Skip to content

epic: agent-tool-permission-alignment - Establish the canonical contract #1738

Open

Description

@ashleyshaw

Overview

Establish canonical contract for agent tool access and permissions across the repository. This epic tracks the specification and implementation of unified tool/permission governance.

Problem

Agent specifications are currently inconsistent in tool declarations and permissions, causing unpredictable execution behavior and weakening MCP security posture.

Related OpenSpec

This epic implements the agent-tool-permission-alignment specification.

Specification Documents:

What's Changing

  • Define canonical tool/permission contract for agent frontmatter
  • Introduce profile tiers (standard, reviewer-only, planning-only, etc.)
  • Add automated validation for all agent specs
  • Add CI enforcement before merge

Scope

Affected files: All agents/*.agent.md, plugins/**/agents/*.agent.md


Definition of Ready (DoR)

  • Epic vision and scope clearly defined
  • Success criteria and measurable outcomes documented
  • High-level tasks/stories identified
  • Dependencies and risks mapped
  • Timeline and resource estimates provided
  • Stakeholder alignment confirmed

Definition of Done (DoD)

  • All child issues/stories completed
  • Epic acceptance criteria met
  • Epic documentation and summary updated
  • Release notes and announcement prepared
  • Post-launch monitoring and support plan in place
  • Retrospective completed (if applicable)

Activity

  1. linear-code commented on Aug 11, 2026

    @linear-code
  2. github-actions commented on Aug 11, 2026

    @github-actions
    Contributor

    ✅ Template check passed after update. Thanks for fixing the issue body.

  3. github-actions commented on Aug 11, 2026

    @github-actions
    Contributor

    ⏱️ Aging and SLA annotation

    • Age: 1 day(s)
    • SLA state: Within SLA
    • Thresholds: warn at 7 days, breach at 14 days
    • Last updated: 2026-08-12T22:40:53.888Z

    Maintained by project-meta-sync workflow.

  4. self-assigned this
    on Aug 29, 2026
  5. added this to the v1.1 milestone on Aug 29, 2026
  6. github-actions commented on Sep 8, 2026

    @github-actions
    Contributor

    ⚠️ Bare Labels Detected

    This issue has labels that are not in the canonical taxonomy:

    • migrate:type:epic

    Valid Canonical Labels

    Please use labels with a prefix from the canonical taxonomy:

    • Type: type:bug, type:feature, type:task, type:documentation, etc.
    • Status: status:needs-triage, status:in-progress, status:done, etc.
    • Priority: priority:critical, priority:high, priority:normal, priority:low
    • Area: area:ci, area:docs, area:labels, area:security, etc.
    • Meta: meta:needs-changelog, meta:duplicate, meta:blocked, etc.

    For the complete list, see .github/labels.yml.

  7. changed the title [-]Agent-Tool Permission Contract — Canonical Tool/Permission Alignment[/-] [+]epic: agent-tool-permission-alignment - Establish the canonical contract[/+] on Sep 8, 2026
  8. eleshar commented on Sep 23, 2026

    @eleshar
    Contributor

    Superseded by #3466, part of epic #3464 (agents and skills aligned with the official AGENTS.md, Agent Skills, GitHub Copilot and Claude Code standards). The plan this issue belonged to has been replaced there. Reopen if it covers something #3464 and its children do not.

  9. eleshar commented on Sep 23, 2026

    @eleshar
    Contributor

    Reopening: this has its own planned deliverables that #3464 and its child issues do not cover, so it is not superseded. It stays open as related work to #3464, and should follow the standards decided there (AGENTS.md, *.agent.md frontmatter, Agent Skills SKILL.md, plugin marketplace distribution).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

Fields

Priority

None yet

Projects

No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions