Reviews an Agent Package before it is installed and before any credential is bound to it, and writes down what the agent may reach, what it may spend and what it must never do, with the reason for each. It flags every permission the package asks for that has no recorded reason, refuses a package whose programs reach a system its declaration does not name or whose owner set no spending limit, lists as a warning every network address written into its scripts, and lists what it lets through knowingly. It grants nothing and changes nothing.
the first step of reviewing a process, before anything is judged
Pinned to revision 55d204e3898c, so it is the text this page describes rather than whatever the author pushed since.
Every link opens the file at its source, pinned to the revision this page describes.
