Tenant settings
Tenant-wide rules for all projects. Owners and admins can change them. Open it from ⚙ in the top bar.
For: Project lead, Admin
Task governance
Tasks are work without development. Per category (configuration, access, data change, documentation, operation) you can require approval before a task is carried out and a check by a person before it is Done. Nothing is required unless you turn it on.
Maker-checker: the requester cannot approve, and whoever carried a task out cannot check it. AI agents never approve or check.
Work gates
- Definition of Ready: a story is Ready when it implements an Authority requirement and covers at least one of its criteria.
- Done: a story or defect is Done when every criterion it covers is Met, confirmed by a person or a passing test — a criterion only an AI agent reported as met shows "Agent-reported, not verified".
- Advisory lets the move happen and writes what was missing into the history; Enforced refuses it and says what is missing.
Block reasons
Work can only be marked blocked with one of these reasons, plus an optional note. One reason per line; leave empty to use the defaults.
AI agent policy
For each action, choose Allowed, Ask first or Forbidden: database migrations, dependencies, CI/CD and infrastructure, security code, changing tests to make them pass, breaking public contracts, merging, pushing to main, deploying and production data; and which Corpole actions agents may take (proposals, results, moving work and more).
- Corpole actions are enforced by the server: a forbidden tool call is refused and logged.
- Code actions with a command or path pattern become Claude Code permission rules (ask / deny) in the repository kit's .claude/settings.json.
- All rules are given to agents with get_agent_policy and in every work context.
- Projects inherit the tenant policy and can only make it stricter (Project settings). Changes are kept in the change history.
Agent gates
| Gate | Advisory (default) | Enforced |
|---|---|---|
| Onboarding: ungoverned module | The agent warns; Claude Code asks you before the edit. | Edits to the module are refused until it is governed. |
| New project without any Authority record | The agent offers the kickoff interview first and asks before changing code. | No code changes until at least one record is Authority. |
Tip During a declared production emergency both gates only advise (Agents → Production emergency).
Agent drift thresholds
Override the account's thresholds for this tenant. An empty field uses the account's value, shown as the placeholder.