Agent Management Workflow

Sprint 17B adds create/edit workflows inside the existing Agents module at /agents/management.

agents.manage is required to create or edit AgentProfile, AgentCapability, AgentTool, and AgentGuardrail records. agents.approve is additionally required to activate or suspend an agent, and to save active/enabled high-risk configuration.

The management page includes:

• create agent profile
• edit existing agent profile
• create or update capability by agent and capability type
• create or update tool by agent and tool type
• create guardrail
• edit existing guardrail
• visible permission-denied, validation-error, and success states

All management actions create activity logs. They do not add autonomous execution, external integrations, live sync, production secrets, customer messaging, code execution, deployment, or destructive behavior.

Manual check:

1. Sign in as a seeded admin.
2. Open /agents/management.
3. Create a registered low-risk test profile.
4. Add a disabled capability or disabled tool.
5. Add a blocking guardrail.
6. Confirm changes appear in Registry, Capabilities, Guardrails, and Activity.
7. Confirm a user without agents.manage is blocked from editing.
8. Confirm activation/suspension and high-risk active configuration require agents.approve.