Anchorage API reference
    Preparing search index...

    Interface TrustedAgentExecution

    interface TrustedAgentExecution {
        agentId: string;
        deploymentTag?: string;
        entryPath:
            | "approval.resume"
            | "http.start"
            | "signal.message"
            | "signal.queue"
            | "signal.reactive"
            | "signal.state"
            | "signal.notification"
            | "signal.wake"
            | "notification.dispatch"
            | "schedule.fire";
        principal: ExecutionPrincipal;
        principalPermissions: PrincipalPermissionResolution
        | null;
        resourceId: string;
        runId: string;
        safeContext?: Readonly<Record<string, unknown>>;
        threadId: string;
    }
    Index

    Properties

    agentId deploymentTag? entryPath principal principalPermissions resourceId runId safeContext? threadId

    Properties

    agentId: string
    deploymentTag?: string

    Infrastructure-verified deployment tag for audit attribution.

    entryPath:
        | "approval.resume"
        | "http.start"
        | "signal.message"
        | "signal.queue"
        | "signal.reactive"
        | "signal.state"
        | "signal.notification"
        | "signal.wake"
        | "notification.dispatch"
        | "schedule.fire"
    principal: ExecutionPrincipal

    WHO is executing. On an approval resume this is the restored original principal, never the reviewer who decided — so a human approval does not transfer that human's authority into the resumed run.

    principalPermissions: PrincipalPermissionResolution | null

    The server-resolved permissions this execution runs under, projected into derived request context as breakwater.principalPermissions on every leg. null when no resolution exists — no resolver configured, or the resolution failed on an agent that requires no permissions. The null is projected explicitly rather than omitted so a resume leg retires any stale persisted projection instead of inheriting it.

    resourceId: string
    runId: string
    safeContext?: Readonly<Record<string, unknown>>

    Non-reserved context accepted only from trusted internal entry paths. Public HTTP agent starts never populate this field.

    threadId: string

    Settings

    Member Visibility

    On This Page

    Properties