@claudexor/schema 3.6.0 → 3.8.1

package/generated/ControlHarnessListResponse.schema.json

@@ -137,6 +137,20 @@
                                       },
                                       "default": [],
                                       "description": "Relocation levers that can move this transport into a scoped environment."
+                                    },
+                                    "platforms": {
+                                      "type": "array",
+                                      "items": {
+                                        "type": "string",
+                                        "enum": [
+                                          "darwin",
+                                          "linux",
+                                          "win32"
+                                        ],
+                                        "description": "Host platform used to resolve credential and managed-login policy."
+                                      },
+                                      "minItems": 1,
+                                      "description": "Host platforms on which this physical credential transport applies; absent means every supported platform for backward compatibility."
                                     }
                                   },
                                   "required": [
@@ -148,6 +162,90 @@
                                 },
                                 "default": [],
                                 "description": "Declared credential transports per auth source."
+                              },
+                              "credential_profile_policies": {
+                                "type": "array",
+                                "items": {
+                                  "type": "object",
+                                  "properties": {
+                                    "source": {
+                                      "$ref": "#/definitions/ControlHarnessListResponse/properties/harnesses/items/properties/manifest/anyOf/0/properties/capability_profile/properties/auth/properties/supported_sources/items"
+                                    },
+                                    "platforms": {
+                                      "type": "array",
+                                      "items": {
+                                        "$ref": "#/definitions/ControlHarnessListResponse/properties/harnesses/items/properties/manifest/anyOf/0/properties/capability_profile/properties/auth/properties/credential_transports/items/properties/platforms/items"
+                                      },
+                                      "minItems": 1,
+                                      "description": "Nonempty host-platform set governed by this policy row."
+                                    },
+                                    "identity_scope": {
+                                      "type": "string",
+                                      "enum": [
+                                        "profile",
+                                        "os_user"
+                                      ],
+                                      "description": "Identity boundary selected by a credential profile: the named profile itself or the host OS user/login vault."
+                                    },
+                                    "max_enabled_profiles": {
+                                      "anyOf": [
+                                        {
+                                          "type": "integer",
+                                          "exclusiveMinimum": 0
+                                        },
+                                        {
+                                          "type": "null"
+                                        }
+                                      ],
+                                      "description": "Maximum enabled profile bindings on these platforms; null means unbounded."
+                                    },
+                                    "cleanup_owner": {
+                                      "type": "string",
+                                      "enum": [
+                                        "claudexor",
+                                        "vendor"
+                                      ],
+                                      "description": "Who owns cleanup of the credential when its Claudexor profile binding is removed."
+                                    }
+                                  },
+                                  "required": [
+                                    "source",
+                                    "platforms",
+                                    "identity_scope",
+                                    "max_enabled_profiles",
+                                    "cleanup_owner"
+                                  ],
+                                  "additionalProperties": false,
+                                  "description": "Platform-specific identity scope, enabled-profile cardinality, and credential cleanup ownership for one auth source."
+                                },
+                                "description": "Platform-specific profile identity/cardinality/cleanup policy; absent uses the backward-compatible profile-scoped, unbounded, Claudexor-owned defaults."
+                              },
+                              "managed_login": {
+                                "anyOf": [
+                                  {
+                                    "type": "object",
+                                    "properties": {
+                                      "stdin": {
+                                        "type": "string",
+                                        "enum": [
+                                          "none",
+                                          "pipe",
+                                          "terminal"
+                                        ],
+                                        "description": "Input transport the vendor login command requires."
+                                      }
+                                    },
+                                    "required": [
+                                      "stdin"
+                                    ],
+                                    "additionalProperties": false,
+                                    "description": "Managed-login input requirement; command, argv, flow, and time window remain owned by the native-login registry."
+                                  },
+                                  {
+                                    "type": "null"
+                                  }
+                                ],
+                                "description": "Managed subscription-login input requirement; null means this harness defines no managed login, absent is a legacy manifest."
                               }
                             },
                             "additionalProperties": false,
@@ -183,11 +281,12 @@
                                   "enum": [
                                     "env_or_file_injection",
                                     "scoped_home_keychain_bridge",
+                                    "private_per_profile_keychain",
                                     "host_user_context",
                                     "process_sandbox",
                                     "container"
                                   ],
-                                  "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging to process sandboxes and containers."
+                                  "description": "Isolation containment level an adapter supports for run environments, from env/file injection through scoped-HOME keychain bridging or a private per-profile keychain to process sandboxes and containers."
                                 },
                                 "default": [
                                   "env_or_file_injection"
@@ -492,10 +591,9 @@
                             "readonly",
                             "workspace_write",
                             "full",
-                            "external_sandbox_full",
                             "inherit_native"
                           ],
-                          "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+                          "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow), inherit_native (defer to the harness's own native settings)."
                         },
                         "default": [],
                         "description": "Access profiles the adapter can enforce."
@@ -767,6 +865,32 @@
                 ],
                 "description": "Engine-owned Delegate capability for this harness and installed runtime; null on legacy status rows.",
                 "default": null
+              },
+              "setupLogin": {
+                "anyOf": [
+                  {
+                    "type": "object",
+                    "properties": {
+                      "mode": {
+                        "type": "string",
+                        "enum": [
+                          "in_app",
+                          "external_terminal"
+                        ],
+                        "description": "in_app requests the daemon-hosted login flow; external_terminal requests the existing client PTY flow."
+                      }
+                    },
+                    "required": [
+                      "mode"
+                    ],
+                    "additionalProperties": false,
+                    "description": "Effective setup-login flow for this harness on the current host."
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "Effective setup-login flow for this harness on the current host; current producers emit null or an object, while omission identifies a legacy row."
               }
             },
             "required": [

package/generated/ControlQuotaResponse.schema.json

@@ -265,7 +265,8 @@
                   "platform_unsupported",
                   "refresh_failed",
                   "no_source",
-                  "auth_revoked"
+                  "auth_revoked",
+                  "credential_profile_ambiguous"
                 ],
                 "description": "Why a registered subject has no quota snapshot, in the source's own vocabulary."
               },

package/generated/ControlRunAgainDraft.schema.json

@@ -119,7 +119,11 @@
                 "delegated": {
                   "type": "boolean",
                   "default": false,
-                  "description": "Marks a run driven by an EXTERNAL orchestrator that owns the workspace, not by the operator at a surface. Such a run is confined to a scoped harness HOME even under isolation='live' (an in-place delegated attempt therefore cannot resume a native vendor session stored under the real HOME). Unrelated to the `delegate` belt flag and to `delegatedFromRunId` (belt-child provenance)."
+                  "description": "Marks a run driven by an EXTERNAL orchestrator that owns the workspace, not by the operator at a surface. Such a run uses a scoped harness HOME even under isolation='live' (an in-place delegated attempt therefore cannot resume a native vendor session stored under the real HOME). Unrelated to the `delegate` belt flag and to `delegatedFromRunId` (belt-child provenance)."
+                },
+                "workspaceRoot": {
+                  "type": "string",
+                  "description": "Absolute existing execution workspace for a project-scoped delegated agent live run. The stable project identity remains scope.root."
                 }
               },
               "additionalProperties": false,
@@ -306,7 +310,6 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
                 "inherit_native"
               ],
               "description": "Requested access profile; effective access is derived by the engine and never client-supplied."
@@ -522,6 +525,19 @@
           "additionalProperties": false,
           "description": "Request body for POST /runs: prompt, mode, scope, routing, strategy flags, budget, policies, and thread linkage."
         },
+        "accessChoice": {
+          "type": "object",
+          "properties": {
+            "required": {
+              "type": "boolean"
+            }
+          },
+          "required": [
+            "required"
+          ],
+          "additionalProperties": false,
+          "description": "Whether Run Again requires an explicit active access choice."
+        },
         "differences": {
           "type": "array",
           "items": {
@@ -552,7 +568,8 @@
       },
       "required": [
         "sourceRunId",
-        "request"
+        "request",
+        "accessChoice"
       ],
       "additionalProperties": false,
       "description": "Editable Run Again draft copied from a prior run with explicit omissions."

package/generated/ControlRunDetail.schema.json

@@ -164,9 +164,11 @@
                             "credential_pool_exhausted",
                             "delegated_home_unavailable",
                             "delegated_confinement_unavailable",
-                            "delegated_evidence_incomplete"
+                            "delegated_evidence_incomplete",
+                            "access_profile_incompatible",
+                            "retired_access_profile"
                           ],
-                          "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                          "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                         },
                         {
                           "type": "null"
@@ -648,8 +650,8 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
-                "inherit_native"
+                "inherit_native",
+                "external_sandbox_full"
               ],
               "description": "Access profile of the run: the effective profile when known, else the requested one (prefer requestedAccess/effectiveAccess)."
             },
@@ -3138,7 +3140,7 @@
                     "properties": {
                       "proven": {
                         "type": "boolean",
-                        "description": "Whether a boundary was actually enforced for this attempt: a named mechanism AND the path it was proven to deny. The only field a consumer should branch on."
+                        "description": "Whether a historical outer boundary was proven by a named mechanism, digest, and denied path; false for current native-access attempts."
                       },
                       "mechanism": {
                         "type": [
@@ -3159,7 +3161,7 @@
                           "string",
                           "null"
                         ],
-                        "description": "Why this attempt ran with NO boundary; null when one was applied. Present exactly when proven is false for a run that asked for a boundary."
+                        "description": "Why no additional outer boundary was applied; current delegated attempts carry the schema-owned deliberate-absence reason."
                       }
                     },
                     "required": [
@@ -3169,13 +3171,13 @@
                       "unavailableReason"
                     ],
                     "additionalProperties": false,
-                    "description": "Applied OS filesystem boundary for one attempt, or the stated reason there was none."
+                    "description": "Historical outer-boundary proof for one attempt, or the deliberate reason current native-access execution applied none."
                   },
                   {
                     "type": "null"
                   }
                 ],
-                "description": "Applied OS boundary for this attempt; null when the run never asked for one (every non-delegated run).",
+                "description": "Historical outer-boundary evidence or current deliberate-absence evidence; null when the attempt has neither.",
                 "default": null
               }
             },

package/generated/ControlRunListResponse.schema.json

@@ -166,9 +166,11 @@
                               "credential_pool_exhausted",
                               "delegated_home_unavailable",
                               "delegated_confinement_unavailable",
-                              "delegated_evidence_incomplete"
+                              "delegated_evidence_incomplete",
+                              "access_profile_incompatible",
+                              "retired_access_profile"
                             ],
-                            "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                            "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                           },
                           {
                             "type": "null"
@@ -650,8 +652,8 @@
                   "readonly",
                   "workspace_write",
                   "full",
-                  "external_sandbox_full",
-                  "inherit_native"
+                  "inherit_native",
+                  "external_sandbox_full"
                 ],
                 "description": "Access profile of the run: the effective profile when known, else the requested one (prefer requestedAccess/effectiveAccess)."
               },

package/generated/ControlRunStartRequest.schema.json

@@ -111,7 +111,11 @@
             "delegated": {
               "type": "boolean",
               "default": false,
-              "description": "Marks a run driven by an EXTERNAL orchestrator that owns the workspace, not by the operator at a surface. Such a run is confined to a scoped harness HOME even under isolation='live' (an in-place delegated attempt therefore cannot resume a native vendor session stored under the real HOME). Unrelated to the `delegate` belt flag and to `delegatedFromRunId` (belt-child provenance)."
+              "description": "Marks a run driven by an EXTERNAL orchestrator that owns the workspace, not by the operator at a surface. Such a run uses a scoped harness HOME even under isolation='live' (an in-place delegated attempt therefore cannot resume a native vendor session stored under the real HOME). Unrelated to the `delegate` belt flag and to `delegatedFromRunId` (belt-child provenance)."
+            },
+            "workspaceRoot": {
+              "type": "string",
+              "description": "Absolute existing execution workspace for a project-scoped delegated agent live run. The stable project identity remains scope.root."
             }
           },
           "additionalProperties": false,
@@ -298,7 +302,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Requested access profile; effective access is derived by the engine and never client-supplied."

package/generated/ControlRunSummary.schema.json

@@ -161,9 +161,11 @@
                         "credential_pool_exhausted",
                         "delegated_home_unavailable",
                         "delegated_confinement_unavailable",
-                        "delegated_evidence_incomplete"
+                        "delegated_evidence_incomplete",
+                        "access_profile_incompatible",
+                        "retired_access_profile"
                       ],
-                      "description": "Machine-readable failure sub-code within a RunFailure category (budget-denial reasons, Delegate child-drain timeout, a spent subscription quota window whose reopen time is RunFailure.resetsAt, an exhausted credential rotation pool whose EARLIEST known member reset is RunFailure.resetsAt, and the delegated-run confinement refusals: missing scoped home, no OS-enforced boundary on this host, incomplete applied evidence)."
+                      "description": "Machine-readable failure sub-code within a RunFailure category, including historical delegated-run failures and active access-profile refusals."
                     },
                     {
                       "type": "null"
@@ -645,8 +647,8 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
-            "inherit_native"
+            "inherit_native",
+            "external_sandbox_full"
           ],
           "description": "Access profile of the run: the effective profile when known, else the requested one (prefer requestedAccess/effectiveAccess)."
         },

package/generated/ControlSetupJob.schema.json

@@ -811,7 +811,11 @@
               "enum": [
                 "permit_timeout",
                 "spawn_failed",
-                "device_auth_unsupported"
+                "device_auth_unsupported",
+                "terminal_transport_unavailable",
+                "terminal_transport_unsupported",
+                "terminal_transport_probe_failed",
+                "terminal_transport_failed"
               ]
             },
             "finishedAt": {

package/generated/ControlSetupJobCreateRequest.schema.json

@@ -26,7 +26,7 @@
         "profileId": {
           "type": "string",
           "minLength": 1,
-          "description": "Registered config_dir_login profile to log in; absent = the default session."
+          "description": "Registered config_dir_login binding to log in under its exact scoped environment; absent = the default session."
         },
         "loginFlow": {
           "type": "string",

package/generated/ControlSetupJobEvent.schema.json

@@ -866,7 +866,11 @@
                       "enum": [
                         "permit_timeout",
                         "spawn_failed",
-                        "device_auth_unsupported"
+                        "device_auth_unsupported",
+                        "terminal_transport_unavailable",
+                        "terminal_transport_unsupported",
+                        "terminal_transport_probe_failed",
+                        "terminal_transport_failed"
                       ]
                     },
                     "finishedAt": {

package/generated/ControlSetupJobListResponse.schema.json

@@ -816,7 +816,11 @@
                     "enum": [
                       "permit_timeout",
                       "spawn_failed",
-                      "device_auth_unsupported"
+                      "device_auth_unsupported",
+                      "terminal_transport_unavailable",
+                      "terminal_transport_unsupported",
+                      "terminal_transport_probe_failed",
+                      "terminal_transport_failed"
                     ]
                   },
                   "finishedAt": {

package/generated/ControlSetupJobSnapshot.schema.json

@@ -816,7 +816,11 @@
                       "enum": [
                         "permit_timeout",
                         "spawn_failed",
-                        "device_auth_unsupported"
+                        "device_auth_unsupported",
+                        "terminal_transport_unavailable",
+                        "terminal_transport_unsupported",
+                        "terminal_transport_probe_failed",
+                        "terminal_transport_failed"
                       ]
                     },
                     "finishedAt": {

package/generated/ControlThread.schema.json

@@ -91,10 +91,10 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
-                "inherit_native"
+                "inherit_native",
+                "external_sandbox_full"
               ],
-              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+              "description": "Access profile recorded by an immutable historical artifact. external_sandbox_full is retired and cannot be requested by active surfaces."
             },
             {
               "type": "null"

package/generated/ControlThreadCreateRequest.schema.json

@@ -111,7 +111,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Sticky write scope for the thread's write turns; omit = the repo trust default."

package/generated/ControlThreadDetail.schema.json

@@ -94,10 +94,10 @@
                     "readonly",
                     "workspace_write",
                     "full",
-                    "external_sandbox_full",
-                    "inherit_native"
+                    "inherit_native",
+                    "external_sandbox_full"
                   ],
-                  "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+                  "description": "Access profile recorded by an immutable historical artifact. external_sandbox_full is retired and cannot be requested by active surfaces."
                 },
                 {
                   "type": "null"

package/generated/ControlThreadListResponse.schema.json

@@ -96,10 +96,10 @@
                       "readonly",
                       "workspace_write",
                       "full",
-                      "external_sandbox_full",
-                      "inherit_native"
+                      "inherit_native",
+                      "external_sandbox_full"
                     ],
-                    "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+                    "description": "Access profile recorded by an immutable historical artifact. external_sandbox_full is retired and cannot be requested by active surfaces."
                   },
                   {
                     "type": "null"

package/generated/ControlThreadTurnRequest.schema.json

@@ -220,7 +220,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Requested access profile; effective access is derived by the engine and never client-supplied."

package/generated/ControlThreadUpdateRequest.schema.json

@@ -56,10 +56,9 @@
                 "readonly",
                 "workspace_write",
                 "full",
-                "external_sandbox_full",
                 "inherit_native"
               ],
-              "description": "Filesystem/command access profile for a run: readonly (no writes), workspace_write (writes inside the workspace only), full (unrestricted; requires the per-repo trust allow), external_sandbox_full (the harness stands its native sandbox down; the engine applies its own OS boundary only on delegated runs — requested directly this is unrestricted, and not behind the trust allow), inherit_native (defer to the harness's own native sandbox settings)."
+              "description": "Active filesystem/command access profile for a run: readonly (no writes), workspace_write (use the harness's native workspace-write policy), full (unrestricted; requires the per-repo trust allow), inherit_native (defer to the harness's own native settings)."
             },
             {
               "type": "null"

package/generated/ControlTrustListResponse.schema.json

@@ -30,7 +30,6 @@
                   "readonly",
                   "workspace_write",
                   "full",
-                  "external_sandbox_full",
                   "inherit_native"
                 ],
                 "description": "Default access profile for runs in the repo."

package/generated/ControlTrustState.schema.json

@@ -25,7 +25,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Default access profile for runs in the repo."

package/generated/ControlTrustUpdateRequest.schema.json

@@ -66,7 +66,6 @@
             "readonly",
             "workspace_write",
             "full",
-            "external_sandbox_full",
             "inherit_native"
           ],
           "description": "Effective access profile covered by grantTestCommand; defaults to the trust default."

package/generated/CredentialProfile.schema.json

@@ -26,7 +26,7 @@
             "oauth_token",
             "api_key"
           ],
-          "description": "Credential transport a profile isolates: a scoped vendor config-dir login, a stored OAuth token, or a stored API key."
+          "description": "Binding kind for a profile: Claudexor-owned scoped vendor state, a managed OAuth secret, or a managed API-key secret; a vendor OS-user credential may remain outside that state."
         },
         "isolation_locator": {
           "type": [
@@ -34,7 +34,7 @@
             "null"
           ],
           "default": null,
-          "description": "Canonical absolute config-dir path for config_dir_login profiles; null for secret-ref kinds."
+          "description": "Canonical absolute path to Claudexor-owned scoped vendor state for config_dir_login bindings; null for secret-ref kinds."
         },
         "secret_ref": {
           "type": [
@@ -71,7 +71,7 @@
         "credential_kind"
       ],
       "additionalProperties": false,
-      "description": "Durable non-secret registry entry for one credential identity of one harness; secret material lives in the vendor dir or the secret store, never here."
+      "description": "Durable non-secret named binding for one harness; credential material may live in Claudexor-owned scoped state, a managed secret store, or a platform-declared vendor/OS-user store, never in this row."
     }
   },
   "$schema": "http://json-schema.org/draft-07/schema#"

package/generated/CredentialProfileStatus.schema.json

@@ -35,7 +35,16 @@
             "vendor"
           ],
           "default": "local_store",
-          "description": "How the verification verdict was reached: local_store = the profile's credential material is present locally (says nothing about the token being live); vendor = the vendor answered a request made with this profile's own credential."
+          "description": "How the verification verdict was reached: local_store = the binding's required local state or managed secret is present (says nothing about a token being live); vendor = the vendor answered under the exact binding environment and effective platform credential policy."
+        },
+        "stale": {
+          "type": "boolean",
+          "description": "True only for a bounded stale last-known-good observation; stale is never a fresh passed verification."
+        },
+        "stale_age_ms": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Age in milliseconds of the bounded stale observation, when stale is true."
         },
         "detail": {
           "type": "string",

package/generated/GlobalConfig.schema.json

@@ -296,7 +296,7 @@
                   "oauth_token",
                   "api_key"
                 ],
-                "description": "Credential transport a profile isolates: a scoped vendor config-dir login, a stored OAuth token, or a stored API key."
+                "description": "Binding kind for a profile: Claudexor-owned scoped vendor state, a managed OAuth secret, or a managed API-key secret; a vendor OS-user credential may remain outside that state."
               },
               "isolation_locator": {
                 "type": [
@@ -304,7 +304,7 @@
                   "null"
                 ],
                 "default": null,
-                "description": "Canonical absolute config-dir path for config_dir_login profiles; null for secret-ref kinds."
+                "description": "Canonical absolute path to Claudexor-owned scoped vendor state for config_dir_login bindings; null for secret-ref kinds."
               },
               "secret_ref": {
                 "type": [
@@ -341,10 +341,10 @@
               "credential_kind"
             ],
             "additionalProperties": false,
-            "description": "Durable non-secret registry entry for one credential identity of one harness; secret material lives in the vendor dir or the secret store, never here."
+            "description": "Durable non-secret named binding for one harness; credential material may live in Claudexor-owned scoped state, a managed secret store, or a platform-declared vendor/OS-user store, never in this row."
           },
           "default": [],
-          "description": "Durable non-secret credential-profile registry; secret material lives in the vendor dir or the secret store, never in config."
+          "description": "Durable non-secret named-binding registry; credential material may live in Claudexor-owned scoped state, a managed secret store, or a platform-declared vendor/OS-user store, never in config."
         },
         "harnesses": {
           "type": "object",