What the loop proposes to post is a draft
- Context: a post under your name cannot be taken back, and a retry after a crash can post twice.
- Decision: what wloop proposes to post is a draft in the Outbox, held by a draft gate that holds its decision; only a draft its gate approved reaches the plugin’s publisher, once, with no automatic retry, and
Verifysettles a draft a crash left insending. The draft keeps only its delivery, and the sender refuses a queued draft whose gate did not approve it. A post a tool made at once is recorded as a sent draft with a gate already approved by the agent. - Consequence: approval policies decide which draft gates resolve unattended; the loop never hands an agent a source’s token.
- Enforced by:
TestOutboxSendsOnlyApprovedDrafts,TestOnlyApprovedDraftsArePublished,TestFailedDraftIsNeverRetriedAutomatically,TestRecoverNeverRepublishes,TestSlackToolPostIsARecordedSentGate. See The Outbox.