FlowRelay
Reference
Action previews
Preview, confirmation, idempotency, metering, audit, and refusal behavior for approved actions.
Intent lifecycle #
Action previews make side effects deliberate and auditable.
| Stage | What happens |
|---|---|
| Preview | FlowRelay explains the target, current configuration, possible side effects, required authority, and idempotency key. |
| Confirm | A human or authorized agent confirms the exact action inside the grant and product boundary. |
| Execute | FlowRelay performs the action, records audit context, and returns the result or refusal. |
Actions that need previews #
Use action previews for replay, diagnostics sharing, endpoint edits, secret rotation, endpoint delete, and sender test operations when those operations are exposed through API, CLI, or MCP Agent Operations access. The API stores these records under the formal actionIntents contract.
Idempotency #
Preserve the idempotency key from preview through execute. If the target, payload, endpoint, event, or actor changes, create a fresh preview.
Audit and refusals #
Audit preserves who previewed, who confirmed, what was executed, and which grant allowed it. Refusals explain the missing scope, unsafe state, expired retention, usage limit, or product boundary.