Evidence record / paperclip

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-24-paperclip-beta-google-workspace-setup-initially-requests-read-and-write-across-three-services

Beta Google Workspace setup initially requests read and write across three services. New-account setup combines Gmail, Drive including Docs/Sheets/Slides, and Calendar under one google-workspace connection and grant. All three start enabled with read/write authority; users can disable or narrow groups before consent. The default request has nine scopes, and actual provider-granted scopes are rechecked per call. Existing individual connections stay supported without automatic merger. Managed OAuth remains limited to registered internal testers during preview; other companies need their own eligible OAuth app and enrollment. The implementation merged on 2026-10-19.

Channel: preview-or-beta. Half: both. Date: 2026-10-23.

Operator consequence: On 2026.1023.0-beta.0, review the combined scope request rather than assuming earlier individual-app choices constrain a new account. Deploy matching instance/broker registries and qualify the provider-granted subset. One setup flow can eliminate repeated consent plumbing, while increasing the consequence of accepting broad defaults.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-paperclip-beta-google-workspace-setup-initially-requests-read-and-write-across-three-services

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact