Reviewed source-contract reference. CLI 0.13.4 is released. Hosted pack contracts below are taken from Agent source 573c9a11b1b6674b163ce21273a162a4ed453282; their activation and deployed worked responses remain pending. This draft does not establish settings, shared context or intake acceptance for the existing 70 Codex and 70 Claude agents.
Outcome
Organization-owned restrictive execution ceiling; separate from installation consent, immutable packs and native enforcement.
GET /api/organization-execution-policy
Before calling
Discover the exact credential-scoped published action and intended context. Bind the authorized Agent workspace when required. Confirm the declared agents:read permission. This is a read; it does not authorize a later mutation.
Input fields
| Field | Required | Type |
|---|
Source input template
The following schema-based example is illustrative and has not been executed. Every fixture identifier/decision reference must be replaced with a genuinely discovered resource or recorded decision. Do not send it unchanged.
{}
Interpret and verify
- Validate discriminated contractVersion 1.0.0 (seven fields, allowlist only) or 1.1.0 (eight fields, explicit scopePolicyMode after fullAccessEnabled), exact organization/context, revision and matching canonical SHA256 digest.
The exact input and output schemas accompany this draft in the hidden agent layer and contract bundle. No successful/refused deployed response is supplied here; capture and validate it after the original activation/usage proof.
Effects
- Reads the authenticated organization policy; absent rows return restrictive defaults without writes.
Errors and recovery
403 organization_context_required: Use the verified intended organization; never select a foreign org.503 organization_policy_unavailable: Hold activation. Resolve Auth/database/record integrity and retry a supported read.
A failed read never authorizes native activation or a local policy substitute.
Canonical policy digest
Compute policyDigest from compact UTF-8 JSON of the canonical policy only. Sort every profile/scope/intake array using JavaScript code-unit order. For 1.0.0 the ordered keys are allowedProfiles, maximumProfile, defaultProfile, fullAccessEnabled, allowedToolScopes, allowedActionScopes, allowedIntakes. For 1.1.0 insert scopePolicyMode immediately after fullAccessEnabled. Hash these bytes with SHA-256 and prefix the lowercase hexadecimal digest with sha256:. Do not include contextKey, organizationId, revision, configured, updatedAt, updatedByUserId or decisionReference in the hashed policy.