2026-11-05 — The off-profile warning is one line on the verb's stderr, printed after the move. While the away mode holds it reaches the agent alone, and nothing records it for the person's return, because no one existing call fits: a queued step is an act for the person to approve, and a recorded stop reads on return as a stop. dcn-2611041550129278 asks for a line that cannot be missed, so carrying it to the person's return stays owed under the itd-2611040344170206 criterion opening "Given a session that is not on a profile".

Frontmatter

.abcd/work/decisions/dcn-2611050931229356-the-off-profile-warning-is-one-line-on.md
open on GitHub ↗ · commit history ↗

mentions2

• dcn-26110415501292782026-11-04 — The product thinker's rulings on the profiles draft itd-2611040344170206, at its planning interview. Every agent abcd starts unattended carries abcd's guard whichever way its work is paid for: a stage on the key route runs on a profile with hooks on, and the bare launch adr-2610222222326104 names for the key route gives way for stages. Each way of paying, a subscription or a named key, is one profile with its own login and its own bare settings; a worktree is where the files are, a profile is who pays and what an agent can reach, and abcd pairs one of each per agent. A subscription's profile needs one login by the person; a key's profile needs none. A session the person starts that runs work unattended off a profile is warned in a line that cannot be missed, never refused. Whether an agent on a profile may reach the machine's other sessions is a setting, off by default. A profile's name is a readable one, never a random string: abcd ships a neutral list, a themed one such as a television series' characters is the person's own in their machine configuration, and a name is fixed at creation and retired once used; this replaces the random names of the draft's fourth decision, and the registry records the name, the tool and the date. abcd ships a sensible default allow-list of tools and a repository configures it within one bound: a repository file may narrow the list, only the person's own machine configuration may widen it, and an agent can never widen it. The same stance settles every open question of that kind, those of the ledger draft itd-2611031342011261 among them: abcd ships a sensible default and the person configures it per repository. The draft's title and scope widen to every way of paying, keys included.
• itd-2611040344170206Unattended work runs on a named profile, one per way of paying