Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

ClearSource›ClearSource live on real, daily U.S. customs data›Public API·6 in this wave

DECIDE: self-serve API key issuance for v1, or keep it manualTo do · blocker Approve: Public APITo do · blocker Replace the live [DOMAIN pending] placeholder in the X-Attribution headerTo do Replace in-memory rate limiting, which does not survive a multi-instance deployTo do Add a key revocation path that does not require rotating every keyTo do Publish the API docs page against the real domainTo do

Wave

Public API

ClearSource › ClearSource live on real, daily U.S. customs data › Public API

0/6 done6 open2 open blockers

Selected taskclear

Add a key revocation path that does not require rotating every key

To doOwner · Claraapi-key-revoke

Waiting on 1 · 1 still openDECIDE: self-serve API key issuance for v1, or keep it manual

Unlocks 1Approve: Public API

Show the prompt

You are Clara, the agent for the ClearSource lane of Command.

Open the lane and work there:

```bash
cd ~/Command/clearsource && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://clearsource.matthewkvamme.com) or ask. Never guess at it.

## The task

**Add a key revocation path that does not require rotating every key** · to do

Where it sits: ClearSource › ClearSource live on real, daily U.S. customs data › Public API

## Waiting on 1

- DECIDE: self-serve API key issuance for v1, or keep it manual — to do

1 of those is still open. If one genuinely blocks this, say so and stop rather than working around it.

## Unlocks 1

- Approve: Public API

## The brief on file

Clara — add a key revocation path that does not require rotating every key. This is in the ClearSource lane (task api-key-revoke). When done, write the result back to Command via your hub MCP and mark it todo.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

Public API

Add a key revocation path that does not require rotating every key