vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

log refused agent-permission changes on the controller api

Browse source
This commit is contained in:
atlas 2026-10-25 11:11:17 +01:00 • committed by mara
commit 3d142feb6a
2 changed files with 126 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

3
docs/process/conventions.md
View file

@ -308,7 +308,8 @@ writes. Set them with `swarmctl agent permissions get|set|clear <agent>`
(`permissions` in `POST /api/agents`). A missing key or an unset field means
the default (`Permission::DEFAULT`): `messaging`, `meta`, `inbox`,
`execution`, for every agent whatever its name. `"permissions": []` grants
none.
none. swarm-controller logs every refused `PUT` or `DELETE` on that route at `warn` as
`agent permissions: request refused`, with the fields `op`, `agent`, `status` and `detail`.
**How a change applies** —
- The agent's harness reads its own key every 10 seconds and builds every