Debt

dp report created GitHub issues client-side, forcing reporters to have direct write permission to the Harness Intelligence repository.

Resolution

The CLI now submits report drafts through the typed control-plane client. The API validates relevance, uses deterministic public metadata, dedupes open harness-report issues, and creates GitHub issues with API-held credentials. AI metadata generation remains limited to authenticated backoffice operator requests.

Evidence

• apps/cli/src/cli/report-command.ts
• apps/cli/src/control-plane/client.ts
• apps/api/src/reports.ts
• docs/runbooks/dp-cli-scaffolding.md