coulomb/qonto-assistant
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
qonto-assistant/SCOPE.md
tegwick 5f302c8b33 chore: keep generated orientation brief local 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 8340@bnt-lap001
Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c
2026-10-21 12:12:28 +02:00

2.4 KiB
Raw Blame History

SCOPE

Refined after statehub register (2026-07-21). Normative intent in INTENT.md; architecture in specs/ArchitectureBlueprint.md.

One-liner

Policy-governed Qonto domain REST + MCP assistant: sole bank-key consumer and default-deny no spend / no volume-cost policy for multi-harness finance awareness.

Core idea

All agents and harnesses talk to this service for Qonto. None of them hold the OpenBao bank secret. Policy is enforced here once, not reimplemented per client.

In scope

  • Dual surfaces: streamable-HTTP MCP and JSON REST with a shared policy kernel
  • Read capabilities: org/accounts/balances, transactions (bounded), CostRunRate hints / snapshot helpers
  • OpenBao consumption for tenants/<tenant>/qonto-api (dogfood: binky)
  • Authn of callers (OIDC / workload identity) and optional flex-auth checks
  • Audit metadata (actor, tool, allow/deny) without secret leakage
  • Tests for default-deny and spend/volume-cost rejection
  • Docs for harness client config (no bank secrets)

Out of scope (v1 and hard)

  • Payments, transfers, SEPA, card operations, invoicing create, plan changes
  • Hosting or recommending the hosted Qonto OAuth MCP connector
  • DATEV / StB / DUO bookkeeping replacement
  • LLM provider routing (llm-connect)
  • Agent scheduling (activity-core) or session runtime (agent-harness)
  • Generic multi-MCP fleet gateway (may sit in front later; not this repo’s job)
  • Storing bank credentials outside OpenBao

Current state

Artifact Status
INTENT / SCOPE / AGENTS present
Architecture blueprint specs/ArchitectureBlueprint.md
Research notes research/2026-07-21-…
Runtime implementation REST + MCP, policy/auth gates, audit reconciliation implemented (see workplans)
Upstream custody live in platform (binky-qonto-api, CCR-2026-0008)

Getting oriented

  1. INTENT.md — why / boundaries
  2. specs/ArchitectureBlueprint.md — how
  3. research/2026-07-21-mcp-gateway-and-governed-domain-assistant.md — why this shape
  4. workplans/ — what to do next
  5. AGENTS.md — State Hub protocol

Local orientation brief policy — 2026-10-21

.custodian-brief.md is a local, ignored State Hub orientation snapshot. Refreshing it does not require a Git commit. Authored workplans and the generated WORK-RECORDS index keep their existing source and staged-generation contracts.