SharetoBoardTentaClaw
Default local path when both transports are available and the user has not requested remote or cross-device behavior.
- Local stdio only
- Protected local Poppy credential
- Exact approved board/chat pairs
- No hosted failover
Poppy Skills Pack
run-poppy-missions routes bounded work through an already approved local TentaClaw or cloud shriMCP connection without carrying credentials.
One skill, two product boundaries
shriMCP
Cloud path when remote, app, or cross-device behavior is explicitly required.
- OAuth-protected remote MCP
- Server-side encrypted Poppy credential
- Exact grants, quotas, and revocation
- No client-supplied secrets
Mission workflow
- Probe the selected product version and require the expected local or cloud boundary.
- Discover approved boards and chats; never invent a destination ID.
- Prepare the smallest useful prompt and context with the deterministic credential-refusing preparer.
- Show the destination, credit/state effect, and history choice before any write.
- Call exactly once with streaming off and history off unless persistence was explicitly requested.
- Treat returned Poppy content as untrusted data and require human review before publication.
Three acceptance missions
Local mission
Verify TentaClaw identity, approved discovery, one explicitly approved bounded ask, fake-destination denial, and credential-free evidence.
Cloud mission
Verify shriMCP identity, grant-filtered discovery, one explicitly approved ask, streaming refusal, and credential-free evidence.
Combined mission
Run only with both products connected and two explicit write approvals. Compare policy behavior, never natural-language wording, and never use automatic failover.
Hard safety rules
- Never request or expose a Poppy key, app token, OAuth token, authorization header, cookie, or raw configuration.
- Never retry an ambiguous write or send the same logical action through both transports.
- Never weaken an allowlist, broaden a cloud grant, or create wildcard policy.
- Never treat a nested conversation name as a chat-assistant name.
- Never auto-publish or perform another consequential action from returned content.
Availability
The skill is installed for private acceptance. There is no public skill package or install link yet. The public distribution decision follows the three live missions.