Status: The live public preview accepts personal-tenant minimal tasks.
Organization execution, organization keys, request-defined budgets/policy,
generic email or record-write approvals, recurring schedules, and mature
receipts are unavailable through /v1.
The current API can durably run and observe a bounded task, but it is not yet an
organization workflow engine. A safe current example is analysis that does not
require caller-selected connectors or a committing external action:
GET /v1/runs/{run_id} or its resumable
event feed. Read settled tenant usage with GET /v1/usage when the key carries
usage:read.
Do not represent the current boundary as autonomously reading invoices,
sending dunning email, updating an ERP, or enforcing a caller-provided budget.
Those require connector binding, organization delegation, unified policy, and
generic exact-action approvals that are not exposed today.
The first source-ready public approval refinement is narrower: an exact
immutable browser action with a digest-bound approve or deny decision. It
remains pending production activation and does not generalize to email or every
committing tool.
Automatic signed webhooks are active for admitted personal tenants. Current
run and usage projections are useful evidence, but they are not the planned
policy/approval/verification receipt or SIEM evidence export.