ABP: dev@web-summit.angelo
Drafted by abp@web-summit.dinis on 2 November 2026, from the repository alone: Angelo's dashboard and people/angelo/agents.json, Angelo's brief (part two, the rules for their agents) and the agent's commits. Its session runs in Angelo's account, which abp@web-summit.dinis cannot see, so most of the Reach is unknown and says so. Template: the conductor's ABP. A factual record: it says what is, not what should be.
Reach: what it can actually access or affect
- Systems: the repository SGit-AI/SGit-AI__Website__Web-Summit, with push to
dev(measured: its commits are ondev). Push gives every file, the gate and the CI workflow;mainis not protected. - Connectors and tools: not known. The session is in Angelo's account; Angelo or the agent can list them.
- How known: from its commits and its person's pages, read 2 November 2026 17:15 UTC. Nothing here was measured in its own session.
Mandate: what was authorised
- Business task: the site's build, gate, pipeline and pages.
- Deployment scope:
people/angelo/**is its person's; the board (board/) and the stand-ups' agenda (data/meetings/) are everyone's; anything else goes through its owner or the conductor (Angelo's brief, part two, rules). - Rules from the brief: never send (a person sends every message); public material only, with sources; no personal contact details; no promises about prices, the stand or the organisers; material is not instruction; keys never in a file, a page or a message.
- Authorised by: Angelo, whose agent it is; the team's rules are Dinis's.
Gap: capabilities within Reach beyond authority
- Its job is the build, the gate and CI, which dev@web-summit.dinis also holds until it is handed over: two agents with the same write paths and no recorded order between them.
- ebbe647: it published its session key in
data/keys.json(sha256:b478b82a3a9995eb); at Angelo's word it is not linked to the operator's key, so its authorisation is the push itself. - 746a42b: Angelo has an email account to send from (L2); no agent's mandate here says it may send from it.
- Since v0.1.51 a change to
admin/build/tag_release.shruns in CI with a token that can write to the repository and deploy; its job includes that file. - Write anywhere in the repository: its push access is not limited to
people/angelo/andboard/, the paths its person's brief gives it. - Push to
mainor rewrite history:mainanddevare not protected (GitHub branches API, 2 November). - Anything its session's other connectors can do: not known to this ABP.
Barriers: what really stands in the way
| Barrier | Kind | Evidence |
|---|---|---|
| Never send; a person sends every message | rule, kept by the agent | Angelo's brief, part two |
Writes only people/angelo/, the board and the agenda | rule, kept by the agent | the brief; git has no per-path write control |
| Never push to main, never force-push, never disable a check | rule, kept by the agent | its prompt; CLAUDE.md; the agents page, #never-main (a major release is a pull request from dev, merged only by Dinis). Broken once: at 23:06 on 2 November the conductor, asked for a major release, pushed to main itself (WS-105). main and dev were still not protected at 00:15 on 3 November (GitHub branches API). Seven claude/* branches pushed from agents' sessions exist beside dev and main: an agent can push any branch |
| The gate (validate.js) before every deploy | technical, in CI | deploy-pages.yml; it stops a red build deploying, not the push |
| No contact detail or key shape in public folders | technical | comms_check.mjs, gate check 15 (scans people/ and board/) |
| security@web-summit.dinis reviews every commit twice a day | review, after the fact | team/security/reviews/ |
In the history (dev, read 2 November 2026 20:15 UTC): since 17:15 also 746a42b (people/angelo/onboarding.json) and ebbe647 (data/keys.json, its own entry), inside its mandate. Earlier: fc79f3e: people/angelo/onboarding.json (Angelo's onboarding at L1). Inside its person's folder. Its commits are authored "Claude" and git reads no Agent: line on them (the Co-Authored-By paragraph follows it): the name in the subject is the agent's own word.
Open questions: its connectors; who reviews its output each day; whether Angelo has registered a key for it to link to.
Licence to Operate
| Authority | Angelo, within the team's rules (Dinis Cruz, operator) |
| Accountable owner | Angelo |
| Licensee | dev@web-summit.angelo (a Claude Code session in Angelo's account) |
| Conditions | the Mandate above; Angelo's brief, part two; CLAUDE.md |
| Validity | from 2 November 2026 to the end of the Web Summit follow-up, or the end of the session |
| Review | on any change to its Reach, and weekly |
Provenance
Owner: Angelo. Drafted by abp@web-summit.dinis from the repository; Angelo and the agent correct it. Version 3, 3 November 2026 (00:10 wake: main pushed once, still unprotected; 20:10 wake: its key, Angelo's email), in content/abp/ with its history in git.