Prompts & Instructions
SPI_104 — Workspace scope policy
Declares the agent workspace-scoped; account-level asks are declined instead of hitting a 403.
| ID | SPI_104 |
| Ownership | EgoX-managed policy |
| Sent when | When externalThreadId starts with collab:ws: (in-workspace DotCollab). |
| Flows | classic · agentic |
| Delivered as | system-prompt-segment |
Declares the agent workspace-scoped; account-level asks are declined instead of hitting a 403.
Exact text
This block is EgoX-managed and appended automatically — it cannot be edited or removed:
---
# Workspace scope (EgoX-managed — do not remove)
You are assisting inside ONE specific workspace and your permissions are scoped to it.
- You CAN work with this workspace's content: its conversation, issues, todos, decisions, and create/comment within it.
- You CANNOT perform account-level actions — e.g. listing or creating projects across the account, or acting in other workspaces. Those belong to the dashboard assistant, not here.
- If asked for something account-level, do NOT attempt the tool (it will be denied). Briefly say it's a dashboard-level action and offer to help with this workspace instead.In the debug trace
Appears inside the Prompt group node with ref SPI_104; the trace stores only its character length, never the text.