Troubleshooting
Diagnose account, Candidate, Operation, Preview, delivery, and MCP failures.
Start with the authoritative resource that failed. Record the Organization, stable Backend, Environment, Candidate or Operation ID, correlation ID, time, status, and exact error code. Never copy a credential, bootstrap code, normalized Content value, or private infrastructure URL.
| Symptom | What to check |
|---|---|
| Cannot sign in | The deployment’s configured Google Workspace domain, callback origin, and trusted origins. |
| Governance area or action is missing | The fixed PermissionKey, every required resource selector, credential state, and selected Backend/Environment. Navigation is explanatory; a direct request still fails closed. |
| Candidate is invalid or superseded | Validation findings, exact base manifest/revisions, dependency versions, policy version, authorization version, and expiry. Reread state and propose a new Candidate. |
| Operation is awaiting input | Open Changes and verify the effective publication or destructive policy, approver permission, distinctness, and Candidate digest. |
| Operation failed | Open Operations for transition evidence, item outcome, retryable flag, quota use, lease/heartbeat, and correlation ID. Retry only when Jetrepo marks the failure eligible. |
| Cancellation appears delayed | Cancellation is cooperative; work stops only at the Operation Definition’s next declared safe point. |
| Preview fails | Handoff expiry/replay, Candidate digest/base, target verification/origin, Environment generation, operation.read, previewTarget.read, and previewSession.create. |
| Delivery request fails | Credential type and scope, stable Backend/Environment or Alias, perspective, locale, filter, cursor, and Published manifest/materialization health. |
| Agent loses access | Identity or grant revocation, grant expiry/constraints, live human role changes, Backend/Environment scope, and authorization revalidation. |
Before retrying, reread the Operation. Idempotency prevents duplicate canonical execution, but a blind external retry can still create a different proposal if it changes the Candidate or idempotency key.
Do not include credentials, private Content, personal data, or raw audit values in logs or screenshots. Jetrepo defines no hosted support SLA, universal rate limit, billing plan, or infrastructure-capacity promise.