paperclipai/paperclip · error · HttpError

low_trust_inline_sensitive_env_denied

low_trust_inline_sensitive_env_denied

Error message

Low-trust execution cannot use inline sensitive env value ${source}.${key}

What it means

Trust-policy enforcement in assertLowTrustEnvConfigAllowed: an environment config destined for a low_trust_review run declares an inline (plaintext) sensitive env value at source.key (e.g. environment.env / agent.env / project.env / routine.env). Low-trust executions may only reference scoped secret bindings, not inline values, so launch preparation aborts.

Source

Thrown at server/src/services/heartbeat.ts:957

    errorFamily === "provider_quota"
    ? {
        errorFamily,
        retryNotBefore: readTransientRetryNotBeforeFromRun(run),
      }
    : null;
}


function isSpawnLikeFailureMessage(value: unknown) {
  if (typeof value !== "string") return false;
  return /failed to start command|spawn\b|\bENOENT\b/i.test(value);
}

// A sandbox provider plugin's worker can be briefly down during its own
// restart window (e.g. a rolling deploy of the plugin worker process). Lease
// acquisition fails immediately in that window, but the condition is
// transient and self-healing, so it must be treated as retryable
// infrastructure rather than a terminal setup failure. See
// resolveSandboxProviderPlugin's "worker_unavailable" message in
// environment-runtime.ts (":808"), e.g. 'Sandbox provider "kubernetes" is
// installed via plugin "acme.kubernetes-sandbox-provider", but its worker is
// not running.'
//
// This is anchored on both "is installed via plugin" and "but its worker is
// not running" so it does not also match plugin-environment-driver.ts's
// unrelated, permanent "provider not installed" message ('Sandbox provider
// "X" is not installed or its plugin worker is not running.'), which
// coincidentally contains the same "worker is not running" substring but
// describes a terminal condition that must not be retried.
function isSandboxProviderWorkerUnavailableFailureMessage(value: unknown) {
  if (typeof value !== "string") return false;
  return /sandbox provider .* is installed via plugin .* but its worker is not running/i.test(
    value,
  );
}

View on GitHub (pinned to 01ad858492)

Solutions

1. Bind the sensitive value as a secret reference instead of an inline env value for low-trust execution.

When it happens

Trigger: Thrown at server/src/services/heartbeat.ts:890 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of paperclipai/paperclip@01ad858492 (2026-08-18). Data as JSON: /api/errors/4ef9ee4ba2c9fcbe. Report an issue: GitHub.