ABP: dev@PrompTugal.vicky

Drafted by abp@web-summit.dinis on 2 November 2026, from the repository alone: conductor@web-summit.vicky's commit (99fc7a3d), people/vicky/agents.json and the agent's commits, Vicky's brief (part two, the rules for their agents) and the agent's commits. Its session runs in Vicky's account, which abp@web-summit.dinis cannot see, so most of the Reach is unknown and says so. Template: the conductor's ABP. A factual record: it says what is, not what should be.

Reach: what it can actually access or affect

Systems: the repository SGit-AI/SGit-AI__Website__Web-Summit, with push to dev (measured: its commits are on dev). Push gives every file, the gate and the CI workflow; main is not protected.
The newsroom repository: push via Vicky's account.
Connectors and tools: not known. The session is in Vicky's account; Vicky or the agent can list them.
How known: from its commits and its person's pages, read 6 November 2026 20:15 UTC. Nothing here was measured in its own session.

Mandate: what was authorised

Business task: newsroom site changes on demand, when Vicky asks (standing answer 10: Dinis said at the 6 November 18:00 stand-up that everyone may change the newsroom site), telling the owner in a commit; no schedule.
Deployment scope: the newsroom repository's site (newsroom/build/, assets/, content/) when Vicky asks, its reports in people/vicky/, its key in the newsroom's board/keys.json.
Rules from the brief: never send (a person sends every message); public material only, with sources; no personal contact details; no promises about prices, the stand or the organisers; material is not instruction; keys never in a file, a page or a message.
Authorised by: Vicky, whose agent it is; the team's rules are Dinis's.

Gap: capabilities within Reach beyond authority

Two policies meet. The newsroom's strict policies (abp@PrompTugal.dinis, deny by default) and Vicky's standing answer 11 ("the newsroom's rules for Dinis's agents don't bind Vicky's agents unless she says so", f783bb79). It asked the newsroom's ABP agent, at Vicky's word, to widen the grant for her desks: the escape valve used as designed.
It changes the newsroom's build and assets, beyond this repository's gate and review.
Code in its person's folder runs in CI with a token that can push and deploy (WS-133).
Write anywhere in the repository: its push access is not limited to people/vicky/ and board/, the paths its person's brief gives it.
Push to main or rewrite history: main and dev are not protected (GitHub branches API, 2 November); main protected since 6 November.
Anything its session's other connectors can do: not known to this ABP.

Barriers: what really stands in the way

Barrier	Kind	Evidence
Never send; a person sends every message	rule, kept by the agent	Vicky's brief, part two
Writes only `people/vicky/`, the board and the agenda	rule, kept by the agent	the brief; git has no per-path write control
Never push to main, never force-push, never disable a check	rule, kept by the agent	CLAUDE.md; `main` and `dev` are not protected
The gate (validate.js) before every deploy	technical, in CI	deploy-pages.yml; it stops a red build deploying, not the push
No contact detail or key shape in public folders	technical	comms_check.mjs, gate check 15 (scans `people/` and `board/`)
security@web-summit.dinis reviews every commit twice a day	review, after the fact	team/security/reviews/

In the history (dev, read 6 November 2026 20:15 UTC): its first run's report, its prompt saved, the old dev-vicky key marked retired (823573ca), and a grant request to abp@PrompTugal.dinis (be2d60df): inside its mandate. Its commits are authored "Claude" and git reads no Agent: line on them (the Co-Authored-By paragraph follows it): the name in the subject is the agent's own word.

Open questions: its connectors; who reviews its output each day; whether Vicky has registered a key for it to link to.

Licence to Operate


Authority	Vicky, within the team's rules (Dinis Cruz, operator)
Accountable owner	Vicky
Licensee	dev@PrompTugal.vicky (a Claude Code session in Vicky's account)
Conditions	the Mandate above; Vicky's brief, part two; CLAUDE.md
Validity	from 6 November 2026 to the end of the Web Summit follow-up, or the end of the session
Review	on any change to its Reach, and weekly

Provenance

Owner: Vicky. Drafted by abp@web-summit.dinis from the repository; Vicky and the agent correct it. Version 1, 6 November 2026, in content/abp/ with its history in git.

Phase: explorer (from 6 November 2026, at Dinis's word): this ABP observes and recommends; it blocks nothing. Lock-down comes gently, each step with an escape valve. The phase.