# DSG ONE — Agent navigation / verified read-only tool routes

**Snapshot:** 2026-11-06 · **Deployment:** `dsg-spacetime-aws-prod` · **Authority:** the live authenticated Spacetime Catalog, NOT this document.

**For agents and users:** do not guess tool names, provider identities or Route IDs. This public guide contains only safe, documented operations. The private full playbook enumerates 45 configured Routes; its private permissions/contract details are **not** publicly available as an approved execution authority.

## Choose what to do

| Request | Exact configured Route | Verified payload for Execute | Observed evidence |
|---|---|---|---|
| Linux Native status | `route.desktop-native.status` | `{"action":"device.remote.status","arguments":{}}` | #807 |
| Android 13 status | `route.desktop-native.bound.3a7acaf3015c6633.remote-status` | same | #808 |
| Android 16 status | `route.desktop-native.bound.64edf8aa62b7dacd.remote-status` | same | #809 |
| Cinema status | `route.cinema-remote.status` | `{"action":"browser.remote.status","arguments":{}}` | #810 |
| Private repo metadata | `route.github-private.production-repo-metadata-read` | `{}` | #811 |
| Public repo metadata | `route.github-public.repo-metadata-read` | `{}` | #812 |
| Access and scope | `route.identity-access.auth-status`, `route.identity-access.onboarding-status`, `route.identity-access.scope-read` | `{}` | #813–815 |
| Marketplace listing read | `route.marketplace.listings-read` | `{}` | #816 |
| Linux / Android 13 / Android 16 processes | `route.desktop-native.process-list` and exact bound `*.process-list` Routes from current Catalog | `{"action":"device.process.list","arguments":{}}` | #817–819 |
| Autonomous level / AIMO status | `route.dsg-one-v1.mcp.get-autonomous-level` and `route.dsg-one-v1.mcp.aimo-status` | `{}` | #820–821 |

**Do not assume every Route remains registered:** `spacetime_capability_catalog` and `spacetime_discover` from the current authenticated session take precedence over this dated snapshot.

## Exact execution order — Completion-first

1. Confirm actual user goal, ownership, current authenticated OAuth principal, target device and workspace from the session.
2. Read the live `spacetime_capability_catalog({})`. Match **one exact** `source_node`, `target_node`, `capability`, `route_id`, `risk`, `bind_payload`, and `route_skills[route_id]`.
3. For `bind_payload=true`, provide the validated payload in `spacetime_compose`; for `bind_payload=false`, **omit** payload from Compose Route intents and provide only the verified provider payload in Execute.
4. Call `spacetime_compose` and require the actual returned `verdict=BOUND` and `plan_hash`; Compose never approves execution.
5. For high-risk Routes, obtain the original human Owner's exact-request signed approval; never approve as the requester or reuse a different plan's permit.
6. Call `spacetime_execute` using the **exact** returned Plan ID/Hash, Route ID, authenticated principal and bound/verified payload.
7. Verify real provider output, postcondition, evidence index/hash and `spacetime_verify_evidence().valid=true`. Present a clear PASS / FAIL / BLOCK and a user-visible result.

If a permission is obtainable but missing, checkpoint only that step as `WAITING_PERMISSION` or `WAITING_APPROVAL`; continue other independent authorized steps. For a hard denied permission or unknown payload contract, BLOCK the affected step, not the whole job; avoid guessing alternate Route IDs.

## Example: actual Native read-only Compose arguments

Replace `<CURRENT_OAUTH_PRINCIPAL>` with the principal returned by your own current `spacetime_control_surface`; never copy someone else's principal.

```json
{
  "plan_id": "<NEW_UNIQUE_PLAN_ID>",
  "intent": "Read actual signed Native status; no mutations",
  "participants": [{"agent_id":"node.agent","principal":"<CURRENT_OAUTH_PRINCIPAL>"}],
  "routes": [
    {"source_node":"node.agent","target_node":"node.desktop-native","capability":"device.remote.status","payload":{"action":"device.remote.status","arguments":{}}},
    {"source_node":"node.agent","target_node":"node.desktop-native.bound.3a7acaf3015c6633","capability":"device.remote.status","payload":{"action":"device.remote.status","arguments":{}}},
    {"source_node":"node.agent","target_node":"node.desktop-native.bound.64edf8aa62b7dacd","capability":"device.remote.status","payload":{"action":"device.remote.status","arguments":{}}}
  ]
}
```

Execute a single bound route with the actual returned hash:

```json
{
  "plan_id": "<NEW_UNIQUE_PLAN_ID>",
  "plan_hash": "<COMPOSE_RETURNED_HASH>",
  "route_id": "route.desktop-native.status",
  "agent": {"agent_id":"node.agent","principal":"<CURRENT_OAUTH_PRINCIPAL>"},
  "payload": {"action":"device.remote.status","arguments":{}}
}
```

Never override a signed device target with `device_id` in `arguments`. Android 13, Android 16 and Linux are separate enrolled targets.

## Real blockers, not fallback guesses

- `route.a2a.dsg-os.browser-observe`: `A2A_DELEGATION_BRIDGE_REQUIRED`.
- `route.dsg-one-v1.mcp.list-app-builder-jobs`: `USER_OAUTH_DELEGATION_DENIED`.
- Connected status of Cinema **does not prove** browser execution.
- The original five Workroom BLOCKED jobs are explicitly **NOT APPROVED** to retry under Owner decision R74; actual cancellation is **not verified**, so do not declare them KILLED.
- A fresh Completion-first user job that delivers a usable artifact is **NOT VERIFIED** at this snapshot. A status check is not a completed customer task.

Read the [dated public evidence](/production-status-2026-11-06.md), [start page](/start) or [verification](/verification/production-status-2026-11-06). Full protected source/receipts are subject to actual account permission. Never print credentials or private repo contents into a public result.