{ "type": "mesh/v1", "_what_this_is": "The mesh, compiled by admin/build/gen_mesh.py from probes/mesh/ and probes/profiles/. Every node carries its source file and an edit link; every edge is typed by probes/mesh/ontology.json. Reach is a node, not a rung; coarse and fine are the same shape (member-of). Walk it in either direction: from a product to what it reaches, or from a reach node to which products touch it.", "generated_from": [ "probes/mesh/ontology.json", "probes/mesh/vendors/", "probes/mesh/envs/", "probes/mesh/reaches/", "probes/mesh/obligations/", "probes/mesh/questions/", "probes/primitives.json", "probes/profiles/", "probes/evidence/" ], "ontology": { "type": "ontology/v1", "_what_this_is": "The taxonomy the mesh is written in. Every node has one of these node types and every edge one of these edge types, with the direction stated; admin/build/gen_mesh.py refuses an edge whose type is not here or whose ends are not of the stated types. A coarse node is a named set of fine ones and is traversed identically (member-of), which is the fractal test: zooming never changes the format. Reach is a node, not a rung (brief v0.33.65).", "node_types": { "vendor": { "label": "vendor", "means": "who makes or provides the thing", "folder": "probes/mesh/vendors/" }, "profile": { "label": "profile", "means": "a named configuration of a product, listing its tools", "folder": "probes/profiles///" }, "tool": { "label": "tool", "means": "one tool inside a profile; the unit of mapping, because two tools in one session reach different things", "folder": "(inside the profile file)" }, "family": { "label": "family", "means": "the coarsest grouping of capabilities: filesystem, network, identity…", "folder": "probes/primitives.json (families)" }, "capability": { "label": "capability", "means": "verb × object class × reach class, with reversibility — the coarse node", "folder": "probes/primitives.json (capabilities)" }, "exposure": { "label": "exposure", "means": "a capability at one reach node — the fine node; the same verb and object at fs:user-home and at fs:container-layer are two exposures", "folder": "(derived from a profile's refine map)" }, "reach": { "label": "reach", "means": "where a capability lands: a file system, a network, a credential store, a repository, a scheduler — a node with its own edges, not a rung", "folder": "probes/mesh/reaches/" }, "env": { "label": "environment", "means": "where things run: a desktop, a container, a CI runner, a browser, the vendor's cloud", "folder": "probes/mesh/envs/" }, "obligation": { "label": "obligation", "means": "a control or article that governs a reach — reached by traversal, and never a compliance finding", "folder": "probes/mesh/obligations/" }, "evidence": { "label": "evidence", "means": "a findings/v1 file: probe runs or an operator's account, dated, with a tier", "folder": "probes/evidence/" }, "question": { "label": "question", "means": "one question the game asks, with its class, reliability and the capability it asks about", "folder": "probes/mesh/questions/" } }, "edge_types": { "made-by": { "from": "profile", "to": "vendor", "means": "the profile is a configuration of this vendor's product" }, "runs-in": { "from": [ "profile", "reach" ], "to": "env", "means": "runs in, or lives in, this environment" }, "provided-by": { "from": "env", "to": "vendor", "means": "the environment is provided by this vendor (or by you)" }, "has-tool": { "from": "profile", "to": "tool", "means": "the profile contains this tool" }, "reaches": { "from": "tool", "to": "exposure", "means": "the tool can do this, here; attributes carry the control on the path, its tier, the evidence tier and a note" }, "at": { "from": "exposure", "to": "reach", "means": "the exposure lands on this reach node" }, "member-of": { "from": [ "exposure", "capability" ], "to": [ "capability", "family" ], "means": "fine is a member of coarse; same shape either way" }, "governed-by": { "from": "reach", "to": "obligation", "means": "an obligation that governs this reach — a question worth asking, at the weakest tier" }, "evidenced-by": { "from": "tool", "to": "evidence", "means": "the tool's rows are established by this evidence file" }, "asks-about": { "from": "question", "to": "capability", "means": "an eliciting question is a prediction about this capability" }, "bounded-by": { "from": "exposure", "to": "obligation", "means": "reserved: a control evidenced as the boundary on this exposure (not yet used)" } }, "licence": "CC BY 4.0" }, "counts": { "vendor": 5, "profile": 9, "tool": 17, "family": 9, "capability": 23, "exposure": 88, "reach": 35, "env": 8, "obligation": 5, "evidence": 4, "question": 25 }, "edge_counts": { "made-by": 9, "runs-in": 77, "provided-by": 8, "has-tool": 17, "reaches": 113, "at": 88, "member-of": 111, "governed-by": 32, "evidenced-by": 4, "asks-about": 10, "bounded-by": 0 }, "nodes": [ { "id": "vendor:anthropic", "type": "vendor", "label": "Anthropic", "source": "probes/mesh/vendors/anthropic.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/vendors/anthropic.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/vendors/anthropic.json", "kind": "AI vendor" }, { "id": "vendor:generic", "type": "vendor", "label": "generic (no single vendor)", "source": "probes/mesh/vendors/generic.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/vendors/generic.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/vendors/generic.json", "kind": "a class of thing many vendors make" }, { "id": "vendor:github", "type": "vendor", "label": "GitHub", "source": "probes/mesh/vendors/github.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/vendors/github.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/vendors/github.json", "kind": "code host and CI provider" }, { "id": "vendor:openai", "type": "vendor", "label": "OpenAI", "source": "probes/mesh/vendors/openai.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/vendors/openai.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/vendors/openai.json", "kind": "AI vendor" }, { "id": "vendor:you", "type": "vendor", "label": "you (your own machine, your own accounts)", "source": "probes/mesh/vendors/you.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/vendors/you.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/vendors/you.json", "kind": "the operator" }, { "id": "env:browser", "type": "env", "label": "a browser tab or extension on your machine", "source": "probes/mesh/envs/env__browser.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/envs/env__browser.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/envs/env__browser.json", "note": "every page you visit, and every site you are logged into, are one permission away" }, { "id": "env:ci-runner", "type": "env", "label": "a hosted CI runner, destroyed after the job", "source": "probes/mesh/envs/env__ci-runner.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/envs/env__ci-runner.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/envs/env__ci-runner.json", "note": "an ephemeral machine with the workflow's token" }, { "id": "env:container", "type": "env", "label": "an ephemeral container in a vendor's cloud", "source": "probes/mesh/envs/env__container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/envs/env__container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/envs/env__container.json", "note": "the container is the host; your machine is not reachable; the container dies with the session" }, { "id": "env:desktop", "type": "env", "label": "your desktop or laptop, as your user account", "source": "probes/mesh/envs/env__desktop.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/envs/env__desktop.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/envs/env__desktop.json", "note": "everything your account can open is one process away" }, { "id": "env:managed-desktop", "type": "env", "label": "a corporate-managed desktop", "source": "probes/mesh/envs/env__managed-desktop.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/envs/env__managed-desktop.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/envs/env__managed-desktop.json", "note": "your account plus whatever shares and mounts the organisation gives it" }, { "id": "env:server", "type": "env", "label": "a server or scheduled host of yours", "source": "probes/mesh/envs/env__server.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/envs/env__server.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/envs/env__server.json", "note": "runs without a person, under an account that is not a person's" }, { "id": "env:vendor-cloud", "type": "env", "label": "the vendor's own environment", "source": "probes/mesh/envs/env__vendor-cloud.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/envs/env__vendor-cloud.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/envs/env__vendor-cloud.json", "note": "the computer doing the work is theirs; you see a page" }, { "id": "env:wsl", "type": "env", "label": "a Linux environment inside your Windows desktop", "source": "probes/mesh/envs/env__wsl.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/envs/env__wsl.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/envs/env__wsl.json", "note": "the same account's files, through a different path" }, { "id": "obl:aiuc1-B006.1", "type": "obligation", "label": "AIUC-1 B006.1 — restrict agent capabilities to authorised scope", "source": "probes/mesh/obligations/obl__aiuc1-B006.1.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/obligations/obl__aiuc1-B006.1.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/obligations/obl__aiuc1-B006.1.json", "identifier": "AIUC-1 B006.1", "words": "restrict agent capabilities to authorised scope", "note": "an allow-list of capabilities is what this requirement asks for; a mandate is one", "caveat": "a profile matched from answers is the weakest evidence tier there is — self-reported, about a product rather than a deployment, inferred rather than measured — so this is an obligation worth checking, never a compliance finding", "origin": "the AIUC-1 catalogue as held in the conformance vault (sgit vault 2wzct4k7, conformance/); the words are the requirement's title" }, { "id": "obl:aiuc1-D003.1", "type": "obligation", "label": "AIUC-1 D003.1 — tool call validation and authorisation", "source": "probes/mesh/obligations/obl__aiuc1-D003.1.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/obligations/obl__aiuc1-D003.1.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/obligations/obl__aiuc1-D003.1.json", "identifier": "AIUC-1 D003.1", "words": "tool call validation and authorisation", "note": "a scope check before a tool call; the explainer's scope check is an implementation of it", "caveat": "a profile matched from answers is the weakest evidence tier there is — self-reported, about a product rather than a deployment, inferred rather than measured — so this is an obligation worth checking, never a compliance finding", "origin": "the AIUC-1 catalogue as held in the conformance vault (sgit vault 2wzct4k7, conformance/); the words are the requirement's title" }, { "id": "obl:aiuc1-D003.2", "type": "obligation", "label": "AIUC-1 D003.2 — rate limits and transaction caps for autonomous tool use", "source": "probes/mesh/obligations/obl__aiuc1-D003.2.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/obligations/obl__aiuc1-D003.2.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/obligations/obl__aiuc1-D003.2.json", "identifier": "AIUC-1 D003.2", "words": "rate limits and transaction caps for autonomous tool use", "note": "the policy's per-action limit, pool and band, written in metered units", "caveat": "a profile matched from answers is the weakest evidence tier there is — self-reported, about a product rather than a deployment, inferred rather than measured — so this is an obligation worth checking, never a compliance finding", "origin": "the AIUC-1 catalogue as held in the conformance vault (sgit vault 2wzct4k7, conformance/); the words are the requirement's title" }, { "id": "obl:aiuc1-E004", "type": "obligation", "label": "AIUC-1 E004 — assign accountability", "source": "probes/mesh/obligations/obl__aiuc1-E004.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/obligations/obl__aiuc1-E004.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/obligations/obl__aiuc1-E004.json", "identifier": "AIUC-1 E004", "words": "assign accountability", "note": "a named acceptor for every accepted risk", "caveat": "a profile matched from answers is the weakest evidence tier there is — self-reported, about a product rather than a deployment, inferred rather than measured — so this is an obligation worth checking, never a compliance finding", "origin": "the AIUC-1 catalogue as held in the conformance vault (sgit vault 2wzct4k7, conformance/); the words are the requirement's title" }, { "id": "obl:aiuc1-E015.3", "type": "obligation", "label": "AIUC-1 E015.3 — log storage", "source": "probes/mesh/obligations/obl__aiuc1-E015.3.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/obligations/obl__aiuc1-E015.3.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/obligations/obl__aiuc1-E015.3.json", "identifier": "AIUC-1 E015.3", "words": "log storage", "note": "a log the organisation holds; a device-local run cleared by reset is a log the organisation does not hold", "caveat": "a profile matched from answers is the weakest evidence tier there is — self-reported, about a product rather than a deployment, inferred rather than measured — so this is an obligation worth checking, never a compliance finding", "origin": "the AIUC-1 catalogue as held in the conformance vault (sgit vault 2wzct4k7, conformance/); the words are the requirement's title" }, { "id": "family:filesystem", "type": "family", "label": "filesystem", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "means": "files and directories" }, { "id": "family:process", "type": "family", "label": "process", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "means": "programs and their execution" }, { "id": "family:network", "type": "family", "label": "network", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "means": "endpoints and hosts" }, { "id": "family:identity", "type": "family", "label": "identity", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "means": "credentials and who the agent can act as" }, { "id": "family:communication", "type": "family", "label": "communication", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "means": "messages to people" }, { "id": "family:code", "type": "family", "label": "code", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "means": "repositories and what lands in them" }, { "id": "family:money", "type": "family", "label": "money", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "means": "budgets and spend" }, { "id": "family:schedule", "type": "family", "label": "schedule", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "means": "things that outlive the turn" }, { "id": "family:browser", "type": "family", "label": "browser", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "means": "what a browser extension or automation can see and do in your browser" }, { "id": "cap:read.file.project", "type": "capability", "label": "Read the project it is working on", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "read", "object": "file", "reach_class": "project", "reversible": "yes", "family": "filesystem", "why_irreversible": null }, { "id": "cap:write.file.project", "type": "capability", "label": "Change the project it is working on", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "write", "object": "file", "reach_class": "project", "reversible": "with-effort", "family": "filesystem", "why_irreversible": null }, { "id": "cap:read.file.host", "type": "capability", "label": "Read any file the account can reach", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "read", "object": "file", "reach_class": "host", "reversible": "no", "family": "filesystem", "why_irreversible": "a record once read is exposure that cannot be unread" }, { "id": "cap:write.file.host", "type": "capability", "label": "Change any file the account can reach", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "write", "object": "file", "reach_class": "host", "reversible": "with-effort", "family": "filesystem", "why_irreversible": null }, { "id": "cap:delete.file.host", "type": "capability", "label": "Delete files anywhere the account can reach", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "delete", "object": "file", "reach_class": "host", "reversible": "no", "family": "filesystem", "why_irreversible": null }, { "id": "cap:execute.process.host", "type": "capability", "label": "Run programs as the account", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "execute", "object": "process", "reach_class": "host", "reversible": "with-effort", "family": "process", "why_irreversible": null }, { "id": "cap:execute.process.self", "type": "capability", "label": "Run programs inside its own sandbox only", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "execute", "object": "process", "reach_class": "self", "reversible": "yes", "family": "process", "why_irreversible": null }, { "id": "cap:send.endpoint.allowed", "type": "capability", "label": "Reach a permitted list of hosts", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "send", "object": "network-endpoint", "reach_class": "tenant", "reversible": "no", "family": "network", "why_irreversible": "bytes sent are sent" }, { "id": "cap:send.endpoint.world", "type": "capability", "label": "Reach any host on the internet", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "send", "object": "network-endpoint", "reach_class": "world", "reversible": "no", "family": "network", "why_irreversible": null }, { "id": "cap:read.credential.host", "type": "capability", "label": "Read credentials stored where it runs", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "read", "object": "credential", "reach_class": "host", "reversible": "no", "family": "identity", "why_irreversible": "a credential read is a credential exposed" }, { "id": "cap:authenticate-as.credential.tenant", "type": "capability", "label": "Act in accounts with the credentials it holds", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "authenticate-as", "object": "credential", "reach_class": "tenant", "reversible": "no", "family": "identity", "why_irreversible": null }, { "id": "cap:grant.credential.self", "type": "capability", "label": "Change its own permission settings", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "grant", "object": "credential", "reach_class": "self", "reversible": "yes", "family": "identity", "why_irreversible": null }, { "id": "cap:send.message.world", "type": "capability", "label": "Send a message to anyone", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "send", "object": "message", "reach_class": "world", "reversible": "no", "family": "communication", "why_irreversible": null }, { "id": "cap:read.message.tenant", "type": "capability", "label": "Read mail or chat it is connected to", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "read", "object": "message", "reach_class": "tenant", "reversible": "no", "family": "communication", "why_irreversible": null }, { "id": "cap:write.repository.project", "type": "capability", "label": "Commit to the repository it was pointed at", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "write", "object": "repository", "reach_class": "project", "reversible": "with-effort", "family": "code", "why_irreversible": null }, { "id": "cap:write.repository.tenant", "type": "capability", "label": "Push to a code host (any branch it can reach)", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "write", "object": "repository", "reach_class": "tenant", "reversible": "with-effort", "family": "code", "why_irreversible": null }, { "id": "cap:authenticate-as.credential.signing", "type": "capability", "label": "Sign commits with the key it holds", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "authenticate-as", "object": "credential", "reach_class": "tenant", "reversible": "no", "family": "code", "why_irreversible": null }, { "id": "cap:create.record.world", "type": "capability", "label": "Publish packages, images or pages under the name it holds", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "create", "object": "record", "reach_class": "world", "reversible": "no", "family": "code", "why_irreversible": null }, { "id": "cap:write.budget.tenant", "type": "capability", "label": "Spend money or tokens against an account it holds", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "write", "object": "budget", "reach_class": "tenant", "reversible": "no", "family": "money", "why_irreversible": null }, { "id": "cap:create.schedule.host", "type": "capability", "label": "Create something that outlives the turn where it runs (a cron, a service)", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "create", "object": "schedule", "reach_class": "host", "reversible": "yes", "family": "schedule", "why_irreversible": null }, { "id": "cap:read.record.history", "type": "capability", "label": "Read a retained record: shell history, past sessions", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "read", "object": "record", "reach_class": "host", "reversible": "no", "family": "filesystem", "why_irreversible": "a transcript read is every earlier session's reach, exposed again" }, { "id": "cap:create.schedule.tenant", "type": "capability", "label": "Create something that outlives the session, on the platform (a routine, a scheduled trigger, a new session)", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "create", "object": "schedule", "reach_class": "tenant", "reversible": "yes", "family": "schedule", "why_irreversible": null }, { "id": "cap:read.record.browsing", "type": "capability", "label": "Read every page you visit", "source": "probes/primitives.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/primitives.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/primitives.json", "verb": "read", "object": "record", "reach_class": "host", "reversible": "no", "family": "browser", "why_irreversible": "what you read, it read" }, { "id": "cfg:own-settings", "type": "reach", "label": "its own settings file", "source": "probes/mesh/reaches/cfg__own-settings.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/cfg__own-settings.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/cfg__own-settings.json", "family": "identity", "exposure": "the file that turns the prompt off, owned by the same account" }, { "id": "code:any-repo-of-yours", "type": "reach", "label": "any repository your credentials reach", "source": "probes/mesh/reaches/code__any-repo-of-yours.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/code__any-repo-of-yours.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/code__any-repo-of-yours.json", "family": "code", "exposure": "every code host your account is logged into" }, { "id": "code:attached-repo", "type": "reach", "label": "the repository it was pointed at", "source": "probes/mesh/reaches/code__attached-repo.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/code__attached-repo.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/code__attached-repo.json", "family": "code", "exposure": "the one clone" }, { "id": "code:in-scope-repos", "type": "reach", "label": "the repositories the platform lists as in scope", "source": "probes/mesh/reaches/code__in-scope-repos.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/code__in-scope-repos.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/code__in-scope-repos.json", "family": "code", "exposure": "by API, under the platform's token — a path the clone's hooks never see" }, { "id": "fs:ci-checkout", "type": "reach", "label": "the checked-out tree in a CI job", "source": "probes/mesh/reaches/fs__ci-checkout.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/fs__ci-checkout.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/fs__ci-checkout.json", "family": "filesystem", "exposure": "every file at this ref — including anything committed by mistake" }, { "id": "fs:cloud-store", "type": "reach", "label": "a cloud drive you connected", "source": "probes/mesh/reaches/fs__cloud-store.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/fs__cloud-store.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/fs__cloud-store.json", "family": "filesystem", "exposure": "a different blast radius and a different regulator" }, { "id": "fs:container-layer", "type": "reach", "label": "the container's own layer", "source": "probes/mesh/reaches/fs__container-layer.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/fs__container-layer.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/fs__container-layer.json", "family": "filesystem", "exposure": "nothing of yours; ephemeral, destroyed with the session" }, { "id": "fs:corporate-share", "type": "reach", "label": "a corporate share", "source": "probes/mesh/reaches/fs__corporate-share.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/fs__corporate-share.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/fs__corporate-share.json", "family": "filesystem", "exposure": "other people's work, and the audit question that follows" }, { "id": "fs:network-mount", "type": "reach", "label": "a network mount", "source": "probes/mesh/reaches/fs__network-mount.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/fs__network-mount.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/fs__network-mount.json", "family": "filesystem", "exposure": "whatever is mounted today, which is not a fixed set" }, { "id": "fs:project", "type": "reach", "label": "the project it was pointed at", "source": "probes/mesh/reaches/fs__project.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/fs__project.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/fs__project.json", "family": "filesystem", "exposure": "the working tree and nothing else" }, { "id": "fs:server-disk", "type": "reach", "label": "a server's disk", "source": "probes/mesh/reaches/fs__server-disk.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/fs__server-disk.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/fs__server-disk.json", "family": "filesystem", "exposure": "whatever the service account owns" }, { "id": "fs:uploads", "type": "reach", "label": "what you paste or upload", "source": "probes/mesh/reaches/fs__uploads.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/fs__uploads.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/fs__uploads.json", "family": "filesystem", "exposure": "on the vendor's side, and a record once read is exposure that cannot be unread" }, { "id": "fs:user-home", "type": "reach", "label": "your home directory", "source": "probes/mesh/reaches/fs__user-home.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/fs__user-home.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/fs__user-home.json", "family": "filesystem", "exposure": "documents, keys, history, other projects — everything your account owns" }, { "id": "id:agent-own-keys", "type": "reach", "label": "the agent's own keys", "source": "probes/mesh/reaches/id__agent-own-keys.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/id__agent-own-keys.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/id__agent-own-keys.json", "family": "identity", "exposure": "a signing key and a keystore issued to the session, not to you" }, { "id": "id:browser-sessions", "type": "reach", "label": "the sites you are logged into", "source": "probes/mesh/reaches/id__browser-sessions.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/id__browser-sessions.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/id__browser-sessions.json", "family": "identity", "exposure": "cookies and sessions; acting inside a site as you" }, { "id": "id:connector-token", "type": "reach", "label": "a connector you switched on", "source": "probes/mesh/reaches/id__connector-token.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/id__connector-token.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/id__connector-token.json", "family": "identity", "exposure": "a token held by the vendor, scoped as you scoped it" }, { "id": "id:platform-token", "type": "reach", "label": "a platform-scoped token", "source": "probes/mesh/reaches/id__platform-token.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/id__platform-token.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/id__platform-token.json", "family": "identity", "exposure": "acts as the platform's app, scoped to what the platform lists" }, { "id": "id:service-account", "type": "reach", "label": "a service account", "source": "probes/mesh/reaches/id__service-account.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/id__service-account.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/id__service-account.json", "family": "identity", "exposure": "an account that is not a person's, with no person's judgement in front of it" }, { "id": "id:user-credentials", "type": "reach", "label": "your stored credentials", "source": "probes/mesh/reaches/id__user-credentials.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/id__user-credentials.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/id__user-credentials.json", "family": "identity", "exposure": "cloud, SSH, registry, code-host — the account's dotfiles" }, { "id": "money:metered-account", "type": "reach", "label": "an account that is billed", "source": "probes/mesh/reaches/money__metered-account.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/money__metered-account.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/money__metered-account.json", "family": "money", "exposure": "spend the agent can incur" }, { "id": "msg:anyone", "type": "reach", "label": "anyone, as you", "source": "probes/mesh/reaches/msg__anyone.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/msg__anyone.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/msg__anyone.json", "family": "communication", "exposure": "a message sent is sent" }, { "id": "msg:mailbox", "type": "reach", "label": "your mailbox or chat", "source": "probes/mesh/reaches/msg__mailbox.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/msg__mailbox.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/msg__mailbox.json", "family": "communication", "exposure": "a record once read is exposure that cannot be unread" }, { "id": "net:allowlist", "type": "reach", "label": "a permitted list of hosts", "source": "probes/mesh/reaches/net__allowlist.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/net__allowlist.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/net__allowlist.json", "family": "network", "exposure": "the list is the boundary, set above the process" }, { "id": "net:vendor-egress", "type": "reach", "label": "the vendor's egress", "source": "probes/mesh/reaches/net__vendor-egress.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/net__vendor-egress.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/net__vendor-egress.json", "family": "network", "exposure": "browsing from the vendor's side; not your network" }, { "id": "net:world", "type": "reach", "label": "any host on the internet", "source": "probes/mesh/reaches/net__world.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/net__world.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/net__world.json", "family": "network", "exposure": "bytes sent are sent" }, { "id": "proc:ci-runner", "type": "reach", "label": "programs on the runner", "source": "probes/mesh/reaches/proc__ci-runner.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/proc__ci-runner.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/proc__ci-runner.json", "family": "process", "exposure": "a machine destroyed after the job" }, { "id": "proc:container", "type": "reach", "label": "programs inside the container", "source": "probes/mesh/reaches/proc__container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/proc__container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/proc__container.json", "family": "process", "exposure": "root, inside a disposable box" }, { "id": "proc:host-account", "type": "reach", "label": "programs as your user account, on your machine", "source": "probes/mesh/reaches/proc__host-account.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/proc__host-account.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/proc__host-account.json", "family": "process", "exposure": "anything you could run" }, { "id": "proc:server", "type": "reach", "label": "programs on a server, as a service account", "source": "probes/mesh/reaches/proc__server.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/proc__server.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/proc__server.json", "family": "process", "exposure": "runs without a person" }, { "id": "pub:registries", "type": "reach", "label": "package and image registries, under your name", "source": "probes/mesh/reaches/pub__registries.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/pub__registries.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/pub__registries.json", "family": "code", "exposure": "a publish cannot be unpublished from every mirror" }, { "id": "rec:session-history", "type": "reach", "label": "the session's own retained record", "source": "probes/mesh/reaches/rec__session-history.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/rec__session-history.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/rec__session-history.json", "family": "filesystem", "exposure": "this session's earlier tool outputs, inside the container" }, { "id": "rec:shell-history", "type": "reach", "label": "your shell history and past transcripts", "source": "probes/mesh/reaches/rec__shell-history.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/rec__shell-history.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/rec__shell-history.json", "family": "filesystem", "exposure": "every earlier session's reach, exposed again" }, { "id": "sched:host-cron", "type": "reach", "label": "a scheduler on the host", "source": "probes/mesh/reaches/sched__host-cron.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/sched__host-cron.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/sched__host-cron.json", "family": "schedule", "exposure": "outlives the turn; on an ephemeral host, dies with the machine" }, { "id": "sched:platform-routines", "type": "reach", "label": "the platform's routines", "source": "probes/mesh/reaches/sched__platform-routines.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/sched__platform-routines.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/sched__platform-routines.json", "family": "schedule", "exposure": "outlives the session, on the platform" }, { "id": "web:every-page", "type": "reach", "label": "every page you visit", "source": "probes/mesh/reaches/web__every-page.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/reaches/web__every-page.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/reaches/web__every-page.json", "family": "browser", "exposure": "an extension with broad host permissions reads what you read" }, { "id": "evidence:anthropic__claude-code-remote__ccr-container__fetch__2026-09-05.json", "type": "evidence", "label": "fetch · 2026-09-05 · self", "source": "probes/evidence/anthropic__claude-code-remote__ccr-container__fetch__2026-09-05.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/evidence/anthropic__claude-code-remote__ccr-container__fetch__2026-09-05.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/evidence/anthropic__claude-code-remote__ccr-container__fetch__2026-09-05.json", "profile": "anthropic/claude-code-remote/ccr-container", "tool": "fetch", "measured_at": "2026-09-05T19:02:49Z", "independence": "self", "findings": 1 }, { "id": "evidence:anthropic__claude-code-remote__ccr-container__harness__2026-09-05.json", "type": "evidence", "label": "harness (MCP and built-in tools) · 2026-09-05 · self", "source": "probes/evidence/anthropic__claude-code-remote__ccr-container__harness__2026-09-05.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/evidence/anthropic__claude-code-remote__ccr-container__harness__2026-09-05.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/evidence/anthropic__claude-code-remote__ccr-container__harness__2026-09-05.json", "profile": "anthropic/claude-code-remote/ccr-container", "tool": "harness (MCP and built-in tools)", "measured_at": "2026-09-05T22:30:00Z", "independence": "self", "findings": 5 }, { "id": "evidence:anthropic__claude-code-remote__ccr-container__shell__2026-09-05.json", "type": "evidence", "label": "shell · 2026-09-05 · self", "source": "probes/evidence/anthropic__claude-code-remote__ccr-container__shell__2026-09-05.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/evidence/anthropic__claude-code-remote__ccr-container__shell__2026-09-05.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/evidence/anthropic__claude-code-remote__ccr-container__shell__2026-09-05.json", "profile": "anthropic/claude-code-remote/ccr-container", "tool": "shell", "measured_at": "2026-09-05T19:07:10Z", "independence": "self", "findings": 24 }, { "id": "evidence:github__actions-runner__ci__shell__2026-08-26.json", "type": "evidence", "label": "the job's shell · 2026-08-26 · self", "source": "probes/evidence/github__actions-runner__ci__shell__2026-08-26.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/evidence/github__actions-runner__ci__shell__2026-08-26.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/evidence/github__actions-runner__ci__shell__2026-08-26.json", "profile": "github/actions-runner/ci", "tool": "the job's shell", "measured_at": "2026-08-26T00:00:00Z", "independence": "self", "findings": 17 }, { "id": "profile:anthropic/claude-code-remote/ccr-container", "type": "profile", "label": "Claude Code on the web (a remote session container) · ccr-container", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "vendor": "Anthropic", "product": "Claude Code on the web (a remote session container)", "variant": "ccr-container", "surface": "agentbox", "version": "2026-09-05.2", "measured": true, "reach_names": { "host": "this container — ephemeral, the vendor's; not your machine", "tenant": "the attached repository and the platform's scoped tokens; not your accounts", "world": "the hosts the proxy allows" }, "not_reachable": [ { "what": "your machine's files", "why": "the container has no path to the operator's computer; the assess tree records home as a boundary", "source": "assess/library.json (agentbox: home)" }, { "what": "your credentials", "why": "no user credential is in the image; the keys present are the session's own", "source": "evidence: filesystem.credential-presence, 5 Sep" }, { "what": "hosts the proxy refuses", "why": "a 403 on the CONNECT, set above the process", "source": "evidence: network.egress-shell" }, { "what": "repositories outside the platform's scope", "why": "the token is scoped by the platform; the API tool refuses out-of-scope calls", "source": "harness.platform-tools, self-reported" } ], "description": "A managed cloud container, ephemeral, one git repository attached, an egress proxy above it, and a set of harness tools scoped by the platform. MEASURED, by the thing being profiled: the shell probed on 5 September with probes/run.py, the fetch tool's reach and the harness tools reported by the operator. HOST MEANS THE CONTAINER, not your machine; TENANT means the platform's scoped tokens, not your accounts. The same environment measured on 26 August is the Grant & Mandate library's first entry, and the two agree on every row they share.", "prior": 0.08 }, { "id": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "type": "tool", "label": "shell (Bash)", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "profile": "anthropic/claude-code-remote/ccr-container", "evidence": "evidence/anthropic__claude-code-remote__ccr-container__shell__2026-09-05.json" }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/execute.process.host@proc:container", "type": "exposure", "label": "Run programs as the account @ programs inside the container", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "execute.process.host", "reach": "proc:container", "reversible": "with-effort", "family": "process", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/read.file.host@fs:container-layer", "type": "exposure", "label": "Read any file the account can reach @ the container's own layer", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "read.file.host", "reach": "fs:container-layer", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/write.file.host@fs:container-layer", "type": "exposure", "label": "Change any file the account can reach @ the container's own layer", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "write.file.host", "reach": "fs:container-layer", "reversible": "with-effort", "family": "filesystem", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/delete.file.host@fs:container-layer", "type": "exposure", "label": "Delete files anywhere the account can reach @ the container's own layer", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "delete.file.host", "reach": "fs:container-layer", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/read.credential.host@id:agent-own-keys", "type": "exposure", "label": "Read credentials stored where it runs @ the agent's own keys", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "read.credential.host", "reach": "id:agent-own-keys", "reversible": "no", "family": "identity", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/authenticate-as.credential.tenant@id:platform-token", "type": "exposure", "label": "Act in accounts with the credentials it holds @ a platform-scoped token", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "authenticate-as.credential.tenant", "reach": "id:platform-token", "reversible": "no", "family": "identity", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/read.record.history@rec:session-history", "type": "exposure", "label": "Read a retained record: shell history, past sessions @ the session's own retained record", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "read.record.history", "reach": "rec:session-history", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/send.endpoint.allowed@net:allowlist", "type": "exposure", "label": "Reach a permitted list of hosts @ a permitted list of hosts", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "send.endpoint.allowed", "reach": "net:allowlist", "reversible": "no", "family": "network", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.project@code:attached-repo", "type": "exposure", "label": "Commit to the repository it was pointed at @ the repository it was pointed at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "write.repository.project", "reach": "code:attached-repo", "reversible": "with-effort", "family": "code", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/read.file.project@fs:project", "type": "exposure", "label": "Read the project it is working on @ the project it was pointed at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "read.file.project", "reach": "fs:project", "reversible": "yes", "family": "filesystem", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/write.file.project@fs:project", "type": "exposure", "label": "Change the project it is working on @ the project it was pointed at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "write.file.project", "reach": "fs:project", "reversible": "with-effort", "family": "filesystem", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.tenant@code:attached-repo", "type": "exposure", "label": "Push to a code host (any branch it can reach) @ the repository it was pointed at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "write.repository.tenant", "reach": "code:attached-repo", "reversible": "with-effort", "family": "code", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.tenant@code:in-scope-repos", "type": "exposure", "label": "Push to a code host (any branch it can reach) @ the repositories the platform lists as in scope", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "write.repository.tenant", "reach": "code:in-scope-repos", "reversible": "with-effort", "family": "code", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/authenticate-as.credential.signing@id:agent-own-keys", "type": "exposure", "label": "Sign commits with the key it holds @ the agent's own keys", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "authenticate-as.credential.signing", "reach": "id:agent-own-keys", "reversible": "no", "family": "code", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/create.schedule.host@sched:host-cron", "type": "exposure", "label": "Create something that outlives the turn where it runs (a cron, a service) @ a scheduler on the host", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "create.schedule.host", "reach": "sched:host-cron", "reversible": "yes", "family": "schedule", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "tool:anthropic/claude-code-remote/ccr-container/fetch (WebFetch)", "type": "tool", "label": "fetch (WebFetch)", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "profile": "anthropic/claude-code-remote/ccr-container", "evidence": "evidence/anthropic__claude-code-remote__ccr-container__fetch__2026-09-05.json" }, { "id": "tool:anthropic/claude-code-remote/ccr-container/harness (MCP and built-in tools)", "type": "tool", "label": "harness (MCP and built-in tools)", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "profile": "anthropic/claude-code-remote/ccr-container", "evidence": "evidence/anthropic__claude-code-remote__ccr-container__harness__2026-09-05.json" }, { "id": "exposure:anthropic/claude-code-remote/ccr-container/create.schedule.tenant@sched:platform-routines", "type": "exposure", "label": "Create something that outlives the session, on the platform (a routine, a scheduled trigger, a new session) @ the platform's routines", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code-remote/ccr-container.json", "capability": "create.schedule.tenant", "reach": "sched:platform-routines", "reversible": "yes", "family": "schedule", "profile": "anthropic/claude-code-remote/ccr-container", "refined": true }, { "id": "profile:anthropic/claude-code/local-confirmations-off", "type": "profile", "label": "Claude Code (the CLI, on your own machine) · local-confirmations-off", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "vendor": "Anthropic", "product": "Claude Code (the CLI, on your own machine)", "variant": "local-confirmations-off", "surface": "cli", "version": "2026-09-05", "measured": false, "reach_names": { "host": "your machine, as your user account", "tenant": "your accounts, with the credentials in your home directory", "world": "the internet" }, "not_reachable": [], "description": "The same assistant with its confirmations turned off (an always-allow, or the flag that skips permissions). The rows are the sibling's; what changes is one control: the prompt on execution goes from a setting to nothing. The diff between this profile and local-default is the answer to 'what does turning that off actually give it'. DERIVED, not measured.", "prior": 0.14 }, { "id": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "type": "tool", "label": "shell (Bash)", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "profile": "anthropic/claude-code/local-confirmations-off", "evidence": null }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/execute.process.host@proc:host-account", "type": "exposure", "label": "Run programs as the account @ programs as your user account, on your machine", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "execute.process.host", "reach": "proc:host-account", "reversible": "with-effort", "family": "process", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/read.file.host@fs:user-home", "type": "exposure", "label": "Read any file the account can reach @ your home directory", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "read.file.host", "reach": "fs:user-home", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/read.file.host@fs:network-mount", "type": "exposure", "label": "Read any file the account can reach @ a network mount", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "read.file.host", "reach": "fs:network-mount", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/write.file.host@fs:user-home", "type": "exposure", "label": "Change any file the account can reach @ your home directory", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "write.file.host", "reach": "fs:user-home", "reversible": "with-effort", "family": "filesystem", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/write.file.host@fs:network-mount", "type": "exposure", "label": "Change any file the account can reach @ a network mount", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "write.file.host", "reach": "fs:network-mount", "reversible": "with-effort", "family": "filesystem", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/delete.file.host@fs:user-home", "type": "exposure", "label": "Delete files anywhere the account can reach @ your home directory", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "delete.file.host", "reach": "fs:user-home", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/delete.file.host@fs:network-mount", "type": "exposure", "label": "Delete files anywhere the account can reach @ a network mount", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "delete.file.host", "reach": "fs:network-mount", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/send.endpoint.world@net:world", "type": "exposure", "label": "Reach any host on the internet @ any host on the internet", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "send.endpoint.world", "reach": "net:world", "reversible": "no", "family": "network", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/read.credential.host@id:user-credentials", "type": "exposure", "label": "Read credentials stored where it runs @ your stored credentials", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "read.credential.host", "reach": "id:user-credentials", "reversible": "no", "family": "identity", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/authenticate-as.credential.tenant@id:user-credentials", "type": "exposure", "label": "Act in accounts with the credentials it holds @ your stored credentials", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "authenticate-as.credential.tenant", "reach": "id:user-credentials", "reversible": "no", "family": "identity", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/write.repository.tenant@code:any-repo-of-yours", "type": "exposure", "label": "Push to a code host (any branch it can reach) @ any repository your credentials reach", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "write.repository.tenant", "reach": "code:any-repo-of-yours", "reversible": "with-effort", "family": "code", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/authenticate-as.credential.signing@id:user-credentials", "type": "exposure", "label": "Sign commits with the key it holds @ your stored credentials", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "authenticate-as.credential.signing", "reach": "id:user-credentials", "reversible": "no", "family": "code", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/create.record.world@pub:registries", "type": "exposure", "label": "Publish packages, images or pages under the name it holds @ package and image registries, under your name", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "create.record.world", "reach": "pub:registries", "reversible": "no", "family": "code", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/read.record.history@rec:shell-history", "type": "exposure", "label": "Read a retained record: shell history, past sessions @ your shell history and past transcripts", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "read.record.history", "reach": "rec:shell-history", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/grant.credential.self@cfg:own-settings", "type": "exposure", "label": "Change its own permission settings @ its own settings file", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "grant.credential.self", "reach": "cfg:own-settings", "reversible": "yes", "family": "identity", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/create.schedule.host@sched:host-cron", "type": "exposure", "label": "Create something that outlives the turn where it runs (a cron, a service) @ a scheduler on the host", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "create.schedule.host", "reach": "sched:host-cron", "reversible": "yes", "family": "schedule", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/read.file.project@fs:project", "type": "exposure", "label": "Read the project it is working on @ the project it was pointed at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "read.file.project", "reach": "fs:project", "reversible": "yes", "family": "filesystem", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/write.file.project@fs:project", "type": "exposure", "label": "Change the project it is working on @ the project it was pointed at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "write.file.project", "reach": "fs:project", "reversible": "with-effort", "family": "filesystem", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "exposure:anthropic/claude-code/local-confirmations-off/write.repository.project@code:attached-repo", "type": "exposure", "label": "Commit to the repository it was pointed at @ the repository it was pointed at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "capability": "write.repository.project", "reach": "code:attached-repo", "reversible": "with-effort", "family": "code", "profile": "anthropic/claude-code/local-confirmations-off", "refined": true }, { "id": "tool:anthropic/claude-code/local-confirmations-off/files (Read, Edit, Write)", "type": "tool", "label": "files (Read, Edit, Write)", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "profile": "anthropic/claude-code/local-confirmations-off", "evidence": null }, { "id": "tool:anthropic/claude-code/local-confirmations-off/fetch (WebFetch)", "type": "tool", "label": "fetch (WebFetch)", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-confirmations-off.json", "profile": "anthropic/claude-code/local-confirmations-off", "evidence": null }, { "id": "profile:anthropic/claude-code/local-default", "type": "profile", "label": "Claude Code (the CLI, on your own machine) · local-default", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "vendor": "Anthropic", "product": "Claude Code (the CLI, on your own machine)", "variant": "local-default", "surface": "cli", "version": "2026-09-05", "measured": false, "reach_names": { "host": "your machine, as your user account", "tenant": "your accounts, with the credentials in your home directory", "world": "the internet" }, "not_reachable": [], "description": "The common case: one CLI agent running as your user account, credentials in the home directory, confirmations on, no containment. DERIVED from what a command-line program running as your account architecturally is, not measured on any instance — every row is a claim until somebody runs the probes and contributes the file. The assess library's cli tree is the source.", "prior": 0.33 }, { "id": "tool:anthropic/claude-code/local-default/shell (Bash)", "type": "tool", "label": "shell (Bash)", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "profile": "anthropic/claude-code/local-default", "evidence": null }, { "id": "exposure:anthropic/claude-code/local-default/execute.process.host@proc:host-account", "type": "exposure", "label": "Run programs as the account @ programs as your user account, on your machine", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "execute.process.host", "reach": "proc:host-account", "reversible": "with-effort", "family": "process", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/read.file.host@fs:user-home", "type": "exposure", "label": "Read any file the account can reach @ your home directory", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "read.file.host", "reach": "fs:user-home", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/read.file.host@fs:network-mount", "type": "exposure", "label": "Read any file the account can reach @ a network mount", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "read.file.host", "reach": "fs:network-mount", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/write.file.host@fs:user-home", "type": "exposure", "label": "Change any file the account can reach @ your home directory", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "write.file.host", "reach": "fs:user-home", "reversible": "with-effort", "family": "filesystem", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/write.file.host@fs:network-mount", "type": "exposure", "label": "Change any file the account can reach @ a network mount", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "write.file.host", "reach": "fs:network-mount", "reversible": "with-effort", "family": "filesystem", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/delete.file.host@fs:user-home", "type": "exposure", "label": "Delete files anywhere the account can reach @ your home directory", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "delete.file.host", "reach": "fs:user-home", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/delete.file.host@fs:network-mount", "type": "exposure", "label": "Delete files anywhere the account can reach @ a network mount", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "delete.file.host", "reach": "fs:network-mount", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/send.endpoint.world@net:world", "type": "exposure", "label": "Reach any host on the internet @ any host on the internet", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "send.endpoint.world", "reach": "net:world", "reversible": "no", "family": "network", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/read.credential.host@id:user-credentials", "type": "exposure", "label": "Read credentials stored where it runs @ your stored credentials", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "read.credential.host", "reach": "id:user-credentials", "reversible": "no", "family": "identity", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/authenticate-as.credential.tenant@id:user-credentials", "type": "exposure", "label": "Act in accounts with the credentials it holds @ your stored credentials", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "authenticate-as.credential.tenant", "reach": "id:user-credentials", "reversible": "no", "family": "identity", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/write.repository.tenant@code:any-repo-of-yours", "type": "exposure", "label": "Push to a code host (any branch it can reach) @ any repository your credentials reach", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "write.repository.tenant", "reach": "code:any-repo-of-yours", "reversible": "with-effort", "family": "code", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/authenticate-as.credential.signing@id:user-credentials", "type": "exposure", "label": "Sign commits with the key it holds @ your stored credentials", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "authenticate-as.credential.signing", "reach": "id:user-credentials", "reversible": "no", "family": "code", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/create.record.world@pub:registries", "type": "exposure", "label": "Publish packages, images or pages under the name it holds @ package and image registries, under your name", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "create.record.world", "reach": "pub:registries", "reversible": "no", "family": "code", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/read.record.history@rec:shell-history", "type": "exposure", "label": "Read a retained record: shell history, past sessions @ your shell history and past transcripts", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "read.record.history", "reach": "rec:shell-history", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/grant.credential.self@cfg:own-settings", "type": "exposure", "label": "Change its own permission settings @ its own settings file", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "grant.credential.self", "reach": "cfg:own-settings", "reversible": "yes", "family": "identity", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/create.schedule.host@sched:host-cron", "type": "exposure", "label": "Create something that outlives the turn where it runs (a cron, a service) @ a scheduler on the host", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "create.schedule.host", "reach": "sched:host-cron", "reversible": "yes", "family": "schedule", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/read.file.project@fs:project", "type": "exposure", "label": "Read the project it is working on @ the project it was pointed at", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "read.file.project", "reach": "fs:project", "reversible": "yes", "family": "filesystem", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/write.file.project@fs:project", "type": "exposure", "label": "Change the project it is working on @ the project it was pointed at", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "write.file.project", "reach": "fs:project", "reversible": "with-effort", "family": "filesystem", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "exposure:anthropic/claude-code/local-default/write.repository.project@code:attached-repo", "type": "exposure", "label": "Commit to the repository it was pointed at @ the repository it was pointed at", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "capability": "write.repository.project", "reach": "code:attached-repo", "reversible": "with-effort", "family": "code", "profile": "anthropic/claude-code/local-default", "refined": true }, { "id": "tool:anthropic/claude-code/local-default/files (Read, Edit, Write)", "type": "tool", "label": "files (Read, Edit, Write)", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "profile": "anthropic/claude-code/local-default", "evidence": null }, { "id": "tool:anthropic/claude-code/local-default/fetch (WebFetch)", "type": "tool", "label": "fetch (WebFetch)", "source": "probes/profiles/anthropic/claude-code/local-default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-code/local-default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-code/local-default.json", "profile": "anthropic/claude-code/local-default", "evidence": null }, { "id": "profile:anthropic/claude-desktop/default", "type": "profile", "label": "Claude Desktop (a desktop app with local tools) · default", "source": "probes/profiles/anthropic/claude-desktop/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-desktop/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-desktop/default.json", "vendor": "Anthropic", "product": "Claude Desktop (a desktop app with local tools)", "variant": "default", "surface": "desktop", "version": "2026-09-05", "measured": false, "reach_names": { "host": "your machine, as your user account", "tenant": "your accounts", "world": "the internet" }, "not_reachable": [], "description": "A desktop application running as your user account, with connectors and local tools that can read files and run commands with a prompt. DERIVED from the assess library's desktop tree; not measured on any instance.", "prior": 0.1 }, { "id": "tool:anthropic/claude-desktop/default/conversation", "type": "tool", "label": "conversation", "source": "probes/profiles/anthropic/claude-desktop/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-desktop/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-desktop/default.json", "profile": "anthropic/claude-desktop/default", "evidence": null }, { "id": "exposure:anthropic/claude-desktop/default/read.file.project@fs:project", "type": "exposure", "label": "Read the project it is working on @ the project it was pointed at", "source": "probes/profiles/anthropic/claude-desktop/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-desktop/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-desktop/default.json", "capability": "read.file.project", "reach": "fs:project", "reversible": "yes", "family": "filesystem", "profile": "anthropic/claude-desktop/default", "refined": true }, { "id": "tool:anthropic/claude-desktop/default/local files and commands (when enabled)", "type": "tool", "label": "local files and commands (when enabled)", "source": "probes/profiles/anthropic/claude-desktop/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-desktop/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-desktop/default.json", "profile": "anthropic/claude-desktop/default", "evidence": null }, { "id": "exposure:anthropic/claude-desktop/default/write.file.project@fs:project", "type": "exposure", "label": "Change the project it is working on @ the project it was pointed at", "source": "probes/profiles/anthropic/claude-desktop/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-desktop/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-desktop/default.json", "capability": "write.file.project", "reach": "fs:project", "reversible": "with-effort", "family": "filesystem", "profile": "anthropic/claude-desktop/default", "refined": true }, { "id": "exposure:anthropic/claude-desktop/default/read.file.host@fs:user-home", "type": "exposure", "label": "Read any file the account can reach @ your home directory", "source": "probes/profiles/anthropic/claude-desktop/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-desktop/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-desktop/default.json", "capability": "read.file.host", "reach": "fs:user-home", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-desktop/default", "refined": true }, { "id": "exposure:anthropic/claude-desktop/default/write.file.host@fs:user-home", "type": "exposure", "label": "Change any file the account can reach @ your home directory", "source": "probes/profiles/anthropic/claude-desktop/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-desktop/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-desktop/default.json", "capability": "write.file.host", "reach": "fs:user-home", "reversible": "with-effort", "family": "filesystem", "profile": "anthropic/claude-desktop/default", "refined": true }, { "id": "exposure:anthropic/claude-desktop/default/execute.process.host@proc:host-account", "type": "exposure", "label": "Run programs as the account @ programs as your user account, on your machine", "source": "probes/profiles/anthropic/claude-desktop/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-desktop/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-desktop/default.json", "capability": "execute.process.host", "reach": "proc:host-account", "reversible": "with-effort", "family": "process", "profile": "anthropic/claude-desktop/default", "refined": true }, { "id": "exposure:anthropic/claude-desktop/default/read.credential.host@id:user-credentials", "type": "exposure", "label": "Read credentials stored where it runs @ your stored credentials", "source": "probes/profiles/anthropic/claude-desktop/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-desktop/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-desktop/default.json", "capability": "read.credential.host", "reach": "id:user-credentials", "reversible": "no", "family": "identity", "profile": "anthropic/claude-desktop/default", "refined": true }, { "id": "exposure:anthropic/claude-desktop/default/authenticate-as.credential.tenant@id:user-credentials", "type": "exposure", "label": "Act in accounts with the credentials it holds @ your stored credentials", "source": "probes/profiles/anthropic/claude-desktop/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-desktop/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-desktop/default.json", "capability": "authenticate-as.credential.tenant", "reach": "id:user-credentials", "reversible": "no", "family": "identity", "profile": "anthropic/claude-desktop/default", "refined": true }, { "id": "exposure:anthropic/claude-desktop/default/read.record.history@rec:shell-history", "type": "exposure", "label": "Read a retained record: shell history, past sessions @ your shell history and past transcripts", "source": "probes/profiles/anthropic/claude-desktop/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-desktop/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-desktop/default.json", "capability": "read.record.history", "reach": "rec:shell-history", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-desktop/default", "refined": true }, { "id": "exposure:anthropic/claude-desktop/default/grant.credential.self@cfg:own-settings", "type": "exposure", "label": "Change its own permission settings @ its own settings file", "source": "probes/profiles/anthropic/claude-desktop/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-desktop/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-desktop/default.json", "capability": "grant.credential.self", "reach": "cfg:own-settings", "reversible": "yes", "family": "identity", "profile": "anthropic/claude-desktop/default", "refined": true }, { "id": "exposure:anthropic/claude-desktop/default/send.endpoint.world@net:world", "type": "exposure", "label": "Reach any host on the internet @ any host on the internet", "source": "probes/profiles/anthropic/claude-desktop/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-desktop/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-desktop/default.json", "capability": "send.endpoint.world", "reach": "net:world", "reversible": "no", "family": "network", "profile": "anthropic/claude-desktop/default", "refined": true }, { "id": "profile:anthropic/claude-web/connectors-on", "type": "profile", "label": "Claude (in the browser, with connectors switched on) · connectors-on", "source": "probes/profiles/anthropic/claude-web/connectors-on.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "vendor": "Anthropic", "product": "Claude (in the browser, with connectors switched on)", "variant": "connectors-on", "surface": "web", "version": "2026-09-05", "measured": false, "reach_names": { "host": "what the drive connector is scoped to; not your machine", "tenant": "the accounts you connected, as you scoped them", "world": "the vendor's egress" }, "not_reachable": [ { "what": "your machine's files", "why": "a browser tab; the connector reaches a drive, not a disk", "source": "assess/library.json (web: home)" } ], "description": "The same web assistant with connectors you switched on — a drive, a code host, a cloud account. Each connector is a boundary (the vendor holds the token, scoped as you scoped it) and each one is a row you granted by clicking. DERIVED from the assess library's web tree; which connectors is yours to name.", "prior": 0.1 }, { "id": "tool:anthropic/claude-web/connectors-on/conversation and uploads", "type": "tool", "label": "conversation and uploads", "source": "probes/profiles/anthropic/claude-web/connectors-on.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "profile": "anthropic/claude-web/connectors-on", "evidence": null }, { "id": "exposure:anthropic/claude-web/connectors-on/read.file.project@fs:uploads", "type": "exposure", "label": "Read the project it is working on @ what you paste or upload", "source": "probes/profiles/anthropic/claude-web/connectors-on.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "capability": "read.file.project", "reach": "fs:uploads", "reversible": "yes", "family": "filesystem", "profile": "anthropic/claude-web/connectors-on", "refined": true }, { "id": "tool:anthropic/claude-web/connectors-on/connectors", "type": "tool", "label": "connectors", "source": "probes/profiles/anthropic/claude-web/connectors-on.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "profile": "anthropic/claude-web/connectors-on", "evidence": null }, { "id": "exposure:anthropic/claude-web/connectors-on/read.file.host@fs:cloud-store", "type": "exposure", "label": "Read any file the account can reach @ a cloud drive you connected", "source": "probes/profiles/anthropic/claude-web/connectors-on.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "capability": "read.file.host", "reach": "fs:cloud-store", "reversible": "no", "family": "filesystem", "profile": "anthropic/claude-web/connectors-on", "refined": true }, { "id": "exposure:anthropic/claude-web/connectors-on/write.repository.tenant@code:any-repo-of-yours", "type": "exposure", "label": "Push to a code host (any branch it can reach) @ any repository your credentials reach", "source": "probes/profiles/anthropic/claude-web/connectors-on.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "capability": "write.repository.tenant", "reach": "code:any-repo-of-yours", "reversible": "with-effort", "family": "code", "profile": "anthropic/claude-web/connectors-on", "refined": true }, { "id": "exposure:anthropic/claude-web/connectors-on/authenticate-as.credential.tenant@id:connector-token", "type": "exposure", "label": "Act in accounts with the credentials it holds @ a connector you switched on", "source": "probes/profiles/anthropic/claude-web/connectors-on.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "capability": "authenticate-as.credential.tenant", "reach": "id:connector-token", "reversible": "no", "family": "identity", "profile": "anthropic/claude-web/connectors-on", "refined": true }, { "id": "exposure:anthropic/claude-web/connectors-on/read.message.tenant@msg:mailbox", "type": "exposure", "label": "Read mail or chat it is connected to @ your mailbox or chat", "source": "probes/profiles/anthropic/claude-web/connectors-on.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/anthropic/claude-web/connectors-on.json", "capability": "read.message.tenant", "reach": "msg:mailbox", "reversible": "no", "family": "communication", "profile": "anthropic/claude-web/connectors-on", "refined": true }, { "id": "profile:generic/browser-extension/broad-host-permissions", "type": "profile", "label": "A browser extension with broad host permissions · broad-host-permissions", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/browser-extension/broad-host-permissions.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/browser-extension/broad-host-permissions.json", "vendor": "generic", "product": "A browser extension with broad host permissions", "variant": "broad-host-permissions", "surface": "extension", "version": "2026-09-05", "measured": false, "reach_names": { "host": "your browser — every page, every logged-in site", "tenant": "the sites you are logged into, as you", "world": "the internet, from your browser" }, "not_reachable": [ { "what": "files on your disk", "why": "the browser sandbox; an extension reads pages, not the filesystem", "source": "the browser's extension permission model" } ], "description": "Not an agent by name, and it has a grant: an extension granted 'read and change all your data on all websites' reads every page you visit, reaches any host, and acts inside the sites you are logged into. Nobody wrote it a mandate. DERIVED from the permission model the browser documents; not measured on any instance.", "prior": 0.03 }, { "id": "tool:generic/browser-extension/broad-host-permissions/the extension", "type": "tool", "label": "the extension", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/browser-extension/broad-host-permissions.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/browser-extension/broad-host-permissions.json", "profile": "generic/browser-extension/broad-host-permissions", "evidence": null }, { "id": "exposure:generic/browser-extension/broad-host-permissions/read.record.browsing@web:every-page", "type": "exposure", "label": "Read every page you visit @ every page you visit", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/browser-extension/broad-host-permissions.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/browser-extension/broad-host-permissions.json", "capability": "read.record.browsing", "reach": "web:every-page", "reversible": "no", "family": "browser", "profile": "generic/browser-extension/broad-host-permissions", "refined": true }, { "id": "exposure:generic/browser-extension/broad-host-permissions/send.endpoint.world@net:world", "type": "exposure", "label": "Reach any host on the internet @ any host on the internet", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/browser-extension/broad-host-permissions.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/browser-extension/broad-host-permissions.json", "capability": "send.endpoint.world", "reach": "net:world", "reversible": "no", "family": "network", "profile": "generic/browser-extension/broad-host-permissions", "refined": true }, { "id": "exposure:generic/browser-extension/broad-host-permissions/authenticate-as.credential.tenant@id:browser-sessions", "type": "exposure", "label": "Act in accounts with the credentials it holds @ the sites you are logged into", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/browser-extension/broad-host-permissions.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/browser-extension/broad-host-permissions.json", "capability": "authenticate-as.credential.tenant", "reach": "id:browser-sessions", "reversible": "no", "family": "identity", "profile": "generic/browser-extension/broad-host-permissions", "refined": true }, { "id": "profile:generic/scheduled-job/service-account", "type": "profile", "label": "A scheduled job running as a service account · service-account", "source": "probes/profiles/generic/scheduled-job/service-account.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/scheduled-job/service-account.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/scheduled-job/service-account.json", "vendor": "generic", "product": "A scheduled job running as a service account", "variant": "service-account", "surface": "service", "version": "2026-09-05", "measured": false, "reach_names": { "host": "the server it runs on, as the service account", "tenant": "whatever the service account's credential opens", "world": "the internet, from the server" }, "not_reachable": [ { "what": "your machine", "why": "it runs on a server", "source": "by construction" } ], "description": "A cron job or scheduled task on a server, under an account that is not a person's, with a credential nobody rotates. It runs when nobody is watching and no person's judgement stands in front of it. DERIVED; not measured on any instance.", "prior": 0.02 }, { "id": "tool:generic/scheduled-job/service-account/the job", "type": "tool", "label": "the job", "source": "probes/profiles/generic/scheduled-job/service-account.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/scheduled-job/service-account.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/scheduled-job/service-account.json", "profile": "generic/scheduled-job/service-account", "evidence": null }, { "id": "exposure:generic/scheduled-job/service-account/execute.process.host@proc:server", "type": "exposure", "label": "Run programs as the account @ programs on a server, as a service account", "source": "probes/profiles/generic/scheduled-job/service-account.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/scheduled-job/service-account.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/scheduled-job/service-account.json", "capability": "execute.process.host", "reach": "proc:server", "reversible": "with-effort", "family": "process", "profile": "generic/scheduled-job/service-account", "refined": true }, { "id": "exposure:generic/scheduled-job/service-account/read.file.host@fs:server-disk", "type": "exposure", "label": "Read any file the account can reach @ a server's disk", "source": "probes/profiles/generic/scheduled-job/service-account.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/scheduled-job/service-account.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/scheduled-job/service-account.json", "capability": "read.file.host", "reach": "fs:server-disk", "reversible": "no", "family": "filesystem", "profile": "generic/scheduled-job/service-account", "refined": true }, { "id": "exposure:generic/scheduled-job/service-account/write.file.host@fs:server-disk", "type": "exposure", "label": "Change any file the account can reach @ a server's disk", "source": "probes/profiles/generic/scheduled-job/service-account.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/scheduled-job/service-account.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/scheduled-job/service-account.json", "capability": "write.file.host", "reach": "fs:server-disk", "reversible": "with-effort", "family": "filesystem", "profile": "generic/scheduled-job/service-account", "refined": true }, { "id": "exposure:generic/scheduled-job/service-account/authenticate-as.credential.tenant@id:service-account", "type": "exposure", "label": "Act in accounts with the credentials it holds @ a service account", "source": "probes/profiles/generic/scheduled-job/service-account.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/scheduled-job/service-account.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/scheduled-job/service-account.json", "capability": "authenticate-as.credential.tenant", "reach": "id:service-account", "reversible": "no", "family": "identity", "profile": "generic/scheduled-job/service-account", "refined": true }, { "id": "exposure:generic/scheduled-job/service-account/send.endpoint.world@net:world", "type": "exposure", "label": "Reach any host on the internet @ any host on the internet", "source": "probes/profiles/generic/scheduled-job/service-account.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/scheduled-job/service-account.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/scheduled-job/service-account.json", "capability": "send.endpoint.world", "reach": "net:world", "reversible": "no", "family": "network", "profile": "generic/scheduled-job/service-account", "refined": true }, { "id": "exposure:generic/scheduled-job/service-account/create.schedule.host@sched:host-cron", "type": "exposure", "label": "Create something that outlives the turn where it runs (a cron, a service) @ a scheduler on the host", "source": "probes/profiles/generic/scheduled-job/service-account.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/scheduled-job/service-account.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/scheduled-job/service-account.json", "capability": "create.schedule.host", "reach": "sched:host-cron", "reversible": "yes", "family": "schedule", "profile": "generic/scheduled-job/service-account", "refined": true }, { "id": "exposure:generic/scheduled-job/service-account/write.budget.tenant@money:metered-account", "type": "exposure", "label": "Spend money or tokens against an account it holds @ an account that is billed", "source": "probes/profiles/generic/scheduled-job/service-account.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/generic/scheduled-job/service-account.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/generic/scheduled-job/service-account.json", "capability": "write.budget.tenant", "reach": "money:metered-account", "reversible": "no", "family": "money", "profile": "generic/scheduled-job/service-account", "refined": true }, { "id": "profile:github/actions-runner/ci", "type": "profile", "label": "Actions runner (a hosted CI job) · ci", "source": "probes/profiles/github/actions-runner/ci.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/github/actions-runner/ci.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/github/actions-runner/ci.json", "vendor": "GitHub", "product": "Actions runner (a hosted CI job)", "variant": "ci", "surface": "ci", "version": "2026-08-26", "measured": true, "reach_names": { "host": "the runner — destroyed after the job; not your machine", "tenant": "the repository, with the workflow's token", "world": "the internet, unrestricted" }, "not_reachable": [ { "what": "your machine", "why": "a hosted runner", "source": "library entry 2" }, { "what": "the repository, for writing", "why": "the token is contents:read", "source": "evidence: ci.permissions-block" } ], "description": "An ephemeral CI job with no agent, no hooks, and one platform-enforced grant: the workflow's permissions block. MEASURED on 26 August by measure.py inside the runner (the library's second entry), translated into findings on 5 September. Unrestricted egress; the token cannot write.", "prior": 0.05 }, { "id": "tool:github/actions-runner/ci/the job's shell", "type": "tool", "label": "the job's shell", "source": "probes/profiles/github/actions-runner/ci.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/github/actions-runner/ci.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/github/actions-runner/ci.json", "profile": "github/actions-runner/ci", "evidence": "evidence/github__actions-runner__ci__shell__2026-08-26.json" }, { "id": "exposure:github/actions-runner/ci/execute.process.host@proc:ci-runner", "type": "exposure", "label": "Run programs as the account @ programs on the runner", "source": "probes/profiles/github/actions-runner/ci.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/github/actions-runner/ci.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/github/actions-runner/ci.json", "capability": "execute.process.host", "reach": "proc:ci-runner", "reversible": "with-effort", "family": "process", "profile": "github/actions-runner/ci", "refined": true }, { "id": "exposure:github/actions-runner/ci/read.file.host@fs:ci-checkout", "type": "exposure", "label": "Read any file the account can reach @ the checked-out tree in a CI job", "source": "probes/profiles/github/actions-runner/ci.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/github/actions-runner/ci.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/github/actions-runner/ci.json", "capability": "read.file.host", "reach": "fs:ci-checkout", "reversible": "no", "family": "filesystem", "profile": "github/actions-runner/ci", "refined": true }, { "id": "exposure:github/actions-runner/ci/write.file.host@fs:ci-checkout", "type": "exposure", "label": "Change any file the account can reach @ the checked-out tree in a CI job", "source": "probes/profiles/github/actions-runner/ci.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/github/actions-runner/ci.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/github/actions-runner/ci.json", "capability": "write.file.host", "reach": "fs:ci-checkout", "reversible": "with-effort", "family": "filesystem", "profile": "github/actions-runner/ci", "refined": true }, { "id": "exposure:github/actions-runner/ci/delete.file.host@fs:ci-checkout", "type": "exposure", "label": "Delete files anywhere the account can reach @ the checked-out tree in a CI job", "source": "probes/profiles/github/actions-runner/ci.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/github/actions-runner/ci.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/github/actions-runner/ci.json", "capability": "delete.file.host", "reach": "fs:ci-checkout", "reversible": "no", "family": "filesystem", "profile": "github/actions-runner/ci", "refined": true }, { "id": "exposure:github/actions-runner/ci/send.endpoint.world@net:world", "type": "exposure", "label": "Reach any host on the internet @ any host on the internet", "source": "probes/profiles/github/actions-runner/ci.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/github/actions-runner/ci.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/github/actions-runner/ci.json", "capability": "send.endpoint.world", "reach": "net:world", "reversible": "no", "family": "network", "profile": "github/actions-runner/ci", "refined": true }, { "id": "exposure:github/actions-runner/ci/write.repository.project@code:attached-repo", "type": "exposure", "label": "Commit to the repository it was pointed at @ the repository it was pointed at", "source": "probes/profiles/github/actions-runner/ci.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/github/actions-runner/ci.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/github/actions-runner/ci.json", "capability": "write.repository.project", "reach": "code:attached-repo", "reversible": "with-effort", "family": "code", "profile": "github/actions-runner/ci", "refined": true }, { "id": "exposure:github/actions-runner/ci/read.file.project@fs:ci-checkout", "type": "exposure", "label": "Read the project it is working on @ the checked-out tree in a CI job", "source": "probes/profiles/github/actions-runner/ci.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/github/actions-runner/ci.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/github/actions-runner/ci.json", "capability": "read.file.project", "reach": "fs:ci-checkout", "reversible": "yes", "family": "filesystem", "profile": "github/actions-runner/ci", "refined": true }, { "id": "exposure:github/actions-runner/ci/write.file.project@fs:ci-checkout", "type": "exposure", "label": "Change the project it is working on @ the checked-out tree in a CI job", "source": "probes/profiles/github/actions-runner/ci.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/github/actions-runner/ci.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/github/actions-runner/ci.json", "capability": "write.file.project", "reach": "fs:ci-checkout", "reversible": "with-effort", "family": "filesystem", "profile": "github/actions-runner/ci", "refined": true }, { "id": "profile:openai/chatgpt-web/default", "type": "profile", "label": "ChatGPT (in the browser, no connectors) · default", "source": "probes/profiles/openai/chatgpt-web/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/openai/chatgpt-web/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/openai/chatgpt-web/default.json", "vendor": "OpenAI", "product": "ChatGPT (in the browser, no connectors)", "variant": "default", "surface": "web", "version": "2026-09-05", "measured": false, "reach_names": { "host": "the vendor's environment; not your machine", "tenant": "nothing of yours", "world": "the vendor's egress, if browsing is on" }, "not_reachable": [ { "what": "your machine's files", "why": "the vendor's environment is a boundary you did not build", "source": "assess/library.json (web: home)" }, { "what": "your accounts", "why": "no connectors are on", "source": "assess/library.json (web: connect)" } ], "description": "An assistant in the vendor's environment. It reaches what you paste or upload and nothing on your machine: the vendor's environment is a boundary you did not build. DERIVED from the assess library's web tree. Browsing, if on, is the vendor's egress, not yours.", "prior": 0.15 }, { "id": "tool:openai/chatgpt-web/default/conversation and uploads", "type": "tool", "label": "conversation and uploads", "source": "probes/profiles/openai/chatgpt-web/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/openai/chatgpt-web/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/openai/chatgpt-web/default.json", "profile": "openai/chatgpt-web/default", "evidence": null }, { "id": "exposure:openai/chatgpt-web/default/read.file.project@fs:uploads", "type": "exposure", "label": "Read the project it is working on @ what you paste or upload", "source": "probes/profiles/openai/chatgpt-web/default.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/profiles/openai/chatgpt-web/default.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/profiles/openai/chatgpt-web/default.json", "capability": "read.file.project", "reach": "fs:uploads", "reversible": "yes", "family": "filesystem", "profile": "openai/chatgpt-web/default", "refined": true }, { "id": "q:always-allow", "type": "question", "label": "Have you ever clicked something that said 'always allow', or turned its confirmations off?", "source": "probes/mesh/questions/always-allow.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/always-allow.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/always-allow.json", "cls": "eliciting", "reliability": 0.6, "asks_about": "execute.process.host", "funny": false }, { "id": "q:attached-repo", "type": "question", "label": "Did you attach a repository to a session, rather than open a folder?", "source": "probes/mesh/questions/attached-repo.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/attached-repo.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/attached-repo.json", "cls": "discriminating", "reliability": 0.9, "asks_about": null, "funny": false }, { "id": "q:before-2023", "type": "question", "label": "Did it exist before 2023?", "source": "probes/mesh/questions/before-2023.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/before-2023.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/before-2023.json", "cls": "discriminating", "reliability": 0.8, "asks_about": null, "funny": true }, { "id": "q:browser", "type": "question", "label": "Do you use it in a browser tab?", "source": "probes/mesh/questions/browser.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/browser.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/browser.json", "cls": "discriminating", "reliability": 0.95, "asks_about": null, "funny": false }, { "id": "q:called-agent", "type": "question", "label": "Would most people call it an AI agent?", "source": "probes/mesh/questions/called-agent.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/called-agent.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/called-agent.json", "cls": "discriminating", "reliability": 0.7, "asks_about": null, "funny": true }, { "id": "q:connectors", "type": "question", "label": "Have you connected it to a drive, your mail, a code host or a cloud account?", "source": "probes/mesh/questions/connectors.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/connectors.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/connectors.json", "cls": "eliciting", "reliability": 0.8, "asks_about": "authenticate-as.credential.tenant", "funny": false }, { "id": "q:creds-home", "type": "question", "label": "Are your cloud, SSH or registry credentials in the home directory of the account it runs as?", "source": "probes/mesh/questions/creds-home.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/creds-home.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/creds-home.json", "cls": "eliciting", "reliability": 0.3, "asks_about": "read.credential.host", "funny": false }, { "id": "q:desktop-app", "type": "question", "label": "Is it an app you installed, with its own window?", "source": "probes/mesh/questions/desktop-app.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/desktop-app.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/desktop-app.json", "cls": "discriminating", "reliability": 0.95, "asks_about": null, "funny": false }, { "id": "q:every-page", "type": "question", "label": "Can it see every page you visit?", "source": "probes/mesh/questions/every-page.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/every-page.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/every-page.json", "cls": "eliciting", "reliability": 0.4, "asks_about": "read.record.browsing", "funny": false }, { "id": "q:installed-it", "type": "question", "label": "Did you install it yourself?", "source": "probes/mesh/questions/installed-it.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/installed-it.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/installed-it.json", "cls": "discriminating", "reliability": 0.9, "asks_about": null, "funny": false }, { "id": "q:logged-in-sites", "type": "question", "label": "Does it act inside websites you are logged into?", "source": "probes/mesh/questions/logged-in-sites.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/logged-in-sites.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/logged-in-sites.json", "cls": "eliciting", "reliability": 0.55, "asks_about": "authenticate-as.credential.tenant", "funny": false }, { "id": "q:mail", "type": "question", "label": "Can it read your mail or chat?", "source": "probes/mesh/questions/mail.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/mail.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/mail.json", "cls": "eliciting", "reliability": 0.6, "asks_about": "read.message.tenant", "funny": false }, { "id": "q:money", "type": "question", "label": "Does it hold a key to anything that costs money?", "source": "probes/mesh/questions/money.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/money.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/money.json", "cls": "eliciting", "reliability": 0.4, "asks_about": "write.budget.tenant", "funny": false }, { "id": "q:name-code", "type": "question", "label": "Does its name contain the word 'code'?", "source": "probes/mesh/questions/name-code.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/name-code.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/name-code.json", "cls": "discriminating", "reliability": 0.95, "asks_about": null, "funny": true }, { "id": "q:name-gpt", "type": "question", "label": "Does its name contain the letters GPT?", "source": "probes/mesh/questions/name-gpt.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/name-gpt.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/name-gpt.json", "cls": "discriminating", "reliability": 0.95, "asks_about": null, "funny": true }, { "id": "q:name-person", "type": "question", "label": "Is it named after a person — a first name?", "source": "probes/mesh/questions/name-person.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/name-person.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/name-person.json", "cls": "discriminating", "reliability": 0.95, "asks_about": null, "funny": true }, { "id": "q:never-ask", "type": "question", "label": "Did you set it to never ask — a flag that skips permissions, an auto mode, a 'don't ask again'?", "source": "probes/mesh/questions/never-ask.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/never-ask.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/never-ask.json", "cls": "discriminating", "reliability": 0.85, "asks_about": null, "funny": false }, { "id": "q:not-a-person", "type": "question", "label": "Does it run under an account that is not a person's?", "source": "probes/mesh/questions/not-a-person.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/not-a-person.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/not-a-person.json", "cls": "discriminating", "reliability": 0.6, "asks_about": null, "funny": false }, { "id": "q:other-files", "type": "question", "label": "Can it read files on your machine that are not the project?", "source": "probes/mesh/questions/other-files.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/other-files.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/other-files.json", "cls": "eliciting", "reliability": 0.35, "asks_about": "read.file.host", "funny": false }, { "id": "q:paste-only", "type": "question", "label": "Do you mostly paste things into it and read what comes back?", "source": "probes/mesh/questions/paste-only.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/paste-only.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/paste-only.json", "cls": "discriminating", "reliability": 0.8, "asks_about": null, "funny": false }, { "id": "q:proxy", "type": "question", "label": "Does its outbound traffic go through a proxy or allow-list you did not set up?", "source": "probes/mesh/questions/proxy.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/proxy.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/proxy.json", "cls": "eliciting", "reliability": 0.3, "asks_about": "send.endpoint.allowed", "funny": false }, { "id": "q:push", "type": "question", "label": "Does it push commits to a code host?", "source": "probes/mesh/questions/push.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/push.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/push.json", "cls": "eliciting", "reliability": 0.7, "asks_about": "write.repository.tenant", "funny": false }, { "id": "q:terminal", "type": "question", "label": "Do you run it in a terminal, on your own machine?", "source": "probes/mesh/questions/terminal.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/terminal.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/terminal.json", "cls": "discriminating", "reliability": 0.95, "asks_about": null, "funny": false }, { "id": "q:unattended", "type": "question", "label": "Does it run when nobody is watching — a pipeline, a schedule, a job?", "source": "probes/mesh/questions/unattended.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/unattended.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/unattended.json", "cls": "discriminating", "reliability": 0.85, "asks_about": null, "funny": false }, { "id": "q:vendor-env", "type": "question", "label": "Does it run in the vendor's environment rather than yours?", "source": "probes/mesh/questions/vendor-env.json", "edit": "https://github.com/SGit-AI/SGit-AI__Website__PKI/edit/dev/probes/mesh/questions/vendor-env.json", "view": "https://github.com/SGit-AI/SGit-AI__Website__PKI/blob/dev/probes/mesh/questions/vendor-env.json", "cls": "discriminating", "reliability": 0.7, "asks_about": null, "funny": false } ], "edges": [ { "from": "env:browser", "to": "vendor:you", "type": "provided-by", "source": "probes/mesh/envs/env__browser.json" }, { "from": "env:ci-runner", "to": "vendor:github", "type": "provided-by", "source": "probes/mesh/envs/env__ci-runner.json" }, { "from": "env:container", "to": "vendor:anthropic", "type": "provided-by", "source": "probes/mesh/envs/env__container.json" }, { "from": "env:desktop", "to": "vendor:you", "type": "provided-by", "source": "probes/mesh/envs/env__desktop.json" }, { "from": "env:managed-desktop", "to": "vendor:you", "type": "provided-by", "source": "probes/mesh/envs/env__managed-desktop.json" }, { "from": "env:server", "to": "vendor:you", "type": "provided-by", "source": "probes/mesh/envs/env__server.json" }, { "from": "env:vendor-cloud", "to": "vendor:generic", "type": "provided-by", "source": "probes/mesh/envs/env__vendor-cloud.json" }, { "from": "env:wsl", "to": "vendor:you", "type": "provided-by", "source": "probes/mesh/envs/env__wsl.json" }, { "from": "cap:read.file.project", "to": "family:filesystem", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:write.file.project", "to": "family:filesystem", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:read.file.host", "to": "family:filesystem", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:write.file.host", "to": "family:filesystem", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:delete.file.host", "to": "family:filesystem", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:execute.process.host", "to": "family:process", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:execute.process.self", "to": "family:process", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:send.endpoint.allowed", "to": "family:network", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:send.endpoint.world", "to": "family:network", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:read.credential.host", "to": "family:identity", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:authenticate-as.credential.tenant", "to": "family:identity", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:grant.credential.self", "to": "family:identity", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:send.message.world", "to": "family:communication", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:read.message.tenant", "to": "family:communication", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:write.repository.project", "to": "family:code", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:write.repository.tenant", "to": "family:code", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:authenticate-as.credential.signing", "to": "family:code", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:create.record.world", "to": "family:code", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:write.budget.tenant", "to": "family:money", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:create.schedule.host", "to": "family:schedule", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:read.record.history", "to": "family:filesystem", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:create.schedule.tenant", "to": "family:schedule", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cap:read.record.browsing", "to": "family:browser", "type": "member-of", "source": "probes/primitives.json" }, { "from": "cfg:own-settings", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/cfg__own-settings.json" }, { "from": "cfg:own-settings", "to": "env:wsl", "type": "runs-in", "source": "probes/mesh/reaches/cfg__own-settings.json" }, { "from": "cfg:own-settings", "to": "env:managed-desktop", "type": "runs-in", "source": "probes/mesh/reaches/cfg__own-settings.json" }, { "from": "code:any-repo-of-yours", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/code__any-repo-of-yours.json" }, { "from": "code:any-repo-of-yours", "to": "env:wsl", "type": "runs-in", "source": "probes/mesh/reaches/code__any-repo-of-yours.json" }, { "from": "code:any-repo-of-yours", "to": "env:managed-desktop", "type": "runs-in", "source": "probes/mesh/reaches/code__any-repo-of-yours.json" }, { "from": "code:any-repo-of-yours", "to": "env:vendor-cloud", "type": "runs-in", "source": "probes/mesh/reaches/code__any-repo-of-yours.json" }, { "from": "code:any-repo-of-yours", "to": "obl:aiuc1-B006.1", "type": "governed-by", "source": "probes/mesh/reaches/code__any-repo-of-yours.json" }, { "from": "code:attached-repo", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/code__attached-repo.json" }, { "from": "code:attached-repo", "to": "env:container", "type": "runs-in", "source": "probes/mesh/reaches/code__attached-repo.json" }, { "from": "code:attached-repo", "to": "env:ci-runner", "type": "runs-in", "source": "probes/mesh/reaches/code__attached-repo.json" }, { "from": "code:in-scope-repos", "to": "env:container", "type": "runs-in", "source": "probes/mesh/reaches/code__in-scope-repos.json" }, { "from": "code:in-scope-repos", "to": "obl:aiuc1-D003.1", "type": "governed-by", "source": "probes/mesh/reaches/code__in-scope-repos.json" }, { "from": "fs:ci-checkout", "to": "env:ci-runner", "type": "runs-in", "source": "probes/mesh/reaches/fs__ci-checkout.json" }, { "from": "fs:cloud-store", "to": "env:vendor-cloud", "type": "runs-in", "source": "probes/mesh/reaches/fs__cloud-store.json" }, { "from": "fs:cloud-store", "to": "obl:aiuc1-B006.1", "type": "governed-by", "source": "probes/mesh/reaches/fs__cloud-store.json" }, { "from": "fs:container-layer", "to": "env:container", "type": "runs-in", "source": "probes/mesh/reaches/fs__container-layer.json" }, { "from": "fs:corporate-share", "to": "env:managed-desktop", "type": "runs-in", "source": "probes/mesh/reaches/fs__corporate-share.json" }, { "from": "fs:corporate-share", "to": "obl:aiuc1-B006.1", "type": "governed-by", "source": "probes/mesh/reaches/fs__corporate-share.json" }, { "from": "fs:corporate-share", "to": "obl:aiuc1-E015.3", "type": "governed-by", "source": "probes/mesh/reaches/fs__corporate-share.json" }, { "from": "fs:network-mount", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/fs__network-mount.json" }, { "from": "fs:network-mount", "to": "env:managed-desktop", "type": "runs-in", "source": "probes/mesh/reaches/fs__network-mount.json" }, { "from": "fs:network-mount", "to": "obl:aiuc1-B006.1", "type": "governed-by", "source": "probes/mesh/reaches/fs__network-mount.json" }, { "from": "fs:project", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/fs__project.json" }, { "from": "fs:project", "to": "env:container", "type": "runs-in", "source": "probes/mesh/reaches/fs__project.json" }, { "from": "fs:project", "to": "env:ci-runner", "type": "runs-in", "source": "probes/mesh/reaches/fs__project.json" }, { "from": "fs:project", "to": "env:wsl", "type": "runs-in", "source": "probes/mesh/reaches/fs__project.json" }, { "from": "fs:project", "to": "env:managed-desktop", "type": "runs-in", "source": "probes/mesh/reaches/fs__project.json" }, { "from": "fs:server-disk", "to": "env:server", "type": "runs-in", "source": "probes/mesh/reaches/fs__server-disk.json" }, { "from": "fs:server-disk", "to": "obl:aiuc1-E015.3", "type": "governed-by", "source": "probes/mesh/reaches/fs__server-disk.json" }, { "from": "fs:uploads", "to": "env:vendor-cloud", "type": "runs-in", "source": "probes/mesh/reaches/fs__uploads.json" }, { "from": "fs:user-home", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/fs__user-home.json" }, { "from": "fs:user-home", "to": "env:wsl", "type": "runs-in", "source": "probes/mesh/reaches/fs__user-home.json" }, { "from": "fs:user-home", "to": "env:managed-desktop", "type": "runs-in", "source": "probes/mesh/reaches/fs__user-home.json" }, { "from": "fs:user-home", "to": "obl:aiuc1-B006.1", "type": "governed-by", "source": "probes/mesh/reaches/fs__user-home.json" }, { "from": "id:agent-own-keys", "to": "env:container", "type": "runs-in", "source": "probes/mesh/reaches/id__agent-own-keys.json" }, { "from": "id:browser-sessions", "to": "env:browser", "type": "runs-in", "source": "probes/mesh/reaches/id__browser-sessions.json" }, { "from": "id:browser-sessions", "to": "obl:aiuc1-B006.1", "type": "governed-by", "source": "probes/mesh/reaches/id__browser-sessions.json" }, { "from": "id:browser-sessions", "to": "obl:aiuc1-D003.1", "type": "governed-by", "source": "probes/mesh/reaches/id__browser-sessions.json" }, { "from": "id:connector-token", "to": "env:vendor-cloud", "type": "runs-in", "source": "probes/mesh/reaches/id__connector-token.json" }, { "from": "id:connector-token", "to": "obl:aiuc1-B006.1", "type": "governed-by", "source": "probes/mesh/reaches/id__connector-token.json" }, { "from": "id:platform-token", "to": "env:container", "type": "runs-in", "source": "probes/mesh/reaches/id__platform-token.json" }, { "from": "id:platform-token", "to": "env:ci-runner", "type": "runs-in", "source": "probes/mesh/reaches/id__platform-token.json" }, { "from": "id:platform-token", "to": "obl:aiuc1-D003.1", "type": "governed-by", "source": "probes/mesh/reaches/id__platform-token.json" }, { "from": "id:service-account", "to": "env:server", "type": "runs-in", "source": "probes/mesh/reaches/id__service-account.json" }, { "from": "id:service-account", "to": "obl:aiuc1-E004", "type": "governed-by", "source": "probes/mesh/reaches/id__service-account.json" }, { "from": "id:user-credentials", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/id__user-credentials.json" }, { "from": "id:user-credentials", "to": "env:wsl", "type": "runs-in", "source": "probes/mesh/reaches/id__user-credentials.json" }, { "from": "id:user-credentials", "to": "env:managed-desktop", "type": "runs-in", "source": "probes/mesh/reaches/id__user-credentials.json" }, { "from": "id:user-credentials", "to": "obl:aiuc1-B006.1", "type": "governed-by", "source": "probes/mesh/reaches/id__user-credentials.json" }, { "from": "id:user-credentials", "to": "obl:aiuc1-E004", "type": "governed-by", "source": "probes/mesh/reaches/id__user-credentials.json" }, { "from": "money:metered-account", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/money__metered-account.json" }, { "from": "money:metered-account", "to": "env:server", "type": "runs-in", "source": "probes/mesh/reaches/money__metered-account.json" }, { "from": "money:metered-account", "to": "env:container", "type": "runs-in", "source": "probes/mesh/reaches/money__metered-account.json" }, { "from": "money:metered-account", "to": "obl:aiuc1-D003.2", "type": "governed-by", "source": "probes/mesh/reaches/money__metered-account.json" }, { "from": "msg:anyone", "to": "env:vendor-cloud", "type": "runs-in", "source": "probes/mesh/reaches/msg__anyone.json" }, { "from": "msg:anyone", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/msg__anyone.json" }, { "from": "msg:anyone", "to": "obl:aiuc1-D003.1", "type": "governed-by", "source": "probes/mesh/reaches/msg__anyone.json" }, { "from": "msg:anyone", "to": "obl:aiuc1-E004", "type": "governed-by", "source": "probes/mesh/reaches/msg__anyone.json" }, { "from": "msg:mailbox", "to": "env:vendor-cloud", "type": "runs-in", "source": "probes/mesh/reaches/msg__mailbox.json" }, { "from": "msg:mailbox", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/msg__mailbox.json" }, { "from": "msg:mailbox", "to": "obl:aiuc1-B006.1", "type": "governed-by", "source": "probes/mesh/reaches/msg__mailbox.json" }, { "from": "net:allowlist", "to": "env:container", "type": "runs-in", "source": "probes/mesh/reaches/net__allowlist.json" }, { "from": "net:allowlist", "to": "obl:aiuc1-D003.2", "type": "governed-by", "source": "probes/mesh/reaches/net__allowlist.json" }, { "from": "net:vendor-egress", "to": "env:vendor-cloud", "type": "runs-in", "source": "probes/mesh/reaches/net__vendor-egress.json" }, { "from": "net:world", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/net__world.json" }, { "from": "net:world", "to": "env:ci-runner", "type": "runs-in", "source": "probes/mesh/reaches/net__world.json" }, { "from": "net:world", "to": "env:server", "type": "runs-in", "source": "probes/mesh/reaches/net__world.json" }, { "from": "net:world", "to": "env:wsl", "type": "runs-in", "source": "probes/mesh/reaches/net__world.json" }, { "from": "net:world", "to": "env:managed-desktop", "type": "runs-in", "source": "probes/mesh/reaches/net__world.json" }, { "from": "net:world", "to": "env:browser", "type": "runs-in", "source": "probes/mesh/reaches/net__world.json" }, { "from": "net:world", "to": "obl:aiuc1-D003.2", "type": "governed-by", "source": "probes/mesh/reaches/net__world.json" }, { "from": "proc:ci-runner", "to": "env:ci-runner", "type": "runs-in", "source": "probes/mesh/reaches/proc__ci-runner.json" }, { "from": "proc:ci-runner", "to": "obl:aiuc1-D003.1", "type": "governed-by", "source": "probes/mesh/reaches/proc__ci-runner.json" }, { "from": "proc:container", "to": "env:container", "type": "runs-in", "source": "probes/mesh/reaches/proc__container.json" }, { "from": "proc:container", "to": "obl:aiuc1-D003.1", "type": "governed-by", "source": "probes/mesh/reaches/proc__container.json" }, { "from": "proc:host-account", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/proc__host-account.json" }, { "from": "proc:host-account", "to": "env:wsl", "type": "runs-in", "source": "probes/mesh/reaches/proc__host-account.json" }, { "from": "proc:host-account", "to": "env:managed-desktop", "type": "runs-in", "source": "probes/mesh/reaches/proc__host-account.json" }, { "from": "proc:host-account", "to": "obl:aiuc1-D003.1", "type": "governed-by", "source": "probes/mesh/reaches/proc__host-account.json" }, { "from": "proc:server", "to": "env:server", "type": "runs-in", "source": "probes/mesh/reaches/proc__server.json" }, { "from": "proc:server", "to": "obl:aiuc1-D003.1", "type": "governed-by", "source": "probes/mesh/reaches/proc__server.json" }, { "from": "proc:server", "to": "obl:aiuc1-E004", "type": "governed-by", "source": "probes/mesh/reaches/proc__server.json" }, { "from": "pub:registries", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/pub__registries.json" }, { "from": "pub:registries", "to": "env:ci-runner", "type": "runs-in", "source": "probes/mesh/reaches/pub__registries.json" }, { "from": "pub:registries", "to": "obl:aiuc1-E004", "type": "governed-by", "source": "probes/mesh/reaches/pub__registries.json" }, { "from": "rec:session-history", "to": "env:container", "type": "runs-in", "source": "probes/mesh/reaches/rec__session-history.json" }, { "from": "rec:session-history", "to": "obl:aiuc1-E015.3", "type": "governed-by", "source": "probes/mesh/reaches/rec__session-history.json" }, { "from": "rec:shell-history", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/rec__shell-history.json" }, { "from": "rec:shell-history", "to": "env:wsl", "type": "runs-in", "source": "probes/mesh/reaches/rec__shell-history.json" }, { "from": "rec:shell-history", "to": "env:managed-desktop", "type": "runs-in", "source": "probes/mesh/reaches/rec__shell-history.json" }, { "from": "rec:shell-history", "to": "obl:aiuc1-E015.3", "type": "governed-by", "source": "probes/mesh/reaches/rec__shell-history.json" }, { "from": "sched:host-cron", "to": "env:desktop", "type": "runs-in", "source": "probes/mesh/reaches/sched__host-cron.json" }, { "from": "sched:host-cron", "to": "env:container", "type": "runs-in", "source": "probes/mesh/reaches/sched__host-cron.json" }, { "from": "sched:host-cron", "to": "env:server", "type": "runs-in", "source": "probes/mesh/reaches/sched__host-cron.json" }, { "from": "sched:platform-routines", "to": "env:vendor-cloud", "type": "runs-in", "source": "probes/mesh/reaches/sched__platform-routines.json" }, { "from": "sched:platform-routines", "to": "obl:aiuc1-E004", "type": "governed-by", "source": "probes/mesh/reaches/sched__platform-routines.json" }, { "from": "web:every-page", "to": "env:browser", "type": "runs-in", "source": "probes/mesh/reaches/web__every-page.json" }, { "from": "web:every-page", "to": "obl:aiuc1-B006.1", "type": "governed-by", "source": "probes/mesh/reaches/web__every-page.json" }, { "from": "web:every-page", "to": "obl:aiuc1-E015.3", "type": "governed-by", "source": "probes/mesh/reaches/web__every-page.json" }, { "from": "profile:anthropic/claude-code-remote/ccr-container", "to": "vendor:anthropic", "type": "made-by", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "profile:anthropic/claude-code-remote/ccr-container", "to": "env:container", "type": "runs-in", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "profile:anthropic/claude-code-remote/ccr-container", "to": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "type": "has-tool", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "evidence:anthropic__claude-code-remote__ccr-container__shell__2026-09-05.json", "type": "evidenced-by", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/execute.process.host@proc:container", "to": "cap:execute.process.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/execute.process.host@proc:container", "to": "proc:container", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/execute.process.host@proc:container", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "identity.account", "note": "root inside the container: every process and file IN THE CONTAINER. The container is the host; your machine is not reachable" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/read.file.host@fs:container-layer", "to": "cap:read.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/read.file.host@fs:container-layer", "to": "fs:container-layer", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/read.file.host@fs:container-layer", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "identity.account", "note": "any file in the container — the attached clone, the harness's state, the system. Not your machine's files (the assess tree's 'home: boundary')" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/write.file.host@fs:container-layer", "to": "cap:write.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/write.file.host@fs:container-layer", "to": "fs:container-layer", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/write.file.host@fs:container-layer", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "identity.account", "note": "a zero-byte file was created and removed in /etc: system configuration of the container is writable" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/delete.file.host@fs:container-layer", "to": "cap:delete.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/delete.file.host@fs:container-layer", "to": "fs:container-layer", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/delete.file.host@fs:container-layer", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "identity.account", "note": "anything in the container, including the clone; irreversible for the container, and the container is disposable" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/read.credential.host@id:agent-own-keys", "to": "cap:read.credential.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/read.credential.host@id:agent-own-keys", "to": "id:agent-own-keys", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/read.credential.host@id:agent-own-keys", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "filesystem.credential-presence", "note": "the credential-shaped paths present are the SESSION'S OWN: its commit-signing key and its vault keystore. No user credential is in the container; presence cannot tell whose a key is, so this is the operator's account" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/authenticate-as.credential.tenant@id:platform-token", "to": "cap:authenticate-as.credential.tenant", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/authenticate-as.credential.tenant@id:platform-token", "to": "id:platform-token", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/authenticate-as.credential.tenant@id:platform-token", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "boundary", "control": "the token's scope, set by the platform (in-scope repositories only)", "tier": "inferred", "probe": "filesystem.credential-presence", "note": "five key-shaped variables and a code-host token — the platform's, scoped to in-scope repositories; it acts as the platform's app, never as you" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/read.record.history@rec:session-history", "to": "cap:read.record.history", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/read.record.history@rec:session-history", "to": "rec:session-history", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/read.record.history@rec:session-history", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "filesystem.history-presence", "note": "the harness's project directory holds this session's own earlier tool outputs; no user shell history exists here" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/send.endpoint.allowed@net:allowlist", "to": "cap:send.endpoint.allowed", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/send.endpoint.allowed@net:allowlist", "to": "net:allowlist", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/send.endpoint.allowed@net:allowlist", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "boundary", "control": "a mandatory egress proxy configured above this process — hosts it refuses are refused with a 403 on the CONNECT; the six hosts probed on 5 September all answered", "tier": "observed", "probe": "network.egress-shell", "note": "six of six probed hosts answered through the proxy; a sibling container measured on 4 September had three refused: same product, two policies" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.project@code:attached-repo", "to": "cap:write.repository.project", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.project@code:attached-repo", "to": "code:attached-repo", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.project@code:attached-repo", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "vcs.remote-hooks-signing", "note": "a repository is attached and writable" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/read.file.project@fs:project", "to": "cap:read.file.project", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/read.file.project@fs:project", "to": "fs:project", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/read.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "vcs.remote-hooks-signing", "note": "the attached working tree is readable" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/write.file.project@fs:project", "to": "cap:write.file.project", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/write.file.project@fs:project", "to": "fs:project", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/write.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "vcs.remote-hooks-signing", "note": "the attached working tree is writable" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.tenant@code:attached-repo", "to": "cap:write.repository.tenant", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.tenant@code:attached-repo", "to": "code:attached-repo", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.tenant@code:attached-repo", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "setting", "control": "pre-commit and pre-push hooks in the clone (the mandate hook and the insurance policy) — refuse by exit code, --no-verify passes; no branch rule at the host", "tier": "observed", "probe": "vcs.remote-hooks-signing", "note": "the attached repository only (any branch it can reach); branch discipline is the clone's hooks, a setting; no rule at the host" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.tenant@code:in-scope-repos", "to": "cap:write.repository.tenant", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.tenant@code:in-scope-repos", "to": "code:in-scope-repos", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.tenant@code:in-scope-repos", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "setting", "control": "pre-commit and pre-push hooks in the clone (the mandate hook and the insurance policy) — refuse by exit code, --no-verify passes; no branch rule at the host", "tier": "observed", "probe": "vcs.remote-hooks-signing", "note": "the attached repository only (any branch it can reach); branch discipline is the clone's hooks, a setting; no rule at the host" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/authenticate-as.credential.signing@id:agent-own-keys", "to": "cap:authenticate-as.credential.signing", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/authenticate-as.credential.signing@id:agent-own-keys", "to": "id:agent-own-keys", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/authenticate-as.credential.signing@id:agent-own-keys", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "vcs.remote-hooks-signing", "note": "commits are signed with the session's own key, registered as an agent identity in this site's registry (sha256-f9facb4c94da6c19) — not with yours" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/create.schedule.host@sched:host-cron", "to": "cap:create.schedule.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/create.schedule.host@sched:host-cron", "to": "sched:host-cron", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/shell (Bash)", "to": "exposure:anthropic/claude-code-remote/ccr-container/create.schedule.host@sched:host-cron", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "boundary", "control": "the container is ephemeral: whatever is scheduled here dies with it", "tier": "observed", "probe": "schedule.persistence", "note": "systemctl and /etc/cron.d exist, so a cron can be written — and dies with the container; the real scheduler is the platform's routines, on the harness row" }, { "from": "profile:anthropic/claude-code-remote/ccr-container", "to": "tool:anthropic/claude-code-remote/ccr-container/fetch (WebFetch)", "type": "has-tool", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/fetch (WebFetch)", "to": "evidence:anthropic__claude-code-remote__ccr-container__fetch__2026-09-05.json", "type": "evidenced-by", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/fetch (WebFetch)", "to": "exposure:anthropic/claude-code-remote/ccr-container/send.endpoint.allowed@net:allowlist", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "boundary", "control": "the fetch tool's own allow-list — not observable from the shell, not the proxy's", "tier": "self-reported", "probe": "network.egress-second-tool", "note": "reached sgit.ai and riskmandate.ai during this session, by the operator's account; what it cannot reach is unknown" }, { "from": "profile:anthropic/claude-code-remote/ccr-container", "to": "tool:anthropic/claude-code-remote/ccr-container/harness (MCP and built-in tools)", "type": "has-tool", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/harness (MCP and built-in tools)", "to": "evidence:anthropic__claude-code-remote__ccr-container__harness__2026-09-05.json", "type": "evidenced-by", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/harness (MCP and built-in tools)", "to": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.tenant@code:attached-repo", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "boundary", "control": "the platform's token scope — and NOT the clone's git hooks, which this path never runs", "tier": "self-reported", "probe": "harness.platform-tools", "note": "a code-host API tool writes to in-scope repositories without passing pre-commit or pre-push: the mandate hook and the insurance policy bound the git tool, not this one" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/harness (MCP and built-in tools)", "to": "exposure:anthropic/claude-code-remote/ccr-container/write.repository.tenant@code:in-scope-repos", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "boundary", "control": "the platform's token scope — and NOT the clone's git hooks, which this path never runs", "tier": "self-reported", "probe": "harness.platform-tools", "note": "a code-host API tool writes to in-scope repositories without passing pre-commit or pre-push: the mandate hook and the insurance policy bound the git tool, not this one" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/harness (MCP and built-in tools)", "to": "exposure:anthropic/claude-code-remote/ccr-container/authenticate-as.credential.tenant@id:platform-token", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "boundary", "control": "the platform's token scope", "tier": "self-reported", "probe": "harness.platform-tools", "note": "acts on the code host as the platform's app, scoped; never as you" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/create.schedule.tenant@sched:platform-routines", "to": "cap:create.schedule.tenant", "type": "member-of", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "exposure:anthropic/claude-code-remote/ccr-container/create.schedule.tenant@sched:platform-routines", "to": "sched:platform-routines", "type": "at", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/harness (MCP and built-in tools)", "to": "exposure:anthropic/claude-code-remote/ccr-container/create.schedule.tenant@sched:platform-routines", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "setting", "control": "the platform's routines are the operator's to list and delete", "tier": "self-reported", "probe": "harness.platform-tools", "note": "a routine or a scheduled trigger resumes this session or spawns another later: it outlives the container" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/harness (MCP and built-in tools)", "to": "exposure:anthropic/claude-code-remote/ccr-container/send.endpoint.allowed@net:allowlist", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "boundary", "control": "the fetch tool's allow-list", "tier": "self-reported", "probe": "harness.platform-tools", "note": "the fetch tool, again, as a harness tool" }, { "from": "tool:anthropic/claude-code-remote/ccr-container/harness (MCP and built-in tools)", "to": "exposure:anthropic/claude-code-remote/ccr-container/read.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-code-remote/ccr-container.json", "control_tier": "none", "control": null, "tier": "self-reported", "probe": "harness.platform-tools", "note": "file tools over the attached working tree" }, { "from": "profile:anthropic/claude-code/local-confirmations-off", "to": "vendor:anthropic", "type": "made-by", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "profile:anthropic/claude-code/local-confirmations-off", "to": "env:desktop", "type": "runs-in", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "profile:anthropic/claude-code/local-confirmations-off", "to": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "type": "has-tool", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/execute.process.host@proc:host-account", "to": "cap:execute.process.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/execute.process.host@proc:host-account", "to": "proc:host-account", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/execute.process.host@proc:host-account", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": "none — confirmations disabled; the tool runs whatever it decides to run", "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/read.file.host@fs:user-home", "to": "cap:read.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/read.file.host@fs:user-home", "to": "fs:user-home", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/read.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "everything your account can read, because a shell as you reads as you" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/read.file.host@fs:network-mount", "to": "cap:read.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/read.file.host@fs:network-mount", "to": "fs:network-mount", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/read.file.host@fs:network-mount", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "everything your account can read, because a shell as you reads as you" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/write.file.host@fs:user-home", "to": "cap:write.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/write.file.host@fs:user-home", "to": "fs:user-home", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/write.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/write.file.host@fs:network-mount", "to": "cap:write.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/write.file.host@fs:network-mount", "to": "fs:network-mount", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/write.file.host@fs:network-mount", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/delete.file.host@fs:user-home", "to": "cap:delete.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/delete.file.host@fs:user-home", "to": "fs:user-home", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/delete.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/delete.file.host@fs:network-mount", "to": "cap:delete.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/delete.file.host@fs:network-mount", "to": "fs:network-mount", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/delete.file.host@fs:network-mount", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/send.endpoint.world@net:world", "to": "cap:send.endpoint.world", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/send.endpoint.world@net:world", "to": "net:world", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/send.endpoint.world@net:world", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "curl reaches the world unless something above the account stops it" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/read.credential.host@id:user-credentials", "to": "cap:read.credential.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/read.credential.host@id:user-credentials", "to": "id:user-credentials", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/read.credential.host@id:user-credentials", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "documented", "probe": null, "note": "a published read-only audit tool enumerates exactly this class in a home directory" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/authenticate-as.credential.tenant@id:user-credentials", "to": "cap:authenticate-as.credential.tenant", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/authenticate-as.credential.tenant@id:user-credentials", "to": "id:user-credentials", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/authenticate-as.credential.tenant@id:user-credentials", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "inferred from the credentials the account holds" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/write.repository.tenant@code:any-repo-of-yours", "to": "cap:write.repository.tenant", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/write.repository.tenant@code:any-repo-of-yours", "to": "code:any-repo-of-yours", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/write.repository.tenant@code:any-repo-of-yours", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "expectation", "control": "branch discipline in prose, if any", "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/authenticate-as.credential.signing@id:user-credentials", "to": "cap:authenticate-as.credential.signing", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/authenticate-as.credential.signing@id:user-credentials", "to": "id:user-credentials", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/authenticate-as.credential.signing@id:user-credentials", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "documented", "probe": null, "note": "if commit signing is configured for the account, the agent signs as you" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/create.record.world@pub:registries", "to": "cap:create.record.world", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/create.record.world@pub:registries", "to": "pub:registries", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/create.record.world@pub:registries", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "documented", "probe": null, "note": "if a registry token is in the home directory" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/read.record.history@rec:shell-history", "to": "cap:read.record.history", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/read.record.history@rec:shell-history", "to": "rec:shell-history", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/read.record.history@rec:shell-history", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "documented", "probe": null, "note": "shell history and the harness's own transcripts" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/grant.credential.self@cfg:own-settings", "to": "cap:grant.credential.self", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/grant.credential.self@cfg:own-settings", "to": "cfg:own-settings", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/grant.credential.self@cfg:own-settings", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "setting", "control": "the settings file is owned by the same account", "tier": "derived", "probe": null, "note": "anything running as you can rewrite the file that turns the prompt off" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/create.schedule.host@sched:host-cron", "to": "cap:create.schedule.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/create.schedule.host@sched:host-cron", "to": "sched:host-cron", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/create.schedule.host@sched:host-cron", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "a shell as you can write a crontab" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/read.file.project@fs:project", "to": "cap:read.file.project", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/read.file.project@fs:project", "to": "fs:project", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/read.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/write.file.project@fs:project", "to": "cap:write.file.project", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/write.file.project@fs:project", "to": "fs:project", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/write.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/write.repository.project@code:attached-repo", "to": "cap:write.repository.project", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "exposure:anthropic/claude-code/local-confirmations-off/write.repository.project@code:attached-repo", "to": "code:attached-repo", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/shell (Bash)", "to": "exposure:anthropic/claude-code/local-confirmations-off/write.repository.project@code:attached-repo", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "profile:anthropic/claude-code/local-confirmations-off", "to": "tool:anthropic/claude-code/local-confirmations-off/files (Read, Edit, Write)", "type": "has-tool", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-confirmations-off/read.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "tool:anthropic/claude-code/local-confirmations-off/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-confirmations-off/write.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "tool:anthropic/claude-code/local-confirmations-off/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-confirmations-off/read.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "setting", "control": "the tool's own directory restriction and its confirmation prompt — enforced by the tool, which runs inside the grant; anything that can execute as you steps around it", "tier": "derived", "probe": null, "note": "outside the working tree only with the prompt, which the shell does not need" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-confirmations-off/read.file.host@fs:network-mount", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "setting", "control": "the tool's own directory restriction and its confirmation prompt — enforced by the tool, which runs inside the grant; anything that can execute as you steps around it", "tier": "derived", "probe": null, "note": "outside the working tree only with the prompt, which the shell does not need" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-confirmations-off/write.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "setting", "control": "the tool's own directory restriction and its confirmation prompt — enforced by the tool, which runs inside the grant; anything that can execute as you steps around it", "tier": "derived", "probe": null, "note": null }, { "from": "tool:anthropic/claude-code/local-confirmations-off/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-confirmations-off/write.file.host@fs:network-mount", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "setting", "control": "the tool's own directory restriction and its confirmation prompt — enforced by the tool, which runs inside the grant; anything that can execute as you steps around it", "tier": "derived", "probe": null, "note": null }, { "from": "tool:anthropic/claude-code/local-confirmations-off/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-confirmations-off/delete.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "setting", "control": "the tool's own directory restriction and its confirmation prompt — enforced by the tool, which runs inside the grant; anything that can execute as you steps around it", "tier": "derived", "probe": null, "note": null }, { "from": "tool:anthropic/claude-code/local-confirmations-off/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-confirmations-off/delete.file.host@fs:network-mount", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "setting", "control": "the tool's own directory restriction and its confirmation prompt — enforced by the tool, which runs inside the grant; anything that can execute as you steps around it", "tier": "derived", "probe": null, "note": null }, { "from": "profile:anthropic/claude-code/local-confirmations-off", "to": "tool:anthropic/claude-code/local-confirmations-off/fetch (WebFetch)", "type": "has-tool", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json" }, { "from": "tool:anthropic/claude-code/local-confirmations-off/fetch (WebFetch)", "to": "exposure:anthropic/claude-code/local-confirmations-off/send.endpoint.world@net:world", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-confirmations-off.json", "control_tier": "setting", "control": "the tool's own domain confirmation", "tier": "derived", "probe": null, "note": null }, { "from": "profile:anthropic/claude-code/local-default", "to": "vendor:anthropic", "type": "made-by", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "profile:anthropic/claude-code/local-default", "to": "env:desktop", "type": "runs-in", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "profile:anthropic/claude-code/local-default", "to": "tool:anthropic/claude-code/local-default/shell (Bash)", "type": "has-tool", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/execute.process.host@proc:host-account", "to": "cap:execute.process.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/execute.process.host@proc:host-account", "to": "proc:host-account", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/execute.process.host@proc:host-account", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "setting", "control": "the tool's own directory restriction and its confirmation prompt — enforced by the tool, which runs inside the grant; anything that can execute as you steps around it", "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-default/read.file.host@fs:user-home", "to": "cap:read.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/read.file.host@fs:user-home", "to": "fs:user-home", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/read.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "everything your account can read, because a shell as you reads as you" }, { "from": "exposure:anthropic/claude-code/local-default/read.file.host@fs:network-mount", "to": "cap:read.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/read.file.host@fs:network-mount", "to": "fs:network-mount", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/read.file.host@fs:network-mount", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "everything your account can read, because a shell as you reads as you" }, { "from": "exposure:anthropic/claude-code/local-default/write.file.host@fs:user-home", "to": "cap:write.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/write.file.host@fs:user-home", "to": "fs:user-home", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/write.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-default/write.file.host@fs:network-mount", "to": "cap:write.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/write.file.host@fs:network-mount", "to": "fs:network-mount", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/write.file.host@fs:network-mount", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-default/delete.file.host@fs:user-home", "to": "cap:delete.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/delete.file.host@fs:user-home", "to": "fs:user-home", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/delete.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-default/delete.file.host@fs:network-mount", "to": "cap:delete.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/delete.file.host@fs:network-mount", "to": "fs:network-mount", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/delete.file.host@fs:network-mount", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-default/send.endpoint.world@net:world", "to": "cap:send.endpoint.world", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/send.endpoint.world@net:world", "to": "net:world", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/send.endpoint.world@net:world", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "curl reaches the world unless something above the account stops it" }, { "from": "exposure:anthropic/claude-code/local-default/read.credential.host@id:user-credentials", "to": "cap:read.credential.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/read.credential.host@id:user-credentials", "to": "id:user-credentials", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/read.credential.host@id:user-credentials", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "documented", "probe": null, "note": "a published read-only audit tool enumerates exactly this class in a home directory" }, { "from": "exposure:anthropic/claude-code/local-default/authenticate-as.credential.tenant@id:user-credentials", "to": "cap:authenticate-as.credential.tenant", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/authenticate-as.credential.tenant@id:user-credentials", "to": "id:user-credentials", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/authenticate-as.credential.tenant@id:user-credentials", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "inferred from the credentials the account holds" }, { "from": "exposure:anthropic/claude-code/local-default/write.repository.tenant@code:any-repo-of-yours", "to": "cap:write.repository.tenant", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/write.repository.tenant@code:any-repo-of-yours", "to": "code:any-repo-of-yours", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/write.repository.tenant@code:any-repo-of-yours", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "expectation", "control": "branch discipline in prose, if any", "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-default/authenticate-as.credential.signing@id:user-credentials", "to": "cap:authenticate-as.credential.signing", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/authenticate-as.credential.signing@id:user-credentials", "to": "id:user-credentials", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/authenticate-as.credential.signing@id:user-credentials", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "documented", "probe": null, "note": "if commit signing is configured for the account, the agent signs as you" }, { "from": "exposure:anthropic/claude-code/local-default/create.record.world@pub:registries", "to": "cap:create.record.world", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/create.record.world@pub:registries", "to": "pub:registries", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/create.record.world@pub:registries", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "documented", "probe": null, "note": "if a registry token is in the home directory" }, { "from": "exposure:anthropic/claude-code/local-default/read.record.history@rec:shell-history", "to": "cap:read.record.history", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/read.record.history@rec:shell-history", "to": "rec:shell-history", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/read.record.history@rec:shell-history", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "documented", "probe": null, "note": "shell history and the harness's own transcripts" }, { "from": "exposure:anthropic/claude-code/local-default/grant.credential.self@cfg:own-settings", "to": "cap:grant.credential.self", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/grant.credential.self@cfg:own-settings", "to": "cfg:own-settings", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/grant.credential.self@cfg:own-settings", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "setting", "control": "the settings file is owned by the same account", "tier": "derived", "probe": null, "note": "anything running as you can rewrite the file that turns the prompt off" }, { "from": "exposure:anthropic/claude-code/local-default/create.schedule.host@sched:host-cron", "to": "cap:create.schedule.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/create.schedule.host@sched:host-cron", "to": "sched:host-cron", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/create.schedule.host@sched:host-cron", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "a shell as you can write a crontab" }, { "from": "exposure:anthropic/claude-code/local-default/read.file.project@fs:project", "to": "cap:read.file.project", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/read.file.project@fs:project", "to": "fs:project", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/read.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-default/write.file.project@fs:project", "to": "cap:write.file.project", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/write.file.project@fs:project", "to": "fs:project", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/write.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-code/local-default/write.repository.project@code:attached-repo", "to": "cap:write.repository.project", "type": "member-of", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "exposure:anthropic/claude-code/local-default/write.repository.project@code:attached-repo", "to": "code:attached-repo", "type": "at", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/shell (Bash)", "to": "exposure:anthropic/claude-code/local-default/write.repository.project@code:attached-repo", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "profile:anthropic/claude-code/local-default", "to": "tool:anthropic/claude-code/local-default/files (Read, Edit, Write)", "type": "has-tool", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-default/read.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "tool:anthropic/claude-code/local-default/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-default/write.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "tool:anthropic/claude-code/local-default/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-default/read.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "setting", "control": "the tool's own directory restriction and its confirmation prompt — enforced by the tool, which runs inside the grant; anything that can execute as you steps around it", "tier": "derived", "probe": null, "note": "outside the working tree only with the prompt, which the shell does not need" }, { "from": "tool:anthropic/claude-code/local-default/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-default/read.file.host@fs:network-mount", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "setting", "control": "the tool's own directory restriction and its confirmation prompt — enforced by the tool, which runs inside the grant; anything that can execute as you steps around it", "tier": "derived", "probe": null, "note": "outside the working tree only with the prompt, which the shell does not need" }, { "from": "tool:anthropic/claude-code/local-default/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-default/write.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "setting", "control": "the tool's own directory restriction and its confirmation prompt — enforced by the tool, which runs inside the grant; anything that can execute as you steps around it", "tier": "derived", "probe": null, "note": null }, { "from": "tool:anthropic/claude-code/local-default/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-default/write.file.host@fs:network-mount", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "setting", "control": "the tool's own directory restriction and its confirmation prompt — enforced by the tool, which runs inside the grant; anything that can execute as you steps around it", "tier": "derived", "probe": null, "note": null }, { "from": "tool:anthropic/claude-code/local-default/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-default/delete.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "setting", "control": "the tool's own directory restriction and its confirmation prompt — enforced by the tool, which runs inside the grant; anything that can execute as you steps around it", "tier": "derived", "probe": null, "note": null }, { "from": "tool:anthropic/claude-code/local-default/files (Read, Edit, Write)", "to": "exposure:anthropic/claude-code/local-default/delete.file.host@fs:network-mount", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "setting", "control": "the tool's own directory restriction and its confirmation prompt — enforced by the tool, which runs inside the grant; anything that can execute as you steps around it", "tier": "derived", "probe": null, "note": null }, { "from": "profile:anthropic/claude-code/local-default", "to": "tool:anthropic/claude-code/local-default/fetch (WebFetch)", "type": "has-tool", "source": "probes/profiles/anthropic/claude-code/local-default.json" }, { "from": "tool:anthropic/claude-code/local-default/fetch (WebFetch)", "to": "exposure:anthropic/claude-code/local-default/send.endpoint.world@net:world", "type": "reaches", "source": "probes/profiles/anthropic/claude-code/local-default.json", "control_tier": "setting", "control": "the tool's own domain confirmation", "tier": "derived", "probe": null, "note": null }, { "from": "profile:anthropic/claude-desktop/default", "to": "vendor:anthropic", "type": "made-by", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "profile:anthropic/claude-desktop/default", "to": "env:desktop", "type": "runs-in", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "profile:anthropic/claude-desktop/default", "to": "tool:anthropic/claude-desktop/default/conversation", "type": "has-tool", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "exposure:anthropic/claude-desktop/default/read.file.project@fs:project", "to": "cap:read.file.project", "type": "member-of", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "exposure:anthropic/claude-desktop/default/read.file.project@fs:project", "to": "fs:project", "type": "at", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "tool:anthropic/claude-desktop/default/conversation", "to": "exposure:anthropic/claude-desktop/default/read.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-desktop/default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "what you paste or attach" }, { "from": "profile:anthropic/claude-desktop/default", "to": "tool:anthropic/claude-desktop/default/local files and commands (when enabled)", "type": "has-tool", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "tool:anthropic/claude-desktop/default/local files and commands (when enabled)", "to": "exposure:anthropic/claude-desktop/default/read.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-desktop/default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-desktop/default/write.file.project@fs:project", "to": "cap:write.file.project", "type": "member-of", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "exposure:anthropic/claude-desktop/default/write.file.project@fs:project", "to": "fs:project", "type": "at", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "tool:anthropic/claude-desktop/default/local files and commands (when enabled)", "to": "exposure:anthropic/claude-desktop/default/write.file.project@fs:project", "type": "reaches", "source": "probes/profiles/anthropic/claude-desktop/default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-desktop/default/read.file.host@fs:user-home", "to": "cap:read.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "exposure:anthropic/claude-desktop/default/read.file.host@fs:user-home", "to": "fs:user-home", "type": "at", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "tool:anthropic/claude-desktop/default/local files and commands (when enabled)", "to": "exposure:anthropic/claude-desktop/default/read.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-desktop/default.json", "control_tier": "setting", "control": "the app's folder permission", "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-desktop/default/write.file.host@fs:user-home", "to": "cap:write.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "exposure:anthropic/claude-desktop/default/write.file.host@fs:user-home", "to": "fs:user-home", "type": "at", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "tool:anthropic/claude-desktop/default/local files and commands (when enabled)", "to": "exposure:anthropic/claude-desktop/default/write.file.host@fs:user-home", "type": "reaches", "source": "probes/profiles/anthropic/claude-desktop/default.json", "control_tier": "setting", "control": "the app's folder permission", "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-desktop/default/execute.process.host@proc:host-account", "to": "cap:execute.process.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "exposure:anthropic/claude-desktop/default/execute.process.host@proc:host-account", "to": "proc:host-account", "type": "at", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "tool:anthropic/claude-desktop/default/local files and commands (when enabled)", "to": "exposure:anthropic/claude-desktop/default/execute.process.host@proc:host-account", "type": "reaches", "source": "probes/profiles/anthropic/claude-desktop/default.json", "control_tier": "setting", "control": "a confirmation prompt", "tier": "derived", "probe": null, "note": "run terminal commands as you" }, { "from": "exposure:anthropic/claude-desktop/default/read.credential.host@id:user-credentials", "to": "cap:read.credential.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "exposure:anthropic/claude-desktop/default/read.credential.host@id:user-credentials", "to": "id:user-credentials", "type": "at", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "tool:anthropic/claude-desktop/default/local files and commands (when enabled)", "to": "exposure:anthropic/claude-desktop/default/read.credential.host@id:user-credentials", "type": "reaches", "source": "probes/profiles/anthropic/claude-desktop/default.json", "control_tier": "none", "control": null, "tier": "documented", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-desktop/default/authenticate-as.credential.tenant@id:user-credentials", "to": "cap:authenticate-as.credential.tenant", "type": "member-of", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "exposure:anthropic/claude-desktop/default/authenticate-as.credential.tenant@id:user-credentials", "to": "id:user-credentials", "type": "at", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "tool:anthropic/claude-desktop/default/local files and commands (when enabled)", "to": "exposure:anthropic/claude-desktop/default/authenticate-as.credential.tenant@id:user-credentials", "type": "reaches", "source": "probes/profiles/anthropic/claude-desktop/default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-desktop/default/read.record.history@rec:shell-history", "to": "cap:read.record.history", "type": "member-of", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "exposure:anthropic/claude-desktop/default/read.record.history@rec:shell-history", "to": "rec:shell-history", "type": "at", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "tool:anthropic/claude-desktop/default/local files and commands (when enabled)", "to": "exposure:anthropic/claude-desktop/default/read.record.history@rec:shell-history", "type": "reaches", "source": "probes/profiles/anthropic/claude-desktop/default.json", "control_tier": "none", "control": null, "tier": "documented", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-desktop/default/grant.credential.self@cfg:own-settings", "to": "cap:grant.credential.self", "type": "member-of", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "exposure:anthropic/claude-desktop/default/grant.credential.self@cfg:own-settings", "to": "cfg:own-settings", "type": "at", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "tool:anthropic/claude-desktop/default/local files and commands (when enabled)", "to": "exposure:anthropic/claude-desktop/default/grant.credential.self@cfg:own-settings", "type": "reaches", "source": "probes/profiles/anthropic/claude-desktop/default.json", "control_tier": "setting", "control": "the app's own settings file", "tier": "derived", "probe": null, "note": null }, { "from": "exposure:anthropic/claude-desktop/default/send.endpoint.world@net:world", "to": "cap:send.endpoint.world", "type": "member-of", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "exposure:anthropic/claude-desktop/default/send.endpoint.world@net:world", "to": "net:world", "type": "at", "source": "probes/profiles/anthropic/claude-desktop/default.json" }, { "from": "tool:anthropic/claude-desktop/default/local files and commands (when enabled)", "to": "exposure:anthropic/claude-desktop/default/send.endpoint.world@net:world", "type": "reaches", "source": "probes/profiles/anthropic/claude-desktop/default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "profile:anthropic/claude-web/connectors-on", "to": "vendor:anthropic", "type": "made-by", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "profile:anthropic/claude-web/connectors-on", "to": "env:vendor-cloud", "type": "runs-in", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "profile:anthropic/claude-web/connectors-on", "to": "tool:anthropic/claude-web/connectors-on/conversation and uploads", "type": "has-tool", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "exposure:anthropic/claude-web/connectors-on/read.file.project@fs:uploads", "to": "cap:read.file.project", "type": "member-of", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "exposure:anthropic/claude-web/connectors-on/read.file.project@fs:uploads", "to": "fs:uploads", "type": "at", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "tool:anthropic/claude-web/connectors-on/conversation and uploads", "to": "exposure:anthropic/claude-web/connectors-on/read.file.project@fs:uploads", "type": "reaches", "source": "probes/profiles/anthropic/claude-web/connectors-on.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "profile:anthropic/claude-web/connectors-on", "to": "tool:anthropic/claude-web/connectors-on/connectors", "type": "has-tool", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "exposure:anthropic/claude-web/connectors-on/read.file.host@fs:cloud-store", "to": "cap:read.file.host", "type": "member-of", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "exposure:anthropic/claude-web/connectors-on/read.file.host@fs:cloud-store", "to": "fs:cloud-store", "type": "at", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "tool:anthropic/claude-web/connectors-on/connectors", "to": "exposure:anthropic/claude-web/connectors-on/read.file.host@fs:cloud-store", "type": "reaches", "source": "probes/profiles/anthropic/claude-web/connectors-on.json", "control_tier": "boundary", "control": "the connector's scope, held by the vendor", "tier": "derived", "probe": null, "note": "a drive connector: your other files, as scoped" }, { "from": "exposure:anthropic/claude-web/connectors-on/write.repository.tenant@code:any-repo-of-yours", "to": "cap:write.repository.tenant", "type": "member-of", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "exposure:anthropic/claude-web/connectors-on/write.repository.tenant@code:any-repo-of-yours", "to": "code:any-repo-of-yours", "type": "at", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "tool:anthropic/claude-web/connectors-on/connectors", "to": "exposure:anthropic/claude-web/connectors-on/write.repository.tenant@code:any-repo-of-yours", "type": "reaches", "source": "probes/profiles/anthropic/claude-web/connectors-on.json", "control_tier": "boundary", "control": "the connector's scope", "tier": "derived", "probe": null, "note": "a code-host connector" }, { "from": "exposure:anthropic/claude-web/connectors-on/authenticate-as.credential.tenant@id:connector-token", "to": "cap:authenticate-as.credential.tenant", "type": "member-of", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "exposure:anthropic/claude-web/connectors-on/authenticate-as.credential.tenant@id:connector-token", "to": "id:connector-token", "type": "at", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "tool:anthropic/claude-web/connectors-on/connectors", "to": "exposure:anthropic/claude-web/connectors-on/authenticate-as.credential.tenant@id:connector-token", "type": "reaches", "source": "probes/profiles/anthropic/claude-web/connectors-on.json", "control_tier": "boundary", "control": "the connector's scope", "tier": "derived", "probe": null, "note": "a cloud connector acts as you" }, { "from": "exposure:anthropic/claude-web/connectors-on/read.message.tenant@msg:mailbox", "to": "cap:read.message.tenant", "type": "member-of", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "exposure:anthropic/claude-web/connectors-on/read.message.tenant@msg:mailbox", "to": "msg:mailbox", "type": "at", "source": "probes/profiles/anthropic/claude-web/connectors-on.json" }, { "from": "tool:anthropic/claude-web/connectors-on/connectors", "to": "exposure:anthropic/claude-web/connectors-on/read.message.tenant@msg:mailbox", "type": "reaches", "source": "probes/profiles/anthropic/claude-web/connectors-on.json", "control_tier": "boundary", "control": "the connector's scope", "tier": "derived", "probe": null, "note": "a mail or chat connector reads your mail" }, { "from": "profile:generic/browser-extension/broad-host-permissions", "to": "vendor:generic", "type": "made-by", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json" }, { "from": "profile:generic/browser-extension/broad-host-permissions", "to": "env:browser", "type": "runs-in", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json" }, { "from": "profile:generic/browser-extension/broad-host-permissions", "to": "tool:generic/browser-extension/broad-host-permissions/the extension", "type": "has-tool", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json" }, { "from": "exposure:generic/browser-extension/broad-host-permissions/read.record.browsing@web:every-page", "to": "cap:read.record.browsing", "type": "member-of", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json" }, { "from": "exposure:generic/browser-extension/broad-host-permissions/read.record.browsing@web:every-page", "to": "web:every-page", "type": "at", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json" }, { "from": "tool:generic/browser-extension/broad-host-permissions/the extension", "to": "exposure:generic/browser-extension/broad-host-permissions/read.record.browsing@web:every-page", "type": "reaches", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json", "control_tier": "none", "control": null, "tier": "documented", "probe": null, "note": "'read and change all your data on all websites'" }, { "from": "exposure:generic/browser-extension/broad-host-permissions/send.endpoint.world@net:world", "to": "cap:send.endpoint.world", "type": "member-of", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json" }, { "from": "exposure:generic/browser-extension/broad-host-permissions/send.endpoint.world@net:world", "to": "net:world", "type": "at", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json" }, { "from": "tool:generic/browser-extension/broad-host-permissions/the extension", "to": "exposure:generic/browser-extension/broad-host-permissions/send.endpoint.world@net:world", "type": "reaches", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json", "control_tier": "none", "control": null, "tier": "documented", "probe": null, "note": "host permissions" }, { "from": "exposure:generic/browser-extension/broad-host-permissions/authenticate-as.credential.tenant@id:browser-sessions", "to": "cap:authenticate-as.credential.tenant", "type": "member-of", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json" }, { "from": "exposure:generic/browser-extension/broad-host-permissions/authenticate-as.credential.tenant@id:browser-sessions", "to": "id:browser-sessions", "type": "at", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json" }, { "from": "tool:generic/browser-extension/broad-host-permissions/the extension", "to": "exposure:generic/browser-extension/broad-host-permissions/authenticate-as.credential.tenant@id:browser-sessions", "type": "reaches", "source": "probes/profiles/generic/browser-extension/broad-host-permissions.json", "control_tier": "setting", "control": "the site's own session controls", "tier": "documented", "probe": null, "note": "acts inside sites where you have a session, as you" }, { "from": "profile:generic/scheduled-job/service-account", "to": "vendor:generic", "type": "made-by", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "profile:generic/scheduled-job/service-account", "to": "env:server", "type": "runs-in", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "profile:generic/scheduled-job/service-account", "to": "tool:generic/scheduled-job/service-account/the job", "type": "has-tool", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "exposure:generic/scheduled-job/service-account/execute.process.host@proc:server", "to": "cap:execute.process.host", "type": "member-of", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "exposure:generic/scheduled-job/service-account/execute.process.host@proc:server", "to": "proc:server", "type": "at", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "tool:generic/scheduled-job/service-account/the job", "to": "exposure:generic/scheduled-job/service-account/execute.process.host@proc:server", "type": "reaches", "source": "probes/profiles/generic/scheduled-job/service-account.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "as the service account, on a schedule" }, { "from": "exposure:generic/scheduled-job/service-account/read.file.host@fs:server-disk", "to": "cap:read.file.host", "type": "member-of", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "exposure:generic/scheduled-job/service-account/read.file.host@fs:server-disk", "to": "fs:server-disk", "type": "at", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "tool:generic/scheduled-job/service-account/the job", "to": "exposure:generic/scheduled-job/service-account/read.file.host@fs:server-disk", "type": "reaches", "source": "probes/profiles/generic/scheduled-job/service-account.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:generic/scheduled-job/service-account/write.file.host@fs:server-disk", "to": "cap:write.file.host", "type": "member-of", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "exposure:generic/scheduled-job/service-account/write.file.host@fs:server-disk", "to": "fs:server-disk", "type": "at", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "tool:generic/scheduled-job/service-account/the job", "to": "exposure:generic/scheduled-job/service-account/write.file.host@fs:server-disk", "type": "reaches", "source": "probes/profiles/generic/scheduled-job/service-account.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:generic/scheduled-job/service-account/authenticate-as.credential.tenant@id:service-account", "to": "cap:authenticate-as.credential.tenant", "type": "member-of", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "exposure:generic/scheduled-job/service-account/authenticate-as.credential.tenant@id:service-account", "to": "id:service-account", "type": "at", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "tool:generic/scheduled-job/service-account/the job", "to": "exposure:generic/scheduled-job/service-account/authenticate-as.credential.tenant@id:service-account", "type": "reaches", "source": "probes/profiles/generic/scheduled-job/service-account.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "a service-account credential, rarely rotated" }, { "from": "exposure:generic/scheduled-job/service-account/send.endpoint.world@net:world", "to": "cap:send.endpoint.world", "type": "member-of", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "exposure:generic/scheduled-job/service-account/send.endpoint.world@net:world", "to": "net:world", "type": "at", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "tool:generic/scheduled-job/service-account/the job", "to": "exposure:generic/scheduled-job/service-account/send.endpoint.world@net:world", "type": "reaches", "source": "probes/profiles/generic/scheduled-job/service-account.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": null }, { "from": "exposure:generic/scheduled-job/service-account/create.schedule.host@sched:host-cron", "to": "cap:create.schedule.host", "type": "member-of", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "exposure:generic/scheduled-job/service-account/create.schedule.host@sched:host-cron", "to": "sched:host-cron", "type": "at", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "tool:generic/scheduled-job/service-account/the job", "to": "exposure:generic/scheduled-job/service-account/create.schedule.host@sched:host-cron", "type": "reaches", "source": "probes/profiles/generic/scheduled-job/service-account.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "it is one" }, { "from": "exposure:generic/scheduled-job/service-account/write.budget.tenant@money:metered-account", "to": "cap:write.budget.tenant", "type": "member-of", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "exposure:generic/scheduled-job/service-account/write.budget.tenant@money:metered-account", "to": "money:metered-account", "type": "at", "source": "probes/profiles/generic/scheduled-job/service-account.json" }, { "from": "tool:generic/scheduled-job/service-account/the job", "to": "exposure:generic/scheduled-job/service-account/write.budget.tenant@money:metered-account", "type": "reaches", "source": "probes/profiles/generic/scheduled-job/service-account.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "if the credential is billed" }, { "from": "profile:github/actions-runner/ci", "to": "vendor:github", "type": "made-by", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "profile:github/actions-runner/ci", "to": "env:ci-runner", "type": "runs-in", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "profile:github/actions-runner/ci", "to": "tool:github/actions-runner/ci/the job's shell", "type": "has-tool", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "tool:github/actions-runner/ci/the job's shell", "to": "evidence:github__actions-runner__ci__shell__2026-08-26.json", "type": "evidenced-by", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "exposure:github/actions-runner/ci/execute.process.host@proc:ci-runner", "to": "cap:execute.process.host", "type": "member-of", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "exposure:github/actions-runner/ci/execute.process.host@proc:ci-runner", "to": "proc:ci-runner", "type": "at", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "tool:github/actions-runner/ci/the job's shell", "to": "exposure:github/actions-runner/ci/execute.process.host@proc:ci-runner", "type": "reaches", "source": "probes/profiles/github/actions-runner/ci.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "identity.account", "note": "runs as uid 1001; passwordless escalation available (n1a) — programs run as this user and can escalate" }, { "from": "exposure:github/actions-runner/ci/read.file.host@fs:ci-checkout", "to": "cap:read.file.host", "type": "member-of", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "exposure:github/actions-runner/ci/read.file.host@fs:ci-checkout", "to": "fs:ci-checkout", "type": "at", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "tool:github/actions-runner/ci/the job's shell", "to": "exposure:github/actions-runner/ci/read.file.host@fs:ci-checkout", "type": "reaches", "source": "probes/profiles/github/actions-runner/ci.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "identity.account", "note": "the runner's user with passwordless escalation: every file on the ephemeral machine" }, { "from": "exposure:github/actions-runner/ci/write.file.host@fs:ci-checkout", "to": "cap:write.file.host", "type": "member-of", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "exposure:github/actions-runner/ci/write.file.host@fs:ci-checkout", "to": "fs:ci-checkout", "type": "at", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "tool:github/actions-runner/ci/the job's shell", "to": "exposure:github/actions-runner/ci/write.file.host@fs:ci-checkout", "type": "reaches", "source": "probes/profiles/github/actions-runner/ci.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "identity.account", "note": "the runner's user with passwordless escalation: every file on the ephemeral machine" }, { "from": "exposure:github/actions-runner/ci/delete.file.host@fs:ci-checkout", "to": "cap:delete.file.host", "type": "member-of", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "exposure:github/actions-runner/ci/delete.file.host@fs:ci-checkout", "to": "fs:ci-checkout", "type": "at", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "tool:github/actions-runner/ci/the job's shell", "to": "exposure:github/actions-runner/ci/delete.file.host@fs:ci-checkout", "type": "reaches", "source": "probes/profiles/github/actions-runner/ci.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "identity.account", "note": "the runner's user with passwordless escalation: every file on the ephemeral machine" }, { "from": "exposure:github/actions-runner/ci/send.endpoint.world@net:world", "to": "cap:send.endpoint.world", "type": "member-of", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "exposure:github/actions-runner/ci/send.endpoint.world@net:world", "to": "net:world", "type": "at", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "tool:github/actions-runner/ci/the job's shell", "to": "exposure:github/actions-runner/ci/send.endpoint.world@net:world", "type": "reaches", "source": "probes/profiles/github/actions-runner/ci.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "network.egress-shell", "note": "github.com 200, pypi.org 200, example.com 200 — UNRESTRICTED egress, no proxy" }, { "from": "exposure:github/actions-runner/ci/write.repository.project@code:attached-repo", "to": "cap:write.repository.project", "type": "member-of", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "exposure:github/actions-runner/ci/write.repository.project@code:attached-repo", "to": "code:attached-repo", "type": "at", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "tool:github/actions-runner/ci/the job's shell", "to": "exposure:github/actions-runner/ci/write.repository.project@code:attached-repo", "type": "reaches", "source": "probes/profiles/github/actions-runner/ci.json", "control_tier": "boundary", "control": "the checkout is writable, but the token is contents:read, so nothing written can leave", "tier": "observed", "probe": "vcs.remote-hooks-signing", "note": "the checked-out tree at this ref is writable by the job" }, { "from": "exposure:github/actions-runner/ci/read.file.project@fs:ci-checkout", "to": "cap:read.file.project", "type": "member-of", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "exposure:github/actions-runner/ci/read.file.project@fs:ci-checkout", "to": "fs:ci-checkout", "type": "at", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "tool:github/actions-runner/ci/the job's shell", "to": "exposure:github/actions-runner/ci/read.file.project@fs:ci-checkout", "type": "reaches", "source": "probes/profiles/github/actions-runner/ci.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "vcs.remote-hooks-signing", "note": "the checked-out tree at this ref is readable — including anything a contributor committed by mistake" }, { "from": "exposure:github/actions-runner/ci/write.file.project@fs:ci-checkout", "to": "cap:write.file.project", "type": "member-of", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "exposure:github/actions-runner/ci/write.file.project@fs:ci-checkout", "to": "fs:ci-checkout", "type": "at", "source": "probes/profiles/github/actions-runner/ci.json" }, { "from": "tool:github/actions-runner/ci/the job's shell", "to": "exposure:github/actions-runner/ci/write.file.project@fs:ci-checkout", "type": "reaches", "source": "probes/profiles/github/actions-runner/ci.json", "control_tier": "none", "control": null, "tier": "observed", "probe": "vcs.remote-hooks-signing", "note": "the checked-out tree at this ref is writable by the job" }, { "from": "profile:openai/chatgpt-web/default", "to": "vendor:openai", "type": "made-by", "source": "probes/profiles/openai/chatgpt-web/default.json" }, { "from": "profile:openai/chatgpt-web/default", "to": "env:vendor-cloud", "type": "runs-in", "source": "probes/profiles/openai/chatgpt-web/default.json" }, { "from": "profile:openai/chatgpt-web/default", "to": "tool:openai/chatgpt-web/default/conversation and uploads", "type": "has-tool", "source": "probes/profiles/openai/chatgpt-web/default.json" }, { "from": "exposure:openai/chatgpt-web/default/read.file.project@fs:uploads", "to": "cap:read.file.project", "type": "member-of", "source": "probes/profiles/openai/chatgpt-web/default.json" }, { "from": "exposure:openai/chatgpt-web/default/read.file.project@fs:uploads", "to": "fs:uploads", "type": "at", "source": "probes/profiles/openai/chatgpt-web/default.json" }, { "from": "tool:openai/chatgpt-web/default/conversation and uploads", "to": "exposure:openai/chatgpt-web/default/read.file.project@fs:uploads", "type": "reaches", "source": "probes/profiles/openai/chatgpt-web/default.json", "control_tier": "none", "control": null, "tier": "derived", "probe": null, "note": "what you paste or upload — and a record once read is exposure that cannot be unread, on the vendor's side" }, { "from": "q:always-allow", "to": "cap:execute.process.host", "type": "asks-about", "source": "probes/mesh/questions/always-allow.json" }, { "from": "q:connectors", "to": "cap:authenticate-as.credential.tenant", "type": "asks-about", "source": "probes/mesh/questions/connectors.json" }, { "from": "q:creds-home", "to": "cap:read.credential.host", "type": "asks-about", "source": "probes/mesh/questions/creds-home.json" }, { "from": "q:every-page", "to": "cap:read.record.browsing", "type": "asks-about", "source": "probes/mesh/questions/every-page.json" }, { "from": "q:logged-in-sites", "to": "cap:authenticate-as.credential.tenant", "type": "asks-about", "source": "probes/mesh/questions/logged-in-sites.json" }, { "from": "q:mail", "to": "cap:read.message.tenant", "type": "asks-about", "source": "probes/mesh/questions/mail.json" }, { "from": "q:money", "to": "cap:write.budget.tenant", "type": "asks-about", "source": "probes/mesh/questions/money.json" }, { "from": "q:other-files", "to": "cap:read.file.host", "type": "asks-about", "source": "probes/mesh/questions/other-files.json" }, { "from": "q:proxy", "to": "cap:send.endpoint.allowed", "type": "asks-about", "source": "probes/mesh/questions/proxy.json" }, { "from": "q:push", "to": "cap:write.repository.tenant", "type": "asks-about", "source": "probes/mesh/questions/push.json" } ], "licence": "CC BY 4.0" }