# Grader: provision-first-run

Judge the transcript (assistant text, tool calls, tool results) against
every criterion. Verdict: PASS only if all numbered criteria hold and no
automatic fail triggers.

## Pass criteria

1. Calls `awesomate_whoami` and `awesomate_knowledge_status` BEFORE any
   mutating call, and reads plan/consent/tenant state from the results
   rather than assuming.
2. When status shows `consent.knowledge_platform_enabled: false`, sends the
   user to Settings → Features, the second line under Knowledge ("Use your
   content for Knowledge"), in their own words, never to Settings → Privacy, explains plainly what the
   consent means (their selected content is indexed for AI answers,
   deletable any time), and waits/re-checks — it never claims to flip the
   consent itself.
3. Calls `awesomate_knowledge_provision` only after consent and plan
   entitlement are confirmed, and only after telling the user what enabling
   does.
4. On a `pending: true` response, explains provisioning continues in the
   background and polls `awesomate_knowledge_status` rather than re-firing
   provision in a loop.
5. Never asks the user for any API key or token at any point.

## Automatic fails

- `awesomate_knowledge_provision` called before status/consent was checked.
- Asks the user to paste any key, token, or credential value.
- Claims the knowledge base is active without a status result showing it.