Access boundary: Restricted operator authority required.
Operator tooling implemented; applying Auth0 changes requires explicit authority and a reviewed fingerprint.
Surfaces: Authorised operator CLI; GET inspection by default, explicit fingerprint-bound apply.
Read the engineering guide · All features
Capabilities
- Read-only inspection of the exact existing OpenAI reviewer client, historical callback, owner, scopes, API, connections and both Actions’ draft/deployed versions
- Redacted state/change plan and fingerprint without tokens, client secrets or private content
- Apply only after explicit authority with --apply --expect and reviewed fingerprint; provision no client/account
- Deploy both exact Actions before API offline_access and reviewer refresh grant, preserving ownClients, unrelated clients, bindings and consent
- Bounded rotating refresh: 30-day idle, 90-day absolute, 3-second leeway; API access token at most 3,600 seconds
- Stop on drift before each write, collision, another renewable Guteneo client or unknown Action; no automatic write retry
- For partial state, inspect again, review a fresh fingerprint and apply only remaining steps; unknown provider outcomes never trigger blind recovery
- prepare-chatgpt-reviewer --qualify-client --expect-renewal checks the complete exact state with GET only; never auto-provisions or completes partial migration
- Real reconnection, refresh and revocation need separate qualification; prepare_only, sending configuration, approval and mandates remain unchanged