Every ticket as the root of its provenance graph — goal, patch, approval, runs and (as the ticket-class build lands) mandate, manifestations, guarantees, journey, artifacts and children. Rendered through the <<<TicketGraphList>>> tag.
Build: capability restriction — deny Write/Edit/code-authoring for the dispatcher (settings.json permissions), force DISPATCH
goal
Configure the Claude Code install (settings.json permissions + hooks) so the DISPATCHER role CANNOT author or edit code: DENY Write, Edit, NotebookEdit, and code-writing Bash; ALLOW only the dispatch-tools MCP + read-only inspection (Read/Grep/ticket reads). The ONLY path to change is create-build-context -> hand to a tooled agent. Enforced by the harness (permission layer), not by the model's discipline — so it CANNOT slip into doing the work itself. ACCEPTANCE: the dispatcher attempting a Write/Edit is refused; the same task succeeds only via dispatch(). Provide the exact settings.json permission block + any hook.
patch
none
approval
unapproved
runs
no runs recorded
mandate (clauses)
not yet recorded — lands with the ticket-class build
manifestations
not yet recorded — lands with the ticket-class build
guarantees
not yet recorded — lands with the ticket-class build
journey (blunders & successes)
not yet recorded — lands with the ticket-class build
artifacts (forge)
not yet recorded — lands with the ticket-class build