← Files BrainOrderARCHIVED FILE
review/annotations.json
83.9 KB · Nov 7, 2026 · 12:38 UTC
{
"tools": {
"brainorder_search": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "This tool only searches the authenticated user's existing BrainOrder data and does not modify it.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "This tool does not delete, overwrite, revoke, or otherwise change any BrainOrder item."
}
},
"brainorder_get_today": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "This tool only retrieves the authenticated user's current and overdue BrainOrder agenda without changing it.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "This tool does not delete, overwrite, revoke, or otherwise change any BrainOrder item."
}
},
"brainorder_list_containers": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "This tool only lists folders and lists visible to the authenticated BrainOrder user without modifying them.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "This tool does not delete, overwrite, revoke, or otherwise change any BrainOrder container."
}
},
"brainorder_list_items": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "This tool only retrieves paginated items from one BrainOrder list visible to the authenticated user.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "This tool does not delete, overwrite, revoke, or otherwise change any BrainOrder item."
}
},
"brainorder_create_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "This tool creates a new task or reminder in a writable list in the authenticated user's BrainOrder account.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "This tool adds a new item and does not delete, overwrite, or revoke existing user data."
}
},
"brainorder_create_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "This tool creates a new top-level note in the authenticated user's BrainOrder account.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "This tool adds a new note and does not delete, overwrite, or revoke existing user data."
}
},
"brainorder_complete_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists state: Overwrites the existing task status with FINISHED and a scheduled reminder status with DONE. Reopen does not reactivate the reminder; this is an existing-state overwrite, not an additive creation.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Overwrites the existing task status with FINISHED and a scheduled reminder status with DONE. Reopen does not reactivate the reminder; this is an existing-state overwrite, not an additive creation."
}
},
"brainorder_rename_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "This tool changes the title of one resolved task or reminder in the authenticated user's BrainOrder account.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Overwrites the selected item's existing title. Explicit user intent, current write permission and exact-request idempotency limit the operation but do not make it additive."
}
},
"brainorder_reopen_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists state: Overwrites FINISHED with TODO. Existing schedule and DONE reminder metadata remain; completing it again does not make this overwrite additive.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Overwrites FINISHED with TODO. Existing schedule and DONE reminder metadata remain; completing it again does not make this overwrite additive."
}
},
"brainorder_move_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "This tool moves one resolved task or reminder to another writable BrainOrder list owned by or shared with the authenticated user.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Replaces the item's list and therefore its audience. Existing destination members may gain access and source-only members may lose access. Title/content/status/schedule are preserved; same-list moves are no-ops and exact retries are idempotent."
}
},
"brainorder_schedule_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "This tool sets or replaces the due time of one resolved task or reminder in the authenticated user's BrainOrder account.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Overwrites any prior one-shot due and notification times and sets reminder status to ACTIVE. Recurring and finished items are rejected; an identical clientRequestId retry does not make the first write additive."
}
},
"brainorder_snooze_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Overwrites the selected ordinary one-shot reminder’s due and notification times with the explicit future dueAt and sets reminder status to SNOOZED. It does not take a duration or promise a time later than the prior schedule.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Overwrites the active one-shot reminder's due and notification times and sets status to SNOOZED. Requires an existing non-DONE reminder and rejects recurring or finished items."
}
},
"brainorder_clear_task_schedule": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "This tool removes one-shot due-time and reminder metadata from one resolved task or reminder.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Cancels the existing one-shot schedule by clearing due/push/next times, reminder identifier and reminder status. The item survives, but its scheduling state is removed; recurring items are rejected."
}
},
"brainorder_delete_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "This tool soft-deletes one explicitly requested task or reminder from the authenticated user's BrainOrder account.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "This tool removes the exact selected item from active results, so it is correctly marked destructive even though the backend uses soft deletion."
}
},
"brainorder_delete_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "This tool soft-deletes one explicitly requested top-level note from the authenticated user's BrainOrder account.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "This tool removes the exact selected note from active results, so it is correctly marked destructive even though the backend uses soft deletion."
}
},
"brainorder_preview_container_deletion": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Read-only preview of the exact active subtree and related records that deletion of one directly owned private BrainOrder list or folder would affect. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_create_container": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Create one private BrainOrder folder, plain list, or to-do list for the authenticated owner. Persists this requested operation in BrainOrder, so readOnlyHint is false.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Adds one new private directly owned folder, plain list or to-do list. Existing containers are not replaced or deleted."
}
},
"brainorder_rename_container": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Overwrite the existing title of one private BrainOrder list or folder that the authenticated user directly owns, preserving its contents and location. Persists this requested operation in BrainOrder, so readOnlyHint is false.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Overwrites the existing container title. Direct private ownership, exact revision and stable request identity guard the write; contents and location are preserved."
}
},
"brainorder_move_container": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists state: Overwrites the container’s parent location. Contents are preserved and target, subtree and destination remain private/direct-owner; this is an existing-location overwrite.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Overwrites the container’s parent location. Contents are preserved and target, subtree and destination remain private/direct-owner; this is an existing-location overwrite."
}
},
"brainorder_create_task_batch": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Atomically create 1 to 100 tasks or one-shot reminders in one writable BrainOrder to-do or plain list. Persists this requested operation in BrainOrder, so readOnlyHint is false.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Adds 1–100 new tasks or one-shot reminders atomically in one writable list; no existing item is overwritten/deleted and no access is revoked."
}
},
"brainorder_issue_container_deletion_confirmation": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Prepare a five-minute owner-bound confirmation for one exact private BrainOrder list or folder without changing anything. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_delete_container": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Soft-delete one exact private BrainOrder list or folder subtree after the user explicitly confirms the prepared impact. Persists this requested operation in BrainOrder, so readOnlyHint is false.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Soft-delete one exact private BrainOrder list or folder subtree after the user explicitly confirms the prepared impact. This overwrites, removes or cancels the selected existing state under the exact operation contract; it is not purely additive."
}
},
"brainorder_restore_container": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Restore one exact BrainOrder container subtree during its recovery window. Persists this requested operation in BrainOrder, so readOnlyHint is false.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Recovers only the exact recorded deleted subtree members within the recovery window; unrelated content is not overwritten, revoked grants are not revived and separately deleted items remain deleted."
}
},
"brainorder_discover_managed_reminders": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Read current authenticated BrainOrder managed-reminder capabilities and exact graph context. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_read_managed_reminders": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Read exact graph records from a fully verified snapshot in the connected BrainOrder environment. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_create_managed_reminder": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Create a recurring managed reminder only in an already covered private compatible list. Persists this requested operation in BrainOrder, so readOnlyHint is false.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Adds one recurring reminder series, its backing row and next-occurrence cursor on an already covered private compatible list. It does not replace an existing series or adopt/enroll lists."
}
},
"brainorder_complete_managed_occurrence": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists state: Overwrites one exact pending occurrence with COMPLETED, preventing its future delivery. There is no reopen operation; other occurrences and the series calendar remain unchanged.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Overwrites one exact pending occurrence with COMPLETED, preventing its future delivery. There is no reopen operation; other occurrences and the series calendar remain unchanged."
}
},
"brainorder_skip_managed_occurrence": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "SKIP only the exact occurrence explicitly requested by the user. Persists this requested operation in BrainOrder, so readOnlyHint is false.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Marks the explicitly requested pending occurrence SKIPPED and prevents its future delivery. This tool cannot undo the skip; other occurrences and the recurring schedule are unchanged. Exact identity, revision and retry checks remain enforced."
}
},
"brainorder_snooze_managed_occurrence": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists state: Overwrites the exact pending occurrence’s snooze/delivery time with snoozeUntil. Scheduled identity, other occurrences and the recurring calendar are preserved.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Overwrites the exact pending occurrence’s snooze/delivery time with snoozeUntil. Scheduled identity, other occurrences and the recurring calendar are preserved."
}
},
"brainorder_confirm_managed_container_deletion": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Reads exact current-owner deletion impact and computes a five-minute signed confirmation. It persists no content, access, synchronization, reminder-delivery, request or provenance changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not delete content, overwrite existing state, retire synchronization scopes, cancel deliveries or revoke access. Publication reservations run only in the separately authorized delete/restore operation."
}
},
"brainorder_delete_managed_container": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists state: Soft-deletes the exact owner-confirmed container subtree, its managed content and schedules, retaining exact recovery provenance. Note-bearing reservations can retire legacy scopes and invalidate pending deliveries.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Soft-deletes the exact owner-confirmed container subtree, its managed content and schedules, retaining exact recovery provenance. Note-bearing reservations can retire legacy scopes and invalidate pending deliveries."
}
},
"brainorder_restore_managed_container": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists state: Restores only the exact recorded deletion members within retention. Recovery reservations can retire legacy scopes and invalidate pending deliveries for note-bearing lists; revoked access and separately deleted content are not revived.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Restores only the exact recorded deletion members within retention. Recovery reservations can retire legacy scopes and invalidate pending deliveries for note-bearing lists; revoked access and separately deleted content are not revived."
}
},
"brainorder_list_recoverable_notes": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Read one page of separately soft-deleted notes currently owned by the authenticated user and still within retention. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_preview_note_restore": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Read current-owner recovery metadata for the exact selected note before restore. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_restore_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists state: Recovers an exact eligible separately deleted note. For placed notes the access lock can also retire legacy synchronization scopes and invalidate pending reminder deliveries; no revoked grants are revived.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Recovers an exact eligible separately deleted note. For placed notes the access lock can also retire legacy synchronization scopes and invalidate pending reminder deliveries; no revoked grants are revived."
}
},
"brainorder_list_note_container_recoveries": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "List note-bearing container deletion operations still recoverable by the original deletion actor who remains current owner, inside compatible covered graph scopes. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_restore_note_container": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists state: Restores the exact note-bearing container deletion and its recorded members within retention. Recovery reservations can retire legacy scopes and invalidate pending deliveries; separately deleted notes and revoked access remain absent.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Restores the exact note-bearing container deletion and its recorded members within retention. Recovery reservations can retire legacy scopes and invalidate pending deliveries; separately deleted notes and revoked access remain absent."
}
},
"brainorder_list_notes": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "List currently readable BrainOrder quick notes with stable IDs, exact decimal-string revisions and existing permissions. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_read_note": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Read one exact quick note without changing it. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_rename_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists state: Overwrites the selected note’s title while preserving its complete body. Placed-note writes can also retire legacy synchronization scopes and invalidate pending reminder deliveries.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Overwrites the selected note’s title while preserving its complete body. Placed-note writes can also retire legacy synchronization scopes and invalidate pending reminder deliveries."
}
},
"brainorder_update_note_content": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists state: Overwrites the selected note’s complete body while preserving its title. Placed-note writes can also retire legacy synchronization scopes and invalidate pending reminder deliveries.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Overwrites the selected note’s complete body while preserving its title. Placed-note writes can also retire legacy synchronization scopes and invalidate pending reminder deliveries."
}
},
"brainorder_read_plan_task": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Read the exact current taskId, listId, title, status, dueAt, reminderStatus and decimal-string revision before proposing task edits in a plan. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_prepare_create_task": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to adds new tasks or one-shot reminders without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_create_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Create ordinary tasks in exact writable lists.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Only adds new records without overwriting/deleting existing content or revoking existing access. Create ordinary tasks in exact writable lists."
}
},
"brainorder_prepare_create_note": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to adds new private Inbox notes without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_create_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Create private Inbox notes with complete bodies.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Only adds new records without overwriting/deleting existing content or revoking existing access. Create private Inbox notes with complete bodies."
}
},
"brainorder_prepare_create_reminder": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to adds new one-shot reminders without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_create_reminder": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Create one-shot reminders in exact writable lists.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Only adds new records without overwriting/deleting existing content or revoking existing access. Create one-shot reminders in exact writable lists."
}
},
"brainorder_prepare_rename_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Prepares a signed proposal to overwrites selected note titles while preserving bodies. Existing backend reservations can persist legacy-scope retirement and pending-delivery invalidation for affected note-bearing lists before apply.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Preparation does not perform the proposed content change, but can retire legacy synchronization scopes and invalidate pending reminder deliveries. These persisted effects make destructiveHint true."
}
},
"brainorder_apply_rename_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Overwrite only note titles.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Overwrite only note titles. Affected note-bearing lists can also have legacy synchronization scopes retired and pending reminder deliveries invalidated. Revoked grants are not revived."
}
},
"brainorder_prepare_update_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Prepares a signed proposal to overwrites complete selected note bodies while preserving unrelated rich formatting. Existing backend reservations can persist legacy-scope retirement and pending-delivery invalidation for affected note-bearing lists before apply.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Preparation does not perform the proposed content change, but can retire legacy synchronization scopes and invalidate pending reminder deliveries. These persisted effects make destructiveHint true."
}
},
"brainorder_apply_update_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Replace complete note bodies.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Replace complete note bodies. Affected note-bearing lists can also have legacy synchronization scopes retired and pending reminder deliveries invalidated. Revoked grants are not revived."
}
},
"brainorder_prepare_delete_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Prepares a signed proposal to soft-deletes exact selected notes. Existing backend reservations can persist legacy-scope retirement and pending-delivery invalidation for affected note-bearing lists before apply.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Preparation does not perform the proposed content change, but can retire legacy synchronization scopes and invalidate pending reminder deliveries. These persisted effects make destructiveHint true."
}
},
"brainorder_apply_delete_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Soft-delete only explicitly selected notes under current access and retention rules.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Soft-delete only explicitly selected notes under current access and retention rules. Affected note-bearing lists can also have legacy synchronization scopes retired and pending reminder deliveries invalidated. Revoked grants are not revived."
}
},
"brainorder_prepare_process_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Prepares a signed proposal to records source-note processing history and atomically creates the explicitly proposed linked outputs. Existing backend reservations can persist legacy-scope retirement and pending-delivery invalidation for affected note-bearing lists before apply.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Preparation does not perform the proposed content change, but can retire legacy synchronization scopes and invalidate pending reminder deliveries. These persisted effects make destructiveHint true."
}
},
"brainorder_apply_process_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Process one exact note into explicitly proposed tasks, one-shot reminders and private notes, or record processing without new outputs.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Process one exact note into explicitly proposed tasks, one-shot reminders and private notes, or record processing without new outputs. Affected note-bearing lists can also have legacy synchronization scopes retired and pending reminder deliveries invalidated. Revoked grants are not revived."
}
},
"brainorder_prepare_rename_task": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to overwrites selected ordinary-task titles without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_rename_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Overwrite ordinary task titles.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Changes existing state rather than only adding new content. Overwrite ordinary task titles."
}
},
"brainorder_prepare_complete_task": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to overwrites ordinary-task status with FINISHED and scheduled reminder status with DONE without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_complete_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Overwrite exact ordinary task statuses with FINISHED and any scheduled reminder status with DONE.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Changes existing state rather than only adding new content. Overwrite exact ordinary task statuses with FINISHED and any scheduled reminder status with DONE."
}
},
"brainorder_prepare_reopen_task": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to overwrites FINISHED with TODO without reactivating DONE reminders without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_reopen_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Reopen exact ordinary tasks without reactivating reminders.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Changes existing state rather than only adding new content. Reopen exact ordinary tasks without reactivating reminders."
}
},
"brainorder_prepare_schedule_task": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to overwrites one-shot due/notification times and reminder status without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_schedule_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Overwrite the one-shot schedule of unfinished ordinary tasks with an exact future dueAt (seconds and explicit UTC offset).",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Changes existing state rather than only adding new content. Overwrite the one-shot schedule of unfinished ordinary tasks with an exact future dueAt (seconds and explicit UTC offset)."
}
},
"brainorder_prepare_snooze_task": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to overwrites existing one-shot due/notification times without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_snooze_task": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Overwrite an existing non-DONE one-shot reminder time with exact future dueAt (seconds and explicit UTC offset).",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Changes existing state rather than only adding new content. Overwrite an existing non-DONE one-shot reminder time with exact future dueAt (seconds and explicit UTC offset)."
}
},
"brainorder_prepare_clear_task_schedule": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to removes one-shot schedule and notification metadata without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_clear_task_schedule": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Remove one-shot schedule and notification metadata, preserving the task.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Changes existing state rather than only adding new content. Remove one-shot schedule and notification metadata, preserving the task."
}
},
"brainorder_prepare_complete_reminder": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to overwrites exact pending occurrences with COMPLETED and prevents their delivery without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_complete_reminder": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Overwrite exact pending managed reminder occurrences with COMPLETED, preventing their future delivery; no reopen operation is provided.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Changes existing state rather than only adding new content. Overwrite exact pending managed reminder occurrences with COMPLETED, preventing their future delivery; no reopen operation is provided."
}
},
"brainorder_prepare_skip_reminder_occurrence": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to overwrites exact pending occurrences with SKIPPED and prevents their delivery without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_skip_reminder_occurrence": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Skip exact managed reminder occurrences using discovered graph context and occurrence revision, generation and scheduledAt.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Changes existing state rather than only adding new content. Skip exact managed reminder occurrences using discovered graph context and occurrence revision, generation and scheduledAt."
}
},
"brainorder_prepare_snooze_reminder_occurrence": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to overwrites exact pending occurrences’ snooze/delivery time without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_snooze_reminder_occurrence": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Overwrite the snooze/delivery time of exact pending managed occurrences using discovered context, occurrence revision, generation and scheduledAt.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Changes existing state rather than only adding new content. Overwrite the snooze/delivery time of exact pending managed occurrences using discovered context, occurrence revision, generation and scheduledAt."
}
},
"brainorder_prepare_delete_container": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Prepares a signed proposal to soft-deletes the exact owned container subtree and records recovery provenance. Existing backend reservations can persist legacy-scope retirement and pending-delivery invalidation for affected note-bearing lists before apply.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Preparation does not perform the proposed content change, but can retire legacy synchronization scopes and invalidate pending reminder deliveries. These persisted effects make destructiveHint true."
}
},
"brainorder_apply_delete_container": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Delete exact private directly owned container subtrees.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Delete exact private directly owned container subtrees. Affected note-bearing lists can also have legacy synchronization scopes retired and pending reminder deliveries invalidated. Revoked grants are not revived."
}
},
"brainorder_prepare_pause_reminder_recurrence": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to overwrites a selected recurring series state with PAUSED without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_pause_reminder_recurrence": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Pause exact recurring series using discovered context, listId, seriesId, generation and initial SERIES revision.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Changes existing state rather than only adding new content. Pause exact recurring series using discovered context, listId, seriesId, generation and initial SERIES revision."
}
},
"brainorder_prepare_resume_reminder_recurrence": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to overwrites a selected recurring series state with ACTIVE without replaying missed deliveries without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_resume_reminder_recurrence": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Resume exact recurring series using discovered context, listId, seriesId, generation and initial SERIES revision.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Changes existing state rather than only adding new content. Resume exact recurring series using discovered context, listId, seriesId, generation and initial SERIES revision."
}
},
"brainorder_prepare_restore_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Prepares a signed proposal to recovers an exact eligible separately deleted note without reviving revoked grants. Existing backend reservations can persist legacy-scope retirement and pending-delivery invalidation for affected note-bearing lists before apply.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Preparation does not perform the proposed content change, but can retire legacy synchronization scopes and invalidate pending reminder deliveries. These persisted effects make destructiveHint true."
}
},
"brainorder_apply_restore_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Recover exact currently owned standalone notes within retention using current recovery preview revision/snapshot.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Recover exact currently owned standalone notes within retention using current recovery preview revision/snapshot. Affected note-bearing lists can also have legacy synchronization scopes retired and pending reminder deliveries invalidated. Revoked grants are not revived."
}
},
"brainorder_prepare_move_note": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Computes and signs a proposal to overwrites a note’s placement and changes its authorized audience, retiring prior direct grants/invitations without applying it or persisting content, access or schedule changes.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not execute the proposed operation or overwrite/delete records, revoke access or cancel deliveries during preparation."
}
},
"brainorder_apply_move_note": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists the confirmed exact signed operation. Move exact notes preserving IDs, complete bodies and history.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Replaces the exact note’s placement. Access follows the destination list: source-only members can lose access and existing destination members can gain it. Prior direct grants/invitations retire; moving to private Inbox removes list-derived access. IDs, complete bodies and history survive; revoked grants are not revived."
}
},
"brainorder_list_note_history": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Read bounded ID-ordered processing history for the exact original note. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_read_note_history": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Read the exact immutable original by historyId in Unicode-code-point pages, plus independently currently readable task/note links. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_prepare_share_invitation": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Persists state: Prepares a short-lived signed proposal and writes operational admission/rate counters. It creates no invitation, recipient lookup, grant or notification and has no destructive content/access effect.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Prepares a short-lived signed proposal and writes operational admission/rate counters. It creates no invitation, recipient lookup, grant or notification and has no destructive content/access effect."
}
},
"brainorder_apply_share_invitation": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": true,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Persists state: Persists the exact confirmed list invitation and may send an in-app notification to its recipient which cannot be unsent. No SMTP email is sent, and existing members are not regranted or assigned a new role.",
"open_world_justification": "Accepts the owner-selected recipient email, which need not identify an existing list member, and can send that recipient an in-app invitation notification. This open-ended recipient is why openWorldHint is true.",
"destructive_justification": "Persists the exact confirmed list invitation and may send an in-app notification to its recipient which cannot be unsent. No SMTP email is sent, and existing members are not regranted or assigned a new role."
}
},
"brainorder_list_container_members": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Read minimal direct memberships of one readable container: permission ID, user ID, email, role and exact snapshot. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_list_pending_share_invitations": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Owner-only read of currently pending, unexpired, non-hidden outgoing invitations for one exact container. Retrieves/computes only; no content, access or schedule state is persisted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Does not apply a content or access mutation; previews and signed confirmations do not authorize later execution."
}
},
"brainorder_change_container_member_role": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "Changes an existing direct member grant and records the guarded operation in BrainOrder.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "Can reduce an existing member from EDITOR to VIEWER. Requires current owner authority, exact container revision, member snapshot and idempotent request identity."
}
},
"brainorder_prepare_member_revocation": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Prepares a signed preview only; no data, grants or invitations are changed. It requires write scope and does not authorize execution.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "This preview does not change existing records, access or schedules."
}
},
"brainorder_apply_member_revocation": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "The owner revokes one exact direct member grant and the signed matching invitations; inherited access may remain. No content is deleted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "The owner revokes one exact direct member grant and the signed matching invitations; inherited access may remain. No content is deleted."
}
},
"brainorder_prepare_container_leave": {
"annotations": {
"readOnlyHint": true,
"openWorldHint": false,
"destructiveHint": false
},
"justifications": {
"read_only_justification": "Prepares a signed preview only; no data, grants or invitations are changed. It requires write scope and does not authorize execution.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "This preview does not change existing records, access or schedules."
}
},
"brainorder_apply_container_leave": {
"annotations": {
"readOnlyHint": false,
"openWorldHint": false,
"destructiveHint": true
},
"justifications": {
"read_only_justification": "The authenticated user leaves their own exact direct membership; inherited access may remain. No invitation or content is deleted.",
"open_world_justification": "Limited to the connected BrainOrder account and objects currently authorized there, including existing private shared-list records where supported. No public search, arbitrary external destination or notification to a newly selected recipient is performed.",
"destructive_justification": "The authenticated user leaves their own exact direct membership; inherited access may remain. No invitation or content is deleted."
}
}
}
}
SHA-256: e0ea173245307cdf4095fb814a3483bbac4557087ae7d58bbf8c3e39c8aa11cc