Hand an agent a ticket that includes request signing
Your task
A teammate wants to give an autonomous agent one ticket to do in a single run. It has 3 parts:
- a new REST endpoint with request checks
- a SQL query for a monthly usage report
- a scheme for how this service signs its requests to another internal service
The agent can open a PR by itself when it thinks it is done.
Do you run it as one ticket? Decide what the agent does alone, what a person decides, and where the checkpoints go.
It covers
- Delegation boundary
- Security sensitive