Separate planning aid · 10 October 2026

A scope names the target, action, privilege, policy version and time window. A preapproved diagnostic does not authorize a restart. Revocation withdraws a grant; an expired or changed-target request needs renewed authorization. A failed action stays failed until its outcome is independently checked.

Fictional exercise: a read is allowed by a bounded policy, a restart is denied, pending work is stopped, and the operator records zero writes. An emergency stop must be tested for queued and already-running work; it is not a promise to undo an action. Provider-specific retention, residency and fees require separate confirmation.

This explanatory aid does not amend the published document or replace an accepted schedule.

Review the autonomy evaluation →