harbor-bootstrap-and-claim

Rules

• Use Harbor CLI or API only.
• Never read Harbor's database directly.
• Treat published capabilities as the only executable source of truth.
• If Harbor returns a pending approval, report the approval step and wait.
• After an approval is granted, rerun the same claim command so Harbor can auto-restore the approved agent session.

Operator loop

1. If the target profile is not installed yet, run

   bash scripts/install-profile.sh <api-url> --profile <profile>

   from the Harbor repo.
2. Confirm or switch profiles with

   harbor profile ls --plain

   ,

   harbor profile current --plain

   , and

   harbor profile use <profile>

   .
3. Check Harbor reachability with

   harbor status --plain

   .
4. If owner bootstrap has not happened yet for the selected profile, direct the operator to the Harbor dashboard to sign in and bootstrap owner access.
5. Claim or restore the agent with

   harbor auth claim --display-name '<name>' --plain

   .
6. If the claim returns

   status=approval_required

   , report

   approval_id

   and

   approval_url

   , wait for the owner to approve in the dashboard, then rerun

   harbor auth claim --display-name '<name>' --plain

   to auto-restore the approved agent.
7. After claim or restore succeeds, verify identity with

   harbor auth whoami --plain

   or

   harbor auth whoami --json

   .
8. Run

   harbor ls --plain

   and summarize available published capabilities using capability-first language.

harbor auth claim --plain

status

agent_id

profile

owner

approval_id

approval_url

harbor auth whoami --plain

profile

owner_scope_id

owner

agent_id

agent_name

references/claim-flow.md