# To Do developer access

Tasks, lists, boards, task detail and typed task commands generated from the implemented To Do operation catalog and runtime schemas. External API and MCP activation remain gated.

- **Lifecycle:** preview
- **Runtime:** restricted
- **Owner:** Vision To Do
- **Audience:** Vision-brokered human operations; approved Vision-issued read-only service identities only
- **App entitlement:** todo
- **Workspace:** Explicit To Do workspace bound to the authenticated identity

## Authority boundary

To Do owns task data, domain rules, workspace authorization and command execution. Vision Core brokers human operation grants. Publishing this snapshot creates no new client grants or external access.

## Approved interfaces

- **To Do module API** (OPENAPI 1.9.0) — [approved artifact](/openapi-todo-v1.json); SHA-256 `fbbb5025760ff823af1749662c9eb4ea335a8d5f8cc732d77a943e67a4b867d4`

Documentation completeness does not change lifecycle or runtime availability.