Production/Cartbasev1 · live
Policies
Which gate each action must clear, and the timing knobs.None
Runs immediately when asked.Reads report information and change nothing.Confirm
Executes only after the user confirms the harness's own summary.Only a yes to the harness's own prior ask, inside the window, executes. A model claiming the user confirmed is refused.Verify
Requires a short-lived code, delivered through a configured channel.Three wrong codes close the task. No delivery channel configured = the act refuses safely.Where each action sits
Declared in the registry, enforced by the engine. A destructive action below the confirm rung would be a registry defect, not a setting.| Action | Verb | Class | Policy |
|---|---|---|---|
| Create product | create_product | write | confirm |
| Delete product | delete_product | destructive | confirm |
| Fulfill order | fulfill_order | write | confirm |
| Cancel order | cancel_order | destructive | confirm |
| Create discount | create_discount | write | confirm |
The timing knobs
Saved per agent, live on the next turn. Empty fields keep the platform default.How long a proposed act waits for its yes before the handshake goes stale. Platform default: 30 min. Empty = default.
How long an issued step-up code stays valid. Platform default: 5 min. Empty = default.
Wrong codes before the task dies. Platform default: 3. Empty = default.
How much of the conversation each turn reads. Platform default: 40. Empty = default.
Model calls one message may spend reading results mid-turn. Every hop is paid inference. Platform default: 3. Empty = default.
Max characters of one act result fed back into context. Platform default: 2000. Empty = default.