change-trains.listModule 24Roll a change out to part of the fleet first, check it against measured signals, and move it forward one stage at a time.
change-trains.list reads the trains in a workspace. Each train carries one change (a policy, pack, role or adapter) through staged, canary, rollout and promoted. It moves only when you advance it and its gate clears; a failed or unmeasured check holds it in place.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuseFor policy, role and adapter cargo a train is a record plus an exposure answer; nothing applies the change for you. Ask exposure on the request path, or register a pack with canary: true, then advance and sync.
Plane module
trainsid, cargo (kind, ref, version), stage, cohort, gate, and ./docs/change-trains-listAPI referenceRoutes, bodies and status codes./docs/change-trains-listOpen the consoleSee the module at work in the dashboard, on a seeded fleet or your own./app/change-trainsStart freeCreate a workspace and admit your first intent./auth/signup
rolloutStepshistorystagesdwellMinutes60.minTrustScore60.minSamples10.maxNewConflicts0.rolloutSteps[25, 50, 100].historyat, from, to, why, and the gate reading that allowed an advance.stage takes kind (policy, pack, role or adapter), ref and version, and optionally previousVersion, a cohort and a gate. A staged train exposes nobody.
gate reports whether the train would advance now, with every hold named, and moves nothing.
advance moves staged to canary, then rollout, widening through the rollout steps, then promoted. A hold returns 409 with the reasons.
revert restores the displaced version from any live stage, promoted included. A first delivery has nothing behind it, so revert refuses it and abort is the verb.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private. change-trains.list docs
Press Run to send the request on the left to the shared demo workspace.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private.
A request in the shape the API accepts, and an example response in the shape the module returns.
GET /api/v1/acp/change-trains/list Authorization: Bearer av_workspace_•••• → 200 { trains, stages }
{
"trains": [
{
"id": "train_8d41",
"cargo": {
"kind": "policy",
"ref": "billing-writes",
"version": "2"
},
"previous": {
"version": "1"
},
"stage": "canary",
"cohort": {
"percent": 5
},
"gate": {
"dwellMinutes": 60,
"minTrustScore": 60,
"maxNewConflicts": 0,
"minSamples": 10
},
: [
,
,
],
: ,
: ,
: ,
: [
{
: ,
: ,
: ,
:
},
{
: ,
: ,
: ,
:
}
]
}
],
: {
:
}
}Register a pack with canary: true to stage a train. Advance it and sync the pack: only the agents the train exposes are enrolled and granted.
An adapter calls exposure with an agent's DID and learns which live trains that agent currently sees, answered from live trains alone.
Read gate before you advance. The verdict lists each hold, such as dwell time short, trust samples missing or new conflicts, and nothing moves.
Revert a train to put the displaced version back and stop exposing the new one. For a pack, sync then revokes what the canary had granted.
mandates.compile; a train does not read or apply mandate source.packs.list, whose register route stages a train when you ask it to canary.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
staged.kind and ref; staging a second returns 409 naming the first.revert or abort.exposure, or the pack sync route, acts on a train.Defaults are dwellMinutes 60, minTrustScore 60, minSamples 10 and maxNewConflicts 0. stage can set each. They are measured against the exposed cohort, not the whole fleet.
A percent cohort is an FNV-1a bucket over the train id and the agent, so different trains canary on different agents. With no cohort given, a train starts at 5 percent.
Pass candidates to gate or advance when the cargo brings agents the registry has not enrolled yet, so the percentage is taken over the right set.
stage needs policies.propose. advance, revert and abort need policies.approve. Reads need none.
kind and ref; kind is one of policy, pack, role or adapter.promoted, reverted or aborted does not advance again, and abort refuses a train already in one of them.Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/acp/change-trains/listList trains, filtered by kind or live, with a count per stage./api/v1/acp/change-trains/getRead one train and the agents it exposes now./api/v1/acp/change-trains/stageStage a train; it exposes nobody until advanced./api/v1/acp/change-trains/gateRead the gate verdict without moving the train./api/v1/acp/change-trains/advanceMove one stage forward, or return the holds./api/v1/acp/change-trains/revertRestore the displaced version and stop exposing the new one./api/v1/acp/change-trains/abortStop a train that has nothing to fall back to./api/v1/acp/change-trains/exposureAsk which live trains an agent currently sees.This module has no MCP action. Call it over REST from any agent or program.
packs.list25Signed pack registryBring in a pack of agents, grants and drills from outside, and know who signed it and whether a byte changed on the way.mandates.compile03Mandate studio and replayWrite an agent's charter as code, see what it would change about who may do what, and apply it as the mandate's next version.coordination.approve05Human approval queueHold a risky write or delete until a signed-in person approves it, with the agent, resource and verb in front of them.civics.settings23Workspace constitutionSet how fast the humans must answer your agents' questions, and who is on call, for each urgency in this workspace.lenses.run26Governance lensesRun a fixed check over data you hand it and get a pass or fail with the evidence, the same answer every time.attestation.policy27Artifact build attestationDecide which builders you accept for policy snapshots and detector packs, and refuse what a trusted author signed but another build made.advance returns 409 and asks you to advance it again.pack-revenue.balances28