# TASKS

## Current

### `feat/agent-scoped-machine-auth`

Status: ready

DoD:
- AI agent can receive its own long-lived agent key from the admin UI
- operation has an explicit security level: `standard`, `elevated`, or `strict`
- machine calls to MCP can use short-lived agent tokens for elevated operations
- one-time token mode is defined for strict operations
- transition path from workspace-wide keys is explicit in docs and implementation slices

## Next

### `feat/live-authenticated-staging-entry`

Status: ready

DoD:
- authenticated staging flow runs against the real deployed environment
- operator docs match the current deploy/runtime model
- staging validation is captured without relying on local fixtures

## Completed

- `feat/websocket-test-run-polish`
- `feat/frontend-wizard-modularization`
- `feat/distributed-mcp-session-store`