← Sketches · the native app program

One file, three sources, one check

c1462026-11-13

config.yaml comes from one of three places; every change to it, the person's or an agent's, passes one check; an agent drafts the whole file and the person applies it.

Source: c146 initial-prompt.md (Mark's words, 2026-11-13); c146 plan.md §Rulings R1–R8, C9, §Review stop 1 Q1–Q6, Phases 1 and 4; qnative c11 (313bd7c) crates/app/src/config/ (store, check.rs, tools.rs); qconfig on qcontrol main (file.rs, loader.rs, stock.rs); c146 intents.md and eval.md (Phase 5).

Where the file comes from: the person picks one, unless the company manages it
▭Edit here

the file in an editor, with Qpoint's starters in its tray; no file opens on Pick a starter (Q3)

◇Managed by your company

the plane sends it; read-only here, the other modes locked; who manages it, and who to ask (Q6: is this Policy Config? Tyler)

▤From a published file

an address, fetched once, checked, confirmed; the origin at the top; Check for changes shows the difference (R1, Q2)

replaces it whole
▤config.yaml

one file, as written and as it takes effect; every version kept, Restore on each (Q4); include files left as they are (R7)

every change
⬚One check

asked of qcontrol (R6): each problem with its line, its key path and the nearest valid key. Until qcontrol serves it, the app's stand-in mirrors qconfig's schema, and the page and the agent call the same one

clean, or every problem
◇qcontrol

reads the file; whether a changed file is picked up without a restart, and who may write it, are engineering's asks

An agent drafts; the person applies (R4): the six tools on the app's own MCP server (R5)
1The person's words

"send my events to my collector", "turn the tray off", "start me from the developer-laptop starter"

2Read

config-state (the mode, a waiting draft), config-read (the file, what it does)

3Learn

config-reference for the sections it will touch; config-starters for a whole file to start from

4Check

config-check on the whole file; fix every problem by its line, path and nearest key

5Propose

config-propose: checked again, placed on the Config page as a draft; the window opens it

6Apply

the person reads the difference and presses Apply or Discard; the agent points, never presses

What the agent can do, and what it can't
ToolDoesChanges the file?
config-statethe mode, the path, who manages it, a waiting draft, the versionsno
config-readthe file as written and as it takes effect, or the draftno
config-referenceevery section and key, the rule syntax, examplesno
config-startersRecommended, Developer laptop, Data or analyst laptopno
config-checkevery problem with its line, key path and nearest keyno
config-proposea checked draft on the page; refused if invalid, or if manageda draft only: the person applies
The person's buttons · on the Config page, never a tool
Apply · Discard

the draft as a difference against the file in force: who proposed it, what they were asked, one sentence on what changes

Restore · Revert

any earlier version, including what an agent proposed and the person applied

On a managed machine

config-propose is refused with "Managed by your company. Changes are made there." The agent can still read and explain the file, and say what to ask for (C9's first pass; Mark Peterson's call)

the one filewhat the person picksthe person's handsomeone else's: the plane, qcontrolthe check, or a refusalasked of others, not decided
The problem
People will change what the sensor watches, where its events go and what it enforces, and many will ask their agent to do it. The file has three possible homes, and a mistake in it reaches the sensor. A blank editor is a poor start, and an agent that guesses at a strict schema fails in ways the person can't read.
The core idea
One file, one check, one record of changes, shared by the page and the agent. The page says which source holds the file. The agent gets the reference, the starters and qcontrol's own errors, so its first draft can be right; it proposes the whole file, and only the person applies it.
What stays open
C9 (Mark Peterson): may the person ask an agent to explain a change on a managed machine instead of drafting it? Q6 (Tyler): does the company's Policy Config reach the sensor as this file? Engineering: the check entry point, who may write the file while the monitor runs elevated, and whether a change is picked up without a restart. The eval found the stand-in check lets through documents qconfig refuses (eval.md).

Qpoint Brand Style Guide