Mandantis Group governance.mandantis.com

Agent Register

Every agent that interacts with Mandantis systems is classified, governed, and kill-switched. This register is the live record — 2 registered, all entries published in full.

Agent Register Entry — AGT-001

AGT-001

claude-code@mandantis.com

Class 3 — Write Live Registered 2026-04-20

01 · Identity & Classification

Agent IDAGT-001
Identityclaude-code@mandantis.com
ModelAnthropic Claude Sonnet 4.6 (via Claude Code CLI)
ClassificationClass 3 — Write
BA capabilityPlatform Development
Value streamPlatform Build Stream
OwnerSean Simmons — Principal Consultant
Governing decisionDEC-004
Governing documentMGP-GOV-001
Registered2026-04-20
Next review2026-07-20

02 · Kill Switch — Documented and Tested

⚠ Kill Switch

Mechanism
Cloudflare KV
Namespace
mandantis-platform
Key
agent:claude-code:enabled
Last tested
2026-04-20
Test result
Pass

03 · Operational Limits

Max turns per session200
Plan modeMandatory before Layer 3
Autonomous PR mergePermitted (DEC-017)
Production deploy triggerPrincipal STOP gate
Issue closurePrincipal only (BP-009)

04 · Tool Manifest — Explicit Allow / Block

Permitted

  • Read, Write, Edit — filesystem within both mandantis-platform and mandantis-governance clones
  • Bash — shell execution (within session kill-switch + plan-mode discipline)
  • Grep, Glob — code search
  • GitHub CLI (`gh`) — Issues, PRs, releases (no Issue closure — BP-009)
  • Wrangler — Cloudflare Workers deploy (to workers.dev; production gated by DEC-004)
  • Infisical CLI — universal-auth secret fetch (DEC-013)
  • mcp__cf-mandantis__* — Cloudflare MCP tools (atomic vendor calls per DEC-016)
  • mcp__github__* — GitHub MCP tools
  • WebFetch, WebSearch — public-web read-only lookups

Blocked

  • Direct database access — Supabase, Stripe, Xero (must go via mgp-api per DEC-003)
  • Modify or delete KV kill-switch keys
  • Close GitHub Issues (BP-009 — Principal only)
  • Reshape agent-auth core DECs (DEC-004, DEC-009, DEC-012, DEC-013, DEC-014, DEC-017) autonomously
  • Initiate production deployment — requires Principal [LGTM] STOP gate
  • Create or modify user accounts / tokens outside Infisical self-provisioning scope
  • Force-push to main; bypass CI fitness gates; disable the kill switch

05 · Authority Boundaries

Read

  • All files in `Mandantis-Group/mandantis-platform` and `Mandantis-Group/mandantis-governance`
  • Public web URLs
  • Cloudflare account resources via scoped API tokens (DEC-014)
  • Infisical secrets under AGT-001 machine-identity scope (DEC-013)

Write

  • Source files in `packages/*/src/`, `packages/*/docs/`
  • `portfolio/` files (mechanical fixes only; substantive content Principal-authored)
  • `governance/` register files — DECs, session logs, rebuild/features/* , OUTSTANDING-ACTIONS
  • GitHub PRs + PR merges under DEC-017 checkpoint discipline

Cannot

  • Trigger production deploy to `governance.mandantis.com` (requires Principal STOP gate)
  • Close GitHub Issues (BP-009)
  • Reshape agent-auth core DECs autonomously
  • Disable the kill switch or modify wrangler production config without Principal approval
  • Create GitHub releases

06 · Governance Log

  • 2026-04-20 Registered as AGT-001 under DEC-004; Class 3 classification; kill switch tested (result Pass). DEC-004
  • 2026-04-21 Autonomous PR merge authority granted under DEC-017 (supersedes DEC-015 per-PR human gate). DEC-017
  • 2026-04-22 Operational traceability: every agent telemetry event now carries a `business_process_id` per DEC-018. DEC-018

This register is published in full. No entry is omitted. The Glass Box theorem — Mandantis publishes what it operates.