize the JSON-RPC connection, load a session, add or queue a user message, interrupt, close, fork and compact. droid exec supplies a separate bounded noninteractive execution path.", "exact_exposure": [ "droid.initialize_session", "droid.load_session", "droid.add_user_message {queuePlacement}", "droid.interrupt_session", "droid.close_session", "droid.fork_session", "droid.compact_session", "droid exec" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "public", "version_constraints": "CLI 0.185.0; SDK 0.6.0; runtime protocol 1.143.0; API 1.0.0; JSON-RPC 2.0.", "remote_safety": "confirmation", "required_pairling_addition": "Retain the five mapped operations; add complete focused success proof for prompt, interrupt and compact plus a separately bounded droid exec contract before full-row support.", "shared_semantics": "session.lifecycle_input", "provider_overlay": true, "source_refs": [ "droid-client-src", "droid-transport-src", "droid-constants-src", "droid-exec", "pairling-operations", "pairling-droid-control", "pairling-droid-tests" ] }, { "capability_id": "droid.settings_catalogs_context", "provider_id": "droid", "implementation_ids": [ "droid.implementation.reviewed" ], "plane": "read", "behavior": "Update session settings and list tools, MCP servers, MCP tools, commands, context statistics and context breakdown through typed JSON-RPC methods. Settings can alter model, permissions or execution behavior and therefore are not uniformly safe writes.", "exact_exposure": [ "droid.update_session_settings", "droid.list_tools", "droid.list_mcp_tools", "droid.list_mcp_servers", "droid.list_commands", "droid.get_context_stats", "droid.get_context_breakdown" ], "lifecycle": "before_turn", "machine_readable": true, "maturity": "public", "version_constraints": "Runtime protocol 1.143.0 and API 1.0.0 from the reviewed CLI 0.185.0 wire contract.", "remote_safety": "confirmation", "required_pairling_addition": "Add focused success proof for each mapped setting/catalog operation and preserve exact setting-key, model, permission and generation validation.", "shared_semantics": "provider.settings_catalog", "provider_overlay": true, "source_refs": [ "droid-client-src", "droid-constants-src", "pairling-operations", "pairling-droid-control", "pairling-droid-tests" ] }, { "capability_id": "gemini.approval_policy_sandbox", "provider_id": "gemini_cli", "implementation_ids": [ "gemini_cli.implementation.reviewed" ], "plane": "control", "behavior": "Select default, auto-edit, plan or yolo; broker ACP permission; apply TOML policies; manage folder trust, sandbox, scope expansion and Conseca checker.", "exact_exposure": [ "--approval-mode default|auto_edit|plan|yolo", "ACP default|autoEdit|plan|yolo", "session/request_permission", "once|session|permanent", "security.disableAlwaysAllow|enablePermanentToolApproval", "--policy|--admin-policy", "/permissions trust", "--skip-trust", "--sandbox", "sandbox expansion", "security.enableConseca" ], "lifecycle": "before_turn", "machine_readable": true, "maturity": "public", "version_constraints": "0.53.1; privileged modes blocked untrusted; workspace policy tier non-functional.", "remote_safety": "confirmation", "required_pairling_addition": "Retain safe live permission choices; add plan only with exact elicitation proof and keep yolo, scope expansion, sandbox weakening and persistent unattended allow unavailable.", "shared_semantics": "approval.policy", "provider_overlay": true, "source_refs": [ "gemini-policy", "gemini-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "gemini.memory_checkpoint_files", "provider_id": "gemini_cli", "implementation_ids": [ "gemini_cli.implementation.reviewed" ], "plane": "control", "behavior": "Read hierarchical memory; approve experimental auto-memory; compact; checkpoint/restore/rewind chat or AI edits; run scoped file tools, ACP FS proxy, diff events and shell. Rewind excludes manual/shell changes.", "exact_exposure": [ "GEMINI.md", "/memory list|show|refresh", "experimental.autoMemory", "/compress", "general.checkpointing.enabled", "/restore", "/rewind", "glob|grep|list|read|read-many|replace|write", "ACP fs/read_text_file|write_text_file", "path+oldText+newText", "run_shell_command", "node-pty" ], "lifecycle": "during_turn", "machine_readable": "qualified", "maturity": "version_specific", "version_constraints": "0.53.1; auto-memory experimental; checkpoint off default; rewind TUI-only; ACP FS native fallback.", "remote_safety": "required_local_only", "required_pairling_addition": "Add bounded memory/diff reads and previewed compact/rewind first; require confirmation for mutations and keep native shell/private-network fallback unavailable.", "shared_semantics": "context.artifact_terminal", "provider_overlay": true, "source_refs": [ "gemini-checkpoints", "gemini-tools", "gemini-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "gemini.models_generation", "provider_id": "gemini_cli", "implementation_ids": [ "gemini_cli.implementation.reviewed" ], "plane": "control", "behavior": "Discover or set account-dependent model, generation/thinking config, plan routing and max turns; local Gemma is local-only.", "exact_exposure": [ "-m", "/model set --persist", "unstable_setSessionModel", "ACP available/current models", "modelConfigs aliases|overrides|definitions|resolutions|chains", "temperature|topP|maxOutputTokens|thinkingBudget|includeThoughts", "general.plan.modelRouting", "model.maxSessionTurns", "ACP max_turn_requests", "gemma setup|start|stop|status|logs" ], "lifecycle": "before_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "0.53.1; ACP setter unstable; catalog backend-dependent.", "remote_safety": "confirmation", "required_pairling_addition": "Add bounded account-dependent reasoning/generation choices; keep persisted changes confirmed and local Gemma local-only.", "shared_semantics": "session.model_reasoning", "provider_overlay": true, "source_refs": [ "gemini-acp", "gemini-release", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "gemini.output_usage_auth", "provider_id": "gemini_cli", "implementation_ids": [ "gemini_cli.implementation.reviewed" ], "plane": "receive", "behavior": "Consume headless JSON/stream-json and ACP chunks/tool events/quota metadata; inspect exit codes, telemetry, usage consent and diagnostics; authenticate through Google, API key, Vertex, enterprise or gateway.", "exact_exposure": [ "-o text|json|stream-json", "session_id|response|stats|error|warnings", "init|message|tool_use|tool_result|error|result", "ACP message|thought|tool updates", "_meta.quota.token_count|model_usage", "exit 0|1|42|53", "telemetry.*", "privacy.usageStatisticsEnabled", "ACP authenticate", "_meta api-key|gateway headers" ], "lifecycle": "after_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "0.53.1; quota/gateway meta undocumented; consumer migration applies.", "remote_safety": "safe", "required_pairling_addition": "Add separately attested redacted usage, diagnostics and auth-status reads; never expose keys, tokens, gateway headers or browser authentication.", "shared_semantics": "event.lifecycle_usage_auth", "provider_overlay": true, "source_refs": [ "gemini-headless", "gemini-acp", "gemini-migration", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "gemini.release_prompt_cancel", "provider_id": "gemini_cli", "implementation_ids": [ "gemini_cli.implementation.reviewed" ], "plane": "control", "behavior": "Send negotiated text, image, audio or embedded-context input and conditionally cancel the exact managed Gemini ACP session.", "exact_exposure": [ "ACP session/prompt|cancel", "image|audio|embeddedContext" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "Gemini CLI 0.53.1 stable managed ACP profile.", "remote_safety": "confirmation", "required_pairling_addition": "", "shared_semantics": "release.prompt_cancel", "provider_overlay": true, "source_refs": [ "gemini-sessions", "gemini-acp", "gemini-headless", "pairling-recognized", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "gemini.session_prompt_cancel", "provider_id": "gemini_cli", "implementation_ids": [ "gemini_cli.implementation.reviewed" ], "plane": "control", "behavior": "List, create, load, resume, persist, delete, retain or worktree sessions; submit headless or ACP text/image/audio/context; attach files; cancel. ACP lacks list/delete and PDF declaration; TUI model steering is experimental and not ACP.", "exact_exposure": [ "--list-sessions", "/resume", "-i", "--session-id", "-r latest|index|UUID", "--session-file", "--delete-session", "general.sessionRetention.*", "--worktree", "-p", "stdin", "@path", "ACP session/new|load|prompt|cancel", "image|audio|embeddedContext", "experimental.modelSteering" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "version_specific", "version_constraints": "0.53.1; ACP no list/delete/PDF; steering TUI-only experimental.", "remote_safety": "safe", "required_pairling_addition": "Add exact owned load/resume targets and bounded session discovery; keep delete/retention/worktree mutations separately confirmed and avoid a TUI steering claim.", "shared_semantics": "session.input_control", "provider_overlay": true, "source_refs": [ "gemini-sessions", "gemini-acp", "gemini-headless", "pairling-recognized", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "gemini.tools_mcp_extensions_agents", "provider_id": "gemini_cli", "implementation_ids": [ "gemini_cli.implementation.reviewed" ], "plane": "control", "behavior": "Inspect tools/task tracker; configure/use MCP; manage extensions/skills/hooks; invoke local or remote A2A agents; enter or exit plan. ACP has no admin/task/subagent lifecycle.", "exact_exposure": [ "/tools", "tools.core", "write_todos", "tracker_create|update|get|list|add_dependency|visualize", "gemini mcp add|remove|list|enable|disable", "/mcp", "ACP mcpServers HTTP|SSE", "extensions install|uninstall|list|update|enable|disable|validate", "skills list|enable|disable|install|link|uninstall", "Before|After Tool|Agent|Model hooks", "/agents", "@agent", "remote A2A agent-card", "enter_plan_mode|exit_plan_mode" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "version_specific", "version_constraints": "0.53.1; task tracker and agents experimental; ACP lacks admin/lifecycle.", "remote_safety": "confirmation", "required_pairling_addition": "Add separately attested read-only tool/MCP catalogs and reviewed reload; keep extensions, skills, hooks, custom tools, A2A credentials and agent mutation unavailable.", "shared_semantics": "provider.integration_agents", "provider_overlay": true, "source_refs": [ "gemini-tools", "gemini-mcp", "gemini-release", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "goose.acp_session", "provider_id": "goose", "implementation_ids": [ "goose.implementation.observed" ], "plane": "control", "behavior": "Use experimental ACP for new, load, prompt, cancel, update, permission, MCP and common configuration.", "exact_exposure": [ "goose acp", "initialize", "session/new|load|prompt|cancel|update|request_permission" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "experimental", "version_constraints": "1.45.0; ACP experimental.", "remote_safety": "confirmation", "required_pairling_addition": "Pinned local ACP research adapter, ask policy, exact correlation and deny unknown capabilities.", "shared_semantics": "acp.session", "provider_overlay": true, "source_refs": [ "goose-acp", "acp-v1" ] }, { "capability_id": "goose.serve_auth", "provider_id": "goose", "implementation_ids": [ "goose.implementation.observed" ], "plane": "control", "behavior": "Serve with a secret, X-Secret-Key or WebSocket token and origin checks; dangerously-unauthenticated exists.", "exact_exposure": [ "goose serve", "GOOSE_SERVER__SECRET_KEY", "X-Secret-Key", "WebSocket token", "origin", "dangerously-unauthenticated" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "public", "version_constraints": "1.45.0.", "remote_safety": "required_local_only", "required_pairling_addition": "Prefer ACP; otherwise owned loopback, generated secret, origin and tunnel; never unauthenticated or expose the secret.", "shared_semantics": "provider.local_server", "provider_overlay": true, "source_refs": [ "goose-cli" ] }, { "capability_id": "goose.sessions_diagnostics", "provider_id": "goose", "implementation_ids": [ "goose.implementation.observed" ], "plane": "read", "behavior": "List, resume, fork, edit or inspect history; export JSON and diagnostics.", "exact_exposure": [ "session list|resume|fork|edit", "history", "export JSON", "diagnostics" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "public", "version_constraints": "1.45.0; JSON is not duplex.", "remote_safety": "safe", "required_pairling_addition": "Bounded documented JSON and diagnostics after schema inspection; confirm fork/edit.", "shared_semantics": "session.lifecycle", "provider_overlay": true, "source_refs": [ "goose-cli" ] }, { "capability_id": "grok.context_events_usage_auth", "provider_id": "grok_build", "implementation_ids": [ "grok_build.implementation.reviewed" ], "plane": "receive", "behavior": "Compact, rewind, fork, attach and diff; consume ACP or native streaming events and usage; inspect diagnostics/auth. Raw fs/git/worktree, credentials, debug, reverse terminal and hidden share are excluded.", "exact_exposure": [ "/compact|recap|summarize|memory|rewind|undo|fork|diff", "--restore-code", "@path|image", "ACP message|thought|tool|plan", "streaming text|thought|tool_call|plan|usage|error|auto_compact_*|end", "x.ai/session/usage", "inspect --json", "mcp doctor --json", "login oauth|device-auth", "serve loopback+secret" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "experimental", "version_constraints": "0.2.118 Beta; ACP 0.10.4; overlays unstable.", "remote_safety": "safe", "required_pairling_addition": "Add bounded context/event/usage/diagnostic reads and previewed rewind/fork; keep raw fs/git/worktree, credentials, debug and hidden sharing unavailable.", "shared_semantics": "context.event_usage_auth", "provider_overlay": true, "source_refs": [ "grok-output", "grok-headless", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "grok.models_integrations_agents", "provider_id": "grok_build", "implementation_ids": [ "grok_build.implementation.reviewed" ], "plane": "control", "behavior": "Discover or set model, effort and mode; inspect config/tools; manage MCP/plugins/marketplaces; observe or stop subagents/background tasks.", "exact_exposure": [ "models", "--model", "--reasoning-effort none|minimal|low|medium|high|xhigh|max", "ACP set_model|set_mode", "inspect --json", "--agent|--agents|--max-turns|--tools|--disallowed-tools", "mcp list|doctor --json|add|remove|enable|disable", "plugin list --json|install|uninstall|update|enable|disable|validate", "Agent general-purpose|explore|plan", "/tasks|/loop", "kill_command_or_subagent" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "experimental", "version_constraints": "0.2.118 Beta; catalogs dynamic and extensions unstable.", "remote_safety": "confirmation", "required_pairling_addition": "Add bounded read-only catalogs and reasoning choices; keep integration mutation and task stop separately confirmed.", "shared_semantics": "provider.model_integration_agents", "provider_overlay": true, "source_refs": [ "grok-cli", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "grok.permissions_sandbox_plan", "provider_id": "grok_build", "implementation_ids": [ "grok_build.implementation.reviewed" ], "plane": "control", "behavior": "Select permission/sandbox, allow/deny, answer ACP approvals/structured questions and approve, cancel or abandon plan exit. Yolo/bypass/off are unsafe; macOS network block is a no-op.", "exact_exposure": [ "--permission-mode default|acceptEdits|plan|auto|dontAsk|bypassPermissions", "--allow|--deny|--always-approve|--yolo", "session/request_permission", "allow_once|allow_always|reject_once|reject_always", "x.ai/ask_user_question", "x.ai/exit_plan_mode", "--sandbox off|workspace|devbox|read-only|strict|custom" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "unsafe", "version_constraints": "0.2.118 Beta; macOS network limitation.", "remote_safety": "confirmation", "required_pairling_addition": "Add exact plan correlation; keep yolo, bypass, off, dontAsk and always-all unavailable and disclose network limitations.", "shared_semantics": "approval.policy", "provider_overlay": true, "source_refs": [ "grok-permissions", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "grok.queue_interject", "provider_id": "grok_build", "implementation_ids": [ "grok_build.implementation.reviewed" ], "plane": "steer", "behavior": "Queue input, cancel-and-send, and remove, reorder, clear, edit, hold, release or interject with queue-changed events. This is not token injection.", "exact_exposure": [ "Enter queue", "Ctrl+Enter|Ctrl+I cancel-and-send", "x.ai/queue/remove|reorder|clear|edit|hold_edit|release_edit|interject", "x.ai/queue/changed" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "experimental", "version_constraints": "0.2.118; x.ai list unstable and non-exhaustive.", "remote_safety": "confirmation", "required_pairling_addition": "Add a separately negotiated queue overlay bound to session, prompt and generation; reject unknown native methods.", "shared_semantics": "turn.rich_steering", "provider_overlay": true, "source_refs": [ "grok-queue", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "grok.release_model_selection", "provider_id": "grok_build", "implementation_ids": [ "grok_build.implementation.reviewed" ], "plane": "control", "behavior": "Select a model from the live negotiated ACP model configuration for the exact managed Grok Build session.", "exact_exposure": [ "ACP set_model" ], "lifecycle": "before_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "grok 0.2.118 (1e1687c1cf6a) [stable] managed ACP profile.", "remote_safety": "confirmation", "required_pairling_addition": "", "shared_semantics": "release.model_selection", "provider_overlay": true, "source_refs": [ "grok-cli", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "grok.release_permissions_approval_questions", "provider_id": "grok_build", "implementation_ids": [ "grok_build.implementation.reviewed" ], "plane": "control", "behavior": "Select only live safe Grok permission modes, answer exactly correlated ACP permission requests and answer exactly correlated structured questions.", "exact_exposure": [ "--permission-mode default|acceptEdits|plan", "session/request_permission", "allow_once|reject_once", "elicitation/create" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "grok 0.2.118 (1e1687c1cf6a) [stable] managed ACP profile.", "remote_safety": "confirmation", "required_pairling_addition": "", "shared_semantics": "release.permissions_approval_questions", "provider_overlay": true, "source_refs": [ "grok-permissions", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "grok.session_headless_acp", "provider_id": "grok_build", "implementation_ids": [ "grok_build.implementation.reviewed" ], "plane": "control", "behavior": "Create, resume, continue, fork, list, search, delete or export sessions; prompt/cancel through ACP; consume plain, JSON or streaming outputs.", "exact_exposure": [ "grok [PROMPT]", "--single", "--prompt-json", "--prompt-file", "--output-format plain|json|streaming-json|streaming-messages-json", "--resume", "--continue", "--session-id", "--fork-session", "sessions list|search|delete", "export", "ACP initialize|authenticate|session/new|load|list|prompt|cancel" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "experimental", "version_constraints": "0.2.118 Beta; ACP list only if advertised; --session-id creates new only.", "remote_safety": "confirmation", "required_pairling_addition": "Add exact owned load/resume/fork targets and bounded headless output/lifecycle discovery; keep deletion/export confirmed.", "shared_semantics": "session.input_control", "provider_overlay": true, "source_refs": [ "grok-cli", "grok-headless", "grok-acp", "pairling-recognized", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "hermes.agents_context_checkpoints", "provider_id": "hermes_agent", "implementation_ids": [ "hermes_agent.implementation.reviewed" ], "plane": "control", "behavior": "Observe, delegate or interrupt children; manage plans; approve memory writes; compress in place; create shadow-git checkpoints and roll back.", "exact_exposure": [ "delegate_task", "delegation.status", "subagent.interrupt", "spawn_tree.*", "lifecycle launch|status|wait|cancel|result|reconnect", "ACP plan", "/memory pending|approve|reject", "session.compress", "/compress", "/rollback" ], "lifecycle": "during_turn", "machine_readable": "qualified", "maturity": "public", "version_constraints": "0.19.0; subagent retention one hour and no restart reconnect; checkpoints opt-in.", "remote_safety": "confirmation", "required_pairling_addition": "Add observation first, then preview-bound plan/compact/rewind operations with explicit confirmation; do not expose direct child mutation prematurely.", "shared_semantics": "agent.progress_context", "provider_overlay": true, "source_refs": [ "hermes-root", "hermes-acp", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "capability_id": "hermes.approvals_sandbox", "provider_id": "hermes_agent", "implementation_ids": [ "hermes_agent.implementation.reviewed" ], "plane": "control", "behavior": "Choose smart/manual/off, decide once/session/always/deny, set ACP edit mode and local/container/SSH/cloud sandbox. The hardline blocklist cannot be overridden.", "exact_exposure": [ "approvals.mode smart|manual|off", "allow_once|allow_session|allow_always|deny", "ACP request_permission", "edit default|accept_edits|dont_ask", "terminal.backend local|docker|ssh|modal|daytona|vercel_sandbox|singularity", "hardline blocklist" ], "lifecycle": "before_turn", "machine_readable": true, "maturity": "public", "version_constraints": "0.19.0; MCP approvals in-memory best-effort.", "remote_safety": "confirmation", "required_pairling_addition": "Add only safe negotiated policy/sandbox choices with exact disclosure; keep off, yolo, force and blocklist override unavailable.", "shared_semantics": "approval.policy", "provider_overlay": true, "source_refs": [ "hermes-security", "hermes-acp", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "capability_id": "hermes.events_files_usage", "provider_id": "hermes_agent", "implementation_ids": [ "hermes_agent.implementation.reviewed" ], "plane": "receive", "behavior": "Stream message/tool/approval/clarify/sudo/secret/subagent/run events; inspect files/diffs/attachments/status/context/usage. ACP resource links are capped at 512 KiB.", "exact_exposure": [ "message.delta|complete", "tool.start|progress|complete", "approval|clarify|sudo|secret", "subagent.start|complete", "run.completed|failed|cancelled", "ACP message|thought|tool|diff|plan|usage", "read_file|search_files|write_file|patch", "/diff staged|all|session", "/status|/context|/usage" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "public", "version_constraints": "0.19.0; child tool events omitted on Runs; cost differs by transport.", "remote_safety": "safe", "required_pairling_addition": "Add root-scoped file/diff/attachment reads and complete normalized event coverage with redaction and explicit cost limitations.", "shared_semantics": "event.artifact_usage", "provider_overlay": true, "source_refs": [ "hermes-integration", "hermes-acp", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "capability_id": "hermes.models_integrations", "provider_id": "hermes_agent", "implementation_ids": [ "hermes_agent.implementation.reviewed" ], "plane": "control", "behavior": "Discover or switch provider/model/reasoning/fast/runtime; inspect toolsets/skills; enable tools; configure/reload MCP; inspect plugins. Plugins can inject tools, hooks, commands, memory and messages.", "exact_exposure": [ "/model --once|--session|--global|--refresh|--provider", "/reasoning none|minimal|low|medium|high|xhigh|max|ultra", "/fast", "/codex-runtime", "GET /api/model/options", "/v1/toolsets|skills", "/tools enable|disable", "reload.mcp", "hermes mcp serve", "plugins list|install|update|remove" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "public", "version_constraints": "0.19.0; catalogs dynamic.", "remote_safety": "confirmation", "required_pairling_addition": "Add bounded read-only model/tool/MCP catalogs and reasoning choices; require confirmation for reload/enable changes and keep plugin mutation local.", "shared_semantics": "provider.model_integration_catalog", "provider_overlay": true, "source_refs": [ "hermes-root", "hermes-integration", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "capability_id": "hermes.release_diagnostics", "provider_id": "hermes_agent", "implementation_ids": [ "hermes_agent.implementation.reviewed" ], "plane": "read", "behavior": "Read bounded health and capability diagnostics from the exact owned Hermes Runs loopback service.", "exact_exposure": [ "health|capabilities" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "version_specific", "version_constraints": "Hermes Agent v0.19.0 (2026.7.20), upstream 937222f4, owned Runs/SSE driver.", "remote_safety": "safe", "required_pairling_addition": "", "shared_semantics": "release.diagnostics", "provider_overlay": true, "source_refs": [ "hermes-root", "hermes-security", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "capability_id": "hermes.remote_auth_terminal", "provider_id": "hermes_agent", "implementation_ids": [ "hermes_agent.implementation.reviewed" ], "plane": "control", "behavior": "Serve loopback WebSocket JSON-RPC, isolate profiles, inspect health/auth and operate scoped terminal processes. API bearer/session keys differ from serve/TUI/ACP.", "exact_exposure": [ "hermes serve 127.0.0.1:9119", "profiles", "health|capabilities|auth status", "X-Hermes-Session-Id", "X-Hermes-Session-Key", "terminal_tool", "process list|poll|log|wait|kill|write|submit|close", "shell.exec", "process.stop" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "version_specific", "version_constraints": "0.19.0; unversioned TUI; auth boundaries non-interchangeable.", "remote_safety": "required_local_only", "required_pairling_addition": "Add redacted auth status and cooperative scoped termination only after exact endpoint proof; keep credentials, raw PTY, force/global stop and CLI exec unavailable.", "shared_semantics": "provider.auth_terminal", "provider_overlay": true, "source_refs": [ "hermes-root", "hermes-security", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "capability_id": "hermes.session_input_control", "provider_id": "hermes_agent", "implementation_ids": [ "hermes_agent.implementation.reviewed" ], "plane": "steer", "behavior": "Persist, search, create, list, activate, close, resume, branch, fork or title sessions; submit, queue, steer, background and interrupt through REST/TUI/ACP. Run stop is cooperative.", "exact_exposure": [ "state.db FTS", "--resume|--continue", "/api/sessions CRUD|messages|fork", "session.create|list|active_list|activate|close|history|resume|branch|title|status|usage", "ACP new|load|resume|fork|list|prompt|cancel", "prompt.submit|background", "session.steer|interrupt", "/queue|/steer|/background", "POST /v1/runs/{id}/stop" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "version_specific", "version_constraints": "0.19.0; TUI RPC unversioned; ACP unstable; stop cooperative.", "remote_safety": "confirmation", "required_pairling_addition": "Retain prompt/interrupt/terminate/resume/fork; add bounded lifecycle discovery and confirmed title/background behavior before the broad row is supported.", "shared_semantics": "session.rich_control", "provider_overlay": true, "source_refs": [ "hermes-integration", "hermes-acp", "pairling-recognized", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "capability_id": "kimi.approvals_modes_trust", "provider_id": "kimi_code", "implementation_ids": [ "kimi_code.implementation.reviewed" ], "plane": "control", "behavior": "Select manual, auto, yolo or plan; read and resolve approvals; set rules/tools; trust or untrust a workspace, which loads or unloads project MCP.", "exact_exposure": [ "manual|auto|yolo|plan", "GET|POST approvals", "[[permission.rules]]", "tools enabled|disabled", "POST workspaces/{id}/trust|untrust", "ACP mode default|plan|auto|yolo" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "0.31.1; no sandbox; subagent approval evidence conflicts.", "remote_safety": "confirmation", "required_pairling_addition": "Add plan/trust only with exact workspace and request binding; keep auto/yolo/bypass and unreviewed project MCP loading unavailable.", "shared_semantics": "approval.policy", "provider_overlay": true, "source_refs": [ "kimi-docs", "kimi-web", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "kimi.context_files_events_auth", "provider_id": "kimi_code", "implementation_ids": [ "kimi_code.implementation.reviewed" ], "plane": "receive", "behavior": "Compact, undo or fork; upload/download/delete; inspect fs/git/diff/watch; consume ACP/headless/web events, usage, health and auth. Undo is conversation-only; raw PTY loopback-only; headless stream-json auto-permission is unsuitable for approvals.", "exact_exposure": [ "/compact|POST :compact", "/undo|POST :undo", "fork", "upload|download|delete", "fs read|list|stat|git-status|diff|watch", "raw PTY", "stream-json", "kimi acp|web", "health|meta|connections|session status|OAuth usage", "RFC8628 login", "doctor|export|vis" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "version_specific", "version_constraints": "0.31.1; no code rollback; upload unlimited; v2 cost zero; private packages.", "remote_safety": "required_local_only", "required_pairling_addition": "Add bounded event/usage/auth status and root-scoped artifact reads first; preview undo/rewind and keep raw PTY, secrets, debug, shutdown and public bind unavailable.", "shared_semantics": "context.artifact_event_auth", "provider_overlay": true, "source_refs": [ "kimi-web", "kimi-snapshot", "kimi-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "kimi.models_integrations_tasks", "provider_id": "kimi_code", "implementation_ids": [ "kimi_code.implementation.reviewed" ], "plane": "control", "behavior": "Set model/thinking/mode; list tools/MCP; restart MCP; inspect or activate skills; configure agents; observe or cancel tasks/subagents. Spawn is prompt-driven, not a direct API.", "exact_exposure": [ "-m|/model|/effort", "ACP set_config_option model|thinking|mode", "GET /tools|/mcp/servers", "POST MCP restart", "/plugins", "--agent|--agent-file|--skills-dir", "skills list|activate", "GET|cancel tasks", "Agent|AgentSwarm" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "version_specific", "version_constraints": "0.31.1; experimental model controls excluded; packages private.", "remote_safety": "confirmation", "required_pairling_addition": "Add bounded read-only catalogs and reasoning choices; confirm task cancel/activation and keep installs/custom agents unavailable.", "shared_semantics": "provider.model_integration_agents", "provider_overlay": true, "source_refs": [ "kimi-acp", "kimi-web", "kimi-docs", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "kimi.prompt_queue_steer_abort", "provider_id": "kimi_code", "implementation_ids": [ "kimi_code.implementation.reviewed" ], "plane": "steer", "behavior": "Submit, queue, steer and abort by prompt ID. metadata, plan_mode, swarm_mode and goal_* fields are inert in the observed route; only consumed fields qualify.", "exact_exposure": [ "POST prompts", "POST prompts:steer", "prompt:abort", "WebSocket abort", "Ctrl+S|Esc|Ctrl+C", "profile|model|thinking|permission|disabled_tools", "metadata|plan_mode|swarm_mode|goal_* inert" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "0.31.1 private pre-1.0 server wire.", "remote_safety": "confirmation", "required_pairling_addition": "Add a separately negotiated prompt-ID queue/steer overlay bound to session and epoch; expose only route-consumed fields.", "shared_semantics": "turn.rich_steering", "provider_overlay": true, "source_refs": [ "kimi-prompts", "kimi-web", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "kimi.session_snapshot", "provider_id": "kimi_code", "implementation_ids": [ "kimi_code.implementation.reviewed" ], "plane": "read", "behavior": "Discover, create, resume, read, search, fork, archive, restore or export; snapshot last 100 messages plus in-flight text/tools/subagents/pending approvals/questions with seq/epoch; cursor subscribe.", "exact_exposure": [ "kimi -S|-c", "/api/v1/sessions*", "messages|transcript|search|fork|archive|restore|export", "GET snapshot", "WebSocket cursor", "ACP new|load|list|resume|fork" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "version_specific", "version_constraints": "0.31.1; kap-server 0.2.0 private; web v2 and CLI v1.", "remote_safety": "safe", "required_pairling_addition": "Add exact owned resume/fork targets plus bounded snapshot discovery with seq/epoch proof; confirm lifecycle mutations.", "shared_semantics": "session.lifecycle_snapshot", "provider_overlay": true, "source_refs": [ "kimi-snapshot", "kimi-web", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "omp.acp_session", "provider_id": "omp", "implementation_ids": [ "omp.implementation.reviewed" ], "plane": "control", "behavior": "Initialize and authenticate; create, load, list, resume, close or fork; prompt/cancel; set mode/model/thinking; inject MCP; receive images/tool/diff/plan/usage; service reverse FS/terminal and permission requests.", "exact_exposure": [ "omp acp", "initialize", "authenticate", "session/new|load|list|resume|close|fork|prompt|cancel|set_mode|set_model|set_config_option", "session/request_permission", "session/update", "fs/read_text_file|write_text_file", "terminal/create|output|wait_for_exit|kill|release" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "public", "version_constraints": "17.2.8; fork/form elicitation unstable; patched ACP 1.2.1.", "remote_safety": "confirmation", "required_pairling_addition": "Add exact load/resume/fork targets and separately attested provider-wide reads before exposure; keep reverse FS/terminal, plan and unsafe tools disabled.", "shared_semantics": "acp.session", "provider_overlay": false, "source_refs": [ "omp-acp", "acp-v1", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "omp.approval_plan_scope", "provider_id": "omp", "implementation_ids": [ "omp.implementation.reviewed" ], "plane": "control", "behavior": "Configure always-ask, write or yolo and per-tool policy. ACP gates bash/edit/delete/move; generic tools use form elicitation. Plan auto-approves when the client lacks elicitation.form; additionalDirectories are ignored and /add-dir expands scope.", "exact_exposure": [ "--approval-mode always-ask|write|yolo", "tools.approval.", "request_permission bash|edit|delete|move", "elicitation.form", "mode default|plan", "local://PLAN.md", "xd://propose", "/add-dir" ], "lifecycle": "before_turn", "machine_readable": "qualified", "maturity": "unsafe", "version_constraints": "17.2.8; effective mode not reported; plan auto-approval defect observed.", "remote_safety": "do_not_expose", "required_pairling_addition": "Keep yolo, auto-approve, plan-yolo and add-dir unavailable; any future safe plan flow must prove form elicitation and exact scope independently.", "shared_semantics": "approval.policy", "provider_overlay": true, "source_refs": [ "omp-approval", "omp-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "omp.integrations_context_files", "provider_id": "omp", "implementation_ids": [ "omp.implementation.reviewed" ], "plane": "control", "behavior": "Select model/thinking/fast; configure stdio/HTTP/SSE MCP; observe internal tools/subagents; compact/read memory/checkpoint/rewind conversation state; attach files/images and bridge client FS/terminal. Checkpoints do not restore files.", "exact_exposure": [ "ACP model|thinking|mode", "RPC model|thinking|fast", "MCP stdio|Streamable HTTP|SSE", "task", "hub", "tool|plan|usage events", "/memory", "/compact", "/shake", "checkpoint", "rewind", "@file|image", "ACP embedded|image|fs|terminal", "RPC images|diffs" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "public", "version_constraints": "17.2.8; subagents headless yolo internally; checkpoints conversation-only.", "remote_safety": "required_local_only", "required_pairling_addition": "Add bounded read-only catalogs and context controls behind session/provider attestations; keep internal tools and reverse terminal/FS unavailable.", "shared_semantics": "provider.integration_context", "provider_overlay": true, "source_refs": [ "omp-acp", "omp-rpc", "omp-mcp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "omp.json_auth_extensions_collab", "provider_id": "omp", "implementation_ids": [ "omp.implementation.reviewed" ], "plane": "receive", "behavior": "Use one-shot JSONL for bounded output; inspect diagnostics/auth; use collaboration links. Browser/computer, credential endpoints, hooks and in-process extensions are local or excluded.", "exact_exposure": [ "--mode json", "RPC login|open_url", "collab view link", "collab full link", "browser relay", "computer", "extensions install|reload", "--api-key", "--hook", "-e" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "version_specific", "version_constraints": "17.2.8; stdio no auth; extensions unisolated.", "remote_safety": "required_local_only", "required_pairling_addition": "Add only redacted, separately attested provider diagnostics/auth reads; keep credential and collaboration-link mutation local.", "shared_semantics": "provider.diagnostics_auth", "provider_overlay": true, "source_refs": [ "omp-release", "omp-rpc", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "omp.release_model_selection", "provider_id": "omp", "implementation_ids": [ "omp.implementation.reviewed" ], "plane": "control", "behavior": "Select a model from the live negotiated ACP model configuration for the exact managed OMP session.", "exact_exposure": [ "ACP model" ], "lifecycle": "before_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "OMP 17.2.8 stable managed ACP profile.", "remote_safety": "confirmation", "required_pairling_addition": "", "shared_semantics": "release.model_selection", "provider_overlay": true, "source_refs": [ "omp-acp", "omp-rpc", "omp-mcp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "omp.rpc_rich_control", "provider_id": "omp", "implementation_ids": [ "omp.implementation.reviewed" ], "plane": "steer", "behavior": "Negotiate RPC v2; prompt, steer, follow up, abort or abort-and-prompt; set model/thinking/fast; manage queue/interrupt; compact/retry; page/branch/handoff history; observe subagents/snapshots/transcripts. Raw RPC bash is excluded.", "exact_exposure": [ "omp --mode rpc-ui", "v2 negotiate", "prompt", "steer", "follow_up", "abort", "abort_and_prompt", "model", "thinking", "fast", "queue", "interrupt", "compact", "retry", "history paging|branch|handoff", "subagent subscription|snapshot|transcript", "raw bash" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "17.2.8; Python helper 0.1.0 Alpha.", "remote_safety": "confirmation", "required_pairling_addition": "Implement a separately negotiated RPC v2 driver with the same identity/policy kernel; deny raw RPC bash and unknown pass-through methods.", "shared_semantics": "turn.rich_steering", "provider_overlay": true, "source_refs": [ "omp-rpc", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "capability_id": "opencode.events_usage_integrations", "provider_id": "opencode", "implementation_ids": [ "opencode.implementation.reviewed" ], "plane": "receive", "behavior": "Receive SSE message/tool/session/token/cache/cost events; inspect health; manage MCP/provider auth/plugins/PTY/TUI experimental groups. Server Basic auth exists only when a password is set; no TLS is built in.", "exact_exposure": [ "GET /event|global/event", "message|tool pending|running|completed|error", "status|tokens|cache|cost", "run --format json", "GET /global/health", "MCP status|add|OAuth|connect", "PUT|DELETE /auth/:provider", "plugins", "PTY ticket WebSocket", "TUI HTTP", "OPENCODE_SERVER_PASSWORD", "opencode acp" ], "lifecycle": "provider_wide", "machine_readable": "qualified", "maturity": "experimental", "version_constraints": "1.18.10; MCP group 0.0.1, TUI/PTY experimental; absent password unsecured.", "remote_safety": "required_local_only", "required_pairling_addition": "Add bounded command and MCP status catalogs and reviewed reload; keep credentials, plugins, raw PTY/TUI and unsecured server access unavailable.", "shared_semantics": "event.integration_auth", "provider_overlay": true, "source_refs": [ "opencode-server", "opencode-sdk", "opencode-acp", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "capability_id": "opencode.models_agents_context_vcs", "provider_id": "opencode", "implementation_ids": [ "opencode.implementation.reviewed" ], "plane": "control", "behavior": "Select provider/model/variant/reasoning/agent; request JSON-schema output; observe child/background sessions; compact/revert; attach/search/read files/VCS/diffs and apply VCS patches.", "exact_exposure": [ "GET /agent", "model catalog", "prompt {model,agent,variant,format}", "json_schema {schema,retryCount}", "children", "experimental background", "summarize|compact", "revert|unrevert", "file parts", "file/find/vcs", "POST /vcs/apply" ], "lifecycle": "before_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "1.18.10; background gated; catalogs dynamic.", "remote_safety": "confirmation", "required_pairling_addition": "Add bounded context/artifact reads and confirmed compact/rewind only after exact endpoint negotiation; keep background and VCS mutations separately confirmed.", "shared_semantics": "session.model_context_artifact", "provider_overlay": true, "source_refs": [ "opencode-sdk", "opencode-server", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "capability_id": "opencode.permission_shell_safety", "provider_id": "opencode", "implementation_ids": [ "opencode.implementation.reviewed" ], "plane": "control", "behavior": "Apply last-match ask/allow/deny and answer permission events once or always. Auto/yolo aliases and direct session shell bypass approval; no core OS sandbox exists.", "exact_exposure": [ "permission Ruleset ask|allow|deny", "permission.asked|replied", "session permission reply", "experimental GET /permission|reply", "--auto|--yolo|--dangerous", "POST /session/:id/shell" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "unsafe", "version_constraints": "1.18.10; central permission API experimental; legacy reply deprecated.", "remote_safety": "do_not_expose", "required_pairling_addition": "Keep auto/yolo, persistent broad allow and /shell unavailable; any future permission-mode operation must remain exact, request-bound and fail closed.", "shared_semantics": "approval.policy", "provider_overlay": true, "source_refs": [ "opencode-permissions", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "capability_id": "opencode.release_status_usage_auth", "provider_id": "opencode", "implementation_ids": [ "opencode.implementation.reviewed" ], "plane": "read", "behavior": "Read redacted provider authentication, usage and diagnostics from the owned authenticated loopback OpenCode server.", "exact_exposure": [ "GET /global/health", "status|tokens|cache|cost", "GET /auth/:provider" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "version_specific", "version_constraints": "OpenCode 1.15.10 stable owned loopback server.", "remote_safety": "safe", "required_pairling_addition": "", "shared_semantics": "release.status_usage_auth", "provider_overlay": true, "source_refs": [ "opencode-server", "opencode-sdk", "opencode-acp", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "capability_id": "opencode.session_prompt_history", "provider_id": "opencode", "implementation_ids": [ "opencode.implementation.reviewed" ], "plane": "control", "behavior": "Filter, create, patch, fork, archive or delete sessions; read messages/children/todos/diffs; prompt sync/async over SSE; abort; answer or reject structured questions. No true mid-turn steering is documented.", "exact_exposure": [ "GET|POST|PATCH|DELETE /session", "GET /experimental/session", "/session/:id/message|children|todo|diff", "prompt_async", "GET /event|global/event", "POST /session/:id/abort", "GET /question", "reply|reject", "ACP new|load|list|resume|close|fork|prompt|cancel" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "version_specific", "version_constraints": "1.18.10; installed 1.15.10 differs; cross-project/message-part APIs experimental or newer.", "remote_safety": "confirmation", "required_pairling_addition": "Retain the four lifecycle/input operations; add bounded session/message/history reads and confirmed archive/delete/question responses before full support.", "shared_semantics": "session.lifecycle_input", "provider_overlay": true, "source_refs": [ "opencode-server", "opencode-acp-src", "pairling-recognized", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "capability_id": "openhands.control_context", "provider_id": "openhands", "implementation_ids": [ "openhands.implementation.reviewed" ], "plane": "control", "behavior": "Interrupt, confirm, fork, navigate, condense and inspect file or bash actions.", "exact_exposure": [ "interrupt", "confirm", "fork", "navigate", "condense", "files", "bash" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "public", "version_constraints": "1.40.0.", "remote_safety": "confirmation", "required_pairling_addition": "Add bounded action inspection and reviewed navigation semantics; keep arbitrary raw bash and NeverConfirm unavailable.", "shared_semantics": "approval.context_control", "provider_overlay": true, "source_refs": [ "openhands-server", "pairling-operations", "pairling-openhands-control", "pairling-openhands-tests" ] }, { "capability_id": "openhands.server_sessions_events", "provider_id": "openhands", "implementation_ids": [ "openhands.implementation.reviewed" ], "plane": "receive", "behavior": "REST/OpenAPI conversations and authenticated WebSocket lifecycle, message, reasoning, action, observation and error events.", "exact_exposure": [ "Agent Server REST", "OpenAPI", "authenticated WebSocket", "conversation lifecycle", "message|action|observation|error" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "public", "version_constraints": "Agent Server 1.40.0; CLI 1.8.0.", "remote_safety": "safe", "required_pairling_addition": "Retain the three operations; add bounded conversation discovery and complete normalized public events with tenant, cursor and backpressure proof.", "shared_semantics": "session.lifecycle_events", "provider_overlay": true, "source_refs": [ "openhands-server", "pairling-operations", "pairling-openhands-control", "pairling-openhands-tests" ] }, { "capability_id": "openhands.unattended_defaults", "provider_id": "openhands", "implementation_ids": [ "openhands.implementation.reviewed" ], "plane": "control", "behavior": "Headless always-approve and Agent Server NeverConfirm remove the human boundary.", "exact_exposure": [ "headless always-approve", "NeverConfirm" ], "lifecycle": "before_turn", "machine_readable": true, "maturity": "unsafe", "version_constraints": "CLI 1.8.0 and server 1.40.0.", "remote_safety": "do_not_expose", "required_pairling_addition": "Require confirmation-capable effective policy; fail closed if unreadable.", "shared_semantics": "approval.bypass", "provider_overlay": true, "source_refs": [ "openhands-server" ] }, { "capability_id": "qwen.acp_events_integrations", "provider_id": "qwen_code", "implementation_ids": [ "qwen_code.implementation.reviewed" ], "plane": "receive", "behavior": "Use negotiated ACP session updates, tool calls, permissions, MCP and config while preserving Qwen SDK-specific events.", "exact_exposure": [ "ACP initialize|new|load|prompt|cancel|update|request_permission", "MCP servers", "SDK JSONL events" ], "lifecycle": "provider_wide", "machine_readable": true, "maturity": "public", "version_constraints": "0.21.4; negotiate exact capabilities.", "remote_safety": "safe", "required_pairling_addition": "Add bounded command and diagnostics reads and separately reviewed ACP negotiation while preserving SDK-specific event redaction.", "shared_semantics": "acp.session", "provider_overlay": true, "source_refs": [ "qwen-release", "acp-v1", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests" ] }, { "capability_id": "qwen.permissions_model_checkpoint", "provider_id": "qwen_code", "implementation_ids": [ "qwen_code.implementation.reviewed" ], "plane": "control", "behavior": "Select plan, default, auto-edit, auto or yolo; set model/effort; inspect context/usage; restore a shadow-Git checkpoint.", "exact_exposure": [ "approval plan|default|auto-edit|auto|yolo", "set model|effort", "permission requests", "context|usage", "shadow-Git /restore" ], "lifecycle": "before_turn", "machine_readable": "qualified", "maturity": "public", "version_constraints": "0.21.4; auto/yolo unsafe; checkpoint optional.", "remote_safety": "confirmation", "required_pairling_addition": "Add previewed, exact checkpoint restore before session.rewind; keep auto/yolo and insecure permission modes unavailable.", "shared_semantics": "approval.model_context", "provider_overlay": true, "source_refs": [ "qwen-approval", "qwen-checkpoint", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests" ] }, { "capability_id": "qwen.release_permissions_model_usage", "provider_id": "qwen_code", "implementation_ids": [ "qwen_code.implementation.reviewed" ], "plane": "control", "behavior": "Use safe permission and approval choices, select reviewed model and reasoning values, and read bounded usage from the exact Qwen SDK session.", "exact_exposure": [ "approval plan|default|auto-edit", "permission requests", "set model|effort", "usage" ], "lifecycle": "before_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "Qwen Code 0.21.4 with @qwen-code/sdk 0.21.4.", "remote_safety": "confirmation", "required_pairling_addition": "", "shared_semantics": "release.permissions_model_usage", "provider_overlay": true, "source_refs": [ "qwen-approval", "qwen-checkpoint", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests" ] }, { "capability_id": "qwen.session_prompt_output", "provider_id": "qwen_code", "implementation_ids": [ "qwen_code.implementation.reviewed" ], "plane": "steer", "behavior": "Create, continue or resume; prompt via SDK/ACP; interrupt and consume JSON/stream-json partial deltas and usage. Stream-json input is under construction.", "exact_exposure": [ "TypeScript SDK AsyncIterable JSONL", "--output-format json|stream-json", "--continue|--resume|--acp", "session/prompt|cancel", "partial deltas|usage", "--input-format stream-json" ], "lifecycle": "during_turn", "machine_readable": true, "maturity": "version_specific", "version_constraints": "0.21.4; stream input unfinished.", "remote_safety": "safe", "required_pairling_addition": "Retain prompt/interrupt/resume; add only reviewed ACP/headless output parity and do not claim live stream-json input until upstream and Pairling implement it.", "shared_semantics": "turn.input_control", "provider_overlay": true, "source_refs": [ "qwen-headless", "qwen-release", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests" ] }, { "capability_id": "roo.remote_session_protocol", "provider_id": "roo_code", "implementation_ids": [ "roo_code.implementation.observed" ], "plane": "control", "behavior": "No official independent CLI, ACP, SDK server or remote session control surface was verified.", "exact_exposure": [], "lifecycle": "provider_wide", "machine_readable": false, "maturity": "unknown", "version_constraints": "Evidence limited to official installation docs as of 2026-08-03.", "remote_safety": "do_not_expose", "required_pairling_addition": "None. Reassess only on a supported protocol; never infer Cline compatibility.", "shared_semantics": null, "provider_overlay": true, "source_refs": [ "roo-install" ] } ], "operation_bindings": [ { "implementation_operation_id": "aider.provider.commands.read", "implementation_id": "aider.implementation.observed", "operation_id": "provider.commands.read", "capability_ids": [ "aider.commands_model_git" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.commands.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "aider.commands_model_git.pairling_support", "aider.commands_model_git.vendor_surface" ], "source_refs": [ "aider-commands" ], "required_pairling_addition": "Terminal macros only with confirmation and receipt; do not claim typed state.", "semantic_digest": "sha256:ab9293244799a8296cc098b537b476460f4af7f8fc0e044b1b9d0f8779a060ea" }, { "implementation_operation_id": "aider.session.model.set", "implementation_id": "aider.implementation.observed", "operation_id": "session.model.set", "capability_ids": [ "aider.commands_model_git" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.model.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "aider.commands_model_git.pairling_support", "aider.commands_model_git.vendor_surface" ], "source_refs": [ "aider-commands" ], "required_pairling_addition": "Terminal macros only with confirmation and receipt; do not claim typed state.", "semantic_digest": "sha256:875d614c6d7ddc423aa001cd8ddad3d09a25292e76221d5db3a00f3c7d9e890e" }, { "implementation_operation_id": "aider.session.prompt.send", "implementation_id": "aider.implementation.observed", "operation_id": "session.prompt.send", "capability_ids": [ "aider.terminal_session" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "aider.terminal_session.pairling_support", "aider.terminal_session.vendor_surface" ], "source_refs": [ "aider-commands" ], "required_pairling_addition": "Owned local PTY floor with process identity, text/key/interrupt receipts; no semantic scraping.", "semantic_digest": "sha256:d8e3e20490bb29ece126c0a8e458cbc96fd8a66274f6b87013196aac19375a0e" }, { "implementation_operation_id": "aider.session.reasoning.set", "implementation_id": "aider.implementation.observed", "operation_id": "session.reasoning.set", "capability_ids": [ "aider.commands_model_git" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.reasoning.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "aider.commands_model_git.pairling_support", "aider.commands_model_git.vendor_surface" ], "source_refs": [ "aider-commands" ], "required_pairling_addition": "Terminal macros only with confirmation and receipt; do not claim typed state.", "semantic_digest": "sha256:00c46214a38df373ea9e5ce0d9996f9d1134a84ff8d4b775e1a27a6e8ce4de58" }, { "implementation_operation_id": "aider.session.rewind", "implementation_id": "aider.implementation.observed", "operation_id": "session.rewind", "capability_ids": [ "aider.commands_model_git" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.rewind" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "aider.commands_model_git.pairling_support", "aider.commands_model_git.vendor_surface" ], "source_refs": [ "aider-commands" ], "required_pairling_addition": "Terminal macros only with confirmation and receipt; do not claim typed state.", "semantic_digest": "sha256:005f035927ce726933a06fe5f7184bb519a91c3a958ba61a6fe7512201846f10" }, { "implementation_operation_id": "aider.session.terminate", "implementation_id": "aider.implementation.observed", "operation_id": "session.terminate", "capability_ids": [ "aider.terminal_session" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "terminate_session", "target": "session.terminate" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "mutation_authority" }, { "kind": "driver_availability" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "start_replacement_session" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "aider.terminal_session.pairling_support", "aider.terminal_session.vendor_surface" ], "source_refs": [ "aider-commands" ], "required_pairling_addition": "Owned local PTY floor with process identity, text/key/interrupt receipts; no semantic scraping.", "semantic_digest": "sha256:2a516d393d4be1977ec453b755c43adb22747c3531dab0852afb8cc3869f900b" }, { "implementation_operation_id": "aider.session.turn.interrupt", "implementation_id": "aider.implementation.observed", "operation_id": "session.turn.interrupt", "capability_ids": [ "aider.terminal_session" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "aider.terminal_session.pairling_support", "aider.terminal_session.vendor_surface" ], "source_refs": [ "aider-commands" ], "required_pairling_addition": "Owned local PTY floor with process identity, text/key/interrupt receipts; no semantic scraping.", "semantic_digest": "sha256:ab5dbf75b8c60dc168542c4834eb7f2c992dd726e329c6e9818101e0b742f677" }, { "implementation_operation_id": "amp.provider.diagnostics.read", "implementation_id": "amp.implementation.observed", "operation_id": "provider.diagnostics.read", "capability_ids": [ "amp.sdk_threads_events" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.diagnostics.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "amp.sdk_threads_events.pairling_support", "amp.sdk_threads_events.vendor_surface" ], "source_refs": [ "amp-sdk" ], "required_pairling_addition": "Research schemas and approvals first; use an owned sidecar with redaction and bounds if admitted.", "semantic_digest": "sha256:926a7c2022ab8f85e5af9dcd030a572a7d2cfaf7fc113931d7ba62fe433d2e0b" }, { "implementation_operation_id": "amp.session.prompt.send", "implementation_id": "amp.implementation.observed", "operation_id": "session.prompt.send", "capability_ids": [ "amp.sdk_threads_events" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "amp.sdk_threads_events.pairling_support", "amp.sdk_threads_events.vendor_surface" ], "source_refs": [ "amp-sdk" ], "required_pairling_addition": "Research schemas and approvals first; use an owned sidecar with redaction and bounds if admitted.", "semantic_digest": "sha256:847e72185c1bcdf107a2a27872d5a669b0040cf5fced8f311e65303be9a4b54f" }, { "implementation_operation_id": "claude_code.provider.agents.read", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "provider.agents.read", "capability_ids": [ "claude.release_integration_catalog" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "sessions:read" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "none" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "return_data", "target": "provider.agents.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live" ], "evidence_claim_ids": [ "claude.release_integration_catalog.pairling_support", "claude.release_integration_catalog.vendor_surface" ], "source_refs": [ "claude-mcp", "claude-sdk", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:ccdadaf47743acca29ae658d169a65a4f5c120c2a28725e40736b16fca98e792" }, { "implementation_operation_id": "claude_code.provider.auth.read", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "provider.auth.read", "capability_ids": [ "claude.release_auth_status" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.auth.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "credential_exposure" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "claude.release_auth_status.pairling_support", "claude.release_auth_status.vendor_surface" ], "source_refs": [ "claude-remote", "claude-sdk", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:3ba7046a4388990a5216e8634ed49193cae489092be8525c773a180f7bc00d8d" }, { "implementation_operation_id": "claude_code.provider.commands.read", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "provider.commands.read", "capability_ids": [ "claude.release_integration_catalog" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.commands.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "claude.release_integration_catalog.pairling_support", "claude.release_integration_catalog.vendor_surface" ], "source_refs": [ "claude-mcp", "claude-sdk", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:a07afef11b92c231a6374cde713dcbbea65e890b5c1aa1777601c8591dc0cc38" }, { "implementation_operation_id": "claude_code.provider.diagnostics.read", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "provider.diagnostics.read", "capability_ids": [ "claude.events_hooks_usage" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.diagnostics.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "claude.events_hooks_usage.pairling_support", "claude.events_hooks_usage.vendor_surface" ], "source_refs": [ "claude-hooks", "claude-sdk", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:0486e1c06e8352c4717b4ba45616605db9f61b7ea42a7b43aefda477d6721aa0" }, { "implementation_operation_id": "claude_code.provider.mcp.read", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "provider.mcp.read", "capability_ids": [ "claude.release_integration_catalog" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.mcp.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "claude.release_integration_catalog.pairling_support", "claude.release_integration_catalog.vendor_surface" ], "source_refs": [ "claude-mcp", "claude-sdk", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:68737a1dfe2ae40cfed280dbfc5ff40cae56e50056eb028a76c088c340464a92" }, { "implementation_operation_id": "claude_code.provider.mcp.reconnect", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "provider.mcp.reconnect", "capability_ids": [ "claude.release_integration_catalog" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "pair:admin" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "reconnect_integration", "target": "provider.mcp.reconnect" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "claude.release_integration_catalog.pairling_support", "claude.release_integration_catalog.vendor_surface" ], "source_refs": [ "claude-mcp", "claude-sdk", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:4907a611f5533522aa26a462c066f932dce914ca8f1c983d8a21eead458b1b5a" }, { "implementation_operation_id": "claude_code.provider.mcp.set_enabled", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "provider.mcp.set_enabled", "capability_ids": [ "claude.release_integration_catalog" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "pair:admin" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "enable_integration", "target": "provider.mcp.set_enabled" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "claude.release_integration_catalog.pairling_support", "claude.release_integration_catalog.vendor_surface" ], "source_refs": [ "claude-mcp", "claude-sdk", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:25ac50bb842f9dba95d83e8b57352dc0c900df3595956420e72fe8b489a64cc4" }, { "implementation_operation_id": "claude_code.provider.status.read", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "provider.status.read", "capability_ids": [ "claude.events_hooks_usage" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "sessions:read" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "none" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "return_data", "target": "provider.status.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live" ], "evidence_claim_ids": [ "claude.events_hooks_usage.pairling_support", "claude.events_hooks_usage.vendor_surface" ], "source_refs": [ "claude-hooks", "claude-sdk", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:26b89e1d3b8e8ce58be0abd801bb8c282c1bbe0756c27956722862ab07380b69" }, { "implementation_operation_id": "claude_code.session.approval.decide", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "session.approval.decide", "capability_ids": [ "claude.prompt_interrupt_permissions" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "claude.prompt_interrupt_permissions.pairling_support", "claude.prompt_interrupt_permissions.vendor_surface" ], "source_refs": [ "claude-hooks", "claude-permissions", "claude-stream", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:68de40ac09f04ab20023bffdc4daa52e390494e2beb6e0b920cd103fe3d82b32" }, { "implementation_operation_id": "claude_code.session.compact", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "session.compact", "capability_ids": [ "claude.release_model_context_checkpoint" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.compact" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "claude.release_model_context_checkpoint.pairling_support", "claude.release_model_context_checkpoint.vendor_surface" ], "source_refs": [ "claude-package", "claude-sdk", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:50ffaacf72a8bc7259614e8e2399e214ea61b2ff0768735f47be717b4f316f63" }, { "implementation_operation_id": "claude_code.session.context.read", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "session.context.read", "capability_ids": [ "claude.release_model_context_checkpoint" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "sessions:read" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "none" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "return_data", "target": "session.context.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live" ], "evidence_claim_ids": [ "claude.release_model_context_checkpoint.pairling_support", "claude.release_model_context_checkpoint.vendor_surface" ], "source_refs": [ "claude-package", "claude-sdk", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:403bdb783ada129322ffb34295d49b57b6a86f71ecd75870eed19e2beed30377" }, { "implementation_operation_id": "claude_code.session.history.read", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "session.history.read", "capability_ids": [ "claude.session_history_lifecycle" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "sessions:read" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "none" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "return_data", "target": "session.history.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live" ], "evidence_claim_ids": [ "claude.session_history_lifecycle.pairling_support", "claude.session_history_lifecycle.vendor_surface" ], "source_refs": [ "claude-sdk", "pairling-claude", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:8279a8cfffa7b7de464c58fd15f453c9b788ba2246d038edd32231bdfc691736" }, { "implementation_operation_id": "claude_code.session.model.set", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "session.model.set", "capability_ids": [ "claude.release_model_context_checkpoint" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.model.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "claude.release_model_context_checkpoint.pairling_support", "claude.release_model_context_checkpoint.vendor_surface" ], "source_refs": [ "claude-package", "claude-sdk", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:d72abe9c237ccbf58c35274363d7870a1fded967aa322a36b151190cdf8a4347" }, { "implementation_operation_id": "claude_code.session.permissions.set", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "session.permissions.set", "capability_ids": [ "claude.prompt_interrupt_permissions" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.permissions.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "credential_exposure" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "claude.prompt_interrupt_permissions.pairling_support", "claude.prompt_interrupt_permissions.vendor_surface" ], "source_refs": [ "claude-hooks", "claude-permissions", "claude-stream", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:43c1eee464dee567b2229498f3dd426f0b0b9d2a925955176db359890984592c" }, { "implementation_operation_id": "claude_code.session.prompt.send", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "session.prompt.send", "capability_ids": [ "claude.prompt_interrupt_permissions" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "claude.prompt_interrupt_permissions.pairling_support", "claude.prompt_interrupt_permissions.vendor_surface" ], "source_refs": [ "claude-hooks", "claude-permissions", "claude-stream", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:37ba61742a3d4bfc717a7715a79314d4eef99fed8c46b8129ca7a7a9caaeedc9" }, { "implementation_operation_id": "claude_code.session.question.answer", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "session.question.answer", "capability_ids": [ "claude.prompt_interrupt_permissions" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.question.answer" } ], "invalidates": [ { "kind": "input_lease" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "claude.prompt_interrupt_permissions.pairling_support", "claude.prompt_interrupt_permissions.vendor_surface" ], "source_refs": [ "claude-hooks", "claude-permissions", "claude-stream", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:4a620590f846801c36bd291cbce2c7f54cd654cfa144cd3206cbbac6edad8df0" }, { "implementation_operation_id": "claude_code.session.rewind", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "session.rewind", "capability_ids": [ "claude.release_model_context_checkpoint" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.rewind" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "claude.release_model_context_checkpoint.pairling_support", "claude.release_model_context_checkpoint.vendor_surface" ], "source_refs": [ "claude-package", "claude-sdk", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:2c1943b53725e028d6c4f4fdd0cb9c323020e0bc99908c6e3dd73587f9cc000e" }, { "implementation_operation_id": "claude_code.session.terminate", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "session.terminate", "capability_ids": [ "claude.prompt_interrupt_permissions" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "terminate_session", "target": "session.terminate" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "mutation_authority" }, { "kind": "driver_availability" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "start_replacement_session" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "claude.prompt_interrupt_permissions.pairling_support", "claude.prompt_interrupt_permissions.vendor_surface" ], "source_refs": [ "claude-hooks", "claude-permissions", "claude-stream", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:3b34d1ac4d1e9cf8983a10992340307e8f6b478fdf7ea962638915f38f8057e4" }, { "implementation_operation_id": "claude_code.session.turn.interrupt", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "session.turn.interrupt", "capability_ids": [ "claude.prompt_interrupt_permissions" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "claude.prompt_interrupt_permissions.pairling_support", "claude.prompt_interrupt_permissions.vendor_surface" ], "source_refs": [ "claude-hooks", "claude-permissions", "claude-stream", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:c88b15b01cf434ce8507e4ec45e0e45a3f6e52cdca9886c07afee1bb7a6ab674" }, { "implementation_operation_id": "claude_code.session.turn.steer", "implementation_id": "claude_code.implementation.reviewed", "operation_id": "session.turn.steer", "capability_ids": [ "claude.prompt_interrupt_permissions" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "steer_turn", "target": "session.turn.steer" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "claude.prompt_interrupt_permissions.pairling_support", "claude.prompt_interrupt_permissions.vendor_surface" ], "source_refs": [ "claude-hooks", "claude-permissions", "claude-stream", "pairling-claude-sdk-control", "pairling-claude-sdk-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:f06161a150e1b75a0b53f6e90fd34ddef632b0eb9f903a4c3c48189c2c4f054c" }, { "implementation_operation_id": "cline_cli.session.approval.decide", "implementation_id": "cline_cli.implementation.reviewed", "operation_id": "session.approval.decide", "capability_ids": [ "cline.json_acp_session" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "cline.json_acp_session.pairling_support", "cline.json_acp_session.vendor_surface" ], "source_refs": [ "acp-v1", "cline-cli", "cline-release", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:6f6a653a0a050e10777db00f36e5e77065a1f7c6b8e6dfb10fd07c796dbeae19" }, { "implementation_operation_id": "cline_cli.session.permissions.set", "implementation_id": "cline_cli.implementation.reviewed", "operation_id": "session.permissions.set", "capability_ids": [ "cline.json_acp_session" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.permissions.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "credential_exposure" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "cline.json_acp_session.pairling_support", "cline.json_acp_session.vendor_surface" ], "source_refs": [ "acp-v1", "cline-cli", "cline-release", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:d9a7b3051823bbf1d9eabc857dacf2446de9594d2a85c1fffdbf1231c5c87ed5" }, { "implementation_operation_id": "cline_cli.session.prompt.send", "implementation_id": "cline_cli.implementation.reviewed", "operation_id": "session.prompt.send", "capability_ids": [ "cline.json_acp_session" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "cline.json_acp_session.pairling_support", "cline.json_acp_session.vendor_surface" ], "source_refs": [ "acp-v1", "cline-cli", "cline-release", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:4eb5d8c5542ce17aaccf3a1773c23e28cf80b625f8bea90177d009aab629bed2" }, { "implementation_operation_id": "cline_cli.session.question.answer", "implementation_id": "cline_cli.implementation.reviewed", "operation_id": "session.question.answer", "capability_ids": [ "cline.json_acp_session" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.question.answer" } ], "invalidates": [ { "kind": "input_lease" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "cline.json_acp_session.pairling_support", "cline.json_acp_session.vendor_surface" ], "source_refs": [ "acp-v1", "cline-cli", "cline-release", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:900dec094979a343ca9473337fc61c3acfae46a977eafffffd961bef07e00983" }, { "implementation_operation_id": "cline_cli.session.turn.interrupt", "implementation_id": "cline_cli.implementation.reviewed", "operation_id": "session.turn.interrupt", "capability_ids": [ "cline.json_acp_session" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "cline.json_acp_session.pairling_support", "cline.json_acp_session.vendor_surface" ], "source_refs": [ "acp-v1", "cline-cli", "cline-release", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:ceb0e321719f558022e403a84c337a85321a11a3abd757f566f3b8f3120388b2" }, { "implementation_operation_id": "codex.provider.auth.read", "implementation_id": "codex.implementation.reviewed", "operation_id": "provider.auth.read", "capability_ids": [ "codex.release_auth_status" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.auth.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "credential_exposure" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "codex.release_auth_status.pairling_support", "codex.release_auth_status.vendor_surface" ], "source_refs": [ "codex-auth-src", "codex-rc-src", "codex-remote", "pairling-codex-control", "pairling-codex-control-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:ed64cea48b978fb64c761a54f0302dcd39e65e50d2b6849b5336e1ffbf8723e3" }, { "implementation_operation_id": "codex.provider.config.read", "implementation_id": "codex.implementation.reviewed", "operation_id": "provider.config.read", "capability_ids": [ "codex.models_config_integrations" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.config.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "codex.models_config_integrations.pairling_support", "codex.models_config_integrations.vendor_surface" ], "source_refs": [ "codex-app-server", "codex-config", "codex-item-src", "pairling-codex-control", "pairling-codex-control-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:03d5fa7744ecdcc47bdefe98f0ea24db36d357ee825bcc7dbcd72a59875dbf94" }, { "implementation_operation_id": "codex.provider.diagnostics.read", "implementation_id": "codex.implementation.reviewed", "operation_id": "provider.diagnostics.read", "capability_ids": [ "codex.release_lifecycle_usage_diagnostics" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.diagnostics.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "codex.release_lifecycle_usage_diagnostics.pairling_support", "codex.release_lifecycle_usage_diagnostics.vendor_surface" ], "source_refs": [ "codex-item-src", "codex-turn-src", "pairling-codex", "pairling-codex-control", "pairling-codex-control-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:14bd38bf1138b64d56af20f4a36a57f3225633cbeb7e30e9f084b6d4e339f3f6" }, { "implementation_operation_id": "codex.provider.mcp.read", "implementation_id": "codex.implementation.reviewed", "operation_id": "provider.mcp.read", "capability_ids": [ "codex.models_config_integrations" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.mcp.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "codex.models_config_integrations.pairling_support", "codex.models_config_integrations.vendor_surface" ], "source_refs": [ "codex-app-server", "codex-config", "codex-item-src", "pairling-codex-control", "pairling-codex-control-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:f53be35d0cec715c8407c9a1da60d02a735b414b42507d476b2fd3ad91d0af62" }, { "implementation_operation_id": "codex.provider.usage.read", "implementation_id": "codex.implementation.reviewed", "operation_id": "provider.usage.read", "capability_ids": [ "codex.release_lifecycle_usage_diagnostics" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.usage.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "codex.release_lifecycle_usage_diagnostics.pairling_support", "codex.release_lifecycle_usage_diagnostics.vendor_surface" ], "source_refs": [ "codex-item-src", "codex-turn-src", "pairling-codex", "pairling-codex-control", "pairling-codex-control-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:bd28bf42821d1acd66e593f9d886f0504cfdc79b19687f0be7e2ce06da5850f7" }, { "implementation_operation_id": "codex.session.approval.decide", "implementation_id": "codex.implementation.reviewed", "operation_id": "session.approval.decide", "capability_ids": [ "codex.approval_policy" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "codex.approval_policy.pairling_support", "codex.approval_policy.vendor_surface" ], "source_refs": [ "codex-item-src", "codex-thread-src", "pairling-codex-control", "pairling-codex-control-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:ea1b307bde0c825dbbee04f0e2a2c209f2ed2c1dd746bae2df015087fc0d222d" }, { "implementation_operation_id": "codex.session.collaboration_mode.set", "implementation_id": "codex.implementation.reviewed", "operation_id": "session.collaboration_mode.set", "capability_ids": [ "codex.models_config_integrations" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.collaboration_mode.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "codex.models_config_integrations.pairling_support", "codex.models_config_integrations.vendor_surface" ], "source_refs": [ "codex-app-server", "codex-config", "codex-item-src", "pairling-codex-control", "pairling-codex-control-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:a3a229561f792e1a732ce55776dfd987330b0deb3a29dd9423bc951b752ce448" }, { "implementation_operation_id": "codex.session.compact", "implementation_id": "codex.implementation.reviewed", "operation_id": "session.compact", "capability_ids": [ "codex.subagents_plan_review_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.compact" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "codex.subagents_plan_review_context.pairling_support", "codex.subagents_plan_review_context.vendor_surface" ], "source_refs": [ "codex-item-src", "codex-thread-src", "pairling-codex-control", "pairling-codex-control-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:498bb3ac524161554bc886093ee198fdad802beb7da65bd48462e36c8d5e34c8" }, { "implementation_operation_id": "codex.session.fork", "implementation_id": "codex.implementation.reviewed", "operation_id": "session.fork", "capability_ids": [ "codex.session.lifecycle_discovery", "codex.subagents_plan_review_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.fork" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "codex.session.lifecycle_discovery.pairling_support", "codex.session.lifecycle_discovery.vendor_surface", "codex.subagents_plan_review_context.pairling_support", "codex.subagents_plan_review_context.vendor_surface" ], "source_refs": [ "codex-app-server", "codex-item-src", "codex-thread-src", "pairling-codex", "pairling-codex-control", "pairling-codex-control-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:2d7750ce043a010ff16d79210fd3c0c1c86843d988cfe0f9d74d9baf4e8aeb21" }, { "implementation_operation_id": "codex.session.prompt.send", "implementation_id": "codex.implementation.reviewed", "operation_id": "session.prompt.send", "capability_ids": [ "codex.turn.input_steer_interrupt" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "codex.turn.input_steer_interrupt.pairling_support", "codex.turn.input_steer_interrupt.vendor_surface" ], "source_refs": [ "codex-turn-src", "pairling-codex-control", "pairling-codex-control-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:1793ef827e44adaa5d8da47e9a709691a912687c62a6ad56607d5e83c3557d89" }, { "implementation_operation_id": "codex.session.question.answer", "implementation_id": "codex.implementation.reviewed", "operation_id": "session.question.answer", "capability_ids": [ "codex.approval_policy" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.question.answer" } ], "invalidates": [ { "kind": "input_lease" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "codex.approval_policy.pairling_support", "codex.approval_policy.vendor_surface" ], "source_refs": [ "codex-item-src", "codex-thread-src", "pairling-codex-control", "pairling-codex-control-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:09a8e23ae221c9dec9b755b62117e755bd14427d5fbd04fe2a3d5681d1c574dc" }, { "implementation_operation_id": "codex.session.resume", "implementation_id": "codex.implementation.reviewed", "operation_id": "session.resume", "capability_ids": [ "codex.session.lifecycle_discovery" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.resume" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "codex.session.lifecycle_discovery.pairling_support", "codex.session.lifecycle_discovery.vendor_surface" ], "source_refs": [ "codex-app-server", "codex-thread-src", "pairling-codex", "pairling-codex-control", "pairling-codex-control-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:778441fd41eb3333956db67dadc444df459df63d2618d29015c1ee8acfe3385f" }, { "implementation_operation_id": "codex.session.review.start", "implementation_id": "codex.implementation.reviewed", "operation_id": "session.review.start", "capability_ids": [ "codex.subagents_plan_review_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_workflow", "target": "session.review.start" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "codex.subagents_plan_review_context.pairling_support", "codex.subagents_plan_review_context.vendor_surface" ], "source_refs": [ "codex-item-src", "codex-thread-src", "pairling-codex-control", "pairling-codex-control-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:38d6e97cd9093603c36cc4e520e7bebcfcfacf5622f83f91cab5c332a950d186" }, { "implementation_operation_id": "codex.session.terminate", "implementation_id": "codex.implementation.reviewed", "operation_id": "session.terminate", "capability_ids": [ "codex.release_lifecycle_usage_diagnostics" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "terminate_session", "target": "session.terminate" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "mutation_authority" }, { "kind": "driver_availability" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "start_replacement_session" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "codex.release_lifecycle_usage_diagnostics.pairling_support", "codex.release_lifecycle_usage_diagnostics.vendor_surface" ], "source_refs": [ "codex-item-src", "codex-turn-src", "pairling-codex", "pairling-codex-control", "pairling-codex-control-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:792276ccda19074c434431ab4916e72fbbb80c6d8ecb883009b1f606e12bf5d4" }, { "implementation_operation_id": "codex.session.turn.interrupt", "implementation_id": "codex.implementation.reviewed", "operation_id": "session.turn.interrupt", "capability_ids": [ "codex.turn.input_steer_interrupt" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "codex.turn.input_steer_interrupt.pairling_support", "codex.turn.input_steer_interrupt.vendor_surface" ], "source_refs": [ "codex-turn-src", "pairling-codex-control", "pairling-codex-control-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:20fee98ceea330db1696b150bce974a62c4fa21a2a4e1d25bc60e959f38f2ef8" }, { "implementation_operation_id": "codex.session.turn.steer", "implementation_id": "codex.implementation.reviewed", "operation_id": "session.turn.steer", "capability_ids": [ "codex.turn.input_steer_interrupt" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "steer_turn", "target": "session.turn.steer" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "codex.turn.input_steer_interrupt.pairling_support", "codex.turn.input_steer_interrupt.vendor_surface" ], "source_refs": [ "codex-turn-src", "pairling-codex-control", "pairling-codex-control-tests", "pairling-daemon", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:25b227bfc50b30393dce89675333b10f3dd9772ea153e960b6e0997ab00b0168" }, { "implementation_operation_id": "droid.provider.auth.read", "implementation_id": "droid.implementation.reviewed", "operation_id": "provider.auth.read", "capability_ids": [ "droid.settings_catalogs_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.auth.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "credential_exposure" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "droid.settings_catalogs_context.pairling_support", "droid.settings_catalogs_context.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:18efdb7b5f79419ac59a854668625bb57454d13246ae4f763228abe404e7fa5d" }, { "implementation_operation_id": "droid.provider.commands.read", "implementation_id": "droid.implementation.reviewed", "operation_id": "provider.commands.read", "capability_ids": [ "droid.settings_catalogs_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.commands.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "droid.settings_catalogs_context.pairling_support", "droid.settings_catalogs_context.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:8b0e63c830e690e739cb37302ecd42bd1b2eb37d7c05b1c490509cb7562239ba" }, { "implementation_operation_id": "droid.provider.config.read", "implementation_id": "droid.implementation.reviewed", "operation_id": "provider.config.read", "capability_ids": [ "droid.settings_catalogs_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.config.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "droid.settings_catalogs_context.pairling_support", "droid.settings_catalogs_context.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:9d430d21d015d08ae340086efed68b7349a17b979ec56cf705707df1639a2c82" }, { "implementation_operation_id": "droid.provider.diagnostics.read", "implementation_id": "droid.implementation.reviewed", "operation_id": "provider.diagnostics.read", "capability_ids": [ "droid.notifications_permissions_questions" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.diagnostics.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "droid.notifications_permissions_questions.pairling_support", "droid.notifications_permissions_questions.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-transport-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:b7dfccf96b8c8dd7d2c6d7e8886c84d9b1f8d90d376d5b919279f8cfc98238d9" }, { "implementation_operation_id": "droid.provider.mcp.read", "implementation_id": "droid.implementation.reviewed", "operation_id": "provider.mcp.read", "capability_ids": [ "droid.settings_catalogs_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.mcp.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "droid.settings_catalogs_context.pairling_support", "droid.settings_catalogs_context.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:0be1938b7817fc89fd53defb12f71660a482b32a951bd48a5ec714a9dee0e41d" }, { "implementation_operation_id": "droid.provider.usage.read", "implementation_id": "droid.implementation.reviewed", "operation_id": "provider.usage.read", "capability_ids": [ "droid.settings_catalogs_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.usage.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "droid.settings_catalogs_context.pairling_support", "droid.settings_catalogs_context.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:92201513915d64e8a041fb050c558044a5f701d3f03d1478e5ae925537118c56" }, { "implementation_operation_id": "droid.session.approval.decide", "implementation_id": "droid.implementation.reviewed", "operation_id": "session.approval.decide", "capability_ids": [ "droid.notifications_permissions_questions" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "droid.notifications_permissions_questions.pairling_support", "droid.notifications_permissions_questions.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-transport-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:df84863b0d9a513f0d8c432d1261350a44ca08e7887dc8bde0c5cbbce91fae5a" }, { "implementation_operation_id": "droid.session.compact", "implementation_id": "droid.implementation.reviewed", "operation_id": "session.compact", "capability_ids": [ "droid.session_lifecycle_input" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.compact" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "droid.session_lifecycle_input.pairling_support", "droid.session_lifecycle_input.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "droid-exec", "droid-transport-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:2a1a180898e867419bc719ffed6790c2d4145c1dc20dbdebc8851356f52b843f" }, { "implementation_operation_id": "droid.session.fork", "implementation_id": "droid.implementation.reviewed", "operation_id": "session.fork", "capability_ids": [ "droid.session_lifecycle_input" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.fork" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "droid.session_lifecycle_input.pairling_support", "droid.session_lifecycle_input.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "droid-exec", "droid-transport-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:8860905939d60c319fd0704b4e42f46d5359809b73f2564f25313903530e2f0c" }, { "implementation_operation_id": "droid.session.model.set", "implementation_id": "droid.implementation.reviewed", "operation_id": "session.model.set", "capability_ids": [ "droid.settings_catalogs_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.model.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "droid.settings_catalogs_context.pairling_support", "droid.settings_catalogs_context.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:11eeb4aa99e6beef4bfd297bcd95db6ee91a3c1ced2978df3e82b5db8626fdbc" }, { "implementation_operation_id": "droid.session.permissions.set", "implementation_id": "droid.implementation.reviewed", "operation_id": "session.permissions.set", "capability_ids": [ "droid.settings_catalogs_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.permissions.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "credential_exposure" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "droid.settings_catalogs_context.pairling_support", "droid.settings_catalogs_context.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:364dc151da5fafa4eb6a6989d7fc6034999d31a5a70b1035ab40459ca12c4aef" }, { "implementation_operation_id": "droid.session.plan.start", "implementation_id": "droid.implementation.reviewed", "operation_id": "session.plan.start", "capability_ids": [ "droid.settings_catalogs_context" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_workflow", "target": "session.plan.start" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "droid.settings_catalogs_context.pairling_support", "droid.settings_catalogs_context.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "Implement and attest a typed plan-start route before release; keep raw JSON-RPC and terminal injection unavailable.", "semantic_digest": "sha256:093a9b098274d8b14149ad2e39ab21cdb05f54a50b344147be7a4d573dc092a1" }, { "implementation_operation_id": "droid.session.prompt.send", "implementation_id": "droid.implementation.reviewed", "operation_id": "session.prompt.send", "capability_ids": [ "droid.session_lifecycle_input" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "droid.session_lifecycle_input.pairling_support", "droid.session_lifecycle_input.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "droid-exec", "droid-transport-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:af5401da545ee6b87cb3d7c4bd7dc656f816c9d6909a12f56e3cfa107284c80b" }, { "implementation_operation_id": "droid.session.question.answer", "implementation_id": "droid.implementation.reviewed", "operation_id": "session.question.answer", "capability_ids": [ "droid.notifications_permissions_questions" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.question.answer" } ], "invalidates": [ { "kind": "input_lease" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "droid.notifications_permissions_questions.pairling_support", "droid.notifications_permissions_questions.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-transport-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:18ccd970d9314bf0772e9f4287cb399828cf9973d27c5c6435a50e2b9785095f" }, { "implementation_operation_id": "droid.session.reasoning.set", "implementation_id": "droid.implementation.reviewed", "operation_id": "session.reasoning.set", "capability_ids": [ "droid.settings_catalogs_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.reasoning.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "droid.settings_catalogs_context.pairling_support", "droid.settings_catalogs_context.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:e7d4e611f96fd69dbaf1d3a3cc688d5ac56ed559d3d04268a2cf9a6d2b10abf4" }, { "implementation_operation_id": "droid.session.resume", "implementation_id": "droid.implementation.reviewed", "operation_id": "session.resume", "capability_ids": [ "droid.session_lifecycle_input" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.resume" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "droid.session_lifecycle_input.pairling_support", "droid.session_lifecycle_input.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "droid-exec", "droid-transport-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:5d6b0822449d1ac42a47d808a539e3d56120b75198c9265b47efae27d778ba28" }, { "implementation_operation_id": "droid.session.terminate", "implementation_id": "droid.implementation.reviewed", "operation_id": "session.terminate", "capability_ids": [ "droid.session_lifecycle_input" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "terminate_session", "target": "session.terminate" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "mutation_authority" }, { "kind": "driver_availability" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "start_replacement_session" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "droid.session_lifecycle_input.pairling_support", "droid.session_lifecycle_input.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "droid-exec", "droid-transport-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:fd2642cf837ec0860a7aee6eae63dce63d1403da1e2a34d4979bd92bbce092a0" }, { "implementation_operation_id": "droid.session.turn.interrupt", "implementation_id": "droid.implementation.reviewed", "operation_id": "session.turn.interrupt", "capability_ids": [ "droid.session_lifecycle_input" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "droid.session_lifecycle_input.pairling_support", "droid.session_lifecycle_input.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "droid-exec", "droid-transport-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:f63f4f3c7db27d2d02467867ebab8713b0f7d0657bbe9a0ea8e184efa3485423" }, { "implementation_operation_id": "droid.session.turn.steer", "implementation_id": "droid.implementation.reviewed", "operation_id": "session.turn.steer", "capability_ids": [ "droid.session_lifecycle_input" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "steer_turn", "target": "session.turn.steer" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "droid.session_lifecycle_input.pairling_support", "droid.session_lifecycle_input.vendor_surface" ], "source_refs": [ "droid-client-src", "droid-constants-src", "droid-exec", "droid-transport-src", "pairling-droid-control", "pairling-droid-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:14373441fe9fb82ae9ad438eb51fda93861f1dca16c29b5eb1f04e015def892a" }, { "implementation_operation_id": "gemini_cli.provider.auth.read", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "provider.auth.read", "capability_ids": [ "gemini.output_usage_auth" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.auth.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "credential_exposure" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "gemini.output_usage_auth.pairling_support", "gemini.output_usage_auth.vendor_surface" ], "source_refs": [ "gemini-acp", "gemini-headless", "gemini-migration", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add separately attested redacted usage, diagnostics and auth-status reads; never expose keys, tokens, gateway headers or browser authentication.", "semantic_digest": "sha256:e067a8c661c1edffbba0f9f28216ab782a709f6892cd33e796e50b6b2af53570" }, { "implementation_operation_id": "gemini_cli.provider.commands.read", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "provider.commands.read", "capability_ids": [ "gemini.tools_mcp_extensions_agents" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.commands.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "gemini.tools_mcp_extensions_agents.pairling_support", "gemini.tools_mcp_extensions_agents.vendor_surface" ], "source_refs": [ "gemini-mcp", "gemini-release", "gemini-tools", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add separately attested read-only tool/MCP catalogs and reviewed reload; keep extensions, skills, hooks, custom tools, A2A credentials and agent mutation unavailable.", "semantic_digest": "sha256:a60e9db7d1fc08560501b0e2d7071e81a6982f2096c30165ed7db00df137bb96" }, { "implementation_operation_id": "gemini_cli.provider.diagnostics.read", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "provider.diagnostics.read", "capability_ids": [ "gemini.output_usage_auth" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.diagnostics.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "gemini.output_usage_auth.pairling_support", "gemini.output_usage_auth.vendor_surface" ], "source_refs": [ "gemini-acp", "gemini-headless", "gemini-migration", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add separately attested redacted usage, diagnostics and auth-status reads; never expose keys, tokens, gateway headers or browser authentication.", "semantic_digest": "sha256:f4960c7093293eed351ece97eb083de33d7e96b086c173772605b11c4688f469" }, { "implementation_operation_id": "gemini_cli.provider.mcp.read", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "provider.mcp.read", "capability_ids": [ "gemini.tools_mcp_extensions_agents" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.mcp.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "gemini.tools_mcp_extensions_agents.pairling_support", "gemini.tools_mcp_extensions_agents.vendor_surface" ], "source_refs": [ "gemini-mcp", "gemini-release", "gemini-tools", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add separately attested read-only tool/MCP catalogs and reviewed reload; keep extensions, skills, hooks, custom tools, A2A credentials and agent mutation unavailable.", "semantic_digest": "sha256:e0187d151ab465d087b7f3accc604a7c5ff9cc3ae8fb0c579b4a8797eb941941" }, { "implementation_operation_id": "gemini_cli.provider.mcp.reload", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "provider.mcp.reload", "capability_ids": [ "gemini.tools_mcp_extensions_agents" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "pair:admin" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "point_of_risk" } ], "effects": [ { "kind": "reload_integration", "target": "provider.mcp.reload" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "gemini.tools_mcp_extensions_agents.pairling_support", "gemini.tools_mcp_extensions_agents.vendor_surface" ], "source_refs": [ "gemini-mcp", "gemini-release", "gemini-tools", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add separately attested read-only tool/MCP catalogs and reviewed reload; keep extensions, skills, hooks, custom tools, A2A credentials and agent mutation unavailable.", "semantic_digest": "sha256:17e7afd9dd5219a2ad392aac9faac96f202c3afc43d07e919381fe6c38091c52" }, { "implementation_operation_id": "gemini_cli.provider.usage.read", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "provider.usage.read", "capability_ids": [ "gemini.output_usage_auth" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.usage.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "gemini.output_usage_auth.pairling_support", "gemini.output_usage_auth.vendor_surface" ], "source_refs": [ "gemini-acp", "gemini-headless", "gemini-migration", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add separately attested redacted usage, diagnostics and auth-status reads; never expose keys, tokens, gateway headers or browser authentication.", "semantic_digest": "sha256:ca87b8da6308fee3305ecf6273b08214736f3ff2262f3f1351e9bd28a26aae09" }, { "implementation_operation_id": "gemini_cli.session.approval.decide", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "session.approval.decide", "capability_ids": [ "gemini.approval_policy_sandbox" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "gemini.approval_policy_sandbox.pairling_support", "gemini.approval_policy_sandbox.vendor_surface" ], "source_refs": [ "gemini-acp", "gemini-policy", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:9e4e9406f0c6174b2c6916b070d2d5b3795e9ac169806cb07f4484429fa83a10" }, { "implementation_operation_id": "gemini_cli.session.compact", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "session.compact", "capability_ids": [ "gemini.memory_checkpoint_files" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.compact" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "gemini.memory_checkpoint_files.pairling_support", "gemini.memory_checkpoint_files.vendor_surface" ], "source_refs": [ "gemini-acp", "gemini-checkpoints", "gemini-tools", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded memory/diff reads and previewed compact/rewind first; require confirmation for mutations and keep native shell/private-network fallback unavailable.", "semantic_digest": "sha256:e4bb211a943584f3a8cd9b8b3afcaf4916b5691f0e545dc37973a70adc1c4a56" }, { "implementation_operation_id": "gemini_cli.session.model.set", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "session.model.set", "capability_ids": [ "gemini.models_generation" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.model.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "gemini.models_generation.pairling_support", "gemini.models_generation.vendor_surface" ], "source_refs": [ "gemini-acp", "gemini-release", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:b15ffcc63e2404a0d75fdae0e712c81356082eb63fee51de826f83dd2f7c4d12" }, { "implementation_operation_id": "gemini_cli.session.permissions.set", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "session.permissions.set", "capability_ids": [ "gemini.approval_policy_sandbox" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.permissions.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "credential_exposure" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "gemini.approval_policy_sandbox.pairling_support", "gemini.approval_policy_sandbox.vendor_surface" ], "source_refs": [ "gemini-acp", "gemini-policy", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:983b4f574b982babd329454e67ffc50021cfa9efff3fac1c7f5f085336e4a169" }, { "implementation_operation_id": "gemini_cli.session.plan.start", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "session.plan.start", "capability_ids": [ "gemini.tools_mcp_extensions_agents" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_workflow", "target": "session.plan.start" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "gemini.tools_mcp_extensions_agents.pairling_support", "gemini.tools_mcp_extensions_agents.vendor_surface" ], "source_refs": [ "gemini-mcp", "gemini-release", "gemini-tools", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add separately attested read-only tool/MCP catalogs and reviewed reload; keep extensions, skills, hooks, custom tools, A2A credentials and agent mutation unavailable.", "semantic_digest": "sha256:6eca769ad8c60a9b34cfbf2ed0a68323f9a186f3a91169f0a8902ad8b28dc17d" }, { "implementation_operation_id": "gemini_cli.session.prompt.send", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "session.prompt.send", "capability_ids": [ "gemini.release_prompt_cancel" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "gemini.release_prompt_cancel.pairling_support", "gemini.release_prompt_cancel.vendor_surface" ], "source_refs": [ "gemini-acp", "gemini-headless", "gemini-sessions", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:a73014c21bd9da2657b50001c70abfa9bebf9cc76c5da3eacec970499f6d2963" }, { "implementation_operation_id": "gemini_cli.session.question.answer", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "session.question.answer", "capability_ids": [ "gemini.approval_policy_sandbox" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.question.answer" } ], "invalidates": [ { "kind": "input_lease" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "gemini.approval_policy_sandbox.pairling_support", "gemini.approval_policy_sandbox.vendor_surface" ], "source_refs": [ "gemini-acp", "gemini-policy", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:a72268524564503ea6e4789c0010338c7acde5d1cafc97f76f5b82668d5008f2" }, { "implementation_operation_id": "gemini_cli.session.rewind", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "session.rewind", "capability_ids": [ "gemini.memory_checkpoint_files" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.rewind" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "gemini.memory_checkpoint_files.pairling_support", "gemini.memory_checkpoint_files.vendor_surface" ], "source_refs": [ "gemini-acp", "gemini-checkpoints", "gemini-tools", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded memory/diff reads and previewed compact/rewind first; require confirmation for mutations and keep native shell/private-network fallback unavailable.", "semantic_digest": "sha256:6a9e6bd3b5fb837b129ff3240a744b58754d4ffb5eefc0afdb04ca46247f55a7" }, { "implementation_operation_id": "gemini_cli.session.terminate", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "session.terminate", "capability_ids": [ "gemini.memory_checkpoint_files" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "terminate_session", "target": "session.terminate" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "mutation_authority" }, { "kind": "driver_availability" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "start_replacement_session" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "gemini.memory_checkpoint_files.pairling_support", "gemini.memory_checkpoint_files.vendor_surface" ], "source_refs": [ "gemini-acp", "gemini-checkpoints", "gemini-tools", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded memory/diff reads and previewed compact/rewind first; require confirmation for mutations and keep native shell/private-network fallback unavailable.", "semantic_digest": "sha256:93fdb9ccebb942355cb7516cfcbb7b7a37609724d1fef38023998db38c5877d6" }, { "implementation_operation_id": "gemini_cli.session.turn.interrupt", "implementation_id": "gemini_cli.implementation.reviewed", "operation_id": "session.turn.interrupt", "capability_ids": [ "gemini.release_prompt_cancel" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "gemini.release_prompt_cancel.pairling_support", "gemini.release_prompt_cancel.vendor_surface" ], "source_refs": [ "gemini-acp", "gemini-headless", "gemini-sessions", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:05d16cb7a2d2960615d10a550300201e80769459b3f064c82aab149e5899db86" }, { "implementation_operation_id": "github_copilot_cli.provider.auth.read", "implementation_id": "github_copilot_cli.implementation.reviewed", "operation_id": "provider.auth.read", "capability_ids": [ "copilot.acp_remote_auth_cloud" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.auth.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "credential_exposure" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "copilot.acp_remote_auth_cloud.pairling_support", "copilot.acp_remote_auth_cloud.vendor_surface" ], "source_refs": [ "copilot-acp", "copilot-remote", "pairling-copilot-control", "pairling-copilot-packages", "pairling-copilot-sidecar", "pairling-copilot-tests", "pairling-operations" ], "required_pairling_addition": "Add status-only auth or negotiated ACP only after separate review; keep public TCP, tokens, gist, cloud delegation, self-update and private wire behavior unavailable.", "semantic_digest": "sha256:c9f2f47c3fc28c7fc0447ce1ee43761c3088a6676cc6ac1de31eeb5579e3ccc6" }, { "implementation_operation_id": "github_copilot_cli.provider.diagnostics.read", "implementation_id": "github_copilot_cli.implementation.reviewed", "operation_id": "provider.diagnostics.read", "capability_ids": [ "copilot.events_usage_attachments" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.diagnostics.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "copilot.events_usage_attachments.pairling_support", "copilot.events_usage_attachments.vendor_surface" ], "source_refs": [ "copilot-events", "pairling-copilot-control", "pairling-copilot-packages", "pairling-copilot-sidecar", "pairling-copilot-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:7c8c868f9ba6c93914441dd9405524e4375c50ae2fc5e5b5447bf3bcc5bf0a53" }, { "implementation_operation_id": "github_copilot_cli.provider.mcp.read", "implementation_id": "github_copilot_cli.implementation.reviewed", "operation_id": "provider.mcp.read", "capability_ids": [ "copilot.models_integrations_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.mcp.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "copilot.models_integrations_context.pairling_support", "copilot.models_integrations_context.vendor_surface" ], "source_refs": [ "copilot-cli", "copilot-events", "pairling-copilot-control", "pairling-copilot-packages", "pairling-copilot-sidecar", "pairling-copilot-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:31781910135cdbe0b161fe6d44cf4ccc2921d8423a5171573f5a60916c9a0a54" }, { "implementation_operation_id": "github_copilot_cli.provider.usage.read", "implementation_id": "github_copilot_cli.implementation.reviewed", "operation_id": "provider.usage.read", "capability_ids": [ "copilot.events_usage_attachments" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.usage.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "copilot.events_usage_attachments.pairling_support", "copilot.events_usage_attachments.vendor_surface" ], "source_refs": [ "copilot-events", "pairling-copilot-control", "pairling-copilot-packages", "pairling-copilot-sidecar", "pairling-copilot-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:8b1f1142072583f14b43d020bc91fcb9a671d1fab130e8c6abc4bd8f9eb78969" }, { "implementation_operation_id": "github_copilot_cli.session.approval.decide", "implementation_id": "github_copilot_cli.implementation.reviewed", "operation_id": "session.approval.decide", "capability_ids": [ "copilot.permissions_handlers" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "copilot.permissions_handlers.pairling_support", "copilot.permissions_handlers.vendor_surface" ], "source_refs": [ "copilot-cli", "copilot-events", "pairling-copilot-control", "pairling-copilot-packages", "pairling-copilot-sidecar", "pairling-copilot-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:93d461b3e259fa9df66a3a630caa898034bf0e0bd0b06f8bf905168172f39b2f" }, { "implementation_operation_id": "github_copilot_cli.session.model.set", "implementation_id": "github_copilot_cli.implementation.reviewed", "operation_id": "session.model.set", "capability_ids": [ "copilot.models_integrations_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.model.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "copilot.models_integrations_context.pairling_support", "copilot.models_integrations_context.vendor_surface" ], "source_refs": [ "copilot-cli", "copilot-events", "pairling-copilot-control", "pairling-copilot-packages", "pairling-copilot-sidecar", "pairling-copilot-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:51efeff1d4513dfb18773758dbb94a5fc44e22915f19f46892d39d24574ba9b2" }, { "implementation_operation_id": "github_copilot_cli.session.prompt.send", "implementation_id": "github_copilot_cli.implementation.reviewed", "operation_id": "session.prompt.send", "capability_ids": [ "copilot.prompt_queue_abort" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "copilot.prompt_queue_abort.pairling_support", "copilot.prompt_queue_abort.vendor_surface" ], "source_refs": [ "copilot-steering", "pairling-copilot-control", "pairling-copilot-packages", "pairling-copilot-sidecar", "pairling-copilot-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:f018e46823b68f2767393d5461c6f650b89b50f4c9eb2bde26cf89d0b56152fa" }, { "implementation_operation_id": "github_copilot_cli.session.resume", "implementation_id": "github_copilot_cli.implementation.reviewed", "operation_id": "session.resume", "capability_ids": [ "copilot.sdk_session_lifecycle" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.resume" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "copilot.sdk_session_lifecycle.pairling_support", "copilot.sdk_session_lifecycle.vendor_surface" ], "source_refs": [ "copilot-cli", "copilot-events", "pairling-copilot-control", "pairling-copilot-install-tests", "pairling-copilot-packages", "pairling-copilot-sidecar", "pairling-copilot-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:e4ed575db3a929f8fa4c5fee03b8af24d9d8773843aaaafb4371183ce8f42248" }, { "implementation_operation_id": "github_copilot_cli.session.turn.interrupt", "implementation_id": "github_copilot_cli.implementation.reviewed", "operation_id": "session.turn.interrupt", "capability_ids": [ "copilot.prompt_queue_abort" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "copilot.prompt_queue_abort.pairling_support", "copilot.prompt_queue_abort.vendor_surface" ], "source_refs": [ "copilot-steering", "pairling-copilot-control", "pairling-copilot-packages", "pairling-copilot-sidecar", "pairling-copilot-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:3d24d7f886ede7fcb4663149ff19502747591881fd4bad9fd236a4730a2a969c" }, { "implementation_operation_id": "github_copilot_cli.session.turn.steer", "implementation_id": "github_copilot_cli.implementation.reviewed", "operation_id": "session.turn.steer", "capability_ids": [ "copilot.prompt_queue_abort" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "steer_turn", "target": "session.turn.steer" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "copilot.prompt_queue_abort.pairling_support", "copilot.prompt_queue_abort.vendor_surface" ], "source_refs": [ "copilot-steering", "pairling-copilot-control", "pairling-copilot-packages", "pairling-copilot-sidecar", "pairling-copilot-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:69e7ae265db6e2659ea2aefc14db9486864e87f0895c6e4be981dc4fc86d1615" }, { "implementation_operation_id": "goose.provider.auth.read", "implementation_id": "goose.implementation.observed", "operation_id": "provider.auth.read", "capability_ids": [ "goose.serve_auth" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.auth.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "credential_exposure" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "goose.serve_auth.pairling_support", "goose.serve_auth.vendor_surface" ], "source_refs": [ "goose-cli" ], "required_pairling_addition": "Prefer ACP; otherwise owned loopback, generated secret, origin and tunnel; never unauthenticated or expose the secret.", "semantic_digest": "sha256:e3e9a10bc870f8611af97d9ed5b0002e54ebd896cb3f3d0aefadf8c0034b5fde" }, { "implementation_operation_id": "goose.provider.diagnostics.read", "implementation_id": "goose.implementation.observed", "operation_id": "provider.diagnostics.read", "capability_ids": [ "goose.sessions_diagnostics" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.diagnostics.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "goose.sessions_diagnostics.pairling_support", "goose.sessions_diagnostics.vendor_surface" ], "source_refs": [ "goose-cli" ], "required_pairling_addition": "Bounded documented JSON and diagnostics after schema inspection; confirm fork/edit.", "semantic_digest": "sha256:1c1403ab184b6dbc81baab98de0b3f2dcd7fd772c11976f65475f616b882486a" }, { "implementation_operation_id": "goose.session.approval.decide", "implementation_id": "goose.implementation.observed", "operation_id": "session.approval.decide", "capability_ids": [ "goose.acp_session" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "goose.acp_session.pairling_support", "goose.acp_session.vendor_surface" ], "source_refs": [ "acp-v1", "goose-acp" ], "required_pairling_addition": "Pinned local ACP research adapter, ask policy, exact correlation and deny unknown capabilities.", "semantic_digest": "sha256:01d347699b4674731950fc94a75b351a2859d4d2e88599669b1797e92f0fe754" }, { "implementation_operation_id": "goose.session.fork", "implementation_id": "goose.implementation.observed", "operation_id": "session.fork", "capability_ids": [ "goose.sessions_diagnostics" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.fork" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "goose.sessions_diagnostics.pairling_support", "goose.sessions_diagnostics.vendor_surface" ], "source_refs": [ "goose-cli" ], "required_pairling_addition": "Bounded documented JSON and diagnostics after schema inspection; confirm fork/edit.", "semantic_digest": "sha256:6db5be5560c3f6c07f616aa1a8a2c3cbdf8964af1358b0bd0bcbf7387e08d956" }, { "implementation_operation_id": "goose.session.permissions.set", "implementation_id": "goose.implementation.observed", "operation_id": "session.permissions.set", "capability_ids": [ "goose.acp_session" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.permissions.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "credential_exposure" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "goose.acp_session.pairling_support", "goose.acp_session.vendor_surface" ], "source_refs": [ "acp-v1", "goose-acp" ], "required_pairling_addition": "Pinned local ACP research adapter, ask policy, exact correlation and deny unknown capabilities.", "semantic_digest": "sha256:f0f316bd799693e6d65dcc8ac0b5898638a6a01c7b8e388684209c9cd4a882c5" }, { "implementation_operation_id": "goose.session.prompt.send", "implementation_id": "goose.implementation.observed", "operation_id": "session.prompt.send", "capability_ids": [ "goose.acp_session" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "goose.acp_session.pairling_support", "goose.acp_session.vendor_surface" ], "source_refs": [ "acp-v1", "goose-acp" ], "required_pairling_addition": "Pinned local ACP research adapter, ask policy, exact correlation and deny unknown capabilities.", "semantic_digest": "sha256:0a6493b8011522bafc93ccdd885373a8c559fd17c648aba18ca4abde6ef48b6d" }, { "implementation_operation_id": "goose.session.resume", "implementation_id": "goose.implementation.observed", "operation_id": "session.resume", "capability_ids": [ "goose.acp_session", "goose.sessions_diagnostics" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.resume" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "goose.acp_session.pairling_support", "goose.acp_session.vendor_surface", "goose.sessions_diagnostics.pairling_support", "goose.sessions_diagnostics.vendor_surface" ], "source_refs": [ "acp-v1", "goose-acp", "goose-cli" ], "required_pairling_addition": "Pinned local ACP research adapter, ask policy, exact correlation and deny unknown capabilities. Bounded documented JSON and diagnostics after schema inspection; confirm fork/edit.", "semantic_digest": "sha256:6acb80c1f6b81d63df0cda140d6bc645c07e68b18f8980068ac542ea68c6ccc2" }, { "implementation_operation_id": "goose.session.turn.interrupt", "implementation_id": "goose.implementation.observed", "operation_id": "session.turn.interrupt", "capability_ids": [ "goose.acp_session" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "goose.acp_session.pairling_support", "goose.acp_session.vendor_surface" ], "source_refs": [ "acp-v1", "goose-acp" ], "required_pairling_addition": "Pinned local ACP research adapter, ask policy, exact correlation and deny unknown capabilities.", "semantic_digest": "sha256:3e5942defbddcb7ff19e82c5492d31c9a2e112827bf3e69d305bc1be58161ea3" }, { "implementation_operation_id": "grok_build.provider.auth.read", "implementation_id": "grok_build.implementation.reviewed", "operation_id": "provider.auth.read", "capability_ids": [ "grok.context_events_usage_auth" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.auth.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "credential_exposure" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "grok.context_events_usage_auth.pairling_support", "grok.context_events_usage_auth.vendor_surface" ], "source_refs": [ "grok-acp", "grok-headless", "grok-output", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded context/event/usage/diagnostic reads and previewed rewind/fork; keep raw fs/git/worktree, credentials, debug and hidden sharing unavailable.", "semantic_digest": "sha256:d9af295cabd3238139dfdbd7b3c17e0799a627ce7c944ecdda24dba7ba1f7656" }, { "implementation_operation_id": "grok_build.provider.diagnostics.read", "implementation_id": "grok_build.implementation.reviewed", "operation_id": "provider.diagnostics.read", "capability_ids": [ "grok.context_events_usage_auth" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.diagnostics.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "grok.context_events_usage_auth.pairling_support", "grok.context_events_usage_auth.vendor_surface" ], "source_refs": [ "grok-acp", "grok-headless", "grok-output", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded context/event/usage/diagnostic reads and previewed rewind/fork; keep raw fs/git/worktree, credentials, debug and hidden sharing unavailable.", "semantic_digest": "sha256:819f48fafad47aadecdcb88595c30eb3faf89487a8b695e8f48bb327c6493ade" }, { "implementation_operation_id": "grok_build.provider.usage.read", "implementation_id": "grok_build.implementation.reviewed", "operation_id": "provider.usage.read", "capability_ids": [ "grok.context_events_usage_auth" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.usage.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "grok.context_events_usage_auth.pairling_support", "grok.context_events_usage_auth.vendor_surface" ], "source_refs": [ "grok-acp", "grok-headless", "grok-output", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded context/event/usage/diagnostic reads and previewed rewind/fork; keep raw fs/git/worktree, credentials, debug and hidden sharing unavailable.", "semantic_digest": "sha256:f21c8b23d5882c268a691674c856d6381f6d51f8ebf92ce93dfe96e493951efc" }, { "implementation_operation_id": "grok_build.session.approval.decide", "implementation_id": "grok_build.implementation.reviewed", "operation_id": "session.approval.decide", "capability_ids": [ "grok.release_permissions_approval_questions" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "grok.release_permissions_approval_questions.pairling_support", "grok.release_permissions_approval_questions.vendor_surface" ], "source_refs": [ "grok-acp", "grok-permissions", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:c8e2266ba9f36e5c05256ea0d78f781024a832777d8603cdd166df5ddff0a186" }, { "implementation_operation_id": "grok_build.session.compact", "implementation_id": "grok_build.implementation.reviewed", "operation_id": "session.compact", "capability_ids": [ "grok.context_events_usage_auth" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.compact" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "grok.context_events_usage_auth.pairling_support", "grok.context_events_usage_auth.vendor_surface" ], "source_refs": [ "grok-acp", "grok-headless", "grok-output", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded context/event/usage/diagnostic reads and previewed rewind/fork; keep raw fs/git/worktree, credentials, debug and hidden sharing unavailable.", "semantic_digest": "sha256:476484cacb96b7989cd5838308dc0d6c122f25ff7b8247d92cc78e1e5f166782" }, { "implementation_operation_id": "grok_build.session.fork", "implementation_id": "grok_build.implementation.reviewed", "operation_id": "session.fork", "capability_ids": [ "grok.context_events_usage_auth" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.fork" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "grok.context_events_usage_auth.pairling_support", "grok.context_events_usage_auth.vendor_surface" ], "source_refs": [ "grok-acp", "grok-headless", "grok-output", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded context/event/usage/diagnostic reads and previewed rewind/fork; keep raw fs/git/worktree, credentials, debug and hidden sharing unavailable.", "semantic_digest": "sha256:9c371e2b0ad42761879e1932eb6b2f7facce85e759f485c3a8fa079df980efe6" }, { "implementation_operation_id": "grok_build.session.model.set", "implementation_id": "grok_build.implementation.reviewed", "operation_id": "session.model.set", "capability_ids": [ "grok.release_model_selection" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.model.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "grok.release_model_selection.pairling_support", "grok.release_model_selection.vendor_surface" ], "source_refs": [ "grok-acp", "grok-cli", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:14d61af6e1f8bf4a7cf392b2b6ac0ad0b723fd53b117de321248f2a9faef7ca2" }, { "implementation_operation_id": "grok_build.session.permissions.set", "implementation_id": "grok_build.implementation.reviewed", "operation_id": "session.permissions.set", "capability_ids": [ "grok.release_permissions_approval_questions" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.permissions.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "credential_exposure" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "grok.release_permissions_approval_questions.pairling_support", "grok.release_permissions_approval_questions.vendor_surface" ], "source_refs": [ "grok-acp", "grok-permissions", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:f3244c5a42a91f6bb79e0fa0ae7f2d64cf62b12aec9650e32a6aff64a1d0c726" }, { "implementation_operation_id": "grok_build.session.prompt.send", "implementation_id": "grok_build.implementation.reviewed", "operation_id": "session.prompt.send", "capability_ids": [ "grok.session_headless_acp" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "grok.session_headless_acp.pairling_support", "grok.session_headless_acp.vendor_surface" ], "source_refs": [ "grok-acp", "grok-cli", "grok-headless", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:5e8080593beca0fb730153cdc97441067240ab21a0e04e9c16a2a30df5d009d0" }, { "implementation_operation_id": "grok_build.session.question.answer", "implementation_id": "grok_build.implementation.reviewed", "operation_id": "session.question.answer", "capability_ids": [ "grok.release_permissions_approval_questions" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.question.answer" } ], "invalidates": [ { "kind": "input_lease" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "grok.release_permissions_approval_questions.pairling_support", "grok.release_permissions_approval_questions.vendor_surface" ], "source_refs": [ "grok-acp", "grok-permissions", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:46f586a7ab471c61744864fb573fde7488b8ad4b2bbdbb0469c95b6774394811" }, { "implementation_operation_id": "grok_build.session.rewind", "implementation_id": "grok_build.implementation.reviewed", "operation_id": "session.rewind", "capability_ids": [ "grok.context_events_usage_auth" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.rewind" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "grok.context_events_usage_auth.pairling_support", "grok.context_events_usage_auth.vendor_surface" ], "source_refs": [ "grok-acp", "grok-headless", "grok-output", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded context/event/usage/diagnostic reads and previewed rewind/fork; keep raw fs/git/worktree, credentials, debug and hidden sharing unavailable.", "semantic_digest": "sha256:330183c41c7af9cb0ed9ef40c46c8f183b0a643954ced40e709a4a0c4c8aaf9d" }, { "implementation_operation_id": "grok_build.session.turn.interrupt", "implementation_id": "grok_build.implementation.reviewed", "operation_id": "session.turn.interrupt", "capability_ids": [ "grok.queue_interject", "grok.session_headless_acp" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "grok.queue_interject.pairling_support", "grok.queue_interject.vendor_surface", "grok.session_headless_acp.pairling_support", "grok.session_headless_acp.vendor_surface" ], "source_refs": [ "grok-acp", "grok-cli", "grok-headless", "grok-queue", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:d494f8ab9b1dceab9d9172a5d60179e8345a3164db7220f7d3c68c0f5d7547b3" }, { "implementation_operation_id": "hermes_agent.provider.diagnostics.read", "implementation_id": "hermes_agent.implementation.reviewed", "operation_id": "provider.diagnostics.read", "capability_ids": [ "hermes.events_files_usage", "hermes.release_diagnostics" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.diagnostics.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "hermes.events_files_usage.pairling_support", "hermes.events_files_usage.vendor_surface", "hermes.release_diagnostics.pairling_support", "hermes.release_diagnostics.vendor_surface" ], "source_refs": [ "hermes-acp", "hermes-integration", "hermes-root", "hermes-security", "pairling-hermes-control", "pairling-hermes-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:7b2719768bc99586b94ae757fe4df8c8f23c7fa1b555cb68eb2df5005247d760" }, { "implementation_operation_id": "hermes_agent.provider.usage.read", "implementation_id": "hermes_agent.implementation.reviewed", "operation_id": "provider.usage.read", "capability_ids": [ "hermes.events_files_usage" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.usage.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "hermes.events_files_usage.pairling_support", "hermes.events_files_usage.vendor_surface" ], "source_refs": [ "hermes-acp", "hermes-integration", "pairling-hermes-control", "pairling-hermes-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:4dbdd82550182ba346cf2c7490da8c9eb3f362ecae3f72337951bbfcdd9d5ade" }, { "implementation_operation_id": "hermes_agent.session.approval.decide", "implementation_id": "hermes_agent.implementation.reviewed", "operation_id": "session.approval.decide", "capability_ids": [ "hermes.approvals_sandbox" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "hermes.approvals_sandbox.pairling_support", "hermes.approvals_sandbox.vendor_surface" ], "source_refs": [ "hermes-acp", "hermes-security", "pairling-hermes-control", "pairling-hermes-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:077c70a7a5355079604461b43a27a42773ece788b1260f486de9ceb94a85c258" }, { "implementation_operation_id": "hermes_agent.session.compact", "implementation_id": "hermes_agent.implementation.reviewed", "operation_id": "session.compact", "capability_ids": [ "hermes.agents_context_checkpoints" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.compact" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "hermes.agents_context_checkpoints.pairling_support", "hermes.agents_context_checkpoints.vendor_surface" ], "source_refs": [ "hermes-acp", "hermes-root", "pairling-hermes-control", "pairling-hermes-tests", "pairling-operations" ], "required_pairling_addition": "Add observation first, then preview-bound plan/compact/rewind operations with explicit confirmation; do not expose direct child mutation prematurely.", "semantic_digest": "sha256:e96f3dba91c105fe517be60a801190c19caae6aa1d143a5e1af904da90905d40" }, { "implementation_operation_id": "hermes_agent.session.fork", "implementation_id": "hermes_agent.implementation.reviewed", "operation_id": "session.fork", "capability_ids": [ "hermes.session_input_control" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.fork" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "hermes.session_input_control.pairling_support", "hermes.session_input_control.vendor_surface" ], "source_refs": [ "hermes-acp", "hermes-integration", "pairling-hermes-control", "pairling-hermes-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:328b06f80d7ee6be37fdb1b12ea37cc85eb7f6f27c295414ebffe954f7564db1" }, { "implementation_operation_id": "hermes_agent.session.model.set", "implementation_id": "hermes_agent.implementation.reviewed", "operation_id": "session.model.set", "capability_ids": [ "hermes.models_integrations" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.model.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "hermes.models_integrations.pairling_support", "hermes.models_integrations.vendor_surface" ], "source_refs": [ "hermes-integration", "hermes-root", "pairling-hermes-control", "pairling-hermes-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:f6c38f2fdb62b93f51df00abf3a0f65509e5f789ee73dc38c828652a87f82cce" }, { "implementation_operation_id": "hermes_agent.session.plan.start", "implementation_id": "hermes_agent.implementation.reviewed", "operation_id": "session.plan.start", "capability_ids": [ "hermes.agents_context_checkpoints" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_workflow", "target": "session.plan.start" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "hermes.agents_context_checkpoints.pairling_support", "hermes.agents_context_checkpoints.vendor_surface" ], "source_refs": [ "hermes-acp", "hermes-root", "pairling-hermes-control", "pairling-hermes-tests", "pairling-operations" ], "required_pairling_addition": "Add observation first, then preview-bound plan/compact/rewind operations with explicit confirmation; do not expose direct child mutation prematurely.", "semantic_digest": "sha256:839a8f36e1ec1de37d4cf66766714d958f27ec53c3585980e0510802a12c4cf5" }, { "implementation_operation_id": "hermes_agent.session.prompt.send", "implementation_id": "hermes_agent.implementation.reviewed", "operation_id": "session.prompt.send", "capability_ids": [ "hermes.session_input_control" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "hermes.session_input_control.pairling_support", "hermes.session_input_control.vendor_surface" ], "source_refs": [ "hermes-acp", "hermes-integration", "pairling-hermes-control", "pairling-hermes-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:f0e6df6e4c779fae1665adffdd677bf320832764bbc02187d4fa9f1ab06fcc3f" }, { "implementation_operation_id": "hermes_agent.session.resume", "implementation_id": "hermes_agent.implementation.reviewed", "operation_id": "session.resume", "capability_ids": [ "hermes.session_input_control" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.resume" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "hermes.session_input_control.pairling_support", "hermes.session_input_control.vendor_surface" ], "source_refs": [ "hermes-acp", "hermes-integration", "pairling-hermes-control", "pairling-hermes-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:13c317c169ad0327003f421504577dce741f80901b89ccd16b5a9fd807e4f639" }, { "implementation_operation_id": "hermes_agent.session.rewind", "implementation_id": "hermes_agent.implementation.reviewed", "operation_id": "session.rewind", "capability_ids": [ "hermes.agents_context_checkpoints" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.rewind" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "hermes.agents_context_checkpoints.pairling_support", "hermes.agents_context_checkpoints.vendor_surface" ], "source_refs": [ "hermes-acp", "hermes-root", "pairling-hermes-control", "pairling-hermes-tests", "pairling-operations" ], "required_pairling_addition": "Add observation first, then preview-bound plan/compact/rewind operations with explicit confirmation; do not expose direct child mutation prematurely.", "semantic_digest": "sha256:eb55350563bda39de54d8a4dece82864a4af6a26a61628add66974699d6be743" }, { "implementation_operation_id": "hermes_agent.session.terminate", "implementation_id": "hermes_agent.implementation.reviewed", "operation_id": "session.terminate", "capability_ids": [ "hermes.session_input_control" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "manager" } ], "effects": [ { "kind": "terminate_session", "target": "session.terminate" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "mutation_authority" }, { "kind": "driver_availability" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "start_replacement_session" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "hermes.session_input_control.pairling_support", "hermes.session_input_control.vendor_surface" ], "source_refs": [ "hermes-acp", "hermes-integration", "pairling-hermes-control", "pairling-hermes-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:83de72163fcaaa50fb64d7a1301f36b34b4a5a6601d6831a7bf36033037d45fd" }, { "implementation_operation_id": "hermes_agent.session.turn.interrupt", "implementation_id": "hermes_agent.implementation.reviewed", "operation_id": "session.turn.interrupt", "capability_ids": [ "hermes.session_input_control" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "hermes.session_input_control.pairling_support", "hermes.session_input_control.vendor_surface" ], "source_refs": [ "hermes-acp", "hermes-integration", "pairling-hermes-control", "pairling-hermes-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:0e8ce8522ded31ef30880f0346cdaa4c9dee0753fc72ca65f8210ae1491ff69c" }, { "implementation_operation_id": "kimi_code.provider.auth.read", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "provider.auth.read", "capability_ids": [ "kimi.context_files_events_auth" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.auth.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "credential_exposure" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "kimi.context_files_events_auth.pairling_support", "kimi.context_files_events_auth.vendor_surface" ], "source_refs": [ "kimi-acp", "kimi-snapshot", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded event/usage/auth status and root-scoped artifact reads first; preview undo/rewind and keep raw PTY, secrets, debug, shutdown and public bind unavailable.", "semantic_digest": "sha256:e362b5adb05ab0874598f2169925dfe3d914bb579b5bec1be535db001ae777a7" }, { "implementation_operation_id": "kimi_code.provider.diagnostics.read", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "provider.diagnostics.read", "capability_ids": [ "kimi.context_files_events_auth" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.diagnostics.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "kimi.context_files_events_auth.pairling_support", "kimi.context_files_events_auth.vendor_surface" ], "source_refs": [ "kimi-acp", "kimi-snapshot", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded event/usage/auth status and root-scoped artifact reads first; preview undo/rewind and keep raw PTY, secrets, debug, shutdown and public bind unavailable.", "semantic_digest": "sha256:3f64e4d56556a9c20c9878e73330582bb6013976c669b1c1d8391a61f102f5f2" }, { "implementation_operation_id": "kimi_code.provider.usage.read", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "provider.usage.read", "capability_ids": [ "kimi.context_files_events_auth" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.usage.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "kimi.context_files_events_auth.pairling_support", "kimi.context_files_events_auth.vendor_surface" ], "source_refs": [ "kimi-acp", "kimi-snapshot", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded event/usage/auth status and root-scoped artifact reads first; preview undo/rewind and keep raw PTY, secrets, debug, shutdown and public bind unavailable.", "semantic_digest": "sha256:7adbe0c0900f30fa051363af5821a2fd5f61f8d2a2f330fb18787eaa1ced30e9" }, { "implementation_operation_id": "kimi_code.session.approval.decide", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "session.approval.decide", "capability_ids": [ "kimi.approvals_modes_trust" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "kimi.approvals_modes_trust.pairling_support", "kimi.approvals_modes_trust.vendor_surface" ], "source_refs": [ "kimi-docs", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:1fe337f4ba48630d4fe97597d3e0709918fcd4be95a44a51eb616e408afc91ba" }, { "implementation_operation_id": "kimi_code.session.compact", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "session.compact", "capability_ids": [ "kimi.context_files_events_auth" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.compact" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "kimi.context_files_events_auth.pairling_support", "kimi.context_files_events_auth.vendor_surface" ], "source_refs": [ "kimi-acp", "kimi-snapshot", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded event/usage/auth status and root-scoped artifact reads first; preview undo/rewind and keep raw PTY, secrets, debug, shutdown and public bind unavailable.", "semantic_digest": "sha256:fb7f2bb6359a301b232c67de071fb2f7eb6e1e635e6aa3228670b7b34da47794" }, { "implementation_operation_id": "kimi_code.session.fork", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "session.fork", "capability_ids": [ "kimi.context_files_events_auth", "kimi.session_snapshot" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.fork" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "kimi.context_files_events_auth.pairling_support", "kimi.context_files_events_auth.vendor_surface", "kimi.session_snapshot.pairling_support", "kimi.session_snapshot.vendor_surface" ], "source_refs": [ "kimi-acp", "kimi-snapshot", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add exact owned resume/fork targets plus bounded snapshot discovery with seq/epoch proof; confirm lifecycle mutations. Add bounded event/usage/auth status and root-scoped artifact reads first; preview undo/rewind and keep raw PTY, secrets, debug, shutdown and public bind unavailable.", "semantic_digest": "sha256:5eee79554687efbf8d65bd80cfd78994346c960266df94d058ffba07035e40b0" }, { "implementation_operation_id": "kimi_code.session.model.set", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "session.model.set", "capability_ids": [ "kimi.models_integrations_tasks" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.model.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "kimi.models_integrations_tasks.pairling_support", "kimi.models_integrations_tasks.vendor_surface" ], "source_refs": [ "kimi-acp", "kimi-docs", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:6bba9d68f8c2b6382c84a60f65dfe4ef06879f0a35ae5da53915add421ed5e11" }, { "implementation_operation_id": "kimi_code.session.permissions.set", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "session.permissions.set", "capability_ids": [ "kimi.approvals_modes_trust" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.permissions.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "credential_exposure" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "kimi.approvals_modes_trust.pairling_support", "kimi.approvals_modes_trust.vendor_surface" ], "source_refs": [ "kimi-docs", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:dbdc6571554516e953a60611b75d8cf8470ada35c8963270216612f5075625c2" }, { "implementation_operation_id": "kimi_code.session.prompt.send", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "session.prompt.send", "capability_ids": [ "kimi.prompt_queue_steer_abort" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "kimi.prompt_queue_steer_abort.pairling_support", "kimi.prompt_queue_steer_abort.vendor_surface" ], "source_refs": [ "kimi-prompts", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:7136ece31f4ccbbbd423a2d8cf2eb5104f5537f2f514507539e7d137a9bc8aa0" }, { "implementation_operation_id": "kimi_code.session.question.answer", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "session.question.answer", "capability_ids": [ "kimi.approvals_modes_trust" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.question.answer" } ], "invalidates": [ { "kind": "input_lease" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "kimi.approvals_modes_trust.pairling_support", "kimi.approvals_modes_trust.vendor_surface" ], "source_refs": [ "kimi-docs", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:6937089f915b65dd104e0f6796e767ead6602dd5d3e4306a45662a78670fa60c" }, { "implementation_operation_id": "kimi_code.session.resume", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "session.resume", "capability_ids": [ "kimi.session_snapshot" ], "implementation_status": "mapped", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.resume" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "kimi.session_snapshot.pairling_support", "kimi.session_snapshot.vendor_surface" ], "source_refs": [ "kimi-snapshot", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add exact owned resume/fork targets plus bounded snapshot discovery with seq/epoch proof; confirm lifecycle mutations.", "semantic_digest": "sha256:4715c7c4f808320b6653e1daef8619d1f608cf36666c203068f1647eacdc58ad" }, { "implementation_operation_id": "kimi_code.session.rewind", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "session.rewind", "capability_ids": [ "kimi.context_files_events_auth" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.rewind" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "kimi.context_files_events_auth.pairling_support", "kimi.context_files_events_auth.vendor_surface" ], "source_refs": [ "kimi-acp", "kimi-snapshot", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded event/usage/auth status and root-scoped artifact reads first; preview undo/rewind and keep raw PTY, secrets, debug, shutdown and public bind unavailable.", "semantic_digest": "sha256:a8dd281c917cf1f8006346f99413c077e158382f9530206deb8edaf09ed0b3fc" }, { "implementation_operation_id": "kimi_code.session.terminate", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "session.terminate", "capability_ids": [ "kimi.context_files_events_auth" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "terminate_session", "target": "session.terminate" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "mutation_authority" }, { "kind": "driver_availability" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "start_replacement_session" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "kimi.context_files_events_auth.pairling_support", "kimi.context_files_events_auth.vendor_surface" ], "source_refs": [ "kimi-acp", "kimi-snapshot", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add bounded event/usage/auth status and root-scoped artifact reads first; preview undo/rewind and keep raw PTY, secrets, debug, shutdown and public bind unavailable.", "semantic_digest": "sha256:fda1941d757a5cb4a5743a39ffc06320953665cb489c26d92df3157d9447b68e" }, { "implementation_operation_id": "kimi_code.session.turn.interrupt", "implementation_id": "kimi_code.implementation.reviewed", "operation_id": "session.turn.interrupt", "capability_ids": [ "kimi.prompt_queue_steer_abort" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "kimi.prompt_queue_steer_abort.pairling_support", "kimi.prompt_queue_steer_abort.vendor_surface" ], "source_refs": [ "kimi-prompts", "kimi-web", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:ae069da1817f1205eeb20b15469551da22b5064913818cd4d799f32849701a33" }, { "implementation_operation_id": "omp.provider.auth.read", "implementation_id": "omp.implementation.reviewed", "operation_id": "provider.auth.read", "capability_ids": [ "omp.json_auth_extensions_collab" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.auth.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "credential_exposure" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "omp.json_auth_extensions_collab.pairling_support", "omp.json_auth_extensions_collab.vendor_surface" ], "source_refs": [ "omp-release", "omp-rpc", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add only redacted, separately attested provider diagnostics/auth reads; keep credential and collaboration-link mutation local.", "semantic_digest": "sha256:3aae8cfb99239be34b11d15cfa991f733ec413c1f6e991f73978707171963182" }, { "implementation_operation_id": "omp.provider.diagnostics.read", "implementation_id": "omp.implementation.reviewed", "operation_id": "provider.diagnostics.read", "capability_ids": [ "omp.json_auth_extensions_collab" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.diagnostics.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "omp.json_auth_extensions_collab.pairling_support", "omp.json_auth_extensions_collab.vendor_surface" ], "source_refs": [ "omp-release", "omp-rpc", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Add only redacted, separately attested provider diagnostics/auth reads; keep credential and collaboration-link mutation local.", "semantic_digest": "sha256:84608be20759b13bc9420225b4c9932aba5d6f5d12db99a421db057279680433" }, { "implementation_operation_id": "omp.session.approval.decide", "implementation_id": "omp.implementation.reviewed", "operation_id": "session.approval.decide", "capability_ids": [ "omp.acp_session", "omp.approval_plan_scope" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "omp.acp_session.pairling_support", "omp.acp_session.vendor_surface", "omp.approval_plan_scope.pairling_support", "omp.approval_plan_scope.vendor_surface" ], "source_refs": [ "acp-v1", "omp-acp", "omp-approval", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:a71e1b3fa804aba1c5663564b30acdfd009370c729bae2800b18c59fd770a34e" }, { "implementation_operation_id": "omp.session.model.set", "implementation_id": "omp.implementation.reviewed", "operation_id": "session.model.set", "capability_ids": [ "omp.acp_session", "omp.release_model_selection" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.model.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "omp.acp_session.pairling_support", "omp.acp_session.vendor_surface", "omp.release_model_selection.pairling_support", "omp.release_model_selection.vendor_surface" ], "source_refs": [ "acp-v1", "omp-acp", "omp-mcp", "omp-rpc", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:fbe2de1e1224ab812a0bc9d94ed9ec339f63c958d269069d60c670746cfbd07b" }, { "implementation_operation_id": "omp.session.permissions.set", "implementation_id": "omp.implementation.reviewed", "operation_id": "session.permissions.set", "capability_ids": [ "omp.acp_session", "omp.approval_plan_scope" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.permissions.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "credential_exposure" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "omp.acp_session.pairling_support", "omp.acp_session.vendor_surface", "omp.approval_plan_scope.pairling_support", "omp.approval_plan_scope.vendor_surface" ], "source_refs": [ "acp-v1", "omp-acp", "omp-approval", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:eed8f4a7ba2db70d97e186f94f6dd80c425f95d2d39faad6fd54810bc5690d87" }, { "implementation_operation_id": "omp.session.plan.start", "implementation_id": "omp.implementation.reviewed", "operation_id": "session.plan.start", "capability_ids": [ "omp.approval_plan_scope" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_workflow", "target": "session.plan.start" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "omp.approval_plan_scope.pairling_support", "omp.approval_plan_scope.vendor_surface" ], "source_refs": [ "omp-acp", "omp-approval", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "Keep yolo, auto-approve, plan-yolo and add-dir unavailable; any future safe plan flow must prove form elicitation and exact scope independently.", "semantic_digest": "sha256:44fac9ff08f3f27145850a08dbe1689d98f56c6470ab0be75b0ae76f816e95f2" }, { "implementation_operation_id": "omp.session.prompt.send", "implementation_id": "omp.implementation.reviewed", "operation_id": "session.prompt.send", "capability_ids": [ "omp.acp_session", "omp.rpc_rich_control" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "omp.acp_session.pairling_support", "omp.acp_session.vendor_surface", "omp.rpc_rich_control.pairling_support", "omp.rpc_rich_control.vendor_surface" ], "source_refs": [ "acp-v1", "omp-acp", "omp-rpc", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:5478441d7676a6840ff2b7e61bdbfbe9101a28e509ebe625106f895a30f928b7" }, { "implementation_operation_id": "omp.session.question.answer", "implementation_id": "omp.implementation.reviewed", "operation_id": "session.question.answer", "capability_ids": [ "omp.acp_session" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.question.answer" } ], "invalidates": [ { "kind": "input_lease" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "omp.acp_session.pairling_support", "omp.acp_session.vendor_surface" ], "source_refs": [ "acp-v1", "omp-acp", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:65d73e5b93d0c353826d20312689e9cf1e16b1708e46329e3befd2756da2192e" }, { "implementation_operation_id": "omp.session.turn.interrupt", "implementation_id": "omp.implementation.reviewed", "operation_id": "session.turn.interrupt", "capability_ids": [ "omp.acp_session", "omp.rpc_rich_control" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "omp.acp_session.pairling_support", "omp.acp_session.vendor_surface", "omp.rpc_rich_control.pairling_support", "omp.rpc_rich_control.vendor_surface" ], "source_refs": [ "acp-v1", "omp-acp", "omp-rpc", "pairling-acp-control", "pairling-acp-profile-tests", "pairling-acp-profiles", "pairling-acp-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:2f37cac0f891fc9a1e8a480e63fd467c3b6fe25f06739840e53bcd6f33123985" }, { "implementation_operation_id": "opencode.provider.auth.read", "implementation_id": "opencode.implementation.reviewed", "operation_id": "provider.auth.read", "capability_ids": [ "opencode.release_status_usage_auth" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.auth.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "credential_exposure" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "opencode.release_status_usage_auth.pairling_support", "opencode.release_status_usage_auth.vendor_surface" ], "source_refs": [ "opencode-acp", "opencode-sdk", "opencode-server", "pairling-opencode-control", "pairling-opencode-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:9ffe15ebf28d0a53bc354a42276d21f39f963019288eb6c0444697eb6af0a7ef" }, { "implementation_operation_id": "opencode.provider.diagnostics.read", "implementation_id": "opencode.implementation.reviewed", "operation_id": "provider.diagnostics.read", "capability_ids": [ "opencode.release_status_usage_auth" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.diagnostics.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "opencode.release_status_usage_auth.pairling_support", "opencode.release_status_usage_auth.vendor_surface" ], "source_refs": [ "opencode-acp", "opencode-sdk", "opencode-server", "pairling-opencode-control", "pairling-opencode-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:b87afd6c5bc2830baa31588ef594cdc7a61bcb95e9df7409fe3b7f36f97320f1" }, { "implementation_operation_id": "opencode.provider.usage.read", "implementation_id": "opencode.implementation.reviewed", "operation_id": "provider.usage.read", "capability_ids": [ "opencode.release_status_usage_auth" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.usage.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "opencode.release_status_usage_auth.pairling_support", "opencode.release_status_usage_auth.vendor_surface" ], "source_refs": [ "opencode-acp", "opencode-sdk", "opencode-server", "pairling-opencode-control", "pairling-opencode-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:90667993f001b07e88a4bd98781679e7945fe5aec909be1e40db2404d8497226" }, { "implementation_operation_id": "opencode.session.approval.decide", "implementation_id": "opencode.implementation.reviewed", "operation_id": "session.approval.decide", "capability_ids": [ "opencode.permission_shell_safety", "opencode.session_prompt_history" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "opencode.permission_shell_safety.pairling_support", "opencode.permission_shell_safety.vendor_surface", "opencode.session_prompt_history.pairling_support", "opencode.session_prompt_history.vendor_surface" ], "source_refs": [ "opencode-acp-src", "opencode-permissions", "opencode-server", "pairling-opencode-control", "pairling-opencode-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:a375f95c0d903c443342f4f402ad79b479aa1e940345893db3dd0f9b9397ba3b" }, { "implementation_operation_id": "opencode.session.fork", "implementation_id": "opencode.implementation.reviewed", "operation_id": "session.fork", "capability_ids": [ "opencode.session_prompt_history" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.fork" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "opencode.session_prompt_history.pairling_support", "opencode.session_prompt_history.vendor_surface" ], "source_refs": [ "opencode-acp-src", "opencode-server", "pairling-opencode-control", "pairling-opencode-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:a7b9363aaa7b8359d9992192bd6da2ab6e5e2a3915950ea643b2a7546389e359" }, { "implementation_operation_id": "opencode.session.model.set", "implementation_id": "opencode.implementation.reviewed", "operation_id": "session.model.set", "capability_ids": [ "opencode.models_agents_context_vcs" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.model.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "opencode.models_agents_context_vcs.pairling_support", "opencode.models_agents_context_vcs.vendor_surface" ], "source_refs": [ "opencode-sdk", "opencode-server", "pairling-opencode-control", "pairling-opencode-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:c80cd4a527b98ca1545d81c4595f071e26f7dd8a4db629e1c50f270f2a5f4e6f" }, { "implementation_operation_id": "opencode.session.permissions.set", "implementation_id": "opencode.implementation.reviewed", "operation_id": "session.permissions.set", "capability_ids": [ "opencode.permission_shell_safety" ], "implementation_status": "excluded", "release_status": "not_released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.permissions.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "credential_exposure" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "opencode.permission_shell_safety.pairling_support", "opencode.permission_shell_safety.vendor_surface" ], "source_refs": [ "opencode-permissions", "pairling-opencode-control", "pairling-opencode-tests", "pairling-operations" ], "required_pairling_addition": "Keep auto/yolo, persistent broad allow and /shell unavailable; any future permission-mode operation must remain exact, request-bound and fail closed.", "semantic_digest": "sha256:baa5d745c396759e85b1bbdede54d7c46d92055f3fe53953955cf01ad499b19d" }, { "implementation_operation_id": "opencode.session.prompt.send", "implementation_id": "opencode.implementation.reviewed", "operation_id": "session.prompt.send", "capability_ids": [ "opencode.session_prompt_history" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "opencode.session_prompt_history.pairling_support", "opencode.session_prompt_history.vendor_surface" ], "source_refs": [ "opencode-acp-src", "opencode-server", "pairling-opencode-control", "pairling-opencode-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:26643da74ce0ac92848813e21d123e2ee5b8ccdf4c7811231fc190b8a0dc987f" }, { "implementation_operation_id": "opencode.session.question.answer", "implementation_id": "opencode.implementation.reviewed", "operation_id": "session.question.answer", "capability_ids": [ "opencode.session_prompt_history" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.question.answer" } ], "invalidates": [ { "kind": "input_lease" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "opencode.session_prompt_history.pairling_support", "opencode.session_prompt_history.vendor_surface" ], "source_refs": [ "opencode-acp-src", "opencode-server", "pairling-opencode-control", "pairling-opencode-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:ba1bba38884710ad6f65b4db892a6d425fc8294488651c2c83c98a30e89f6188" }, { "implementation_operation_id": "opencode.session.reasoning.set", "implementation_id": "opencode.implementation.reviewed", "operation_id": "session.reasoning.set", "capability_ids": [ "opencode.models_agents_context_vcs" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.reasoning.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "opencode.models_agents_context_vcs.pairling_support", "opencode.models_agents_context_vcs.vendor_surface" ], "source_refs": [ "opencode-sdk", "opencode-server", "pairling-opencode-control", "pairling-opencode-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:e6a816a6864a800c39ac582de3730a5012bd9a2ca2832551c6f97bacbdfce404" }, { "implementation_operation_id": "opencode.session.resume", "implementation_id": "opencode.implementation.reviewed", "operation_id": "session.resume", "capability_ids": [ "opencode.session_prompt_history" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.resume" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "opencode.session_prompt_history.pairling_support", "opencode.session_prompt_history.vendor_surface" ], "source_refs": [ "opencode-acp-src", "opencode-server", "pairling-opencode-control", "pairling-opencode-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:1972eef852c3a297e828d59d78133575fc2c485de21de4b99316f25581061412" }, { "implementation_operation_id": "opencode.session.turn.interrupt", "implementation_id": "opencode.implementation.reviewed", "operation_id": "session.turn.interrupt", "capability_ids": [ "opencode.session_prompt_history" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "opencode.session_prompt_history.pairling_support", "opencode.session_prompt_history.vendor_surface" ], "source_refs": [ "opencode-acp-src", "opencode-server", "pairling-opencode-control", "pairling-opencode-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:dd008ecf47b638148872365b448f269aed7d8a2b5af56063aa1a4f64e353473b" }, { "implementation_operation_id": "opencode.session.turn.steer", "implementation_id": "opencode.implementation.reviewed", "operation_id": "session.turn.steer", "capability_ids": [ "opencode.session_prompt_history" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "steer_turn", "target": "session.turn.steer" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "opencode.session_prompt_history.pairling_support", "opencode.session_prompt_history.vendor_surface" ], "source_refs": [ "opencode-acp-src", "opencode-server", "pairling-opencode-control", "pairling-opencode-tests", "pairling-operations", "pairling-recognized" ], "required_pairling_addition": "", "semantic_digest": "sha256:8942c20c74e9648470d0c268602fb6725a0e3e2f184fab9a1444a693aaf8d1c9" }, { "implementation_operation_id": "openhands.provider.auth.read", "implementation_id": "openhands.implementation.reviewed", "operation_id": "provider.auth.read", "capability_ids": [ "openhands.server_sessions_events" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.auth.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "credential_exposure" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "openhands.server_sessions_events.pairling_support", "openhands.server_sessions_events.vendor_surface" ], "source_refs": [ "openhands-server", "pairling-openhands-control", "pairling-openhands-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:7eabf965c5bb8cfe5efeeffb7aa1dc577bca469080d3748b6e03d3546614f2ff" }, { "implementation_operation_id": "openhands.provider.config.read", "implementation_id": "openhands.implementation.reviewed", "operation_id": "provider.config.read", "capability_ids": [ "openhands.server_sessions_events" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.config.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "openhands.server_sessions_events.pairling_support", "openhands.server_sessions_events.vendor_surface" ], "source_refs": [ "openhands-server", "pairling-openhands-control", "pairling-openhands-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:12e4320f8a1b6bea8ae5d2ba421711028ff6c6b79a0c6840ac471b35352c6a77" }, { "implementation_operation_id": "openhands.provider.diagnostics.read", "implementation_id": "openhands.implementation.reviewed", "operation_id": "provider.diagnostics.read", "capability_ids": [ "openhands.server_sessions_events" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.diagnostics.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "openhands.server_sessions_events.pairling_support", "openhands.server_sessions_events.vendor_surface" ], "source_refs": [ "openhands-server", "pairling-openhands-control", "pairling-openhands-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:8e4b2d0ba4af26a92f1c6a624304220dba5d446367416e68de3b2accfd3ee398" }, { "implementation_operation_id": "openhands.provider.usage.read", "implementation_id": "openhands.implementation.reviewed", "operation_id": "provider.usage.read", "capability_ids": [ "openhands.server_sessions_events" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.usage.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "openhands.server_sessions_events.pairling_support", "openhands.server_sessions_events.vendor_surface" ], "source_refs": [ "openhands-server", "pairling-openhands-control", "pairling-openhands-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:1655b4aa0546d4837bac51d891965a09f11fd2e093187e157520a4c3b9ecf3a0" }, { "implementation_operation_id": "openhands.session.approval.decide", "implementation_id": "openhands.implementation.reviewed", "operation_id": "session.approval.decide", "capability_ids": [ "openhands.control_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "openhands.control_context.pairling_support", "openhands.control_context.vendor_surface" ], "source_refs": [ "openhands-server", "pairling-openhands-control", "pairling-openhands-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:ed83debeb8080e4076444f9a92a65cc9ab8fbf11ee3f68c507ea635ed8f78086" }, { "implementation_operation_id": "openhands.session.compact", "implementation_id": "openhands.implementation.reviewed", "operation_id": "session.compact", "capability_ids": [ "openhands.control_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.compact" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "openhands.control_context.pairling_support", "openhands.control_context.vendor_surface" ], "source_refs": [ "openhands-server", "pairling-openhands-control", "pairling-openhands-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:114e7cab5f5b47c93b32651ca07b60e60bd23f73654eb070af16794c22be6b26" }, { "implementation_operation_id": "openhands.session.fork", "implementation_id": "openhands.implementation.reviewed", "operation_id": "session.fork", "capability_ids": [ "openhands.control_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.fork" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "openhands.control_context.pairling_support", "openhands.control_context.vendor_surface" ], "source_refs": [ "openhands-server", "pairling-openhands-control", "pairling-openhands-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:b7c6da2fb4afb47fe314b9b1311d557235dd5f08721840c7bfec1ce4eb4eb64a" }, { "implementation_operation_id": "openhands.session.model.set", "implementation_id": "openhands.implementation.reviewed", "operation_id": "session.model.set", "capability_ids": [ "openhands.control_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.model.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "openhands.control_context.pairling_support", "openhands.control_context.vendor_surface" ], "source_refs": [ "openhands-server", "pairling-openhands-control", "pairling-openhands-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:11c5829c676ba8ddc49d5a58daaa8cb29f4d681fc88d354226eca1c330fdf438" }, { "implementation_operation_id": "openhands.session.prompt.send", "implementation_id": "openhands.implementation.reviewed", "operation_id": "session.prompt.send", "capability_ids": [ "openhands.server_sessions_events" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "openhands.server_sessions_events.pairling_support", "openhands.server_sessions_events.vendor_surface" ], "source_refs": [ "openhands-server", "pairling-openhands-control", "pairling-openhands-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:5b2179d7a8b3a8098b5bdad7044aeac5acccf4c24cc6681218c23e9c49f97149" }, { "implementation_operation_id": "openhands.session.resume", "implementation_id": "openhands.implementation.reviewed", "operation_id": "session.resume", "capability_ids": [ "openhands.server_sessions_events" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.resume" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "openhands.server_sessions_events.pairling_support", "openhands.server_sessions_events.vendor_surface" ], "source_refs": [ "openhands-server", "pairling-openhands-control", "pairling-openhands-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:a826e824f1e684f06631fbdd9c387d0fa6979507113298d0629f46055d018cf6" }, { "implementation_operation_id": "openhands.session.rewind", "implementation_id": "openhands.implementation.reviewed", "operation_id": "session.rewind", "capability_ids": [ "openhands.control_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "mutate_context", "target": "session.rewind" } ], "invalidates": [ { "kind": "context_generation" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "openhands.control_context.pairling_support", "openhands.control_context.vendor_surface" ], "source_refs": [ "openhands-server", "pairling-openhands-control", "pairling-openhands-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:7f9719a2af6d176349401faf1dcb5b7e176a8ef33574f772658635fc6514d0c2" }, { "implementation_operation_id": "openhands.session.turn.interrupt", "implementation_id": "openhands.implementation.reviewed", "operation_id": "session.turn.interrupt", "capability_ids": [ "openhands.control_context" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "openhands.control_context.pairling_support", "openhands.control_context.vendor_surface" ], "source_refs": [ "openhands-server", "pairling-openhands-control", "pairling-openhands-tests", "pairling-operations" ], "required_pairling_addition": "", "semantic_digest": "sha256:77576493730dbe00dd1813abd2798c2d7870cc02cd2eda555f906b87397c0acc" }, { "implementation_operation_id": "qwen_code.provider.config.read", "implementation_id": "qwen_code.implementation.reviewed", "operation_id": "provider.config.read", "capability_ids": [ "qwen.acp_events_integrations" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.config.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "qwen.acp_events_integrations.pairling_support", "qwen.acp_events_integrations.vendor_surface" ], "source_refs": [ "acp-v1", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests", "qwen-release" ], "required_pairling_addition": "", "semantic_digest": "sha256:8b8331ecccb1c9c415fdde01781c432857953fd484ea3e9e00b4d7464a22d2ed" }, { "implementation_operation_id": "qwen_code.provider.mcp.read", "implementation_id": "qwen_code.implementation.reviewed", "operation_id": "provider.mcp.read", "capability_ids": [ "qwen.acp_events_integrations" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.mcp.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "qwen.acp_events_integrations.pairling_support", "qwen.acp_events_integrations.vendor_surface" ], "source_refs": [ "acp-v1", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests", "qwen-release" ], "required_pairling_addition": "", "semantic_digest": "sha256:92ebf8ff24333088db33a4a481457802fb4761a691fa66177a1738fcaa405b58" }, { "implementation_operation_id": "qwen_code.provider.usage.read", "implementation_id": "qwen_code.implementation.reviewed", "operation_id": "provider.usage.read", "capability_ids": [ "qwen.release_permissions_model_usage" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding" ] }, { "kind": "device_scope", "scope": "health:read" }, { "kind": "resource_proof", "proof_kind": "provider_binding" }, { "kind": "confirmation", "mode": "none" } ], "effects": [ { "kind": "return_data", "target": "provider.usage.read" } ], "invalidates": [], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" } ], "retry": { "replay": "safe", "recovery": "unavailable", "ambiguity": "rejected", "correlation": "none" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation" ], "evidence_claim_ids": [ "qwen.release_permissions_model_usage.pairling_support", "qwen.release_permissions_model_usage.vendor_surface" ], "source_refs": [ "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests", "qwen-approval", "qwen-checkpoint" ], "required_pairling_addition": "", "semantic_digest": "sha256:fd6843405e04f094f656f99ec8f5e68e1d564b27381a551010a98b35314c4ca5" }, { "implementation_operation_id": "qwen_code.session.approval.decide", "implementation_id": "qwen_code.implementation.reviewed", "operation_id": "session.approval.decide", "capability_ids": [ "qwen.release_permissions_model_usage" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "approval_nonce" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "decide_request", "target": "session.approval.decide" } ], "invalidates": [ { "kind": "approval_nonce" }, { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated", "safe_choices_discovered" ], "evidence_claim_ids": [ "qwen.release_permissions_model_usage.pairling_support", "qwen.release_permissions_model_usage.vendor_surface" ], "source_refs": [ "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests", "qwen-approval", "qwen-checkpoint" ], "required_pairling_addition": "", "semantic_digest": "sha256:e0daa9163c8a6268ea7557e2f642fe90a28eb394c7e5ec9ae02965f324ee05ab" }, { "implementation_operation_id": "qwen_code.session.fork", "implementation_id": "qwen_code.implementation.reviewed", "operation_id": "session.fork", "capability_ids": [ "qwen.session_prompt_output" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.fork" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "qwen.session_prompt_output.pairling_support", "qwen.session_prompt_output.vendor_surface" ], "source_refs": [ "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests", "qwen-headless", "qwen-release" ], "required_pairling_addition": "", "semantic_digest": "sha256:bf9f14d05afae5200b362a744e40c48712ce3cd04423ed1afa8d30332ddd2545" }, { "implementation_operation_id": "qwen_code.session.model.set", "implementation_id": "qwen_code.implementation.reviewed", "operation_id": "session.model.set", "capability_ids": [ "qwen.release_permissions_model_usage" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.model.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "qwen.release_permissions_model_usage.pairling_support", "qwen.release_permissions_model_usage.vendor_surface" ], "source_refs": [ "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests", "qwen-approval", "qwen-checkpoint" ], "required_pairling_addition": "", "semantic_digest": "sha256:8bc5e91ac0fd3e26566b3493e4d537c1028ca9869d832084127f5de414c99666" }, { "implementation_operation_id": "qwen_code.session.permissions.set", "implementation_id": "qwen_code.implementation.reviewed", "operation_id": "session.permissions.set", "capability_ids": [ "qwen.release_permissions_model_usage" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.permissions.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "credential_exposure" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "qwen.release_permissions_model_usage.pairling_support", "qwen.release_permissions_model_usage.vendor_surface" ], "source_refs": [ "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests", "qwen-approval", "qwen-checkpoint" ], "required_pairling_addition": "", "semantic_digest": "sha256:4eeade848199fb40daff8b262ab97a9d1e5e13d18526f69c2d3568116f2424b0" }, { "implementation_operation_id": "qwen_code.session.prompt.send", "implementation_id": "qwen_code.implementation.reviewed", "operation_id": "session.prompt.send", "capability_ids": [ "qwen.session_prompt_output" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "start_inference", "target": "session.prompt.send" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "qwen.session_prompt_output.pairling_support", "qwen.session_prompt_output.vendor_surface" ], "source_refs": [ "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests", "qwen-headless", "qwen-release" ], "required_pairling_addition": "", "semantic_digest": "sha256:8f0f8b8bac2bfe021cfc707ec4ac5e2fad72b2992a795bb4cc903f88d59781cb" }, { "implementation_operation_id": "qwen_code.session.reasoning.set", "implementation_id": "qwen_code.implementation.reviewed", "operation_id": "session.reasoning.set", "capability_ids": [ "qwen.release_permissions_model_usage" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "update_setting", "target": "session.reasoning.set" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "qwen.release_permissions_model_usage.pairling_support", "qwen.release_permissions_model_usage.vendor_surface" ], "source_refs": [ "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests", "qwen-approval", "qwen-checkpoint" ], "required_pairling_addition": "", "semantic_digest": "sha256:6d4190369b61e70de3f7b67a607d6ba9bae9974e0d5ecd4d9561f67b0a7b665a" }, { "implementation_operation_id": "qwen_code.session.resume", "implementation_id": "qwen_code.implementation.reviewed", "operation_id": "session.resume", "capability_ids": [ "qwen.session_prompt_output" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:spawn" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "create_session", "target": "session.resume" } ], "invalidates": [ { "kind": "snapshot" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "safe_choices_discovered" ], "evidence_claim_ids": [ "qwen.session_prompt_output.pairling_support", "qwen.session_prompt_output.vendor_surface" ], "source_refs": [ "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests", "qwen-headless", "qwen-release" ], "required_pairling_addition": "", "semantic_digest": "sha256:6789d92cfeef9f4a36a8b60bc985d885f2a8c70c22a85c437db8a440f5b512de" }, { "implementation_operation_id": "qwen_code.session.terminate", "implementation_id": "qwen_code.implementation.reviewed", "operation_id": "session.terminate", "capability_ids": [ "qwen.session_prompt_output" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "point_of_risk" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "terminate_session", "target": "session.terminate" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "mutation_authority" }, { "kind": "driver_availability" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" }, { "kind": "start_replacement_session" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "qwen.session_prompt_output.pairling_support", "qwen.session_prompt_output.vendor_surface" ], "source_refs": [ "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests", "qwen-headless", "qwen-release" ], "required_pairling_addition": "", "semantic_digest": "sha256:88a6856b67b31f4d481fe3fe05e4122076e87e735e43833c05fb9419b394557c" }, { "implementation_operation_id": "qwen_code.session.turn.interrupt", "implementation_id": "qwen_code.implementation.reviewed", "operation_id": "session.turn.interrupt", "capability_ids": [ "qwen.session_prompt_output" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:signal" }, { "kind": "resource_proof", "proof_kind": "session_truth" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "interrupt_turn", "target": "session.turn.interrupt" } ], "invalidates": [ { "kind": "active_turn" }, { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active" ], "evidence_claim_ids": [ "qwen.session_prompt_output.pairling_support", "qwen.session_prompt_output.vendor_surface" ], "source_refs": [ "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests", "qwen-headless", "qwen-release" ], "required_pairling_addition": "", "semantic_digest": "sha256:9cf14e8b03ccc575d5dfd59677045cc68d379a4112b68c326b841242d1eef16e" }, { "implementation_operation_id": "qwen_code.session.turn.steer", "implementation_id": "qwen_code.implementation.reviewed", "operation_id": "session.turn.steer", "capability_ids": [ "qwen.session_prompt_output" ], "implementation_status": "implemented", "release_status": "released", "requires": [ { "kind": "release_membership" }, { "kind": "fresh_snapshot", "max_age_seconds": 30 }, { "kind": "exact_identity", "dimensions": [ "provider", "implementation", "binding", "session", "generation" ] }, { "kind": "device_scope", "scope": "session:send" }, { "kind": "resource_proof", "proof_kind": "input_lease" }, { "kind": "confirmation", "mode": "user_confirmation" }, { "kind": "owned_process", "owner": "driver" } ], "effects": [ { "kind": "steer_turn", "target": "session.turn.steer" } ], "invalidates": [ { "kind": "snapshot" }, { "kind": "input_lease" } ], "forbids": [ { "kind": "identity_fallback" }, { "kind": "raw_transport_escape" }, { "kind": "scope_expansion" }, { "kind": "terminal_injection" }, { "kind": "replay_without_recovery" } ], "retry": { "replay": "recover_only", "recovery": "manager_receipt", "ambiguity": "outcome_unknown", "correlation": "client_and_provider" }, "runtime_proofs_required": [ "operation_discovered", "release_member", "exact_implementation", "fresh_generation", "exact_session", "owned_process_live", "safe_policy_active", "pending_request_correlated" ], "evidence_claim_ids": [ "qwen.session_prompt_output.pairling_support", "qwen.session_prompt_output.vendor_surface" ], "source_refs": [ "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests", "qwen-headless", "qwen-release" ], "required_pairling_addition": "", "semantic_digest": "sha256:355020742620cece31db5f84493fcc819fdbbe47be624fbd7ff901fa31b5e7f9" } ], "evidence_claims": [ { "claim_id": "aider.commands_model_git.pairling_support", "subject_type": "capability", "subject_id": "aider.commands_model_git", "classification": "pairling_support", "assertion": "No Aider semantic commands.", "source_refs": [ "aider-commands" ] }, { "claim_id": "aider.commands_model_git.vendor_surface", "subject_type": "capability", "subject_id": "aider.commands_model_git", "classification": "vendor_surface", "assertion": "Manage files/map; ask, architect, code, model and reasoning modes; diff, undo, repo map and history through human slash commands.", "source_refs": [ "aider-commands" ] }, { "claim_id": "aider.terminal_session.pairling_support", "subject_type": "capability", "subject_id": "aider.terminal_session", "classification": "pairling_support", "assertion": "Aider recognized only; no launchable driver.", "source_refs": [ "aider-commands" ] }, { "claim_id": "aider.terminal_session.vendor_surface", "subject_type": "capability", "subject_id": "aider.terminal_session", "classification": "vendor_surface", "assertion": "Start one-shot or interactive, send terminal input and Ctrl-C while retaining a partial answer.", "source_refs": [ "aider-commands" ] }, { "claim_id": "aider.unattended.pairling_support", "subject_type": "capability", "subject_id": "aider.unattended", "classification": "pairling_support", "assertion": "Unsafe modes are absent.", "source_refs": [ "aider-commands" ] }, { "claim_id": "aider.unattended.vendor_surface", "subject_type": "capability", "subject_id": "aider.unattended", "classification": "vendor_surface", "assertion": "Unattended approval and auto-commit mutate without a per-action gate.", "source_refs": [ "aider-commands" ] }, { "claim_id": "amp.remote_runners_multiplayer.pairling_support", "subject_type": "capability", "subject_id": "amp.remote_runners_multiplayer", "classification": "pairling_support", "assertion": "No Amp support; safety boundary unknown.", "source_refs": [ "amp-sdk" ] }, { "claim_id": "amp.remote_runners_multiplayer.vendor_surface", "subject_type": "capability", "subject_id": "amp.remote_runners_multiplayer", "classification": "vendor_surface", "assertion": "Remote runners, threads and multiplayer include remote terminal power whose auth and approval boundary was not established.", "source_refs": [ "amp-sdk" ] }, { "claim_id": "amp.sdk_threads_events.pairling_support", "subject_type": "capability", "subject_id": "amp.sdk_threads_events", "classification": "pairling_support", "assertion": "No Amp provider.", "source_refs": [ "amp-sdk" ] }, { "claim_id": "amp.sdk_threads_events.vendor_surface", "subject_type": "capability", "subject_id": "amp.sdk_threads_events", "classification": "vendor_surface", "assertion": "Run SDK prompts with AsyncIterable stream-json threads, messages, tools and results.", "source_refs": [ "amp-sdk" ] }, { "claim_id": "antigravity.alpha_sdk.pairling_support", "subject_type": "capability", "subject_id": "antigravity.alpha_sdk", "classification": "pairling_support", "assertion": "No SDK integration; private wire excluded.", "source_refs": [ "antigravity-sdk" ] }, { "claim_id": "antigravity.alpha_sdk.vendor_surface", "subject_type": "capability", "subject_id": "antigravity.alpha_sdk", "classification": "vendor_surface", "assertion": "Typed async sessions, steps and chunks, cancel, continuation, tools, MCP, policies, triggers and attachments over a private owned loopback harness; no existing-TUI control.", "source_refs": [ "antigravity-sdk" ] }, { "claim_id": "antigravity.headless_job.pairling_support", "subject_type": "capability", "subject_id": "antigravity.headless_job", "classification": "pairling_support", "assertion": "Recognized detection only. Pairling does not advertise managed launch or prompt operations because agy exposes user prompt text in process argv.", "source_refs": [ "antigravity-headless", "antigravity-cli", "pairling-recognized" ] }, { "claim_id": "antigravity.headless_job.vendor_surface", "subject_type": "capability", "subject_id": "antigravity.headless_job", "classification": "vendor_surface", "assertion": "Produce final JSON or init, step_update and result NDJSON for a one-shot prompt supplied through -p/--prompt process argv, with schema, resume, model, effort, agent, mode, sandbox, permissions and timeout; cancel the owned child.", "source_refs": [ "antigravity-headless", "antigravity-cli", "pairling-recognized" ] }, { "claim_id": "antigravity.tui_exclusions.pairling_support", "subject_type": "capability", "subject_id": "antigravity.tui_exclusions", "classification": "pairling_support", "assertion": "No safe machine surface.", "source_refs": [ "antigravity-cli" ] }, { "claim_id": "antigravity.tui_exclusions.vendor_surface", "subject_type": "capability", "subject_id": "antigravity.tui_exclusions", "classification": "vendor_surface", "assertion": "TUI-only auth, approval, sessions, fork, rewind, artifacts, usage and tasks exist; bypass, secrets, installs, add-dir, cache edits and scraping are excluded.", "source_refs": [ "antigravity-cli" ] }, { "claim_id": "claude.auth_remote_control.pairling_support", "subject_type": "capability", "subject_id": "claude.auth_remote_control", "classification": "pairling_support", "assertion": "The Agent SDK driver implements redacted provider.auth.read account state. Local authentication and Research Preview Remote Control start/name/resume are not exposed.", "source_refs": [ "claude-remote", "claude-sdk", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.auth_remote_control.vendor_surface", "subject_type": "capability", "subject_id": "claude.auth_remote_control", "classification": "vendor_surface", "assertion": "Read account state, authenticate locally, and start, name or resume Research Preview Remote Control sessions. Full OAuth subscriptions only; no public SDK, webhook or wire.", "source_refs": [ "claude-remote", "claude-sdk", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.events_hooks_usage.pairling_support", "subject_type": "capability", "subject_id": "claude.events_hooks_usage", "classification": "pairling_support", "assertion": "The Agent SDK driver implements provider.status.read and provider.diagnostics.read and normalizes bounded SDK events. provider.usage.read and the complete documented hook/message union are not exposed as this capability describes.", "source_refs": [ "claude-hooks", "claude-sdk", "pairling-daemon", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.events_hooks_usage.vendor_surface", "subject_type": "capability", "subject_id": "claude.events_hooks_usage", "classification": "vendor_surface", "assertion": "Receive SDK, JSON and stream-json messages, partial output, result cost/usage/denials/session ID, account/MCP/context diagnostics and 32 documented hook events across command, HTTP, MCP-tool, prompt and agent hooks.", "source_refs": [ "claude-hooks", "claude-sdk", "pairling-daemon", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.integrations_agents_commands.pairling_support", "subject_type": "capability", "subject_id": "claude.integrations_agents_commands", "classification": "pairling_support", "assertion": "The Agent SDK driver implements provider.agents.read, provider.commands.read, provider.mcp.read, provider.mcp.reconnect and provider.mcp.set_enabled. provider.mcp.reload and plugin, skill, command, agent or task mutation are not exposed.", "source_refs": [ "claude-mcp", "claude-sdk", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.integrations_agents_commands.vendor_surface", "subject_type": "capability", "subject_id": "claude.integrations_agents_commands", "classification": "vendor_surface", "assertion": "Inspect or mutate MCP, plugins, commands, skills and agents; spawn or stop tasks. claude mcp serve is a tool server, not a complete session protocol.", "source_refs": [ "claude-mcp", "claude-sdk", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.model_context_checkpoint.pairling_support", "subject_type": "capability", "subject_id": "claude.model_context_checkpoint", "classification": "pairling_support", "assertion": "The Agent SDK driver implements session.context.read, session.model.set, session.compact and session.rewind. session.reasoning.set, fallback/fast controls, clear, memory mutation and full checkpoint file/diff inspection remain absent.", "source_refs": [ "claude-sdk", "claude-package", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.model_context_checkpoint.vendor_surface", "subject_type": "capability", "subject_id": "claude.model_context_checkpoint", "classification": "vendor_surface", "assertion": "Select model, fallback, effort, thinking and fast; inspect context; compact, clear, manage memory, dry-run or apply rewind and inspect diffs/files.", "source_refs": [ "claude-sdk", "claude-package", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.prompt_interrupt_permissions.pairling_support", "subject_type": "capability", "subject_id": "claude.prompt_interrupt_permissions", "classification": "pairling_support", "assertion": "The Agent SDK driver implements session.prompt.send, session.turn.interrupt, session.permissions.set and session.approval.decide with safe live choices and exact permission-request correlation. Arbitrary TUI attachment, full rule editing and stop-task control remain outside this row’s implemented surface.", "source_refs": [ "claude-stream", "claude-permissions", "claude-hooks", "pairling-daemon", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.prompt_interrupt_permissions.vendor_surface", "subject_type": "capability", "subject_id": "claude.prompt_interrupt_permissions", "classification": "vendor_surface", "assertion": "Stream prompt input, interrupt or stop tasks, configure allow/ask/deny rules and permission mode, and answer canUseTool or PermissionRequest hooks. SDK cannot attach to an arbitrary existing TUI.", "source_refs": [ "claude-stream", "claude-permissions", "claude-hooks", "pairling-daemon", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.release_auth_status.pairling_support", "subject_type": "capability", "subject_id": "claude.release_auth_status", "classification": "pairling_support", "assertion": "The reviewed Agent SDK driver implements redacted provider.auth.read account state.", "source_refs": [ "claude-remote", "claude-sdk", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.release_auth_status.vendor_surface", "subject_type": "capability", "subject_id": "claude.release_auth_status", "classification": "vendor_surface", "assertion": "Read redacted Claude account state without exposing authentication, tokens or Research Preview Remote Control transport.", "source_refs": [ "claude-remote", "claude-sdk", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.release_integration_catalog.pairling_support", "subject_type": "capability", "subject_id": "claude.release_integration_catalog", "classification": "pairling_support", "assertion": "The reviewed Agent SDK driver implements provider.agents.read, provider.commands.read, provider.mcp.read, provider.mcp.reconnect and provider.mcp.set_enabled.", "source_refs": [ "claude-mcp", "claude-sdk", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.release_integration_catalog.vendor_surface", "subject_type": "capability", "subject_id": "claude.release_integration_catalog", "classification": "vendor_surface", "assertion": "Read reviewed command, agent and MCP catalogs and apply only correlated MCP reconnect or enabled-state changes.", "source_refs": [ "claude-mcp", "claude-sdk", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.release_model_context_checkpoint.pairling_support", "subject_type": "capability", "subject_id": "claude.release_model_context_checkpoint", "classification": "pairling_support", "assertion": "The reviewed Agent SDK driver implements session.context.read, session.model.set, session.compact and preview-bound session.rewind.", "source_refs": [ "claude-sdk", "claude-package", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.release_model_context_checkpoint.vendor_surface", "subject_type": "capability", "subject_id": "claude.release_model_context_checkpoint", "classification": "vendor_surface", "assertion": "Read bounded context and use reviewed model, compact and rewind controls for the exact owned Claude Agent SDK session.", "source_refs": [ "claude-sdk", "claude-package", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.session_history_lifecycle.pairling_support", "subject_type": "capability", "subject_id": "claude.session_history_lifecycle", "classification": "pairling_support", "assertion": "The owned Agent SDK driver implements session.history.read. Existing transcript discovery remains available, but session.resume and session.fork and the row’s rename, tag, clear and delete mutations are not exposed by the typed driver.", "source_refs": [ "claude-sdk", "pairling-claude", "pairling-daemon", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "claude.session_history_lifecycle.vendor_surface", "subject_type": "capability", "subject_id": "claude.session_history_lifecycle", "classification": "vendor_surface", "assertion": "List and inspect sessions, messages and subagents; resume, continue, rename, tag, fork, clear and delete through CLI or SDK SessionStore.", "source_refs": [ "claude-sdk", "pairling-claude", "pairling-daemon", "pairling-operations", "pairling-claude-sdk-control", "pairling-claude-sdk-tests" ] }, { "claim_id": "cline.connectors_schedules.pairling_support", "subject_type": "capability", "subject_id": "cline.connectors_schedules", "classification": "pairling_support", "assertion": "No connector integration; unrestricted execution must stay absent.", "source_refs": [ "cline-connectors" ] }, { "claim_id": "cline.connectors_schedules.vendor_surface", "subject_type": "capability", "subject_id": "cline.connectors_schedules", "classification": "vendor_surface", "assertion": "Telegram, Slack, Discord, Google Chat, WhatsApp and Linear connectors and scheduled agents can execute host tasks; unrestricted defaults are unsafe.", "source_refs": [ "cline-connectors" ] }, { "claim_id": "cline.hub_workers.pairling_support", "subject_type": "capability", "subject_id": "cline.hub_workers", "classification": "pairling_support", "assertion": "No Cline hub.", "source_refs": [ "cline-hub" ] }, { "claim_id": "cline.hub_workers.vendor_surface", "subject_type": "capability", "subject_id": "cline.hub_workers", "classification": "vendor_surface", "assertion": "Persistent local hub, detachable workers and multi-client SDK sessions. The cited architecture does not establish authentication.", "source_refs": [ "cline-hub" ] }, { "claim_id": "cline.json_acp_session.pairling_support", "subject_type": "capability", "subject_id": "cline.json_acp_session", "classification": "pairling_support", "assertion": "The exact 3.0.49 managed ACP profile implements session.prompt.send, conditional session.turn.interrupt, safe session.permissions.set, correlated session.approval.decide and correlated ACP session.question.answer. session.resume and provider.usage.read are not exposed.", "source_refs": [ "cline-cli", "cline-release", "acp-v1", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "cline.json_acp_session.vendor_surface", "subject_type": "capability", "subject_id": "cline.json_acp_session", "classification": "vendor_surface", "assertion": "Run JSONL or ACP sessions with structured messages, tools, permissions, usage and lifecycle.", "source_refs": [ "cline-cli", "cline-release", "acp-v1", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "codex.approval_policy.pairling_support", "subject_type": "capability", "subject_id": "codex.approval_policy", "classification": "pairling_support", "assertion": "The app-server driver implements session.approval.decide for correlated command and file-change approvals and session.question.answer for correlated user-input requests. It does not expose session.permissions.set or the broader permission, MCP, dynamic-tool and guardian policy surface.", "source_refs": [ "codex-item-src", "codex-thread-src", "pairling-daemon", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.approval_policy.vendor_surface", "subject_type": "capability", "subject_id": "codex.approval_policy", "classification": "vendor_surface", "assertion": "Discover/configure approval and sandbox policy and answer command, file, permissions, user-input, MCP elicitation, dynamic-tool and guardian-review requests with request-scoped decisions.", "source_refs": [ "codex-item-src", "codex-thread-src", "pairling-daemon", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.auth_transport_remote_control.pairling_support", "subject_type": "capability", "subject_id": "codex.auth_transport_remote_control", "classification": "pairling_support", "assertion": "The app-server driver implements redacted provider.auth.read account status. Login/logout, trusted-host token refresh, WebSocket authentication and official Remote Control pairing/client management are not exposed.", "source_refs": [ "codex-auth-src", "codex-rc-src", "codex-remote", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.auth_transport_remote_control.vendor_surface", "subject_type": "capability", "subject_id": "codex.auth_transport_remote_control", "classification": "vendor_surface", "assertion": "Read account state, start/cancel login, logout, refresh trusted-host tokens, authenticate experimental WebSocket, and manage official Remote Control pairing/clients. The relay wire is not public.", "source_refs": [ "codex-auth-src", "codex-rc-src", "codex-remote", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.external_import_cloud_mcp_server.pairling_support", "subject_type": "capability", "subject_id": "codex.external_import_cloud_mcp_server", "classification": "pairling_support", "assertion": "Pairling has no external-agent import, Codex MCP-server adapter or cloud-task operation.", "source_refs": [ "codex-cli", "codex-app-server" ] }, { "claim_id": "codex.external_import_cloud_mcp_server.vendor_surface", "subject_type": "capability", "subject_id": "codex.external_import_cloud_mcp_server", "classification": "vendor_surface", "assertion": "Detect and import external agent configuration/history, expose the separate two-tool Codex MCP server, and operate experimental cloud task exec/list/status/diff/apply. These provider-only powers are not part of the app-server common session surface.", "source_refs": [ "codex-cli", "codex-app-server" ] }, { "claim_id": "codex.files_exec_events_usage.pairling_support", "subject_type": "capability", "subject_id": "codex.files_exec_events_usage", "classification": "pairling_support", "assertion": "The app-server driver implements session.terminate, provider.usage.read and provider.diagnostics.read and normalizes reviewed lifecycle/item events. The row’s scoped file/watch/search/diff and reduced exec surfaces are not exposed.", "source_refs": [ "codex-item-src", "codex-turn-src", "pairling-codex", "pairling-daemon", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.files_exec_events_usage.vendor_surface", "subject_type": "capability", "subject_id": "codex.files_exec_events_usage", "classification": "vendor_surface", "assertion": "Read/watch scoped files, search, receive file patches/terminal deltas/lifecycle/item events and usage, and consume reduced exec JSONL. Generic FS mutation, unsandboxed shell/process/raw events and feedback upload are excluded.", "source_refs": [ "codex-item-src", "codex-turn-src", "pairling-codex", "pairling-daemon", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.models_config_integrations.pairling_support", "subject_type": "capability", "subject_id": "codex.models_config_integrations", "classification": "pairling_support", "assertion": "The app-server driver implements provider.config.read, provider.mcp.read and negotiated session.collaboration_mode.set. It does not expose session.model.set, session.reasoning.set, provider.commands.read, provider.mcp.reload or broader config/integration mutation.", "source_refs": [ "codex-config", "codex-app-server", "codex-item-src", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.models_config_integrations.vendor_surface", "subject_type": "capability", "subject_id": "codex.models_config_integrations", "classification": "vendor_surface", "assertion": "Discover/select model, provider, tier, effort, summary, personality and collaboration mode; read/write config; inspect skills/hooks/MCP/apps/plugins/dynamic tools. Plugin and marketplace mutation remains under development.", "source_refs": [ "codex-config", "codex-app-server", "codex-item-src", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.release_auth_status.pairling_support", "subject_type": "capability", "subject_id": "codex.release_auth_status", "classification": "pairling_support", "assertion": "The reviewed app-server driver implements redacted provider.auth.read account status.", "source_refs": [ "codex-auth-src", "codex-rc-src", "codex-remote", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.release_auth_status.vendor_surface", "subject_type": "capability", "subject_id": "codex.release_auth_status", "classification": "vendor_surface", "assertion": "Read redacted Codex account status without exposing login, logout, credentials, trusted-host tokens or Remote Control pairing.", "source_refs": [ "codex-auth-src", "codex-rc-src", "codex-remote", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.release_lifecycle_usage_diagnostics.pairling_support", "subject_type": "capability", "subject_id": "codex.release_lifecycle_usage_diagnostics", "classification": "pairling_support", "assertion": "The reviewed app-server driver implements owned session.terminate plus bounded provider.usage.read and provider.diagnostics.read.", "source_refs": [ "codex-item-src", "codex-turn-src", "pairling-codex", "pairling-daemon", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.release_lifecycle_usage_diagnostics.vendor_surface", "subject_type": "capability", "subject_id": "codex.release_lifecycle_usage_diagnostics", "classification": "vendor_surface", "assertion": "Terminate an owned Codex thread and read redacted usage and driver diagnostics through the exact reviewed app-server driver.", "source_refs": [ "codex-item-src", "codex-turn-src", "pairling-codex", "pairling-daemon", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.session.lifecycle_discovery.pairling_support", "subject_type": "capability", "subject_id": "codex.session.lifecycle_discovery", "classification": "pairling_support", "assertion": "The reviewed 0.147.0 app-server driver implements session.resume and session.fork for exact driver-owned thread targets. It also starts, lists and reads owned threads internally, but does not expose the row’s search, paging, restore, delete, subscription or metadata controls.", "source_refs": [ "codex-app-server", "codex-thread-src", "pairling-codex", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.session.lifecycle_discovery.vendor_surface", "subject_type": "capability", "subject_id": "codex.session.lifecycle_discovery", "classification": "vendor_surface", "assertion": "Initialize; start, resume, fork, list, read, search and page threads; set names/goals/metadata; archive, restore, delete and subscribe to status. Search/page methods and several fields require experimentalApi.", "source_refs": [ "codex-app-server", "codex-thread-src", "pairling-codex", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.subagents_plan_review_context.pairling_support", "subject_type": "capability", "subject_id": "codex.subagents_plan_review_context", "classification": "pairling_support", "assertion": "The app-server driver implements session.review.start, session.compact and session.fork. It does not expose session.plan.start, direct subagent control, memory reset, inject_items or rollback.", "source_refs": [ "codex-item-src", "codex-thread-src", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.subagents_plan_review_context.vendor_surface", "subject_type": "capability", "subject_id": "codex.subagents_plan_review_context", "classification": "vendor_surface", "assertion": "Observe collab/subagent activity without direct spawn control; stream plans; start reviews; compact context and fork at a turn. Memory reset is experimental; inject_items and rollback are unsafe.", "source_refs": [ "codex-item-src", "codex-thread-src", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.turn.input_steer_interrupt.pairling_support", "subject_type": "capability", "subject_id": "codex.turn.input_steer_interrupt", "classification": "pairling_support", "assertion": "The app-server driver executes session.prompt.send, session.turn.steer and session.turn.interrupt with exact owned thread/active-turn correlation. Prompt and steer are text-only; image, audio, skill and mention inputs are not exposed.", "source_refs": [ "codex-turn-src", "pairling-daemon", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "codex.turn.input_steer_interrupt.vendor_surface", "subject_type": "capability", "subject_id": "codex.turn.input_steer_interrupt", "classification": "vendor_surface", "assertion": "Start a turn with typed text/image/audio/skill/mention input, steer only the expected active turn, and interrupt. Experimental realtime voice is recorded but excluded.", "source_refs": [ "codex-turn-src", "pairling-daemon", "pairling-operations", "pairling-codex-control", "pairling-codex-control-tests" ] }, { "claim_id": "copilot.acp_remote_auth_cloud.pairling_support", "subject_type": "capability", "subject_id": "copilot.acp_remote_auth_cloud", "classification": "pairling_support", "assertion": "The stable SDK driver intentionally exposes no provider.auth.read, ACP, GitHub Remote Control or cloud delegation operation. Authentication is only a launch/visibility canary.", "source_refs": [ "copilot-acp", "copilot-remote", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "claim_id": "copilot.acp_remote_auth_cloud.vendor_surface", "subject_type": "capability", "subject_id": "copilot.acp_remote_auth_cloud", "classification": "vendor_surface", "assertion": "Use preview ACP stdio/TCP, GitHub Remote Control and account/auth; invoke negotiated commands. Cloud delegation, gist, update and private internals are excluded.", "source_refs": [ "copilot-acp", "copilot-remote", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "claim_id": "copilot.events_usage_attachments.pairling_support", "subject_type": "capability", "subject_id": "copilot.events_usage_attachments", "classification": "pairling_support", "assertion": "The SDK driver implements provider.usage.read and provider.diagnostics.read and consumes typed sidecar events. Full event normalization, attachment handling, logs and OTel controls described by the row are not exposed.", "source_refs": [ "copilot-events", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "claim_id": "copilot.events_usage_attachments.vendor_surface", "subject_type": "capability", "subject_id": "copilot.events_usage_attachments", "classification": "vendor_surface", "assertion": "Receive typed message, reasoning, model, tool, subagent, hook, permission, MCP, command, file, handoff, usage and context events; attach file, directory, selection or blob; inspect logs, diagnostics and OTel.", "source_refs": [ "copilot-events", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "claim_id": "copilot.models_integrations_context.pairling_support", "subject_type": "capability", "subject_id": "copilot.models_integrations_context", "classification": "pairling_support", "assertion": "The SDK driver implements session.model.set and provider.mcp.read. Reasoning, compact, rewind, command catalogs, MCP reload and the broader tools/hooks/agents/context/schedule/fleet surface are absent.", "source_refs": [ "copilot-events", "copilot-cli", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "claim_id": "copilot.models_integrations_context.vendor_surface", "subject_type": "capability", "subject_id": "copilot.models_integrations_context", "classification": "vendor_surface", "assertion": "Set model/reasoning; configure MCP, tools, hooks, agents and skills; observe subagents, tasks, plan, context and compaction; use Chronicle, memory, rewind, schedules, fleet or autopilot.", "source_refs": [ "copilot-events", "copilot-cli", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "claim_id": "copilot.permissions_handlers.pairling_support", "subject_type": "capability", "subject_id": "copilot.permissions_handlers", "classification": "pairling_support", "assertion": "The SDK driver implements correlated session.approval.decide with once, session and deny choices when advertised. session.permissions.set, session.plan.start and the broader handler/input/auto-mode surface are not exposed.", "source_refs": [ "copilot-cli", "copilot-events", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "claim_id": "copilot.permissions_handlers.vendor_surface", "subject_type": "capability", "subject_id": "copilot.permissions_handlers", "classification": "vendor_surface", "assertion": "Apply tool/path/URL allow/deny and answer shell, write, MCP, read, URL, custom-tool, memory or hook permissions once, always, deny or abort; handle user input, elicitation, exit-plan and auto-mode.", "source_refs": [ "copilot-cli", "copilot-events", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "claim_id": "copilot.prompt_queue_abort.pairling_support", "subject_type": "capability", "subject_id": "copilot.prompt_queue_abort", "classification": "pairling_support", "assertion": "The stable SDK driver implements session.prompt.send, session.turn.steer and session.turn.interrupt. Queue inspection/removal/clear and the full remote-steerable/schedule/lifecycle event surface are not exposed.", "source_refs": [ "copilot-steering", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "claim_id": "copilot.prompt_queue_abort.vendor_surface", "subject_type": "capability", "subject_id": "copilot.prompt_queue_abort", "classification": "vendor_surface", "assertion": "Send prompts, enqueue or immediately steer, inspect/remove/clear queue, abort and receive remote-steerable, idle, error, title or schedule events.", "source_refs": [ "copilot-steering", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-tests" ] }, { "claim_id": "copilot.sdk_session_lifecycle.pairling_support", "subject_type": "capability", "subject_id": "copilot.sdk_session_lifecycle", "classification": "pairling_support", "assertion": "The stable SDK driver and sidecar pin official SDK 1.0.8 protocol v3 with CLI/package 1.0.78, and implement session.resume only for exact discovered, owned targets after identity, binding, generation, workspace, auth and protocol canaries. Create/list/delete/foreground/background/start/stop and the full state/message lifecycle surface are not exposed as operations in this row.", "source_refs": [ "copilot-events", "copilot-cli", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-install-tests", "pairling-copilot-tests" ] }, { "claim_id": "copilot.sdk_session_lifecycle.vendor_surface", "subject_type": "capability", "subject_id": "copilot.sdk_session_lifecycle", "classification": "vendor_surface", "assertion": "Create, resume, list, delete, foreground, background, start or stop sessions; inspect state, version, auth, models, capabilities, messages and lifecycle.", "source_refs": [ "copilot-events", "copilot-cli", "pairling-operations", "pairling-copilot-control", "pairling-copilot-sidecar", "pairling-copilot-packages", "pairling-copilot-install-tests", "pairling-copilot-tests" ] }, { "claim_id": "droid.notifications_permissions_questions.pairling_support", "subject_type": "capability", "subject_id": "droid.notifications_permissions_questions", "classification": "pairling_support", "assertion": "The JSON-RPC driver implements correlated session.approval.decide and session.question.answer callbacks, bounded normalized notifications, and provider.diagnostics.read. Focused tests prove permission and multi-question response round trips, exact question preservation, single-use request correlation, stale replay rejection, and modified or incomplete questionnaire rejection.", "source_refs": [ "droid-client-src", "droid-transport-src", "pairling-operations", "pairling-droid-control", "pairling-droid-tests" ] }, { "claim_id": "droid.notifications_permissions_questions.vendor_surface", "subject_type": "capability", "subject_id": "droid.notifications_permissions_questions", "classification": "vendor_surface", "assertion": "Receive typed session notifications and reverse callbacks for permission decisions and ask-user questions. Callback responses must remain correlated to the exact session and request; arbitrary callback or method dispatch is excluded.", "source_refs": [ "droid-client-src", "droid-transport-src", "pairling-operations", "pairling-droid-control", "pairling-droid-tests" ] }, { "claim_id": "droid.session_lifecycle_input.pairling_support", "subject_type": "capability", "subject_id": "droid.session_lifecycle_input", "classification": "pairling_support", "assertion": "The pinned JSON-RPC driver implements session.prompt.send, session.turn.interrupt, session.resume, session.fork and session.compact with exact owned session/target correlation. It also implements steer/terminate internally, but focused tests do not execute every mapped lifecycle cell and the separate droid exec path is not exposed as this row.", "source_refs": [ "droid-client-src", "droid-transport-src", "droid-constants-src", "droid-exec", "pairling-operations", "pairling-droid-control", "pairling-droid-tests" ] }, { "claim_id": "droid.session_lifecycle_input.vendor_surface", "subject_type": "capability", "subject_id": "droid.session_lifecycle_input", "classification": "vendor_surface", "assertion": "Initialize the JSON-RPC connection, load a session, add or queue a user message, interrupt, close, fork and compact. droid exec supplies a separate bounded noninteractive execution path.", "source_refs": [ "droid-client-src", "droid-transport-src", "droid-constants-src", "droid-exec", "pairling-operations", "pairling-droid-control", "pairling-droid-tests" ] }, { "claim_id": "droid.settings_catalogs_context.pairling_support", "subject_type": "capability", "subject_id": "droid.settings_catalogs_context", "classification": "pairling_support", "assertion": "The JSON-RPC driver implements session.model.set, session.reasoning.set, session.permissions.set, provider.config.read, provider.commands.read and provider.mcp.read with typed allowlists and sanitized results. Focused tests do not execute every mapped catalog/settings cell.", "source_refs": [ "droid-client-src", "droid-constants-src", "pairling-operations", "pairling-droid-control", "pairling-droid-tests" ] }, { "claim_id": "droid.settings_catalogs_context.vendor_surface", "subject_type": "capability", "subject_id": "droid.settings_catalogs_context", "classification": "vendor_surface", "assertion": "Update session settings and list tools, MCP servers, MCP tools, commands, context statistics and context breakdown through typed JSON-RPC methods. Settings can alter model, permissions or execution behavior and therefore are not uniformly safe writes.", "source_refs": [ "droid-client-src", "droid-constants-src", "pairling-operations", "pairling-droid-control", "pairling-droid-tests" ] }, { "claim_id": "gemini.approval_policy_sandbox.pairling_support", "subject_type": "capability", "subject_id": "gemini.approval_policy_sandbox", "classification": "pairling_support", "assertion": "The managed Gemini ACP profile implements safe session.permissions.set, correlated session.approval.decide and correlated ACP session.question.answer under fixed default approval, sandbox, trust and deny policy. session.plan.start and remote policy/trust/scope mutation are absent.", "source_refs": [ "gemini-policy", "gemini-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "gemini.approval_policy_sandbox.vendor_surface", "subject_type": "capability", "subject_id": "gemini.approval_policy_sandbox", "classification": "vendor_surface", "assertion": "Select default, auto-edit, plan or yolo; broker ACP permission; apply TOML policies; manage folder trust, sandbox, scope expansion and Conseca checker.", "source_refs": [ "gemini-policy", "gemini-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "gemini.memory_checkpoint_files.pairling_support", "subject_type": "capability", "subject_id": "gemini.memory_checkpoint_files", "classification": "pairling_support", "assertion": "The managed Gemini ACP driver exposes none of session.compact, session.rewind or session.terminate and does not expose reverse FS, shell or checkpoint mutation.", "source_refs": [ "gemini-checkpoints", "gemini-tools", "gemini-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "gemini.memory_checkpoint_files.vendor_surface", "subject_type": "capability", "subject_id": "gemini.memory_checkpoint_files", "classification": "vendor_surface", "assertion": "Read hierarchical memory; approve experimental auto-memory; compact; checkpoint/restore/rewind chat or AI edits; run scoped file tools, ACP FS proxy, diff events and shell. Rewind excludes manual/shell changes.", "source_refs": [ "gemini-checkpoints", "gemini-tools", "gemini-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "gemini.models_generation.pairling_support", "subject_type": "capability", "subject_id": "gemini.models_generation", "classification": "pairling_support", "assertion": "The managed ACP driver implements negotiated session.model.set. session.reasoning.set, thinking/generation configuration, plan routing and max-turn control are not exposed.", "source_refs": [ "gemini-acp", "gemini-release", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "gemini.models_generation.vendor_surface", "subject_type": "capability", "subject_id": "gemini.models_generation", "classification": "vendor_surface", "assertion": "Discover or set account-dependent model, generation/thinking config, plan routing and max turns; local Gemma is local-only.", "source_refs": [ "gemini-acp", "gemini-release", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "gemini.output_usage_auth.pairling_support", "subject_type": "capability", "subject_id": "gemini.output_usage_auth", "classification": "pairling_support", "assertion": "The managed Gemini ACP driver intentionally advertises no provider-wide usage, diagnostics or auth operation. ACP turn output is consumed internally but not exposed as these provider reads.", "source_refs": [ "gemini-headless", "gemini-acp", "gemini-migration", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "gemini.output_usage_auth.vendor_surface", "subject_type": "capability", "subject_id": "gemini.output_usage_auth", "classification": "vendor_surface", "assertion": "Consume headless JSON/stream-json and ACP chunks/tool events/quota metadata; inspect exit codes, telemetry, usage consent and diagnostics; authenticate through Google, API key, Vertex, enterprise or gateway.", "source_refs": [ "gemini-headless", "gemini-acp", "gemini-migration", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "gemini.release_prompt_cancel.pairling_support", "subject_type": "capability", "subject_id": "gemini.release_prompt_cancel", "classification": "pairling_support", "assertion": "The reviewed managed ACP driver implements session.prompt.send and live-capability-gated session.turn.interrupt.", "source_refs": [ "gemini-sessions", "gemini-acp", "gemini-headless", "pairling-recognized", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "gemini.release_prompt_cancel.vendor_surface", "subject_type": "capability", "subject_id": "gemini.release_prompt_cancel", "classification": "vendor_surface", "assertion": "Send negotiated text, image, audio or embedded-context input and conditionally cancel the exact managed Gemini ACP session.", "source_refs": [ "gemini-sessions", "gemini-acp", "gemini-headless", "pairling-recognized", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "gemini.session_prompt_cancel.pairling_support", "subject_type": "capability", "subject_id": "gemini.session_prompt_cancel", "classification": "pairling_support", "assertion": "The exact 0.53.1 managed ACP profile implements session.prompt.send and conditional session.turn.interrupt with text/image/audio/context negotiation. session.resume and list/delete/retention/worktree lifecycle controls are not exposed.", "source_refs": [ "gemini-sessions", "gemini-acp", "gemini-headless", "pairling-recognized", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "gemini.session_prompt_cancel.vendor_surface", "subject_type": "capability", "subject_id": "gemini.session_prompt_cancel", "classification": "vendor_surface", "assertion": "List, create, load, resume, persist, delete, retain or worktree sessions; submit headless or ACP text/image/audio/context; attach files; cancel. ACP lacks list/delete and PDF declaration; TUI model steering is experimental and not ACP.", "source_refs": [ "gemini-sessions", "gemini-acp", "gemini-headless", "pairling-recognized", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "gemini.tools_mcp_extensions_agents.pairling_support", "subject_type": "capability", "subject_id": "gemini.tools_mcp_extensions_agents", "classification": "pairling_support", "assertion": "The managed Gemini ACP profile intentionally disables transport MCP and agents and exposes none of provider.commands.read, provider.mcp.read, provider.mcp.reload or session.plan.start.", "source_refs": [ "gemini-tools", "gemini-mcp", "gemini-release", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "gemini.tools_mcp_extensions_agents.vendor_surface", "subject_type": "capability", "subject_id": "gemini.tools_mcp_extensions_agents", "classification": "vendor_surface", "assertion": "Inspect tools/task tracker; configure/use MCP; manage extensions/skills/hooks; invoke local or remote A2A agents; enter or exit plan. ACP has no admin/task/subagent lifecycle.", "source_refs": [ "gemini-tools", "gemini-mcp", "gemini-release", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "goose.acp_session.pairling_support", "subject_type": "capability", "subject_id": "goose.acp_session", "classification": "pairling_support", "assertion": "No Goose provider.", "source_refs": [ "goose-acp", "acp-v1" ] }, { "claim_id": "goose.acp_session.vendor_surface", "subject_type": "capability", "subject_id": "goose.acp_session", "classification": "vendor_surface", "assertion": "Use experimental ACP for new, load, prompt, cancel, update, permission, MCP and common configuration.", "source_refs": [ "goose-acp", "acp-v1" ] }, { "claim_id": "goose.serve_auth.pairling_support", "subject_type": "capability", "subject_id": "goose.serve_auth", "classification": "pairling_support", "assertion": "No Goose server/auth.", "source_refs": [ "goose-cli" ] }, { "claim_id": "goose.serve_auth.vendor_surface", "subject_type": "capability", "subject_id": "goose.serve_auth", "classification": "vendor_surface", "assertion": "Serve with a secret, X-Secret-Key or WebSocket token and origin checks; dangerously-unauthenticated exists.", "source_refs": [ "goose-cli" ] }, { "claim_id": "goose.sessions_diagnostics.pairling_support", "subject_type": "capability", "subject_id": "goose.sessions_diagnostics", "classification": "pairling_support", "assertion": "No Goose reads.", "source_refs": [ "goose-cli" ] }, { "claim_id": "goose.sessions_diagnostics.vendor_surface", "subject_type": "capability", "subject_id": "goose.sessions_diagnostics", "classification": "vendor_surface", "assertion": "List, resume, fork, edit or inspect history; export JSON and diagnostics.", "source_refs": [ "goose-cli" ] }, { "claim_id": "grok.context_events_usage_auth.pairling_support", "subject_type": "capability", "subject_id": "grok.context_events_usage_auth", "classification": "pairling_support", "assertion": "The managed ACP driver exposes none of compact, rewind, fork or provider-wide usage, diagnostics and auth reads. Native context/event overlays remain unimplemented.", "source_refs": [ "grok-output", "grok-headless", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "grok.context_events_usage_auth.vendor_surface", "subject_type": "capability", "subject_id": "grok.context_events_usage_auth", "classification": "vendor_surface", "assertion": "Compact, rewind, fork, attach and diff; consume ACP or native streaming events and usage; inspect diagnostics/auth. Raw fs/git/worktree, credentials, debug, reverse terminal and hidden share are excluded.", "source_refs": [ "grok-output", "grok-headless", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "grok.models_integrations_agents.pairling_support", "subject_type": "capability", "subject_id": "grok.models_integrations_agents", "classification": "pairling_support", "assertion": "The managed ACP driver can expose negotiated session.model.set. Reasoning, commands, MCP reads/reload, plugins, marketplaces and subagent controls are not exposed.", "source_refs": [ "grok-cli", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "grok.models_integrations_agents.vendor_surface", "subject_type": "capability", "subject_id": "grok.models_integrations_agents", "classification": "vendor_surface", "assertion": "Discover or set model, effort and mode; inspect config/tools; manage MCP/plugins/marketplaces; observe or stop subagents/background tasks.", "source_refs": [ "grok-cli", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "grok.permissions_sandbox_plan.pairling_support", "subject_type": "capability", "subject_id": "grok.permissions_sandbox_plan", "classification": "pairling_support", "assertion": "The managed ACP profile implements safe session.permissions.set, correlated session.approval.decide and correlated ACP session.question.answer under workspace sandbox and deny rules. session.plan.start and native plan-exit controls are absent.", "source_refs": [ "grok-permissions", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "grok.permissions_sandbox_plan.vendor_surface", "subject_type": "capability", "subject_id": "grok.permissions_sandbox_plan", "classification": "vendor_surface", "assertion": "Select permission/sandbox, allow/deny, answer ACP approvals/structured questions and approve, cancel or abandon plan exit. Yolo/bypass/off are unsafe; macOS network block is a no-op.", "source_refs": [ "grok-permissions", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "grok.queue_interject.pairling_support", "subject_type": "capability", "subject_id": "grok.queue_interject", "classification": "pairling_support", "assertion": "Pairling implements conditional session.turn.interrupt through ACP. session.turn.steer and native queue inspect/remove/reorder/edit/hold/release/interject controls are not exposed.", "source_refs": [ "grok-queue", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "grok.queue_interject.vendor_surface", "subject_type": "capability", "subject_id": "grok.queue_interject", "classification": "vendor_surface", "assertion": "Queue input, cancel-and-send, and remove, reorder, clear, edit, hold, release or interject with queue-changed events. This is not token injection.", "source_refs": [ "grok-queue", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "grok.release_model_selection.pairling_support", "subject_type": "capability", "subject_id": "grok.release_model_selection", "classification": "pairling_support", "assertion": "The reviewed managed ACP driver implements negotiated session.model.set.", "source_refs": [ "grok-cli", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "grok.release_model_selection.vendor_surface", "subject_type": "capability", "subject_id": "grok.release_model_selection", "classification": "vendor_surface", "assertion": "Select a model from the live negotiated ACP model configuration for the exact managed Grok Build session.", "source_refs": [ "grok-cli", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "grok.release_permissions_approval_questions.pairling_support", "subject_type": "capability", "subject_id": "grok.release_permissions_approval_questions", "classification": "pairling_support", "assertion": "The reviewed managed ACP driver implements safe session.permissions.set, correlated session.approval.decide and correlated session.question.answer under workspace sandbox and deny rules.", "source_refs": [ "grok-permissions", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "grok.release_permissions_approval_questions.vendor_surface", "subject_type": "capability", "subject_id": "grok.release_permissions_approval_questions", "classification": "vendor_surface", "assertion": "Select only live safe Grok permission modes, answer exactly correlated ACP permission requests and answer exactly correlated structured questions.", "source_refs": [ "grok-permissions", "grok-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "grok.session_headless_acp.pairling_support", "subject_type": "capability", "subject_id": "grok.session_headless_acp", "classification": "pairling_support", "assertion": "The exact stable managed ACP profile implements session.prompt.send and conditional session.turn.interrupt. session.resume, session.fork and headless list/search/delete/export are not exposed.", "source_refs": [ "grok-cli", "grok-headless", "grok-acp", "pairling-recognized", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "grok.session_headless_acp.vendor_surface", "subject_type": "capability", "subject_id": "grok.session_headless_acp", "classification": "vendor_surface", "assertion": "Create, resume, continue, fork, list, search, delete or export sessions; prompt/cancel through ACP; consume plain, JSON or streaming outputs.", "source_refs": [ "grok-cli", "grok-headless", "grok-acp", "pairling-recognized", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "hermes.agents_context_checkpoints.pairling_support", "subject_type": "capability", "subject_id": "hermes.agents_context_checkpoints", "classification": "pairling_support", "assertion": "The owned Runs driver exposes none of session.plan.start, session.compact or session.rewind. Child delegation, memory writes and shadow-git checkpoints remain outside Pairling control.", "source_refs": [ "hermes-root", "hermes-acp", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "hermes.agents_context_checkpoints.vendor_surface", "subject_type": "capability", "subject_id": "hermes.agents_context_checkpoints", "classification": "vendor_surface", "assertion": "Observe, delegate or interrupt children; manage plans; approve memory writes; compress in place; create shadow-git checkpoints and roll back.", "source_refs": [ "hermes-root", "hermes-acp", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "hermes.approvals_sandbox.pairling_support", "subject_type": "capability", "subject_id": "hermes.approvals_sandbox", "classification": "pairling_support", "assertion": "The Runs driver implements correlated session.approval.decide under a fixed manual, no-yolo policy. session.permissions.set and sandbox/backend selection are not exposed.", "source_refs": [ "hermes-security", "hermes-acp", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "hermes.approvals_sandbox.vendor_surface", "subject_type": "capability", "subject_id": "hermes.approvals_sandbox", "classification": "vendor_surface", "assertion": "Choose smart/manual/off, decide once/session/always/deny, set ACP edit mode and local/container/SSH/cloud sandbox. The hardline blocklist cannot be overridden.", "source_refs": [ "hermes-security", "hermes-acp", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "hermes.events_files_usage.pairling_support", "subject_type": "capability", "subject_id": "hermes.events_files_usage", "classification": "pairling_support", "assertion": "The Runs driver implements provider.usage.read and provider.diagnostics.read and consumes bounded SSE run events. Files, diffs, attachments and the full event/status/context surface are not exposed.", "source_refs": [ "hermes-integration", "hermes-acp", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "hermes.events_files_usage.vendor_surface", "subject_type": "capability", "subject_id": "hermes.events_files_usage", "classification": "vendor_surface", "assertion": "Stream message/tool/approval/clarify/sudo/secret/subagent/run events; inspect files/diffs/attachments/status/context/usage. ACP resource links are capped at 512 KiB.", "source_refs": [ "hermes-integration", "hermes-acp", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "hermes.models_integrations.pairling_support", "subject_type": "capability", "subject_id": "hermes.models_integrations", "classification": "pairling_support", "assertion": "The Runs driver implements session.model.set from a negotiated alias catalog. Reasoning, commands, MCP status/reload, toolset/skill enablement and plugin controls are not exposed.", "source_refs": [ "hermes-root", "hermes-integration", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "hermes.models_integrations.vendor_surface", "subject_type": "capability", "subject_id": "hermes.models_integrations", "classification": "vendor_surface", "assertion": "Discover or switch provider/model/reasoning/fast/runtime; inspect toolsets/skills; enable tools; configure/reload MCP; inspect plugins. Plugins can inject tools, hooks, commands, memory and messages.", "source_refs": [ "hermes-root", "hermes-integration", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "hermes.release_diagnostics.pairling_support", "subject_type": "capability", "subject_id": "hermes.release_diagnostics", "classification": "pairling_support", "assertion": "The reviewed owned Hermes Runs driver implements provider.diagnostics.read without exposing auth or terminal control.", "source_refs": [ "hermes-root", "hermes-security", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "hermes.release_diagnostics.vendor_surface", "subject_type": "capability", "subject_id": "hermes.release_diagnostics", "classification": "vendor_surface", "assertion": "Read bounded health and capability diagnostics from the exact owned Hermes Runs loopback service.", "source_refs": [ "hermes-root", "hermes-security", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "hermes.remote_auth_terminal.pairling_support", "subject_type": "capability", "subject_id": "hermes.remote_auth_terminal", "classification": "pairling_support", "assertion": "The owned loopback Runs driver implements provider.diagnostics.read. session.terminate, provider.auth.read and scoped terminal process control are not exposed.", "source_refs": [ "hermes-root", "hermes-security", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "hermes.remote_auth_terminal.vendor_surface", "subject_type": "capability", "subject_id": "hermes.remote_auth_terminal", "classification": "vendor_surface", "assertion": "Serve loopback WebSocket JSON-RPC, isolate profiles, inspect health/auth and operate scoped terminal processes. API bearer/session keys differ from serve/TUI/ACP.", "source_refs": [ "hermes-root", "hermes-security", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "hermes.session_input_control.pairling_support", "subject_type": "capability", "subject_id": "hermes.session_input_control", "classification": "pairling_support", "assertion": "The owned authenticated Runs driver implements session.prompt.send, session.turn.interrupt, session.terminate, session.resume and session.fork with exact owned targets. Managed termination closes only the exact Pairling-owned server through the durable manager binding. session.turn.steer and search/create/list/activate/title/queue/background controls are not exposed.", "source_refs": [ "hermes-integration", "hermes-acp", "pairling-recognized", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "hermes.session_input_control.vendor_surface", "subject_type": "capability", "subject_id": "hermes.session_input_control", "classification": "vendor_surface", "assertion": "Persist, search, create, list, activate, close, resume, branch, fork or title sessions; submit, queue, steer, background and interrupt through REST/TUI/ACP. Run stop is cooperative.", "source_refs": [ "hermes-integration", "hermes-acp", "pairling-recognized", "pairling-operations", "pairling-hermes-control", "pairling-hermes-tests" ] }, { "claim_id": "kimi.approvals_modes_trust.pairling_support", "subject_type": "capability", "subject_id": "kimi.approvals_modes_trust", "classification": "pairling_support", "assertion": "The managed ACP driver implements safe session.permissions.set, correlated session.approval.decide and correlated ACP session.question.answer. session.plan.start, trust/rule/tool mutation and auto/yolo modes are not exposed.", "source_refs": [ "kimi-docs", "kimi-web", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "kimi.approvals_modes_trust.vendor_surface", "subject_type": "capability", "subject_id": "kimi.approvals_modes_trust", "classification": "vendor_surface", "assertion": "Select manual, auto, yolo or plan; read and resolve approvals; set rules/tools; trust or untrust a workspace, which loads or unloads project MCP.", "source_refs": [ "kimi-docs", "kimi-web", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "kimi.context_files_events_auth.pairling_support", "subject_type": "capability", "subject_id": "kimi.context_files_events_auth", "classification": "pairling_support", "assertion": "The managed ACP driver exposes none of compact, rewind, fork, terminate or provider-wide usage, diagnostics and auth reads. Native web/headless file and event surfaces remain outside Pairling.", "source_refs": [ "kimi-web", "kimi-snapshot", "kimi-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "kimi.context_files_events_auth.vendor_surface", "subject_type": "capability", "subject_id": "kimi.context_files_events_auth", "classification": "vendor_surface", "assertion": "Compact, undo or fork; upload/download/delete; inspect fs/git/diff/watch; consume ACP/headless/web events, usage, health and auth. Undo is conversation-only; raw PTY loopback-only; headless stream-json auto-permission is unsuitable for approvals.", "source_refs": [ "kimi-web", "kimi-snapshot", "kimi-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "kimi.models_integrations_tasks.pairling_support", "subject_type": "capability", "subject_id": "kimi.models_integrations_tasks", "classification": "pairling_support", "assertion": "The managed ACP driver can expose negotiated session.model.set. Reasoning, command/MCP catalogs, MCP reload, skills, agents and task control are not exposed.", "source_refs": [ "kimi-acp", "kimi-web", "kimi-docs", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "kimi.models_integrations_tasks.vendor_surface", "subject_type": "capability", "subject_id": "kimi.models_integrations_tasks", "classification": "vendor_surface", "assertion": "Set model/thinking/mode; list tools/MCP; restart MCP; inspect or activate skills; configure agents; observe or cancel tasks/subagents. Spawn is prompt-driven, not a direct API.", "source_refs": [ "kimi-acp", "kimi-web", "kimi-docs", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "kimi.prompt_queue_steer_abort.pairling_support", "subject_type": "capability", "subject_id": "kimi.prompt_queue_steer_abort", "classification": "pairling_support", "assertion": "The managed ACP driver implements session.prompt.send and conditional session.turn.interrupt. session.turn.steer and native prompt-ID queue/edit/abort semantics are not exposed.", "source_refs": [ "kimi-prompts", "kimi-web", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "kimi.prompt_queue_steer_abort.vendor_surface", "subject_type": "capability", "subject_id": "kimi.prompt_queue_steer_abort", "classification": "vendor_surface", "assertion": "Submit, queue, steer and abort by prompt ID. metadata, plan_mode, swarm_mode and goal_* fields are inert in the observed route; only consumed fields qualify.", "source_refs": [ "kimi-prompts", "kimi-web", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "kimi.session_snapshot.pairling_support", "subject_type": "capability", "subject_id": "kimi.session_snapshot", "classification": "pairling_support", "assertion": "The exact 0.31.1 managed ACP profile can create a driver-owned session internally but exposes neither session.resume nor session.fork and no web snapshot/search/archive surface.", "source_refs": [ "kimi-snapshot", "kimi-web", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "kimi.session_snapshot.vendor_surface", "subject_type": "capability", "subject_id": "kimi.session_snapshot", "classification": "vendor_surface", "assertion": "Discover, create, resume, read, search, fork, archive, restore or export; snapshot last 100 messages plus in-flight text/tools/subagents/pending approvals/questions with seq/epoch; cursor subscribe.", "source_refs": [ "kimi-snapshot", "kimi-web", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "omp.acp_session.pairling_support", "subject_type": "capability", "subject_id": "omp.acp_session", "classification": "pairling_support", "assertion": "The exact 17.2.8 managed ACP profile implements session.prompt.send, conditional session.turn.interrupt, negotiated session.model.set, safe session.permissions.set, correlated session.approval.decide and correlated session.question.answer. Resume, fork, reasoning, provider-wide catalogs and reverse FS/terminal are not exposed.", "source_refs": [ "omp-acp", "acp-v1", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "omp.acp_session.vendor_surface", "subject_type": "capability", "subject_id": "omp.acp_session", "classification": "vendor_surface", "assertion": "Initialize and authenticate; create, load, list, resume, close or fork; prompt/cancel; set mode/model/thinking; inject MCP; receive images/tool/diff/plan/usage; service reverse FS/terminal and permission requests.", "source_refs": [ "omp-acp", "acp-v1", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "omp.approval_plan_scope.pairling_support", "subject_type": "capability", "subject_id": "omp.approval_plan_scope", "classification": "pairling_support", "assertion": "The managed ACP profile exposes only safe per-request permission choices and keeps plan, yolo, auto-approve and scope expansion disabled. The unsafe policy behaviors described by this row remain intentionally unexposed.", "source_refs": [ "omp-approval", "omp-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "omp.approval_plan_scope.vendor_surface", "subject_type": "capability", "subject_id": "omp.approval_plan_scope", "classification": "vendor_surface", "assertion": "Configure always-ask, write or yolo and per-tool policy. ACP gates bash/edit/delete/move; generic tools use form elicitation. Plan auto-approves when the client lacks elicitation.form; additionalDirectories are ignored and /add-dir expands scope.", "source_refs": [ "omp-approval", "omp-acp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "omp.integrations_context_files.pairling_support", "subject_type": "capability", "subject_id": "omp.integrations_context_files", "classification": "pairling_support", "assertion": "The managed ACP driver can expose negotiated session.model.set. Reasoning, compact, rewind, command/MCP/usage catalogs, MCP reload, attachments and reverse FS/terminal are not exposed.", "source_refs": [ "omp-acp", "omp-rpc", "omp-mcp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "omp.integrations_context_files.vendor_surface", "subject_type": "capability", "subject_id": "omp.integrations_context_files", "classification": "vendor_surface", "assertion": "Select model/thinking/fast; configure stdio/HTTP/SSE MCP; observe internal tools/subagents; compact/read memory/checkpoint/rewind conversation state; attach files/images and bridge client FS/terminal. Checkpoints do not restore files.", "source_refs": [ "omp-acp", "omp-rpc", "omp-mcp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "omp.json_auth_extensions_collab.pairling_support", "subject_type": "capability", "subject_id": "omp.json_auth_extensions_collab", "classification": "pairling_support", "assertion": "The managed ACP driver intentionally advertises no provider-wide auth or diagnostics operation. One-shot JSONL, collaboration links, credential endpoints, browser/computer, hooks and extensions remain outside Pairling control.", "source_refs": [ "omp-release", "omp-rpc", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "omp.json_auth_extensions_collab.vendor_surface", "subject_type": "capability", "subject_id": "omp.json_auth_extensions_collab", "classification": "vendor_surface", "assertion": "Use one-shot JSONL for bounded output; inspect diagnostics/auth; use collaboration links. Browser/computer, credential endpoints, hooks and in-process extensions are local or excluded.", "source_refs": [ "omp-release", "omp-rpc", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "omp.release_model_selection.pairling_support", "subject_type": "capability", "subject_id": "omp.release_model_selection", "classification": "pairling_support", "assertion": "The reviewed managed ACP driver implements negotiated session.model.set.", "source_refs": [ "omp-acp", "omp-rpc", "omp-mcp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "omp.release_model_selection.vendor_surface", "subject_type": "capability", "subject_id": "omp.release_model_selection", "classification": "vendor_surface", "assertion": "Select a model from the live negotiated ACP model configuration for the exact managed OMP session.", "source_refs": [ "omp-acp", "omp-rpc", "omp-mcp", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "omp.rpc_rich_control.pairling_support", "subject_type": "capability", "subject_id": "omp.rpc_rich_control", "classification": "pairling_support", "assertion": "Pairling exposes prompt and conditional interrupt through the managed ACP driver, but has no executable OMP RPC v2 driver. Steering, queue, retry, compact, fork, paging, handoff and subagent RPC controls remain absent.", "source_refs": [ "omp-rpc", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "omp.rpc_rich_control.vendor_surface", "subject_type": "capability", "subject_id": "omp.rpc_rich_control", "classification": "vendor_surface", "assertion": "Negotiate RPC v2; prompt, steer, follow up, abort or abort-and-prompt; set model/thinking/fast; manage queue/interrupt; compact/retry; page/branch/handoff history; observe subagents/snapshots/transcripts. Raw RPC bash is excluded.", "source_refs": [ "omp-rpc", "pairling-operations", "pairling-acp-control", "pairling-acp-profiles", "pairling-acp-tests", "pairling-acp-profile-tests" ] }, { "claim_id": "opencode.events_usage_integrations.pairling_support", "subject_type": "capability", "subject_id": "opencode.events_usage_integrations", "classification": "pairling_support", "assertion": "The owned OpenCode driver implements provider.auth.read, provider.usage.read and provider.diagnostics.read over authenticated loopback/SSE. provider.commands.read, provider.mcp.read and provider.mcp.reload plus plugin/PTY/TUI controls are absent.", "source_refs": [ "opencode-server", "opencode-sdk", "opencode-acp", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "claim_id": "opencode.events_usage_integrations.vendor_surface", "subject_type": "capability", "subject_id": "opencode.events_usage_integrations", "classification": "vendor_surface", "assertion": "Receive SSE message/tool/session/token/cache/cost events; inspect health; manage MCP/provider auth/plugins/PTY/TUI experimental groups. Server Basic auth exists only when a password is set; no TLS is built in.", "source_refs": [ "opencode-server", "opencode-sdk", "opencode-acp", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "claim_id": "opencode.models_agents_context_vcs.pairling_support", "subject_type": "capability", "subject_id": "opencode.models_agents_context_vcs", "classification": "pairling_support", "assertion": "The owned OpenCode driver implements session.model.set and session.reasoning.set from live negotiated choices. session.compact, session.rewind and the row’s agent, file, VCS and schema-output controls are not exposed.", "source_refs": [ "opencode-sdk", "opencode-server", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "claim_id": "opencode.models_agents_context_vcs.vendor_surface", "subject_type": "capability", "subject_id": "opencode.models_agents_context_vcs", "classification": "vendor_surface", "assertion": "Select provider/model/variant/reasoning/agent; request JSON-schema output; observe child/background sessions; compact/revert; attach/search/read files/VCS/diffs and apply VCS patches.", "source_refs": [ "opencode-sdk", "opencode-server", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "claim_id": "opencode.permission_shell_safety.pairling_support", "subject_type": "capability", "subject_id": "opencode.permission_shell_safety", "classification": "pairling_support", "assertion": "The owned server installs ask/deny rules and implements correlated session.approval.decide, but does not expose session.permissions.set, persistent allow, auto/yolo aliases or direct shell routes. The unsafe row remains intentionally ineligible.", "source_refs": [ "opencode-permissions", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "claim_id": "opencode.permission_shell_safety.vendor_surface", "subject_type": "capability", "subject_id": "opencode.permission_shell_safety", "classification": "vendor_surface", "assertion": "Apply last-match ask/allow/deny and answer permission events once or always. Auto/yolo aliases and direct session shell bypass approval; no core OS sandbox exists.", "source_refs": [ "opencode-permissions", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "claim_id": "opencode.release_status_usage_auth.pairling_support", "subject_type": "capability", "subject_id": "opencode.release_status_usage_auth", "classification": "pairling_support", "assertion": "The reviewed owned OpenCode driver implements bounded provider.auth.read, provider.usage.read and provider.diagnostics.read.", "source_refs": [ "opencode-server", "opencode-sdk", "opencode-acp", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "claim_id": "opencode.release_status_usage_auth.vendor_surface", "subject_type": "capability", "subject_id": "opencode.release_status_usage_auth", "classification": "vendor_surface", "assertion": "Read redacted provider authentication, usage and diagnostics from the owned authenticated loopback OpenCode server.", "source_refs": [ "opencode-server", "opencode-sdk", "opencode-acp", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "claim_id": "opencode.session_prompt_history.pairling_support", "subject_type": "capability", "subject_id": "opencode.session_prompt_history", "classification": "pairling_support", "assertion": "The owned authenticated OpenCode driver implements session.prompt.send, session.turn.interrupt, session.resume and session.fork with exact owned targets. Session filtering/history reads, patch/archive/delete and structured question answering are not exposed as row operations.", "source_refs": [ "opencode-server", "opencode-acp-src", "pairling-recognized", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "claim_id": "opencode.session_prompt_history.vendor_surface", "subject_type": "capability", "subject_id": "opencode.session_prompt_history", "classification": "vendor_surface", "assertion": "Filter, create, patch, fork, archive or delete sessions; read messages/children/todos/diffs; prompt sync/async over SSE; abort; answer or reject structured questions. No true mid-turn steering is documented.", "source_refs": [ "opencode-server", "opencode-acp-src", "pairling-recognized", "pairling-operations", "pairling-opencode-control", "pairling-opencode-tests" ] }, { "claim_id": "openhands.control_context.pairling_support", "subject_type": "capability", "subject_id": "openhands.control_context", "classification": "pairling_support", "assertion": "The Agent Server driver implements session.turn.interrupt, session.approval.decide, session.fork and session.compact with exact owned conversation/action correlation. Navigate and file/bash action inspection are not exposed by this row.", "source_refs": [ "openhands-server", "pairling-operations", "pairling-openhands-control", "pairling-openhands-tests" ] }, { "claim_id": "openhands.control_context.vendor_surface", "subject_type": "capability", "subject_id": "openhands.control_context", "classification": "vendor_surface", "assertion": "Interrupt, confirm, fork, navigate, condense and inspect file or bash actions.", "source_refs": [ "openhands-server", "pairling-operations", "pairling-openhands-control", "pairling-openhands-tests" ] }, { "claim_id": "openhands.server_sessions_events.pairling_support", "subject_type": "capability", "subject_id": "openhands.server_sessions_events", "classification": "pairling_support", "assertion": "The owned authenticated Agent Server driver implements session.prompt.send, session.resume and provider.diagnostics.read and consumes bounded lifecycle/action events. The full REST/OpenAPI/WebSocket conversation and event surface is not exposed.", "source_refs": [ "openhands-server", "pairling-operations", "pairling-openhands-control", "pairling-openhands-tests" ] }, { "claim_id": "openhands.server_sessions_events.vendor_surface", "subject_type": "capability", "subject_id": "openhands.server_sessions_events", "classification": "vendor_surface", "assertion": "REST/OpenAPI conversations and authenticated WebSocket lifecycle, message, reasoning, action, observation and error events.", "source_refs": [ "openhands-server", "pairling-operations", "pairling-openhands-control", "pairling-openhands-tests" ] }, { "claim_id": "openhands.unattended_defaults.pairling_support", "subject_type": "capability", "subject_id": "openhands.unattended_defaults", "classification": "pairling_support", "assertion": "Unsafe defaults are absent.", "source_refs": [ "openhands-server" ] }, { "claim_id": "openhands.unattended_defaults.vendor_surface", "subject_type": "capability", "subject_id": "openhands.unattended_defaults", "classification": "vendor_surface", "assertion": "Headless always-approve and Agent Server NeverConfirm remove the human boundary.", "source_refs": [ "openhands-server" ] }, { "claim_id": "qwen.acp_events_integrations.pairling_support", "subject_type": "capability", "subject_id": "qwen.acp_events_integrations", "classification": "pairling_support", "assertion": "The SDK driver implements provider.mcp.read and normalizes Qwen SDK events. provider.commands.read and provider.diagnostics.read are absent, and no ACP transport/control surface is exposed.", "source_refs": [ "qwen-release", "acp-v1", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests" ] }, { "claim_id": "qwen.acp_events_integrations.vendor_surface", "subject_type": "capability", "subject_id": "qwen.acp_events_integrations", "classification": "vendor_surface", "assertion": "Use negotiated ACP session updates, tool calls, permissions, MCP and config while preserving Qwen SDK-specific events.", "source_refs": [ "qwen-release", "acp-v1", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests" ] }, { "claim_id": "qwen.permissions_model_checkpoint.pairling_support", "subject_type": "capability", "subject_id": "qwen.permissions_model_checkpoint", "classification": "pairling_support", "assertion": "The SDK driver implements session.permissions.set, session.approval.decide, session.model.set, session.reasoning.set and provider.usage.read with safe choices and exact approval correlation. session.rewind and checkpoint/context restoration are absent.", "source_refs": [ "qwen-approval", "qwen-checkpoint", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests" ] }, { "claim_id": "qwen.permissions_model_checkpoint.vendor_surface", "subject_type": "capability", "subject_id": "qwen.permissions_model_checkpoint", "classification": "vendor_surface", "assertion": "Select plan, default, auto-edit, auto or yolo; set model/effort; inspect context/usage; restore a shadow-Git checkpoint.", "source_refs": [ "qwen-approval", "qwen-checkpoint", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests" ] }, { "claim_id": "qwen.release_permissions_model_usage.pairling_support", "subject_type": "capability", "subject_id": "qwen.release_permissions_model_usage", "classification": "pairling_support", "assertion": "The reviewed SDK driver implements session.permissions.set, correlated session.approval.decide, session.model.set, session.reasoning.set and bounded provider.usage.read.", "source_refs": [ "qwen-approval", "qwen-checkpoint", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests" ] }, { "claim_id": "qwen.release_permissions_model_usage.vendor_surface", "subject_type": "capability", "subject_id": "qwen.release_permissions_model_usage", "classification": "vendor_surface", "assertion": "Use safe permission and approval choices, select reviewed model and reasoning values, and read bounded usage from the exact Qwen SDK session.", "source_refs": [ "qwen-approval", "qwen-checkpoint", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests" ] }, { "claim_id": "qwen.session_prompt_output.pairling_support", "subject_type": "capability", "subject_id": "qwen.session_prompt_output", "classification": "pairling_support", "assertion": "The pinned SDK driver implements session.prompt.send, session.turn.interrupt and session.resume, creates owned sessions and normalizes bounded message/usage events. ACP and headless JSON/stream-json exposure, continue semantics and stream-json input are not implemented by Pairling.", "source_refs": [ "qwen-headless", "qwen-release", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests" ] }, { "claim_id": "qwen.session_prompt_output.vendor_surface", "subject_type": "capability", "subject_id": "qwen.session_prompt_output", "classification": "vendor_surface", "assertion": "Create, continue or resume; prompt via SDK/ACP; interrupt and consume JSON/stream-json partial deltas and usage. Stream-json input is under construction.", "source_refs": [ "qwen-headless", "qwen-release", "pairling-operations", "pairling-qwen-control", "pairling-qwen-tests" ] }, { "claim_id": "roo.remote_session_protocol.pairling_support", "subject_type": "capability", "subject_id": "roo.remote_session_protocol", "classification": "pairling_support", "assertion": "No Roo provider or evidenced remote surface.", "source_refs": [ "roo-install" ] }, { "claim_id": "roo.remote_session_protocol.vendor_surface", "subject_type": "capability", "subject_id": "roo.remote_session_protocol", "classification": "vendor_surface", "assertion": "No official independent CLI, ACP, SDK server or remote session control surface was verified.", "source_refs": [ "roo-install" ] } ], "exclusions": [ { "item": "ACP v2 draft as production contract", "reason": "v2.0.0-alpha.2 is draft. Use stable v1 with provider negotiation; map v2 only for migration.", "source_refs": [ "acp-v2-draft", "acp-v1" ] }, { "item": "Consumer chat and unrelated same-name products", "reason": "Only terminal coding agents and supported machine session surfaces are in scope." }, { "item": "Undocumented cloud relays, private loopback protocols, protobufs and browser bridges", "reason": "No private protocol may be reverse engineered or treated as supported, including Anthropic or OpenAI relay internals and Antigravity private wire." }, { "item": "Raw PTY scraping as a semantic protocol", "reason": "Owned terminal text, key and signal control is a floor, not evidence for structured approvals, models, tasks, diffs or lifecycle." }, { "item": "Bypass and unattended autonomy", "reason": "Yolo, bypass, dangerously-skip, allow-all, approve-all, dontAsk, off, no-auth, skip-trust, raw-risk suppression and arbitrary shell, process or terminal controls are do_not_expose." }, { "item": "Credentials and secret configuration", "reason": "Keys, OAuth codes, tokens, keyrings, MCP or gateway headers and env, provider dumps and exporter credentials are never returned." }, { "item": "Executable integration mutation", "reason": "Plugin, marketplace, hook, custom-tool, MCP command, skill, agent or extension installation, update or removal stays local-only or excluded." }, { "item": "Cline connectors as a default receive plane", "reason": "They can execute host tasks and may be unrestricted. They remain map-only pending signed webhooks, identity allowlists and a separate threat model.", "source_refs": [ "cline-connectors" ] }, { "item": "Roo implementation candidacy", "reason": "No official independent machine CLI or session plane was verified; do not infer it from Cline or IDE behavior.", "source_refs": [ "roo-install" ] }, { "item": "Cursor Agent CLI, Pi coding agent and Kiro CLI claims", "reason": "The supplied research reports did not source-verify these providers. Canonical IDs cursor_agent, pi_coding_agent and kiro_cli are reserved elsewhere, but no version, transport or safety claim is invented here." }, { "item": "Planned or concurrent Pairling drivers", "reason": "Only support checked in before this artifact counts; concurrent implementation does not change current_pairling_support." } ] }