Trigger permissions, public access, and safety
Registry public-surface policy is exact: only list_triggers and get_trigger allow public reads. Create, update, set-enabled, cancel, deprecated delete, and result recording are not allowed on public surfaces. cancel_trigger and delete_trigger use UserConfirm with strict drift; create, list, get, update, set-enabled, and result recording use no action-level confirmation.
Target Agent and source resources remain owner-scoped. The user may have at most 100 non-deleted triggers. Matcher defaults are 100 fires per Agent per hour and 100 per source per hour in a 3,600-second window, but deployment configuration is runtime truth. Maximum trigger chain depth is 3; duplicate/debounce and recovery guards still apply. Knowledge cannot weaken redaction, audit, idempotency, permission, or confirmation.
list_triggers defaults to active + paused. includeCancelled: true widens that default to include cancelled; deleted is always excluded. An explicit status filter takes precedence over includeCancelled. Use typed runtime results for permission denied, rate limited, conflict, or not found, and never expose private IDs, scopes, event payloads, or systemMessage through routing telemetry.
Agent list and get operations are filtered by explicit per-Trigger read/write grants; update, set-enabled, and cancel require write. Missing grants are reported as not found. Permission replacement cannot remove the target Agent’s write floor, and immutable replacement copies grants before re-flooring a changed target. These collaboration grants do not alter event delivery, which still targets the configured Agent. Deleting that target Agent retains the existing cascade behavior and deletes the Trigger.
Related actions
Section titled “Related actions”arinova.trigger.create_trigger, arinova.trigger.list_triggers, arinova.trigger.get_trigger, arinova.trigger.update_trigger, arinova.trigger.set_enabled, arinova.trigger.cancel_trigger, arinova.trigger.delete_trigger
Also known as
trigger permission, public trigger read, cancel confirmation, trigger rate limit, includeCancelled, same owner
Build a7f47a5ca54ddcf7806cd48b81ce1b9827042766