docs: align agent auth model and fix session test

2026-05-03 10:38:12 +00:00
parent bf270336d9
commit 2d43db69c9
15 changed files with 578 additions and 61 deletions
@@ -2,6 +2,19 @@

 ## Current

+### `feat/agent-scoped-machine-auth`
+
+Status: ready
+
+DoD:
+- AI agent can receive its own long-lived agent key from the admin UI
+- operation has an explicit security level: `standard`, `elevated`, or `strict`
+- machine calls to MCP can use short-lived agent tokens for elevated operations
+- one-time token mode is defined for strict operations
+- transition path from workspace-wide keys is explicit in docs and implementation slices
+
+## Next
+
 ### `feat/live-authenticated-staging-entry`

 Status: ready