Skip to content
Compass Engineering Docs

DL-375

The adminOnly door (SpawnAgent, ProvisionAgentWorkspace, IssueToken) resolves handles with the unclipped UserByHandle/AgentByHandle lookups, never the viewer-clipped AccountsByHandles: D9 visibility governs comms callers, and an admin may issue a token for any non-system account

Status: Active (Matt, 2026-09-25)

Record: ../../server/compass-handle-addressing-cutover/design.md#rulings-open-questions–all-closed