Security interventions

Scoped security service identities can request durable agent halts and read containment evidence. Recovery requires an authorized human in the Console.

📄️createSecurityIntervention

Requires security:halt on a scoped service identity. Strict JSON, maximum 16 KiB. Deduplicates by service identity and external_event_id for the Organization lifetime. Acceptance does not prove execution stopped.

📄️getSecurityIntervention

Requires security:read and current explicit agent scope. Reads durable control/work evidence independently of the normal execution queue.

📄️getSecurityTargetControlState

Requires security:read and current explicit agent scope. Effective hold, barrier, worker acknowledgement and unknown external work are separate facts.