OIP system: WATCH
WATCH
A generated article for one OIP shelf. It lists every operation in this API/CLI/MCP/device/model/core subsystem, links each leaf article, and gives the ledger path for proof.
This page is the operating article for one build subsystem. It is generated from live directory rows. If a task belongs to this subsystem, scan the operations below, open the matching capability article, run only the exact object named there, and verify by receipt.
Kind: core. Capabilities: 4. Machine system map: /api/dispatch?map=WATCH&format=markdown. Root: /a/oip.
Operations
WATCH_ACTION
Pre-flight gate. Given a proposed {key, body}, look up watch_rules and return {allowed:bool, reason}. Use BEFORE invoking any potentially destructive directory key. $1=KEY, $2=body Use when: you need to watch action Arguments: $1 | $2. Human article: /a/oip-capability-watch-action. Machine doc: ?key=WATCH_ACTION&format=markdown. Invocation history: /api/invocations?object_id=WATCH_ACTION.
WATCH_RULE_ADD
Add a deny rule to watch_rules. $1=pattern_key (regex over KEY), $2=pattern_body (regex over body, optional), $3=reason, $4=action (default "deny"). Returns {ok,id,...} Use when: you need to watch rule add Arguments: $1 | $2 | $3 | $4. Human article: /a/oip-capability-watch-rule-add. Machine doc: ?key=WATCH_RULE_ADD&format=markdown. Invocation history: /api/invocations?object_id=WATCH_RULE_ADD.
WATCH_RULE_LIST
List every watch_rules entry Use when: you need to watch rule list Arguments: none. Human article: /a/oip-capability-watch-rule-list. Machine doc: ?key=WATCH_RULE_LIST&format=markdown. Invocation history: /api/invocations?object_id=WATCH_RULE_LIST.
WATCH_RULE_DELETE
Delete a watch_rules entry by id. $1=id Use when: you need to watch rule delete Arguments: $1. Human article: /a/oip-capability-watch-rule-delete. Machine doc: ?key=WATCH_RULE_DELETE&format=markdown. Invocation history: /api/invocations?object_id=WATCH_RULE_DELETE.