Repository navigation
docs: agent surface split (ADR 0029) + sprint gates 16-17 - #410
Merged
elliotBraem merged 1 commit intoOct 15, 2026
Merged
Conversation
ADR 0029 records the three-surface model (connect UX / operating surface / model tools), the two-ledger rule, the permission layering, and the default-deny exposure principle; the durable role of #403's endpoint layer stays open for ticket 16 (ready-for-human). Ticket 17 makes MCP per-tool permission filtering a prerequisite for ticket 13. Sprint graph, ADR index (backfills 0027-0028), and GLOSSARY surface vocabulary updated.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Docs-only follow-up to the PR #403 design discussion (three surfaces, two ledgers, permissions layering).
What lands
better-near-authagentConnect, session + wallet/passkey) / Operating Surface (plugins/agents, session owner routes + grant-scoped delegated routes) / Model Tools (MCP subset, grant per client, never owner intents); the two-ledger rule (engine DB = source of truth, auth tables = binding + retry ledger + grant custody); permission layering (ADR 0028 permissions gate reachability; policy bounds capability; grants are selected, never carried; refusals name the blocking layer); default-deny exposure principle for contract-generated routes.ready-for-human) — decision ticket for the open fork: the durable role of feat(agents): agent-connect plugin — owner-controlled agent accounts on the NEAR Intents Agent API #403's endpoint layer once Stream B's vendored engine lands (keep as owner UX / supersede withplugins/agents/ split by credential). Gates tickets 08–09.ready-for-agent) — MCP per-tool permission filtering inhost/src/services/mcp.ts(today: any authenticated session/key sees the whole generated catalog, no per-tool filtering). Hard prerequisite before agents-plugin routes merge into the api shell router. Blocks ticket 13.docs/adr/README.md— index backfill (0027/0028 were missing) + 0029 row; next-free number corrected to 0030.Verification
node scripts/docs-link-check.mjspasses (49 files)