Any item on the board. A card is either a Project or a Task.
Project
Groups Tasks, the Plan, clone_repo, optional project_prompt extras, and an optional sandbox override. Agents claim Tasks, not Projects.
Standing prompt
Optional board-wide agent policy on Settings → Agent runtime. Empty by default; hardwired protocol is separate. Injected on claim when non-empty.
project_prompt
Optional Project-only standing extras. Not seeded with the board essay on create.
Quality gates
Test/lint commands agents run before publish. Named in the board standing prompt, project_prompt, or a card’s definition of done. sandboard does not assume cargo or any toolchain unless prose names it.
Marks a Backlog card as wanting to run. The supervisor picks it up on the next tick.
Auto mode
Per-Project. Queues every claimable Backlog leaf automatically. Does not approve, answer Needs You, or unpark.
Create Task / create_task
Add a flat Backlog Task under an existing Project (board UI or MCP) without re-running Initial plan. Parent must be a Project. Each Task names its clone target in intent/DoD. Not the same as Approve.
Approve
On a proposal, creates the sibling Tasks. On a Review card, surfaces the PR. Does not merge. A GitHub PR APPROVED review does not Approve in sandboard.
Request changes
Sends a Review card back with a note that reaches the next run’s briefing. Does not restart it. Submitted GitHub CHANGES_REQUESTED / COMMENT reviews take the same Board path (pointer steer → Backlog); see Workflow.
Steer
A soft note stored for the next claim. Does not interrupt a running turn.
Park
Stops the agent but keeps the sandbox and conversation. Resume continues the same thread.
Halt
Stops the agent, clears the conversation, deletes the sandbox. The next dispatch starts clean.
Archive
Hides a Project (and its cards) from the active board via cut_scope. Not delete — toggle Show archived to browse.
Unarchive
Restore an archived Project/subtree. In-flight priors come back as Backlog (or Shaping), not Claimed/Running.
Escalate
What an agent does instead of guessing: writes a question with options and stops.
Split
What an agent does when its card is bigger than one card. Proposes siblings, same as Approve.
Prefer park over halt when you want the same conversation to continue,
and steer over both when the note can wait.
The sandbox gateway sandboard talks to over gRPC. Owns containers, network policy, and provider credentials.
Policy
A named OpenShell YAML allow-list (filesystem / network) on the board. Edited in Settings → OpenShell → Policies. Applied at sandbox create and fixed for that sandbox’s life.
Sandbox spec
The named recipe for a sandbox: image, CPU, memory, engine, optional model / env / prompt, attached providers, and a reference to a Policy by id. Managed in Settings → OpenShell → Sandbox specs. Spec env is non-secret (overlaid after agent_env at create; profile wins on clash); secrets belong on Providers.
Engine
Which agent CLI runs in the sandbox: cursor, claude, opencode, agy, or hermes.
Provider
A credential OpenShell holds and injects only where its endpoint/profile allows — for example OPENROUTER_API_KEY for Hermes or GH_TOKEN for GitHub. Secrets are not baked into images or persisted in sandbox workspaces.
Briefing
What the supervisor assembles at claim time: Plan, hardwired protocol, board standing prompt, optional project_prompt, optional sandbox-spec prompt as Sandbox prompt (seat notes): (cold / Cockpit only — omitted on resume), then card intent/DoD/notes and remotes. Points at standing text and DoD for quality gates — does not invent them.
Lease
The claim an agent holds on a card. Expires if output stops, so another run can take the card.
Compute driver
Whatever provides the Docker-compatible API OpenShell needs: podman, Colima, Docker. Your choice, outside sandboard.