[WIP] feat(seer): Gate agent writes behind short-lived capability tokens#118539

Draft

gricha wants to merge 13 commits into

greg/agent-write-token-flow

Commits on Jun 29, 2026

feat(seer): Gate agent writes behind short-lived capability tokens

gricha
and
claude
committed
ref(seer): Move agent-token org binding into determine_access

gricha
and
claude
committed
ref(seer): Make the agent write challenge stateless; persist grant on approval

gricha
and
claude
committed
docs(seer): Mark stateless-challenge rework tasks complete

gricha
and
claude
committed
ref(seer): Make grant approval idempotent (refresh, not duplicate)

gricha
and
claude
committed
ref(seer): Route agent tokens by prefix, like org auth tokens

gricha
and
claude
committed
fix(seer): Renumber agent write-grant migration after rebase (0021 -> 0024)

gricha
and
claude
committed
ref(seer): Consume the generic insufficient_scope denial for agent challenge

gricha
and
claude
committed
chore(seer): Drop openspec planning artifacts from PR

gricha
and
claude
committed

Commits on Jun 30, 2026

ref(seer): Drop the challenge-token layer; approve from insufficient_scope

gricha
and
claude
committed

Commits on Jul 1, 2026