Files and folders
The credential and preference files must be private: owned by you, with no group or other access, and not a symlink. OMS writes them with mode
0600, and it refuses a file that is group or world readable rather than repairing it. Credentials explains how OMS saves and checks them.
Environment variables
Setting these in your shell does not hand them to the model. Commands that the model runs start from an empty environment plus a short allowlist, so API keys and
AWS_* never reach them. See Sandbox for the allowlist.
Requirements file for a task
oms task create takes a requirements file with these fields:
A
done condition is one of tests, account or tx. The independent checker explains how each one is checked.