Reviews an Agent Package before it is installed and before any credential is bound to it, and writes down what the agent may reach, what it may spend and what it must never do, with the reason for each. It flags every permission the package asks for that has no recorded reason, refuses a package whose programs reach a system its declaration does not name or whose owner set no spending limit, lists as a warning every network address written into its scripts, and lists what it lets through knowingly. It grants nothing and changes nothing.
before an Agent Package is installed and before any credential is bound to it, to say what it may reach, spend and never do, and why; after Review and before Package and Deploy, for any package from any builder. It reads a package, not a running agent
Pinned to revision 54a78a72c8e7, so it is the text this page describes rather than whatever the author pushed since.
Every link opens the file at its source, pinned to the revision this page describes.
