ADAPT1_API_KEY. Give the agent the variable name, never the key’s value.
Give the agent a bounded build brief
Choose one prompt. Replace the application requirement at the end, then run it in your repository.Sources the agent should use
Review the implementation
1
Check the request boundary
Confirm the versioned base URL, bearer header, field names, types, and state scope.
session_id: ignored is a compatibility placeholder, not a tenant selector. Do not allow browser code to read the API key.2
Check result handling
Reject malformed or unexpected responses. Treat empty evidence, accumulating state, and abstention according to the route. A confidence field is not automatically a correctness probability; a stored write is not automatically an admitted update.
3
Check state and retries
Verify which operations can change state. Preserve Domain IDs for continued use, avoid resets as setup shortcuts, and reconcile an ambiguous write before resubmitting it. Mock tests must not call the live API.
4
Verify independently
Run the direct request in the quickstart with a dedicated test key before debugging the application integration. Then run the generated application path. Keep sanitized failures and actual response records; never paste authorization headers into a prompt.
Extend one workflow at a time
Continuity and correction
Add retained evidence without inventing a Domain requirement.
Discovery configuration
Change the target or discovered structure with a matching event contract.
Feedback from execution
Bind a measured outcome to the actual decision or context.
Numeric control
Keep trajectory configuration, executor settings, and recovery semantics distinct.
