Restore Deleted Jira Tickets? Our Guard Dog Kept a Copy
11 minCogniRunnerWatch on YouTube
Recorded on Jira Cloud Premium (team-managed) with CogniRunner 1.35.20. Screens as they looked on 30 October 2026.
Our animated presenter Elzi gets admin rights on our demo Jira for a day and uses them for revenge. Her small edits to three work items go unnoticed, because the guard dog leaves description and status edits alone unless that field is protected.
When she deletes a work item, which Jira says can't be undone and Atlassian can't restore, CogniRunner's guard dog makes a new one from the copy it kept, with a new key. Comments, attachments, links and history don't come back. When she takes a step out of the workflow, the dog puts it back. She moves the whole space to the trash, and the dog takes it out again and removes her Administrator role, which is how she ends up locked in. Jira itself keeps a trashed space for 60 days, and Jira and site admins can restore it.
Afterwards the dog explains what it did and how to declare a planned change first so it stays, and we look at the listener and the virtual administrator Mihai also set up. The checklist for setting it up is on this page. We recorded with CogniRunner 1.35.18 to 1.35.20, which the Marketplace lists as 7.46.0 to 7.48.0.
The app in this episode
Copy the config
What the episode uses. Swap in your own keys and names before you paste. The time link plays the moment it is used.
Guard a Jira space against an admin's revenge: a CogniRunner checklist
ChecklistUsed at 10:03
1Guard a Jira space with CogniRunner's guard dog (Jira Cloud, CogniRunner 1.35.19; an organisation admin sets it up)
2
31. Where: CogniRunner admin page > Agents > Setup > Guard dog card > Change settings. Only organisation admins see it.
42. Protected projects: add the space (e.g. <your-space-key>).
53. Switch on what you want, each is off by default: Recreate deleted issues, Restore trashed projects,
6 Remove the vandal's project admin role.
74. Warn only (dry run) is ON by default: nothing is taken from anyone until you turn it off.
85. The workflow put-back and the role removal are agents (Listeners tab): one on 'Protected workflow changed'
9 with 'Put the workflow back', one on 'Destructive act undone' with 'Remove the vandal's project admin role'.
106. Change declarations: a project admin declares a big change first (Your setup > Change declarations);
11 with 'Need an organisation admin's approval', an org admin approves it (Approve, then Approve).
127. What it does NOT do: it never blocks a delete or an edit; a deleted issue comes back as a NEW issue with a
13 NEW key (comments, attachments, links, history and status stay gone); a space deleted for good cannot come back.
148. A declared change is left alone while it is covered; the workflow snapshot only moves to it when an organisation
15 admin takes a new snapshot (Take a new snapshot now) or makes the change themselves.
16Try CogniRunner on your own site
Install it from the Atlassian Marketplace and follow the episode on your own Jira Cloud. Free for sites up to 10 users.
Words you'll hear
New to this? These are the terms the episode uses, in plain words.
- space
- Where a team's work lives; Atlassian renamed project to space.
- Also called: project
- work item
- One ticket on the board; Atlassian renamed issue to work item.
- Also called: issue, ticket
- workflow
- The statuses a ticket moves through, To Do to Done.
- Administrator role
- The space role that can change its settings and workflow.
- Also called: project admin
- change declaration
- Telling the guard dog about a big change before making it.
Transcript
The narration as spoken. Select a time to play the video from there.
0:00Price cuts for Sentinel Vault and Cost Slasher
0:21Why Elzi takes revenge on the demo Jira
0:21Right. Last time I told you I still have a job. I do. I look after our demo site, and this set is where I live.
0:30I sleep under the desk, and on Tuesdays the cleaner dusts me.
0:35Oh, it's the boss. Hi, Mihai. Did you finally find my salary?
0:42Big news? Go on.
0:44Hm? Wait... the price cut came out of my raise? Oh. No, you're not joking.
0:51Two weeks at the beach. Lovely. Who minds leanzero-demo? Oh. Me, on my own.
1:00Oh, ok, ok, yeah sure. Uhmm, I will take care of it Mihai, don't you worry.
1:06So. No raise, and no beach for me. well if that's what's going on, then I think it makes sense to redecorate leanzero-demo a bit.
1:15Admin edits three Jira tickets and nothing happens
1:16First stop: Payback Demo. I'm taking the name as a sign. I run this space, so I can change almost anything. Starting with this description.
1:28There. Now it says what I really think of it. Small stuff first, let's see who notices... Next victim.
1:39Three days old, and nobody's touched it. Off to In Progress. Let them wonder who started it. Ooh, and this one's been bugging me.
1:50Still too subtle. New description... "works on my machine." And now, straight to Done. Untested. Somebody finds that in a month and cries.
2:04Nothing. No alarm, no email, nobody asking who did it. I could get used to this.
2:11Deleted Jira ticket comes back with a new key
2:11It's quiet. Too quiet, if you ask me. Let's delete something.
2:18Oh, look. Jira says it's irreversible. That's kind of the point.
2:23I'll even type it for them. Delete. And, poof.
2:29Hold on. Did something just bark?
2:32Okay, that card wasn't there a second ago. And that number? Never seen it. Let's have a look.
2:39Uh... that's my ticket. Same title, same description. And a note saying it's a new issue.
2:46WEIRD... ok nevermind, must be my imagination.
2:49She removes a Jira workflow step and the dog puts it back
2:49Well. Let's go bigger. Somebody's supposed to check every ticket in In Review before it's done.
2:58So In Review comes out, and nobody checks anything ever again.
3:02Now I save it, before I change my mind. Not that I will.
3:08Come on, load. I've got a villain laugh to do.
3:13MUHAHAHAHAHA
3:18Wait, what is going on? Is that a... dog?
3:21You mangy thing, you're not allowed here! Go on! Get!
3:27He's not budging. Fine, you can stay there, Scooby-Doo. I've got a workflow to admire.
3:33Hey. Did you just put In Review back? You did, didn't you.
3:38Mihai went to the beach and left a dog to babysit me.
3:43She moves the Jira space to the trash, and it comes back
3:44Okay. Time to go. Quietly, like a ninja, before he does anything else... Actually, no. One last thing.
3:55If I can't have the workflow, nobody gets the space. Now, where's that delete button...
4:01There you are. Am I sure? Oh, I'm very sure. Hasta la vista, Payback Demo.
4:09That ticket came back. Let me make sure this one's really dead.
4:17Huh. Still here? It's supposed to be dead.
4:21Right. Round two. This time I'm doing it properly...
4:28Where's Delete space? Where's anything? The dog took my admin role.
4:37Locked in without her Administrator role
4:49The guard dog explains itself, and why declared changes stay
4:49In jail, for now. I'm the guard dog that comes with CogniRunner. Mihai installed it before he left.
4:58A guard dog, in an app? What is this, a John Wick sequel? He never mentioned you. Besides, I hardly did anything.
5:06He didn't need to. Payback Demo is on my protected list, so I watch what happens to it.
5:13Then you're not very good at it. I tidied up three tickets and you didn't say a word.
5:19Tidying's allowed. Deleting isn't. I keep copies of the tickets here, so the one you deleted came back as a new one. Same with the space. I fished it out of the trash.
5:31So you're basically Lassie for Jira... Adorable. The bark was you, then. And my workflow? You just sat there.
5:40I had help. Mihai set up two AI agents for me. One fixed your workflow, and the other one took your admin role.
5:49Two AI agents. For me. I'm flattered. Okay, the workflow was me. The space? Anyone could have clicked that.
6:01Anyone could. You did. It's right here, next to your name.
6:06Fine. Okay. Yes, it was me. My raise paid for his price cut, so Payback Demo finally earned its name. How do I fix this, officer?
6:18Then you can have your role back, on one condition. Next time you want to make a big change, you tell me first.
6:28Tell a dog?! Okay. Say I wanted a testing step. That ticket I sent to Done never got tested.
6:37In writing. Which project, what you're changing, and for how long. Once it's approved, I leave it alone.
6:45Signed with a paw print, I assume.
6:48Adding a testing step. Declared. To my parole officer. And who approves it? Mihai's at the beach!
6:58He approves from the beach. He's very quick when it doesn't cost him anything.
7:03Unlike my raise. Right. Where was I?
7:09A new status. I'm calling it Testing, because somebody should.
7:15Before Done, please. Not after.
7:20Alright, alright, I know where it goes. Save it.
7:24There. Now we just sit here and wait, don't we?
7:29We do. I'm very good at waiting.
7:32Great. A professional waiter. Truly gripping.
7:38Okay. Did you keep your paws off it?
7:42Still there. Look, Testing stayed!
7:45You told me first, and Mihai said yes. So I stayed out of it.
7:50Mihai also set up a listener and a virtual administrator
7:51A dog with a rulebook. Mihai never taught me anything. How did he teach you?
7:58Teach me? He's at the beach. He just wrote me a listener. Pull up a chair.
8:04It wakes up every time I undo something on Payback Demo.
8:10Hang on. Payback Demo, and spaces coming back from the dead? That's very specific.
8:18Very.
8:18So I keep you in work. You're welcome. And then you bite?
8:23I don't bite. The agent does. Mihai tells it what to do, in plain English: take her admin role.
8:32Excuse me? Not even a please!
8:35Relax. This one's a practice run. Nobody goes to jail.
8:40Shame. I had a list.
8:43Put the list away. I'm not his only helper. He's got virtual administrators too.
8:49Her name's Nadia. Mihai names all of us. I got "the dog."
8:55Nadia sounds like a Bond villain... Is she here to replace me?
8:59Not yet. She works whatever Mihai puts in her queue.
9:04I hate her already. Please tell me she can't read my diary.
9:10She can read Payback Demo.
9:13My crime scene, lovely. And can she change it? Let me guess... nothing?
9:18Nothing. Not until Mihai says so.
9:23Does she at least get a lunch break? Because I've never had one.
9:28No. She checks her queue every hour. No lunch.
9:32She gets working hours. And hard limits.
9:36Hard limits. Nobody ever gave me those. Look how that turned out.
9:41One last look. Then she's hired.
9:46So it's an intern.
9:48One that reads first.
9:50Read first. The bar is on the floor, and I still tripped over it.
9:55Now, the space and the workflow... could you tell Mihai they were just his imagination?
10:00He already got the email.
Under the hoodExpert
How it works, the permissions it asks for and what it does not do, for anyone checking it against the docs.
How it works
The two agents call the AI provider the site's admin configured in CogniRunner; issue copies and the space restore run without AI.
Forge storage on Atlassian: issue copies 90 days after the last edit, workflow snapshots, declarations, and removed-role rows 30 days.
Permissions
- read:jira-work
- Keep a copy of each issue edited in a protected project.
- write:jira-work
- Create the new issue from that copy and add the app's comment.
- manage:jira-project
- Take a trashed project back out and remove or give back the Administrator role.
- manage:jira-configuration
- Snapshot a protected project's workflows and put them back.
- storage:app
- Copies, workflow snapshots, declarations and logs in Forge storage.
Limits and what it does not do
- At most 25 issue copies per account in 10 minutes; up to 1,000 existing issues copied when a project is protected.
- At most 3 role removals an hour; only for an act the guard dog undid in the last 60 minutes.
- Jira raises no app event for a workflow change: a guard task checks every 30 s while a project is protected.
- It does not block a delete or an edit; Jira tells an app after the fact.
- It does not bring the deleted issue itself back: the copy is a new issue with a new key.
- It does not bring back a space deleted for good, or remove an org or site admin, a last admin, or a group-held role.
Sources
More episodes
14:15Confluence Deleted Page Not in Trash? What Still SurvivesA Confluence page was deleted and the trash was emptied. We purge one on camera and show what a purge takes for good, and what Sentinel Vault's activity history still shows about who approved it. Recorded on Confluence Cloud Premium.Sentinel Vault
22:03A Confluence Approval Workflow That Survives an EditAn approved Confluence policy gets edited later, and the auditor asks which version was approved. Sentinel Vault undoes the edit, keeps the signed PDF as approved and shows who approved which version. Recorded on Confluence Cloud Premium.Sentinel Vault